$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.cer File: 1b8475b2-e8c1-422b-8853-c21bc9cd4a47.cer (raw, json) Hash identifier: fKWafoEMafrWOK2E+ckQYBBk2OyqDiABWVhAXJt9XNs= Subject key identifier: 22:8C:9E:94:F2:6E:94:F0:6F:3A:FE:5C:55:CD:7A:D4:24:46:32:AD Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584FA4D671037B2A0B059095E4CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 Oct 2026 18:40:06 +0000 Certificate not after: Mon 29 Jan 2029 19:40:06 +0000 Subordinate resources: IP: 198.136.177.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:d6:71:03:7b:2a:0b:05:90:95:e4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 27 18:40:06 2026 GMT Not After : Jan 29 19:40:06 2029 GMT Subject: CN=1b8475b2-e8c1-422b-8853-c21bc9cd4a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ba:ee:0c:0c:2f:33:bf:ba:51:d4:0c:53:b0: c4:46:36:25:47:ed:0b:d6:32:ec:e4:0e:0f:14:13: 5c:7f:ab:ba:18:99:90:ef:e1:75:3e:fa:d7:a9:fb: bd:5b:ff:b4:d2:4e:60:50:84:78:85:97:bb:ae:8a: e0:3b:23:6d:cc:bf:4b:78:45:0c:64:af:dc:5f:61: a9:0b:32:b7:73:0e:75:b1:7a:6b:43:72:e1:33:17: b8:dc:39:4a:73:92:56:37:6e:a3:69:d1:3d:7e:c1: 7f:b4:8c:b9:e1:97:fc:92:b0:21:f7:6e:c6:76:c8: 11:b4:43:33:c3:7a:f1:8a:fb:4a:de:1a:e1:3a:88: 03:6b:8b:45:cc:c4:53:e3:aa:10:e3:25:f9:3d:39: 25:1e:54:06:9b:42:9b:de:11:eb:73:29:42:d3:6a: 8d:1e:dd:0e:99:88:4d:31:32:a5:66:39:af:bc:5d: cd:86:72:0e:9c:c8:fe:60:39:68:f1:79:22:cd:9f: 2f:9e:5e:89:fa:f7:58:fa:cb:74:c2:25:df:43:5e: 38:bc:0d:06:e5:ad:6a:7b:93:90:0a:d3:45:4a:d2: ff:76:52:97:99:26:dd:e5:ed:b2:42:c2:6e:48:0a: 7f:4e:32:d8:87:50:29:6f:44:e6:23:d8:a2:bb:0f: 6d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8C:9E:94:F2:6E:94:F0:6F:3A:FE:5C:55:CD:7A:D4:24:46:32:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.136.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:66:b6:41:e1:fa:e8:d8:28:da:09:f1:a8:c9:5c:47:86:16: f1:a9:4b:3e:d8:cd:fe:4d:42:e3:2d:a4:e6:42:ee:89:60:c4: c9:78:ef:20:97:62:db:12:f1:68:33:4d:25:12:ba:96:36:ab: 62:61:9a:a4:d2:a0:8e:0d:cd:93:09:0e:2e:2b:2f:6e:25:b5: 80:d4:9a:cf:3a:ae:ea:7c:d9:a5:cf:04:57:60:6b:c5:32:03: 38:33:4f:e5:e5:82:bf:e1:70:9f:1e:71:15:41:1b:f6:e2:f1: 2c:97:fe:56:03:dc:3a:ca:72:28:4f:85:66:b8:b9:8b:82:54: ad:4d:93:5e:fe:0e:08:bf:90:3b:d5:0a:01:f3:c0:77:c9:3b: 4b:c2:fc:3e:cf:06:58:17:04:48:86:3e:82:31:16:8a:1a:25: 7d:4b:91:46:f1:c8:dd:e5:61:f0:4b:8d:ac:ed:86:c3:26:64: 4c:c1:67:50:f8:30:e8:92:d5:96:94:3e:57:de:bb:4b:b9:6c: 55:2a:71:a2:e1:df:a1:53:30:2e:61:94:17:bc:0b:29:31:e7: 09:54:3c:e2:87:0e:b4:45:4d:0e:9d:1b:2f:e4:7f:6b:4e:94: d3:0a:f6:ec:5f:02:d1:a4:75:ea:8e:d3:cf:c0:5c:b6:00:c7: 0f:a7:d1:eb -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+k1nEDeyoLBZCV5MswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyNzE4NDAwNloXDTI5MDEyOTE5NDAwNlowLzEtMCsGA1UEAxMk MWI4NDc1YjItZThjMS00MjJiLTg4NTMtYzIxYmM5Y2Q0YTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57ruDAwvM7+6UdQMU7DERjYlR+0L1jLs5A4P FBNcf6u6GJmQ7+F1PvrXqfu9W/+00k5gUIR4hZe7rorgOyNtzL9LeEUMZK/cX2Gp CzK3cw51sXprQ3LhMxe43DlKc5JWN26jadE9fsF/tIy54Zf8krAh927GdsgRtEMz w3rxivtK3hrhOogDa4tFzMRT46oQ4yX5PTklHlQGm0Kb3hHrcylC02qNHt0OmYhN MTKlZjmvvF3NhnIOnMj+YDlo8XkizZ8vnl6J+vdY+st0wiXfQ144vA0G5a1qe5OQ CtNFStL/dlKXmSbd5e2yQsJuSAp/TjLYh1Apb0TmI9iiuw9tNQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCKMnpTybpTwbzr+XFXNetQkRjKtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8x Yjg0NzViMi1lOGMxLTQyMmItODg1My1jMjFiYzljZDRhNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzFiODQ3NWIyLWU4YzEtNDIyYi04 ODUzLWMyMWJjOWNkNGE0Ny8xYjg0NzViMi1lOGMxLTQyMmItODg1My1jMjFiYzlj ZDRhNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGiLEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAN2a2QeH66Ngo2gnxqMlc R4YW8alLPtjN/k1C4y2k5kLuiWDEyXjvIJdi2xLxaDNNJRK6ljarYmGapNKgjg3N kwkOLisvbiW1gNSazzqu6nzZpc8EV2BrxTIDODNP5eWCv+Fwnx5xFUEb9uLxLJf+ VgPcOspyKE+FZri5i4JUrU2TXv4OCL+QO9UKAfPAd8k7S8L8Ps8GWBcESIY+gjEW iholfUuRRvHI3eVh8EuNrO2GwyZkTMFnUPgw6JLVlpQ+V967S7lsVSpxouHfoVMw LmGUF7wLKTHnCVQ84ocOtEVNDp0bL+R/a06U0wr27F8C0aR16o7Tz8BctgDHD6fR 6w== -----END CERTIFICATE-----Generated at Tue Nov 3 22:33:00 2026 by rpki-client