$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b19c45b8-a9d5-49bb-8979-f46879e8dbf7.cer File: b19c45b8-a9d5-49bb-8979-f46879e8dbf7.cer (raw, json) Hash identifier: 8E/lpFtr5sq13ngVX8yNyFdReHjz5rmYEaZn1gJyEtQ= Subject key identifier: B0:BF:65:82:E9:1F:DA:C0:80:F5:AA:20:A7:7A:E3:45:4F:10:83:88 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F8369CF175B0916388443C680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b19c45b8-a9d5-49bb-8979-f46879e8dbf7/b19c45b8-a9d5-49bb-8979-f46879e8dbf7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b19c45b8-a9d5-49bb-8979-f46879e8dbf7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 Oct 2026 19:19:32 +0000 Certificate not after: Wed 17 Jan 2029 20:19:32 +0000 Subordinate resources: IP: 207.188.16.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:83:69:cf:17:5b:09:16:38:84:43:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 15 19:19:32 2026 GMT Not After : Jan 17 20:19:32 2029 GMT Subject: CN=b19c45b8-a9d5-49bb-8979-f46879e8dbf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:9f:c0:0c:32:50:bf:9e:77:00:d9:aa:52: 71:b6:db:fc:61:e8:a4:71:8e:18:1c:40:1a:43:a2: 2a:52:18:fa:25:a4:91:f2:c4:1e:cb:f4:c3:28:f4: 4a:2b:d2:7f:ed:fe:33:32:3b:38:82:97:fd:e2:92: 53:8b:40:be:5b:6f:da:45:71:a4:d4:e2:3c:2a:da: a5:3a:35:0d:d8:fd:23:ce:81:45:a1:cb:b6:89:33: c3:6f:00:7e:fa:61:d1:e7:13:45:63:1c:58:04:fd: ae:7b:4d:db:9b:88:38:24:4a:31:ae:91:d6:dd:9f: c7:21:59:29:40:e5:b0:f0:ac:6a:a3:68:57:8c:e2: fd:0d:d3:41:9a:72:e5:10:a8:1e:5b:8b:00:f5:55: f9:94:28:7d:86:d8:a0:83:cf:c1:60:a0:98:8d:5a: c4:86:78:7c:14:77:bd:44:7a:ad:8c:95:2e:ee:49: 73:00:1d:d9:81:94:3c:92:ff:36:ad:e5:79:02:b5: 12:c2:6b:2c:a7:07:61:ca:7e:4e:36:cd:e4:66:14: 30:73:89:c6:66:01:61:29:d9:d8:4d:02:94:c4:e4: 86:58:ef:32:62:3b:77:96:03:ca:97:fe:9d:ee:e7: 59:28:d8:87:5f:c0:8f:fc:1d:cd:52:dc:f6:5b:06: 21:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BF:65:82:E9:1F:DA:C0:80:F5:AA:20:A7:7A:E3:45:4F:10:83:88 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b19c45b8-a9d5-49bb-8979-f46879e8dbf7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b19c45b8-a9d5-49bb-8979-f46879e8dbf7/b19c45b8-a9d5-49bb-8979-f46879e8dbf7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 207.188.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c5:b1:92:b7:93:6a:b6:fb:8e:41:ab:2b:a9:ce:50:c4:04: 10:9b:ab:02:83:96:b3:99:2d:fb:e1:89:dc:60:32:c7:29:98: a7:1f:92:29:45:66:23:b0:da:24:cd:7f:4b:7c:bc:6c:b7:ed: ce:15:79:d9:eb:52:08:83:ad:82:78:09:31:63:4d:bf:64:40: a9:08:99:78:a2:46:d1:97:c6:0a:15:27:63:2e:20:af:58:26: bc:9e:e8:84:13:8e:75:02:0b:4a:c4:40:16:a9:8d:c4:35:54: 4d:57:19:e5:30:c0:d4:13:48:94:f6:bd:f9:26:fb:ce:ec:8b: 50:62:ed:64:9e:03:a8:63:86:63:b0:e1:54:a3:4a:a7:68:52: 8f:d6:55:9f:2e:f7:c1:bb:49:c6:68:6c:12:2d:85:8a:13:26: 7e:09:de:d0:9a:0c:5a:9a:26:5e:bc:2c:b5:1a:57:3b:df:40: 76:04:7e:0e:d6:80:e7:8a:fb:1c:4e:24:f5:01:b7:13:3c:66: 87:87:2f:00:86:b5:e9:6d:99:14:b4:a8:1b:01:d3:84:4c:82: e4:e7:c5:60:bc:ec:f6:98:0e:6c:bf:94:35:1b:46:a3:e9:bb: c0:20:3d:3b:01:cf:03:40:ef:4e:56:fe:c2:ca:24:41:66:22: 23:3e:2a:4f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+Dac8XWwkWOIRDxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNTE5MTkzMloXDTI5MDExNzIwMTkzMlowLzEtMCsGA1UEAxMk YjE5YzQ1YjgtYTlkNS00OWJiLTg5NzktZjQ2ODc5ZThkYmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU2fwAwyUL+edwDZqlJxttv8YeikcY4YHEAa Q6IqUhj6JaSR8sQey/TDKPRKK9J/7f4zMjs4gpf94pJTi0C+W2/aRXGk1OI8Ktql OjUN2P0jzoFFocu2iTPDbwB++mHR5xNFYxxYBP2ue03bm4g4JEoxrpHW3Z/HIVkp QOWw8Kxqo2hXjOL9DdNBmnLlEKgeW4sA9VX5lCh9htigg8/BYKCYjVrEhnh8FHe9 RHqtjJUu7klzAB3ZgZQ8kv82reV5ArUSwmsspwdhyn5ONs3kZhQwc4nGZgFhKdnY TQKUxOSGWO8yYjt3lgPKl/6d7udZKNiHX8CP/B3NUtz2WwYhmwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLC/ZYLpH9rAgPWqIKd640VPEIOIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i MTljNDViOC1hOWQ1LTQ5YmItODk3OS1mNDY4NzllOGRiZjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2IxOWM0NWI4LWE5ZDUtNDliYi04 OTc5LWY0Njg3OWU4ZGJmNy9iMTljNDViOC1hOWQ1LTQ5YmItODk3OS1mNDY4Nzll OGRiZjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADPvBAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAX8WxkreTarb7jkGrK6nO UMQEEJurAoOWs5kt++GJ3GAyxymYpx+SKUVmI7DaJM1/S3y8bLftzhV52etSCIOt gngJMWNNv2RAqQiZeKJG0ZfGChUnYy4gr1gmvJ7ohBOOdQILSsRAFqmNxDVUTVcZ 5TDA1BNIlPa9+Sb7zuyLUGLtZJ4DqGOGY7DhVKNKp2hSj9ZVny73wbtJxmhsEi2F ihMmfgne0JoMWpomXrwstRpXO99AdgR+DtaA54r7HE4k9QG3Ezxmh4cvAIa16W2Z FLSoGwHThEyC5OfFYLzs9pgObL+UNRtGo+m7wCA9OwHPA0DvTlb+wsokQWYiIz4q Tw== -----END CERTIFICATE-----Generated at Fri Oct 23 15:32:27 2026 by rpki-client