$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb.cer File: 2d9ac3b5-bc3d-4120-9a59-43d61605d2cb.cer (raw, json) Hash identifier: CGFed5qeIF0JOPvgGwx+DCMIxQf90OcAmY0XgMg03HQ= Subject key identifier: 11:E1:6D:39:BF:61:A9:52:3A:E5:04:FA:79:AD:75:F0:99:D5:24:43 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F943724C5D984CEBB4C161900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Oct 2026 19:46:12 +0000 Certificate not after: Tue 23 Jan 2029 20:46:12 +0000 Subordinate resources: AS: 14198 IP: 192.35.255.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:37:24:c5:d9:84:ce:bb:4c:16:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 21 19:46:12 2026 GMT Not After : Jan 23 20:46:12 2029 GMT Subject: CN=2d9ac3b5-bc3d-4120-9a59-43d61605d2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c7:57:c7:bf:db:82:ca:f9:78:cb:ef:5e:80: 5a:08:1b:cc:e1:16:35:7a:8a:d2:81:2a:3a:cb:77: 20:ff:48:8c:cc:c1:85:c1:16:db:35:f4:43:52:25: f7:79:59:ec:e2:63:31:05:c2:04:81:21:a2:8e:3a: 4c:b9:d1:ef:23:09:62:83:fe:96:99:97:f6:44:aa: 83:d4:40:bf:fc:d9:aa:ce:be:94:86:9f:5b:8c:36: cb:ef:39:ad:1c:81:4d:06:00:b0:d1:af:7f:f6:ef: 08:e7:c7:75:1f:17:f5:18:a0:a2:16:85:1a:50:ce: c0:6b:82:ef:91:22:b8:c9:99:dd:9a:7d:78:31:c8: 10:a5:03:43:96:62:94:cd:30:03:01:8e:dd:31:23: 41:67:d7:e7:0c:27:a8:54:3c:e7:ac:2a:54:bc:8b: cd:64:89:27:2f:bb:82:cb:e0:0b:27:34:d8:02:c4: 8f:62:d8:2f:d7:4d:72:db:1c:11:a7:5a:bb:0c:72: e7:53:4a:99:43:82:a6:fe:ac:6a:a9:df:8e:01:d7: de:54:cd:fb:1a:78:26:53:2e:ca:63:18:4a:02:30: 88:3c:cd:a3:f1:33:6f:33:39:01:ba:58:40:f1:88: b4:3d:34:4a:a4:49:08:c0:9b:2d:6b:4c:97:5d:fb: de:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E1:6D:39:BF:61:A9:52:3A:E5:04:FA:79:AD:75:F0:99:D5:24:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 192.35.255.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14198 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d3:88:99:53:3a:ae:97:fb:7c:6a:77:0a:72:2a:ba:fe:86: 1f:3b:53:7a:8e:c5:f6:4f:4e:de:0e:e5:d2:9a:2e:c4:dd:08: 72:84:fa:c7:04:3d:28:9a:37:89:c6:f2:63:e8:ba:cf:f6:87: f4:8d:92:ad:f8:5f:cb:68:b5:2e:27:3c:03:5f:18:09:61:d0: 3b:7b:e7:75:c4:e8:64:be:77:94:61:2f:53:a3:25:5b:83:6f: f8:16:5e:3c:70:01:c3:e1:d7:c6:f2:27:a7:04:78:f6:7d:4b: de:ea:d3:24:7b:81:1c:82:e0:7e:8b:84:ee:db:43:94:80:c6: c6:58:5c:32:d7:9b:cf:e2:18:45:2e:9c:ff:19:17:4d:10:12: 8c:1e:cb:00:49:33:2a:dc:aa:f6:06:c6:3f:2f:19:ae:86:6d: 96:05:d4:ac:26:2a:43:78:9d:b4:dd:65:4f:b5:6d:a5:41:f2: 94:58:b5:d8:91:bc:5d:e7:fe:dd:b3:43:aa:77:83:95:1f:a8: d1:36:80:bc:d4:d0:e5:07:39:57:83:ee:37:c2:c1:46:33:75: 44:24:53:f1:73:f2:4f:0e:f5:84:5d:d1:51:d3:f2:11:53:a8: 2c:7e:cf:2e:cf:06:dc:76:e0:5c:4a:73:8a:3e:28:e4:e1:de: 30:82:31:36 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE+UNyTF2YTOu0wWGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMTE5NDYxMloXDTI5MDEyMzIwNDYxMlowLzEtMCsGA1UEAxMk MmQ5YWMzYjUtYmMzZC00MTIwLTlhNTktNDNkNjE2MDVkMmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8dXx7/bgsr5eMvvXoBaCBvM4RY1eorSgSo6 y3cg/0iMzMGFwRbbNfRDUiX3eVns4mMxBcIEgSGijjpMudHvIwlig/6WmZf2RKqD 1EC//Nmqzr6Uhp9bjDbL7zmtHIFNBgCw0a9/9u8I58d1Hxf1GKCiFoUaUM7Aa4Lv kSK4yZndmn14McgQpQNDlmKUzTADAY7dMSNBZ9fnDCeoVDznrCpUvIvNZIknL7uC y+ALJzTYAsSPYtgv101y2xwRp1q7DHLnU0qZQ4Km/qxqqd+OAdfeVM37GngmUy7K YxhKAjCIPM2j8TNvMzkBulhA8Yi0PTRKpEkIwJsta0yXXfveSwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFBHhbTm/YalSOuUE+nmtdfCZ1SRDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8y ZDlhYzNiNS1iYzNkLTQxMjAtOWE1OS00M2Q2MTYwNWQyY2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzJkOWFjM2I1LWJjM2QtNDEyMC05 YTU5LTQzZDYxNjA1ZDJjYi8yZDlhYzNiNS1iYzNkLTQxMjAtOWE1OS00M2Q2MTYw NWQyY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAI/8wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC N3YwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAnNOImVM6rpf7fGp3CnIquv6GHztTeo7F9k9O3g7l0pouxN0I coT6xwQ9KJo3icbyY+i6z/aH9I2Srfhfy2i1Lic8A18YCWHQO3vndcToZL53lGEv U6MlW4Nv+BZePHABw+HXxvInpwR49n1L3urTJHuBHILgfouE7ttDlIDGxlhcMteb z+IYRS6c/xkXTRASjB7LAEkzKtyq9gbGPy8ZroZtlgXUrCYqQ3idtN1lT7VtpUHy lFi12JG8Xef+3bNDqneDlR+o0TaAvNTQ5Qc5V4PuN8LBRjN1RCRT8XPyTw71hF3R UdPyEVOoLH7PLs8G3HbgXEpzij4o5OHeMIIxNg== -----END CERTIFICATE-----Generated at Tue Nov 3 22:33:09 2026 by rpki-client