$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0.cer File: 91c5b4e2-90f4-4fa9-af65-d33ec54223d0.cer (raw, json) Hash identifier: xAaISpoKkOLY5wGJeRmNpB24YMohxYiwf8XMN6FjXUQ= Subject key identifier: 75:4D:29:6A:20:21:20:68:62:42:78:36:54:50:6A:90:78:DD:0F:0E Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7AA0D14FED52E270F93DFD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0/91c5b4e2-90f4-4fa9-af65-d33ec54223d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Oct 2026 15:48:06 +0000 Certificate not after: Sun 14 Jan 2029 16:48:06 +0000 Subordinate resources: AS: 394394 IP: 192.160.0.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:a0:d1:4f:ed:52:e2:70:f9:3d:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 12 15:48:06 2026 GMT Not After : Jan 14 16:48:06 2029 GMT Subject: CN=91c5b4e2-90f4-4fa9-af65-d33ec54223d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:92:7a:81:df:17:a7:b6:76:42:ba:3a:f8: b6:a2:e0:1c:37:71:a0:70:60:96:a8:19:2d:b4:b4: 69:89:34:46:0b:a2:8c:4f:6d:a7:7d:cf:10:9c:3f: a3:04:b4:83:57:c3:2e:20:6d:b4:1a:ad:eb:d9:c7: 07:14:3e:4f:b2:1d:05:41:c3:90:dc:b7:78:c1:f1: 84:f1:3b:c8:15:71:c1:b6:32:f2:dc:b7:b5:00:13: a7:87:75:8b:6e:a7:f0:ef:9f:3f:0d:5f:fa:50:bb: e7:45:92:29:36:09:1d:2a:df:ca:33:7c:2d:9c:ae: 53:7b:c9:28:7c:20:d7:c3:77:da:86:fa:c0:54:c4: 1b:f5:70:fb:a8:f6:91:98:74:fd:42:5a:2d:a6:0c: b1:56:a7:48:be:f8:ae:1a:20:cf:28:cf:ae:35:58: af:87:85:7f:c1:88:1a:1b:24:04:c6:29:a5:4a:65: 3b:28:f4:0e:94:67:39:15:37:c3:4a:10:22:7b:dc: ab:20:d4:ee:55:5e:44:38:0d:80:83:6a:99:19:4b: 11:51:1e:b2:6f:f8:8b:3f:b6:d0:89:21:ae:0d:b0: ca:4d:ba:73:d8:9f:75:da:47:09:ed:22:a5:b9:7d: 95:5e:44:16:21:58:44:5f:94:87:f6:a0:92:29:ed: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4D:29:6A:20:21:20:68:62:42:78:36:54:50:6A:90:78:DD:0F:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0/91c5b4e2-90f4-4fa9-af65-d33ec54223d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 192.160.0.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394394 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:67:d5:25:b1:e8:0f:5b:ae:74:0c:25:56:c5:5e:f3:d6:d9: 2e:8c:3c:05:69:21:2d:86:15:72:4d:f2:92:3d:88:a6:b3:ee: 78:1f:94:f1:a9:8e:f1:b4:bc:9e:f6:4e:44:c5:50:e7:87:dd: cd:bb:96:24:b2:3d:2a:a1:66:f3:ef:ca:59:19:61:0b:83:f2: 70:a8:72:cf:3e:23:3a:84:9b:a5:36:f9:cd:7b:e3:2c:e1:de: 77:94:25:3f:18:72:7c:52:ce:99:f0:fc:85:43:46:40:83:dc: 89:18:64:55:9a:2b:56:6b:08:f8:b1:d0:52:03:2f:ad:8a:68: 2c:01:19:14:3e:61:65:57:ed:eb:c7:f9:0b:13:f5:5a:bc:21: fc:aa:35:89:78:9f:0f:f7:bf:43:9d:83:69:f5:ab:12:c7:72: 48:99:65:63:80:fa:1b:02:8c:2b:ad:08:44:75:6e:0f:a7:8f: 97:e0:01:9e:3d:b3:6b:08:f9:ed:35:fe:63:a5:f6:90:a4:3c: 4b:82:10:a4:88:50:e3:e9:2e:13:fa:fe:c7:79:be:b7:d4:44: 9f:20:77:59:b8:14:8a:5d:2c:fa:b4:a1:8d:88:e3:30:c4:da: 47:89:36:eb:ca:d7:71:38:80:a3:1a:3d:e0:37:19:8a:08:50: 44:24:fd:1a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE96oNFP7VLicPk9/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMjE1NDgwNloXDTI5MDExNDE2NDgwNlowLzEtMCsGA1UEAxMk OTFjNWI0ZTItOTBmNC00ZmE5LWFmNjUtZDMzZWM1NDIyM2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTeSeoHfF6e2dkK6Ovi2ouAcN3GgcGCWqBkt tLRpiTRGC6KMT22nfc8QnD+jBLSDV8MuIG20Gq3r2ccHFD5Psh0FQcOQ3Ld4wfGE 8TvIFXHBtjLy3Le1ABOnh3WLbqfw758/DV/6ULvnRZIpNgkdKt/KM3wtnK5Te8ko fCDXw3fahvrAVMQb9XD7qPaRmHT9QlotpgyxVqdIvviuGiDPKM+uNVivh4V/wYga GyQEximlSmU7KPQOlGc5FTfDShAie9yrINTuVV5EOA2Ag2qZGUsRUR6yb/iLP7bQ iSGuDbDKTbpz2J912kcJ7SKluX2VXkQWIVhEX5SH9qCSKe3ZPQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFHVNKWogISBoYkJ4NlRQapB43Q8OMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85 MWM1YjRlMi05MGY0LTRmYTktYWY2NS1kMzNlYzU0MjIzZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzkxYzViNGUyLTkwZjQtNGZhOS1h ZjY1LWQzM2VjNTQyMjNkMC85MWM1YjRlMi05MGY0LTRmYTktYWY2NS1kMzNlYzU0 MjIzZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAoAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgSaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABdn1SWx6A9brnQMJVbFXvPW2S6MPAVpIS2GFXJN8pI9iKaz 7ngflPGpjvG0vJ72TkTFUOeH3c27liSyPSqhZvPvylkZYQuD8nCocs8+IzqEm6U2 +c174yzh3neUJT8YcnxSzpnw/IVDRkCD3IkYZFWaK1ZrCPix0FIDL62KaCwBGRQ+ YWVX7evH+QsT9Vq8IfyqNYl4nw/3v0Odg2n1qxLHckiZZWOA+hsCjCutCER1bg+n j5fgAZ49s2sI+e01/mOl9pCkPEuCEKSIUOPpLhP6/sd5vrfURJ8gd1m4FIpdLPq0 oY2I4zDE2keJNuvK13E4gKMaPeA3GYoIUEQk/Ro= -----END CERTIFICATE-----Generated at Sun Nov 1 12:36:52 2026 by rpki-client