$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/814be190-f907-456f-86a6-626dc2cd0bd8.cer File: 814be190-f907-456f-86a6-626dc2cd0bd8.cer (raw, json) Hash identifier: PYoRSG9+bMA/yqfgGysEBBb2MViyvRDJVhNgdvEr3og= Subject key identifier: BB:68:93:DE:0F:09:60:3E:BB:10:55:26:4F:AF:17:7A:0E:8E:A2:4E Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584FA27EA1CBFD9C491066D4F240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/814be190-f907-456f-86a6-626dc2cd0bd8/814be190-f907-456f-86a6-626dc2cd0bd8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/814be190-f907-456f-86a6-626dc2cd0bd8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Oct 2026 22:31:33 +0000 Certificate not after: Sun 28 Jan 2029 23:31:33 +0000 Subordinate resources: IP: 198.22.165.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:7e:a1:cb:fd:9c:49:10:66:d4:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 26 22:31:33 2026 GMT Not After : Jan 28 23:31:33 2029 GMT Subject: CN=814be190-f907-456f-86a6-626dc2cd0bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:e7:18:da:7f:5c:a7:be:28:80:4c:81:f3: 20:2a:03:5b:99:62:36:c3:da:25:17:11:f2:d2:94: e3:be:bd:80:e8:ca:dc:2b:61:93:38:76:ef:45:03: 09:1d:bf:b4:a8:79:b3:5c:0f:25:a6:bf:98:dd:51: ab:1e:02:22:14:5a:53:52:98:e4:88:66:fa:67:66: 5c:56:6b:9a:d2:88:51:e7:68:d3:1e:4b:f7:7f:ba: ed:3d:bd:60:a3:7c:b9:0c:2b:a9:cd:ef:16:26:f1: 40:23:50:68:ec:0b:f4:2b:21:39:c1:c3:90:76:46: a3:40:08:1d:04:4d:71:65:f8:c6:08:b9:79:62:ec: 1c:fe:69:f5:50:cf:fc:38:2f:6e:23:7b:d3:15:2c: fb:9b:31:1e:ee:6c:29:f9:8c:cc:d5:e7:27:07:81: d8:59:14:24:53:01:0c:c5:8e:97:74:0a:50:35:e8: 8f:d1:67:3b:da:7a:4b:82:50:aa:df:bf:28:01:0e: e9:f6:e1:a0:d8:7f:85:bd:df:31:03:31:9a:01:b5: e2:5b:f1:ec:bc:31:ee:95:68:a8:50:a8:26:5b:75: 05:ab:e5:6c:c4:4b:47:36:6b:83:eb:ec:68:36:f7: 06:00:55:db:3a:05:e3:53:d6:16:c9:c6:17:83:af: 1b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:68:93:DE:0F:09:60:3E:BB:10:55:26:4F:AF:17:7A:0E:8E:A2:4E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/814be190-f907-456f-86a6-626dc2cd0bd8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/814be190-f907-456f-86a6-626dc2cd0bd8/814be190-f907-456f-86a6-626dc2cd0bd8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.22.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:58:78:5c:be:8d:03:f1:55:9d:3f:39:12:54:d1:8b:69:b7: ed:4d:a0:cf:73:f1:7b:8d:3c:4e:34:01:69:ce:54:21:40:26: 0f:52:9f:7a:35:b7:83:78:3e:1c:9b:1b:c9:4d:07:1a:e5:d7: cf:58:be:40:bc:3f:04:ad:7a:89:88:70:ca:1b:19:9d:c3:07: 78:b0:eb:b6:b7:68:9c:23:06:71:23:f9:93:3f:d0:51:76:ac: 0b:ea:ca:22:df:ad:7f:ad:ee:ba:1b:5a:24:d2:f0:4b:b7:90: ca:47:4c:47:2d:ef:27:a0:49:b9:c9:a8:ce:0a:e7:d9:8d:c0: 59:f9:b8:00:e1:d9:2b:45:63:af:6a:5a:f4:bf:3b:e4:6c:73: 26:b8:83:81:67:95:1b:e9:a3:4d:74:d0:91:04:01:94:e3:82: 73:2f:a0:78:39:4d:ea:5f:1f:a9:3b:33:67:d8:e4:e2:91:42: 4f:67:cb:e9:9e:64:ce:8b:5f:e8:d5:25:9c:7d:5b:47:ab:a3: 90:e0:5d:4f:ea:d2:5e:02:4f:4c:07:0d:0b:e3:65:21:22:08: 81:be:2a:86:0c:8c:5b:80:bf:bf:bd:db:8b:30:2d:20:f0:9d: d2:f9:b0:3c:5b:cf:6d:c2:1e:d5:a9:52:0f:55:cd:89:4e:27: 16:97:fe:ff -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+ifqHL/ZxJEGbU8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyNjIyMzEzM1oXDTI5MDEyODIzMzEzM1owLzEtMCsGA1UEAxMk ODE0YmUxOTAtZjkwNy00NTZmLTg2YTYtNjI2ZGMyY2QwYmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLvnGNp/XKe+KIBMgfMgKgNbmWI2w9olFxHy 0pTjvr2A6MrcK2GTOHbvRQMJHb+0qHmzXA8lpr+Y3VGrHgIiFFpTUpjkiGb6Z2Zc Vmua0ohR52jTHkv3f7rtPb1go3y5DCupze8WJvFAI1Bo7Av0KyE5wcOQdkajQAgd BE1xZfjGCLl5Yuwc/mn1UM/8OC9uI3vTFSz7mzEe7mwp+YzM1ecnB4HYWRQkUwEM xY6XdApQNeiP0Wc72npLglCq378oAQ7p9uGg2H+Fvd8xAzGaAbXiW/HsvDHulWio UKgmW3UFq+VsxEtHNmuD6+xoNvcGAFXbOgXjU9YWycYXg68bXwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLtok94PCWA+uxBVJk+vF3oOjqJOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 MTRiZTE5MC1mOTA3LTQ1NmYtODZhNi02MjZkYzJjZDBiZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzgxNGJlMTkwLWY5MDctNDU2Zi04 NmE2LTYyNmRjMmNkMGJkOC84MTRiZTE5MC1mOTA3LTQ1NmYtODZhNi02MjZkYzJj ZDBiZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGFqUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZFh4XL6NA/FVnT85ElTR i2m37U2gz3Pxe408TjQBac5UIUAmD1KfejW3g3g+HJsbyU0HGuXXz1i+QLw/BK16 iYhwyhsZncMHeLDrtrdonCMGcSP5kz/QUXasC+rKIt+tf63uuhtaJNLwS7eQykdM Ry3vJ6BJucmozgrn2Y3AWfm4AOHZK0Vjr2pa9L875GxzJriDgWeVG+mjTXTQkQQB lOOCcy+geDlN6l8fqTszZ9jk4pFCT2fL6Z5kzotf6NUlnH1bR6ujkOBdT+rSXgJP TAcNC+NlISIIgb4qhgyMW4C/v73bizAtIPCd0vmwPFvPbcIe1alSD1XNiU4nFpf+ /w== -----END CERTIFICATE-----Generated at Sun Nov 1 08:30:55 2026 by rpki-client