$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9b2ce6d6-b7a9-4ea1-be05-1f159593c99a.cer File: 9b2ce6d6-b7a9-4ea1-be05-1f159593c99a.cer (raw, json) Hash identifier: 3WSKSIR+UY5691piWdP4GYyF8REYKhClPJU8zEGU3Xg= Subject key identifier: E4:BC:15:6E:77:21:8E:E0:0E:FC:40:F2:3D:86:BF:50:68:3A:2B:02 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F72308D30882918761C1E3220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9b2ce6d6-b7a9-4ea1-be05-1f159593c99a/9b2ce6d6-b7a9-4ea1-be05-1f159593c99a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9b2ce6d6-b7a9-4ea1-be05-1f159593c99a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Oct 2026 15:15:26 +0000 Certificate not after: Thu 11 Jan 2029 16:15:26 +0000 Subordinate resources: AS: 11891 IP: 198.134.189.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:30:8d:30:88:29:18:76:1c:1e:32:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 9 15:15:26 2026 GMT Not After : Jan 11 16:15:26 2029 GMT Subject: CN=9b2ce6d6-b7a9-4ea1-be05-1f159593c99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dd:6d:29:4b:ab:7c:f5:d4:0e:e4:3d:d2:9e: 37:73:93:f8:25:69:92:7f:4e:97:cc:e1:fd:38:45: 59:11:21:43:3f:21:17:8b:67:56:1c:d9:c5:82:6a: 23:d6:9f:f1:74:63:f2:cc:46:1c:34:97:98:a5:bf: e3:95:62:39:1f:c9:55:b0:2e:f9:89:e4:b6:1a:0d: d2:8c:23:c1:59:42:ba:f1:bf:2d:9d:e1:ab:e9:44: 0c:43:07:c7:62:ba:9c:fb:49:c0:75:b0:81:c5:39: f7:aa:9e:b4:e3:e2:16:02:3c:00:a6:e8:9d:87:47: 6a:0c:02:19:f2:33:72:49:3d:b3:64:ff:8f:61:c3: 95:ee:d9:ce:48:04:32:11:04:71:91:8f:aa:a1:57: 40:e6:a5:70:d1:50:22:66:34:98:f3:20:2c:69:1c: 04:38:d7:68:95:9a:93:00:53:82:b5:1e:b4:fc:46: 05:40:90:41:51:97:7c:b1:78:89:df:8d:c1:03:3f: dd:a2:c0:6a:49:92:b2:cf:39:d8:b8:de:42:05:d4: 60:3e:7f:92:62:fd:2a:ca:0f:ff:9a:4f:30:f0:84: 1c:5c:88:61:87:f4:8e:24:cd:59:1f:3f:1b:46:2f: 19:37:78:b3:a5:56:7e:21:87:77:d9:8a:b9:3a:06: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BC:15:6E:77:21:8E:E0:0E:FC:40:F2:3D:86:BF:50:68:3A:2B:02 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9b2ce6d6-b7a9-4ea1-be05-1f159593c99a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9b2ce6d6-b7a9-4ea1-be05-1f159593c99a/9b2ce6d6-b7a9-4ea1-be05-1f159593c99a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.134.189.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11891 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:36:9f:95:38:43:91:e4:c4:6c:8e:30:26:6e:e3:62:26:c7: 55:08:c1:b8:8c:af:bc:6a:35:de:43:da:0b:90:18:76:85:4f: 94:73:80:d1:02:c1:4d:ff:5a:03:97:9a:c2:10:0e:94:ee:89: b7:9e:d3:49:be:44:b4:0e:f8:04:b8:2c:d6:9a:9d:90:a4:78: fb:67:5a:de:a6:a6:3f:72:9e:bf:e0:4e:b3:91:10:99:d9:4c: 11:75:2e:b4:a9:39:ec:11:74:c6:8b:40:ce:66:13:74:ac:0d: 41:93:1a:97:37:0b:e3:c2:4a:21:f5:5f:51:89:ab:1a:08:fc: 98:bb:26:da:7c:d6:b1:de:41:2b:ec:01:50:c5:6a:5d:c8:00: df:b1:3e:60:2d:22:48:86:c3:44:1b:8d:42:99:de:64:96:bb: 39:ce:2c:cd:6a:f0:cc:46:fc:42:5d:12:36:ba:8f:ce:6b:eb: 3a:a4:ff:e2:34:df:a5:9b:b2:cf:bf:fc:6a:15:9d:58:73:98: 36:10:c7:e1:ac:32:a0:0b:bf:08:c1:a2:e3:38:08:0b:6f:ba: b7:8a:58:11:38:38:aa:1f:47:85:56:09:a1:e7:4e:ac:be:92: 08:af:a8:3e:b9:69:ea:f8:10:eb:c0:17:d6:77:63:a9:62:bd: 9e:61:f5:19 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE9yMI0wiCkYdhweMiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwOTE1MTUyNloXDTI5MDExMTE2MTUyNlowLzEtMCsGA1UEAxMk OWIyY2U2ZDYtYjdhOS00ZWExLWJlMDUtMWYxNTk1OTNjOTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid1tKUurfPXUDuQ90p43c5P4JWmSf06XzOH9 OEVZESFDPyEXi2dWHNnFgmoj1p/xdGPyzEYcNJeYpb/jlWI5H8lVsC75ieS2Gg3S jCPBWUK68b8tneGr6UQMQwfHYrqc+0nAdbCBxTn3qp604+IWAjwApuidh0dqDAIZ 8jNyST2zZP+PYcOV7tnOSAQyEQRxkY+qoVdA5qVw0VAiZjSY8yAsaRwEONdolZqT AFOCtR60/EYFQJBBUZd8sXiJ343BAz/dosBqSZKyzznYuN5CBdRgPn+SYv0qyg// mk8w8IQcXIhhh/SOJM1ZHz8bRi8ZN3izpVZ+IYd32Yq5OgaYzQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFOS8FW53IY7gDvxA8j2Gv1BoOisCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85 YjJjZTZkNi1iN2E5LTRlYTEtYmUwNS0xZjE1OTU5M2M5OWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzliMmNlNmQ2LWI3YTktNGVhMS1i ZTA1LTFmMTU5NTkzYzk5YS85YjJjZTZkNi1iN2E5LTRlYTEtYmUwNS0xZjE1OTU5 M2M5OWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGhr0wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC LnMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALTaflThDkeTEbI4wJm7jYibHVQjBuIyvvGo13kPaC5AYdoVP lHOA0QLBTf9aA5eawhAOlO6Jt57TSb5EtA74BLgs1pqdkKR4+2da3qamP3Kev+BO s5EQmdlMEXUutKk57BF0xotAzmYTdKwNQZMalzcL48JKIfVfUYmrGgj8mLsm2nzW sd5BK+wBUMVqXcgA37E+YC0iSIbDRBuNQpneZJa7Oc4szWrwzEb8Ql0SNrqPzmvr OqT/4jTfpZuyz7/8ahWdWHOYNhDH4awyoAu/CMGi4zgIC2+6t4pYETg4qh9HhVYJ oedOrL6SCK+oPrlp6vgQ68AX1ndjqWK9nmH1GQ== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:17 2026 by rpki-client