$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21.cer File: 5e91ef34-870d-4a8e-ae98-0c8f58366d21.cer (raw, json) Hash identifier: 32YzZzLLnoTR4EKW/YjIP1wfhUIg4Y9GmKF7kJvkyvQ= Subject key identifier: 8A:48:95:E2:9E:BD:C3:A0:F5:5F:A6:2D:4B:32:88:82:60:03:AA:4D Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F808AEF868CB21C9A3744B370 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21/5e91ef34-870d-4a8e-ae98-0c8f58366d21.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Oct 2026 18:38:51 +0000 Certificate not after: Tue 16 Jan 2029 19:38:51 +0000 Subordinate resources: AS: 29851 IP: 198.179.162.0 -- 198.179.167.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:80:8a:ef:86:8c:b2:1c:9a:37:44:b3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 14 18:38:51 2026 GMT Not After : Jan 16 19:38:51 2029 GMT Subject: CN=5e91ef34-870d-4a8e-ae98-0c8f58366d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:71:69:c0:1a:e5:93:d2:85:fe:97:9d:60:67: cb:ed:25:e3:1b:b4:52:8a:04:49:4f:5d:ae:e1:49: 68:a1:6d:df:6d:b7:13:0b:88:7a:f6:e2:6d:8f:ef: 01:e0:c0:13:e8:72:f5:18:0e:f8:2a:af:aa:58:8a: 61:e6:16:cf:52:f0:b1:00:24:f0:2b:c2:fc:42:a0: 7e:e7:c2:15:1b:6a:2b:76:8c:de:e5:3e:65:de:6b: 5d:df:8d:62:d1:a8:d9:7e:08:38:4d:0d:7c:6d:56: a7:a7:7e:6f:0d:fd:a0:36:ef:5e:04:60:70:f3:25: 79:85:46:9a:77:6a:f2:e2:62:b7:c1:fe:a8:e2:1d: 10:50:57:7b:ca:0c:97:b9:b2:3f:4e:4f:46:b4:7d: 44:c2:dc:0a:b7:ff:8a:21:10:9b:d9:37:60:29:94: 9d:7a:4b:a9:2e:54:62:68:7f:f7:07:d7:e0:4e:c4: 9e:a0:4f:6c:4f:2d:3c:a1:98:b5:b9:3b:fc:81:84: 32:41:8b:ed:f8:d1:d6:4b:12:b2:80:5f:9a:27:5f: e2:b9:1a:fa:39:c6:fe:dc:e2:20:44:8f:3a:6f:b5: 83:af:86:9a:05:a9:ed:67:f4:22:db:19:61:1e:12: 3b:85:b2:b5:74:30:16:84:1c:e0:a8:d5:db:4a:8c: 0a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:48:95:E2:9E:BD:C3:A0:F5:5F:A6:2D:4B:32:88:82:60:03:AA:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5e91ef34-870d-4a8e-ae98-0c8f58366d21/5e91ef34-870d-4a8e-ae98-0c8f58366d21.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.179.162.0-198.179.167.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29851 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e9:7d:0c:36:55:fd:95:a6:17:74:24:6f:91:99:1e:ad:45: 79:05:23:4a:26:a0:82:41:d6:dc:88:2d:a1:e1:a3:e2:cd:0a: c2:80:28:c2:f4:af:0c:55:a3:ab:6b:3f:40:38:84:2a:eb:eb: 42:1c:c2:ac:20:14:a9:93:f5:de:96:a5:7c:1c:4f:70:07:a2: dc:0d:14:e8:bf:98:f0:69:d2:42:27:93:ed:c5:91:c4:7b:5a: 8f:2f:2f:2d:a3:45:b4:74:ea:57:ac:aa:ef:d6:0c:3e:94:ca: 23:91:58:92:d8:42:c1:6f:a4:01:c1:a7:67:e1:63:65:e9:95: ea:6c:0b:40:75:43:94:5b:e8:e5:01:12:09:af:b9:c4:b0:18: 3c:da:cd:b4:23:f5:af:3d:15:a8:4e:12:74:e2:fa:56:6c:11: 48:6d:47:01:cb:a3:44:4f:47:55:ac:95:27:21:83:42:3a:da: f5:72:4e:56:39:6f:87:89:89:b6:2e:7a:b2:28:bc:81:d1:12: 64:30:a7:aa:ea:0c:43:2f:17:d5:b7:d5:98:41:06:eb:d2:1d: 7b:75:74:7a:0e:18:db:8a:b3:2b:22:f6:12:b1:e8:dd:ce:79: 51:4c:4b:a3:5e:b1:df:55:26:0f:08:31:04:86:cc:0e:fc:30: 5d:c7:74:bf -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWE+Aiu+GjLIcmjdEs3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNDE4Mzg1MVoXDTI5MDExNjE5Mzg1MVowLzEtMCsGA1UEAxMk NWU5MWVmMzQtODcwZC00YThlLWFlOTgtMGM4ZjU4MzY2ZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXFpwBrlk9KF/pedYGfL7SXjG7RSigRJT12u 4UlooW3fbbcTC4h69uJtj+8B4MAT6HL1GA74Kq+qWIph5hbPUvCxACTwK8L8QqB+ 58IVG2ordoze5T5l3mtd341i0ajZfgg4TQ18bVanp35vDf2gNu9eBGBw8yV5hUaa d2ry4mK3wf6o4h0QUFd7ygyXubI/Tk9GtH1EwtwKt/+KIRCb2TdgKZSdekupLlRi aH/3B9fgTsSeoE9sTy08oZi1uTv8gYQyQYvt+NHWSxKygF+aJ1/iuRr6Ocb+3OIg RI86b7WDr4aaBantZ/Qi2xlhHhI7hbK1dDAWhBzgqNXbSowKhQIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFIpIleKevcOg9V+mLUsyiIJgA6pNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS81 ZTkxZWYzNC04NzBkLTRhOGUtYWU5OC0wYzhmNTgzNjZkMjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzVlOTFlZjM0LTg3MGQtNGE4ZS1h ZTk4LTBjOGY1ODM2NmQyMS81ZTkxZWYzNC04NzBkLTRhOGUtYWU5OC0wYzhmNTgz NjZkMjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAcazogMEA8azoDAZBggrBgEFBQcBCAEB/wQK MAigBjAEAgJ0mzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCI6X0MNlX9laYXdCRvkZkerUV5BSNKJqCCQdbc iC2h4aPizQrCgCjC9K8MVaOraz9AOIQq6+tCHMKsIBSpk/XelqV8HE9wB6LcDRTo v5jwadJCJ5PtxZHEe1qPLy8to0W0dOpXrKrv1gw+lMojkViS2ELBb6QBwadn4WNl 6ZXqbAtAdUOUW+jlARIJr7nEsBg82s20I/WvPRWoThJ04vpWbBFIbUcBy6NET0dV rJUnIYNCOtr1ck5WOW+HiYm2LnqyKLyB0RJkMKeq6gxDLxfVt9WYQQbr0h17dXR6 DhjbirMrIvYSsejdznlRTEujXrHfVSYPCDEEhswO/DBdx3S/ -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:30 2026 by rpki-client