$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/494686b2-3e86-4bc1-ac23-3ee6917addc2.cer File: 494686b2-3e86-4bc1-ac23-3ee6917addc2.cer (raw, json) Hash identifier: IO0qee0UWFasrJwVFwQ5o7pS/YvFwWq2tXqvE09cuJc= Subject key identifier: 5F:54:F7:D9:8E:41:BD:6F:95:96:13:84:52:D4:F5:34:8B:AF:77:C2 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F76948D41D8D7B41739A81A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/494686b2-3e86-4bc1-ac23-3ee6917addc2/494686b2-3e86-4bc1-ac23-3ee6917addc2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/494686b2-3e86-4bc1-ac23-3ee6917addc2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Oct 2026 05:00:09 +0000 Certificate not after: Sat 13 Jan 2029 06:00:09 +0000 Subordinate resources: AS: 20007 IP: 198.184.14.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:94:8d:41:d8:d7:b4:17:39:a8:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 11 05:00:09 2026 GMT Not After : Jan 13 06:00:09 2029 GMT Subject: CN=494686b2-3e86-4bc1-ac23-3ee6917addc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:1e:60:75:d2:6f:de:fe:e8:2d:d0:af:fb: 6e:df:bb:03:80:13:bc:3f:89:5c:a5:f3:70:ca:f1: 81:cc:61:4b:b9:ed:83:64:b4:d5:8d:25:60:ca:0e: 31:f8:31:79:b5:73:1a:2f:47:9c:80:c5:6b:88:28: 62:1d:d9:c3:93:5c:42:f2:35:2e:21:ea:d3:46:b3: c3:ff:5c:19:66:1c:ef:dd:c8:3e:e2:1a:81:0f:6f: e7:09:b6:1d:e0:85:de:a7:2b:f7:71:33:78:45:e7: 3b:51:3e:c6:ce:8f:c7:12:d6:4d:af:55:5b:86:a6: 4e:34:0c:7c:7e:ba:ae:f6:2a:bc:3c:90:8f:ac:30: 80:2f:57:80:93:d3:7d:16:8c:dd:36:6b:4d:76:bc: 5b:d8:b8:52:20:d2:56:e8:ec:7a:8e:c0:d5:82:46: 52:73:06:7f:a9:8a:53:68:f4:a8:44:0c:fb:d8:5e: c1:d5:14:a8:1e:de:e9:0a:0c:6a:a7:e3:a9:c8:7c: 73:bd:1a:d7:23:dc:70:a3:3e:09:0b:8d:c2:92:50: 65:95:56:21:ed:15:dc:08:9d:b3:22:0d:d2:67:f4: 04:83:c6:e4:50:d9:ab:86:eb:85:da:f1:c7:03:20: cd:ca:4d:df:2d:9d:a7:ca:6a:87:f8:35:be:d8:b1: 6d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:54:F7:D9:8E:41:BD:6F:95:96:13:84:52:D4:F5:34:8B:AF:77:C2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/494686b2-3e86-4bc1-ac23-3ee6917addc2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/494686b2-3e86-4bc1-ac23-3ee6917addc2/494686b2-3e86-4bc1-ac23-3ee6917addc2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.184.14.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20007 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7f:6c:0e:e2:dc:22:96:7b:6d:30:c2:46:2d:3f:bf:73:d7: a0:c4:29:8c:ac:03:1b:52:33:b0:dd:95:1e:0a:16:4d:ba:5a: eb:ec:79:4b:0a:24:f6:6b:9f:df:73:18:ea:55:fb:07:f1:c4: 72:77:41:f8:96:27:34:a3:2a:0c:6c:e1:78:e6:cd:95:c0:ce: 6f:8c:ae:5d:96:14:06:6b:0f:2d:57:21:f8:75:05:ca:aa:eb: db:49:9e:16:16:08:a7:ce:4e:75:dd:23:b9:b6:0e:ff:4d:31: 5b:33:e4:ac:a8:e3:87:3c:61:d1:20:fe:d1:ba:5a:5f:0e:13: 9e:ac:f5:e9:79:36:1b:38:b3:a6:95:d6:7e:78:d8:e3:07:c3: f0:32:29:47:c8:9c:2e:ba:44:25:92:67:9f:b0:f5:64:23:a2: 54:05:76:3f:4e:54:02:29:91:a2:19:b9:52:dd:63:d8:ab:f2: 45:b9:d7:25:0c:4a:bf:f9:7a:82:ba:dd:99:0f:dd:6c:de:51: b5:37:0d:36:30:25:f1:b5:29:0a:ac:d9:58:e7:9e:5a:8f:88: a8:20:45:9c:65:cd:07:22:c9:18:ec:fe:e8:ee:ee:79:38:69: 0d:fc:35:8f:5e:fb:2b:4c:23:05:b3:bb:72:b7:c7:d4:76:ef: fe:0e:be:ba -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE92lI1B2Ne0FzmoGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMTA1MDAwOVoXDTI5MDExMzA2MDAwOVowLzEtMCsGA1UEAxMk NDk0Njg2YjItM2U4Ni00YmMxLWFjMjMtM2VlNjkxN2FkZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlREeYHXSb97+6C3Qr/tu37sDgBO8P4lcpfNw yvGBzGFLue2DZLTVjSVgyg4x+DF5tXMaL0ecgMVriChiHdnDk1xC8jUuIerTRrPD /1wZZhzv3cg+4hqBD2/nCbYd4IXepyv3cTN4Rec7UT7Gzo/HEtZNr1VbhqZONAx8 frqu9iq8PJCPrDCAL1eAk9N9FozdNmtNdrxb2LhSINJW6Ox6jsDVgkZScwZ/qYpT aPSoRAz72F7B1RSoHt7pCgxqp+OpyHxzvRrXI9xwoz4JC43CklBllVYh7RXcCJ2z Ig3SZ/QEg8bkUNmrhuuF2vHHAyDNyk3fLZ2nymqH+DW+2LFtkwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFF9U99mOQb1vlZYThFLU9TSLr3fCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80 OTQ2ODZiMi0zZTg2LTRiYzEtYWMyMy0zZWU2OTE3YWRkYzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzQ5NDY4NmIyLTNlODYtNGJjMS1h YzIzLTNlZTY5MTdhZGRjMi80OTQ2ODZiMi0zZTg2LTRiYzEtYWMyMy0zZWU2OTE3 YWRkYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGuA4wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC TicwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALn9sDuLcIpZ7bTDCRi0/v3PXoMQpjKwDG1IzsN2VHgoWTbpa 6+x5Swok9muf33MY6lX7B/HEcndB+JYnNKMqDGzheObNlcDOb4yuXZYUBmsPLVch +HUFyqrr20meFhYIp85Odd0jubYO/00xWzPkrKjjhzxh0SD+0bpaXw4Tnqz16Xk2 GzizppXWfnjY4wfD8DIpR8icLrpEJZJnn7D1ZCOiVAV2P05UAimRohm5Ut1j2Kvy RbnXJQxKv/l6grrdmQ/dbN5RtTcNNjAl8bUpCqzZWOeeWo+IqCBFnGXNByLJGOz+ 6O7ueThpDfw1j177K0wjBbO7crfH1Hbv/g6+ug== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:58 2026 by rpki-client