$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/89680a3f-a130-4eca-83fd-08cfb42373f9.cer File: 89680a3f-a130-4eca-83fd-08cfb42373f9.cer (raw, json) Hash identifier: 6IV4j9ev+1rhxY9Xoh98XWS5C4qivgriDTiPSiO512M= Subject key identifier: 56:B1:DB:80:74:CE:8D:F3:FC:F3:74:E1:AF:B9:C9:18:F9:56:B8:21 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F96109627695F70BCCC8A3B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/89680a3f-a130-4eca-83fd-08cfb42373f9/89680a3f-a130-4eca-83fd-08cfb42373f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/89680a3f-a130-4eca-83fd-08cfb42373f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 Oct 2026 11:40:07 +0000 Certificate not after: Wed 24 Jan 2029 12:40:07 +0000 Subordinate resources: IP: 205.172.160.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:10:96:27:69:5f:70:bc:cc:8a:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 22 11:40:07 2026 GMT Not After : Jan 24 12:40:07 2029 GMT Subject: CN=89680a3f-a130-4eca-83fd-08cfb42373f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:d9:0a:a8:2a:68:1d:0b:98:6c:d7:12:fc: 59:91:42:db:f2:60:6a:7b:e1:17:ef:e4:f4:58:82: 96:92:27:c7:9b:6c:05:a2:a0:e0:e3:c2:b2:06:2f: 4b:fc:f6:4a:63:77:7b:a8:c0:2d:5e:10:23:1e:78: 5e:ef:f4:87:e7:4b:b9:72:bd:6a:b7:9e:52:f4:c2: a0:61:c8:3a:8d:cc:ad:4f:3f:01:ad:c6:0e:e5:9f: 60:df:3b:b1:88:cb:40:e3:7c:37:16:79:88:d3:8d: 2d:6c:4f:ee:58:f9:93:d8:b8:f4:77:61:22:ff:01: d5:37:ef:48:27:d2:74:89:97:bc:e8:72:49:71:a8: d5:b8:9c:14:5d:98:1e:ed:3c:e0:1c:ab:23:c5:73: fd:47:32:f8:02:dc:d8:68:62:b9:1c:6a:be:63:fd: 63:de:c0:21:9e:5a:ef:09:0c:3d:3b:2c:d4:59:3d: 75:11:de:e5:fa:b7:46:46:c3:8f:d1:e9:d7:38:7c: 6c:55:bf:5c:6d:d2:08:92:45:ed:32:f9:8f:19:f9: dc:48:4e:f4:d1:3d:ca:7e:40:d0:e8:3e:95:ce:3b: ef:b8:7b:da:46:45:ea:12:13:7b:b4:1c:d9:07:1b: a3:53:72:a0:a7:29:e7:0a:4d:3e:14:ef:35:42:28: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B1:DB:80:74:CE:8D:F3:FC:F3:74:E1:AF:B9:C9:18:F9:56:B8:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/89680a3f-a130-4eca-83fd-08cfb42373f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/89680a3f-a130-4eca-83fd-08cfb42373f9/89680a3f-a130-4eca-83fd-08cfb42373f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 205.172.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:49:b4:59:c1:7f:fc:46:3a:72:41:6e:d5:24:a3:2a:7b:03: 2a:4b:8d:d2:69:26:d1:3e:9d:59:85:1a:e7:aa:46:d9:db:77: ae:3e:c7:e5:75:66:42:cc:d1:0c:0e:15:80:e3:ce:a9:41:eb: c1:d7:dc:ba:cb:c5:a4:81:e3:47:5e:1b:98:ee:92:83:df:04: 2f:90:03:3d:f6:22:b0:2c:f0:7f:06:ec:52:12:6d:21:96:00: f2:1c:90:d6:4e:f4:20:50:6a:17:4e:19:de:0a:17:67:28:ab: d6:32:9f:73:a7:e1:af:da:05:08:a3:d9:95:0c:b5:8b:72:05: 0e:cd:82:2a:24:da:47:17:af:0a:da:18:c1:3f:59:2b:e5:dc: 9b:1b:48:b2:95:cb:68:9e:16:ed:cd:ed:f9:d7:91:bf:30:a2: f0:83:72:8a:fc:ec:87:cb:b4:76:53:48:ac:b6:be:f0:8c:5c: 65:7f:84:62:47:37:eb:fe:ee:48:b2:51:d6:66:a7:2b:0f:3c: 7c:4e:a0:78:e9:6c:e5:0a:49:be:6d:b6:7b:88:a8:b2:0b:df: 13:2b:99:66:47:eb:26:e6:84:cb:a6:aa:a9:0d:fb:a7:86:83: ce:af:2c:d5:1e:20:0b:cd:96:b9:35:e6:ad:51:3a:8e:89:4f: 59:80:64:27 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+WEJYnaV9wvMyKOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMjExNDAwN1oXDTI5MDEyNDEyNDAwN1owLzEtMCsGA1UEAxMk ODk2ODBhM2YtYTEzMC00ZWNhLTgzZmQtMDhjZmI0MjM3M2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xPZCqgqaB0LmGzXEvxZkULb8mBqe+EX7+T0 WIKWkifHm2wFoqDg48KyBi9L/PZKY3d7qMAtXhAjHnhe7/SH50u5cr1qt55S9MKg Ycg6jcytTz8BrcYO5Z9g3zuxiMtA43w3FnmI040tbE/uWPmT2Lj0d2Ei/wHVN+9I J9J0iZe86HJJcajVuJwUXZge7TzgHKsjxXP9RzL4AtzYaGK5HGq+Y/1j3sAhnlrv CQw9OyzUWT11Ed7l+rdGRsOP0enXOHxsVb9cbdIIkkXtMvmPGfncSE700T3KfkDQ 6D6VzjvvuHvaRkXqEhN7tBzZBxujU3KgpynnCk0+FO81Qij2AwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFax24B0zo3z/PN04a+5yRj5VrghMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 OTY4MGEzZi1hMTMwLTRlY2EtODNmZC0wOGNmYjQyMzczZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5Lzg5NjgwYTNmLWExMzAtNGVjYS04 M2ZkLTA4Y2ZiNDIzNzNmOS84OTY4MGEzZi1hMTMwLTRlY2EtODNmZC0wOGNmYjQy MzczZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALNrKAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARUm0WcF//EY6ckFu1SSj KnsDKkuN0mkm0T6dWYUa56pG2dt3rj7H5XVmQszRDA4VgOPOqUHrwdfcusvFpIHj R14bmO6Sg98EL5ADPfYisCzwfwbsUhJtIZYA8hyQ1k70IFBqF04Z3goXZyir1jKf c6fhr9oFCKPZlQy1i3IFDs2CKiTaRxevCtoYwT9ZK+XcmxtIspXLaJ4W7c3t+deR vzCi8INyivzsh8u0dlNIrLa+8IxcZX+EYkc36/7uSLJR1manKw88fE6geOls5QpJ vm22e4iosgvfEyuZZkfrJuaEy6aqqQ37p4aDzq8s1R4gC82WuTXmrVE6jolPWYBk Jw== -----END CERTIFICATE-----Generated at Sat Oct 24 10:34:59 2026 by rpki-client