$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7723fb27-9059-4bd3-b93d-39983befd8f5.cer File: 7723fb27-9059-4bd3-b93d-39983befd8f5.cer (raw, json) Hash identifier: LJt0KHo7RPI/ZrdaATJEgMkDOV1rgmhZ+sOILXqxbxU= Subject key identifier: 74:12:CE:26:70:C3:9E:09:E2:A7:29:67:A8:D4:E8:90:FB:B5:D8:25 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F5F00AE1667BADFDBD8472680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7723fb27-9059-4bd3-b93d-39983befd8f5/7723fb27-9059-4bd3-b93d-39983befd8f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7723fb27-9059-4bd3-b93d-39983befd8f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 18:18:37 +0000 Certificate not after: Thu 04 Jan 2029 19:18:37 +0000 Subordinate resources: AS: 402592 IP: 199.195.5.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:00:ae:16:67:ba:df:db:d8:47:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 2 18:18:37 2026 GMT Not After : Jan 4 19:18:37 2029 GMT Subject: CN=7723fb27-9059-4bd3-b93d-39983befd8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:fe:87:66:66:a2:b0:09:14:e1:76:26:11: 90:26:87:ed:52:98:29:7e:7e:ac:2f:ab:27:b0:3b: 79:dd:9e:f4:9c:5f:63:f7:ff:5f:48:70:af:72:79: 84:c0:78:fd:39:b6:b3:8c:40:67:1f:3e:83:bd:6b: bc:c4:ca:9b:c1:75:ea:a3:61:ec:59:94:a3:bd:1e: e0:7c:73:1c:5b:bb:40:8a:d8:3b:fb:a7:cf:05:1f: 23:65:ab:50:6a:46:0f:f0:e0:12:36:99:96:0a:fc: 47:be:ad:30:6f:25:99:d3:6b:9d:16:5f:82:36:fa: da:39:12:fc:c9:49:65:6f:af:5c:2d:69:f4:01:cd: 18:64:6b:2c:c8:b4:75:88:6d:32:95:dd:7f:e8:7c: d0:8f:c0:70:03:31:aa:2b:6f:8d:19:d1:ba:c8:1a: 60:59:b0:a8:02:8e:23:ec:c5:97:a7:e5:b0:7b:ee: cf:32:e0:2b:53:d3:b7:fd:19:02:b5:0b:0a:98:90: 45:51:a7:29:5f:fc:d7:47:8b:12:90:6e:a8:9e:4a: 20:a4:eb:c3:79:26:63:fe:73:6b:c3:29:32:f6:3f: d6:fc:13:c6:7f:65:b9:9e:e1:61:b5:3d:7f:a7:2e: 24:ad:23:3f:a1:21:cd:da:98:6e:01:d9:f9:46:0f: 90:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:12:CE:26:70:C3:9E:09:E2:A7:29:67:A8:D4:E8:90:FB:B5:D8:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7723fb27-9059-4bd3-b93d-39983befd8f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7723fb27-9059-4bd3-b93d-39983befd8f5/7723fb27-9059-4bd3-b93d-39983befd8f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 199.195.5.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402592 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:66:4d:53:02:37:0e:a7:fd:15:ae:dd:0f:56:ba:ac:6f:bc: 16:9a:76:6d:e5:76:09:c7:ee:51:84:b7:b6:5d:28:63:4e:a5: 28:c4:08:bd:82:d2:82:eb:55:47:8a:3e:f1:f2:81:a9:02:77: 03:74:c1:cb:ca:f9:1f:37:59:7f:8a:57:59:29:4e:d9:e2:13: 2a:b1:45:92:69:69:1c:a2:d2:17:ad:75:b5:26:0f:91:f3:34: f7:23:a6:42:33:a4:f8:9f:87:4c:32:72:29:30:3f:a7:54:b8: f8:5c:ad:16:bf:ee:b2:f6:c3:5a:d8:be:9a:bc:8d:15:36:08: 2d:9c:da:7f:e5:de:f8:2a:db:35:7f:ca:5e:00:db:93:ff:16: a8:36:85:13:17:e5:91:5f:33:ba:e8:3e:e7:b0:df:8a:15:69: e6:ec:ce:ed:89:e8:19:31:ed:a3:b6:13:d2:41:6d:e3:2b:ba: 85:1d:12:64:36:b7:72:a5:5a:74:c6:fe:25:c8:f8:45:0c:c5: b5:ba:19:b8:d5:e9:21:1f:36:63:b1:ba:6e:ce:c0:4a:3d:11: 2d:32:fc:12:af:61:f4:2f:1c:0c:c2:1b:3a:86:89:63:be:6b: 9e:7c:97:bf:0a:52:78:24:66:fa:28:65:65:33:3c:83:ed:43: c2:5f:98:c8 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9fAK4WZ7rf29hHJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwMjE4MTgzN1oXDTI5MDEwNDE5MTgzN1owLzEtMCsGA1UEAxMk NzcyM2ZiMjctOTA1OS00YmQzLWI5M2QtMzk5ODNiZWZkOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ7+h2ZmorAJFOF2JhGQJoftUpgpfn6sL6sn sDt53Z70nF9j9/9fSHCvcnmEwHj9ObazjEBnHz6DvWu8xMqbwXXqo2HsWZSjvR7g fHMcW7tAitg7+6fPBR8jZatQakYP8OASNpmWCvxHvq0wbyWZ02udFl+CNvraORL8 yUllb69cLWn0Ac0YZGssyLR1iG0yld1/6HzQj8BwAzGqK2+NGdG6yBpgWbCoAo4j 7MWXp+Wwe+7PMuArU9O3/RkCtQsKmJBFUacpX/zXR4sSkG6onkogpOvDeSZj/nNr wyky9j/W/BPGf2W5nuFhtT1/py4krSM/oSHN2phuAdn5Rg+QHwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFHQSziZww54J4qcpZ6jU6JD7tdglMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83 NzIzZmIyNy05MDU5LTRiZDMtYjkzZC0zOTk4M2JlZmQ4ZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5Lzc3MjNmYjI3LTkwNTktNGJkMy1i OTNkLTM5OTgzYmVmZDhmNS83NzIzZmIyNy05MDU5LTRiZDMtYjkzZC0zOTk4M2Jl ZmQ4ZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHwwUwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiSgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIlmTVMCNw6n/RWu3Q9WuqxvvBaadm3ldgnH7lGEt7ZdKGNO pSjECL2C0oLrVUeKPvHygakCdwN0wcvK+R83WX+KV1kpTtniEyqxRZJpaRyi0het dbUmD5HzNPcjpkIzpPifh0wycikwP6dUuPhcrRa/7rL2w1rYvpq8jRU2CC2c2n/l 3vgq2zV/yl4A25P/Fqg2hRMX5ZFfM7roPuew34oVaebszu2J6Bkx7aO2E9JBbeMr uoUdEmQ2t3KlWnTG/iXI+EUMxbW6GbjV6SEfNmOxum7OwEo9ES0y/BKvYfQvHAzC GzqGiWO+a558l78KUngkZvooZWUzPIPtQ8JfmMg= -----END CERTIFICATE-----Generated at Sun Nov 1 08:31:00 2026 by rpki-client