$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b224518b-921d-4511-8378-b45cf2cfa19d.cer File: b224518b-921d-4511-8378-b45cf2cfa19d.cer (raw, json) Hash identifier: hQVL7Pq2vc91+hCKRSUg7ufNkNEPHqAxNLX+M9wN/eg= Subject key identifier: 38:33:CC:48:24:DA:5A:F7:DF:8D:3B:3A:F1:B6:05:1F:00:99:8F:47 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584FA27FFA7B651E76447ECCF200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b224518b-921d-4511-8378-b45cf2cfa19d/b224518b-921d-4511-8378-b45cf2cfa19d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b224518b-921d-4511-8378-b45cf2cfa19d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Oct 2026 22:34:16 +0000 Certificate not after: Sun 28 Jan 2029 23:34:16 +0000 Subordinate resources: AS: 19179 IP: 142.202.21.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:7f:fa:7b:65:1e:76:44:7e:cc:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 26 22:34:16 2026 GMT Not After : Jan 28 23:34:16 2029 GMT Subject: CN=b224518b-921d-4511-8378-b45cf2cfa19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7d:74:d1:4b:90:14:df:40:21:b1:c2:5f:90: 29:11:11:05:22:21:e7:8d:55:13:e1:2e:3c:4b:85: d9:d8:84:c8:62:cc:0b:5b:2a:fb:2c:ed:22:af:4b: 83:9a:f0:6f:2a:b9:4d:6b:ba:1b:a1:82:96:82:1c: d0:52:b2:f5:52:c6:8e:af:2b:7c:53:81:fb:1a:ab: 1f:4d:ac:b4:32:77:9f:bc:9f:07:18:5a:5a:15:2e: 95:30:a8:8f:de:59:b5:f0:f2:63:9b:c1:da:8c:57: 96:8b:d9:20:ca:1b:90:97:a5:d2:60:5e:99:3b:85: 74:84:2f:d3:f1:0d:f1:2f:71:72:a8:7c:e3:62:62: 59:70:0e:d5:90:75:82:2c:9b:21:1c:05:ed:f3:ee: cf:54:41:5d:f7:e5:db:7e:c2:67:25:c3:22:c5:4f: 82:e8:e9:68:7a:8a:0a:3e:84:65:ad:2c:20:38:5c: f3:ff:fe:38:17:8e:b9:8e:8f:99:85:37:e9:71:cc: a7:25:02:1f:8f:0f:a5:a5:bb:0a:f3:1d:04:06:68: 2f:d0:22:f3:f7:78:58:89:a6:9f:1b:20:69:2b:32: f3:6e:11:cc:60:0a:5c:a2:3a:86:1c:52:08:e0:0b: 7b:23:8f:df:7e:d3:31:24:cb:07:78:1d:65:d4:a7: b1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:33:CC:48:24:DA:5A:F7:DF:8D:3B:3A:F1:B6:05:1F:00:99:8F:47 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b224518b-921d-4511-8378-b45cf2cfa19d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b224518b-921d-4511-8378-b45cf2cfa19d/b224518b-921d-4511-8378-b45cf2cfa19d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 142.202.21.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19179 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:5a:7a:f1:38:50:ff:83:7e:51:cc:17:e0:46:4f:6d:25:a8: 94:c8:f7:ec:95:71:81:fe:55:ed:bf:83:2c:3a:d0:55:fa:6c: e0:23:29:75:46:31:3e:8f:24:6a:3f:59:0d:47:fc:48:c7:e3: d0:c6:58:43:f4:32:06:66:17:66:8c:a6:a7:75:07:36:9f:a4: e9:97:a8:51:eb:11:49:c5:22:10:8a:fa:d2:3e:5e:44:19:d0: 36:73:f6:9a:bb:79:fd:b4:1f:43:dc:b3:03:97:e1:e5:1b:d8: db:d8:22:ee:86:b8:9e:dd:b9:18:f0:98:34:b6:75:ad:94:40: d3:79:22:83:0f:40:6b:d7:c9:61:89:91:38:46:35:45:e1:b0: 89:0a:04:d8:a5:98:9e:42:f5:a3:f4:c2:43:6f:94:c5:5c:49: ce:65:fd:e1:19:bc:4e:04:35:24:4f:b8:23:2f:b8:ac:58:4c: a1:b4:dd:5a:cb:cc:50:dd:d4:35:5d:96:68:b4:12:7a:0b:cc: 07:9d:68:f7:89:94:70:ac:ef:d5:b4:b4:46:fe:d6:11:47:e8: b8:29:14:f7:69:c3:8a:8c:0a:5c:4a:28:7d:97:f1:83:e2:57: f6:fe:3f:3a:c3:f9:68:ed:22:3e:0f:18:7f:0f:ae:09:4c:aa: 49:be:c2:88 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE+if/p7ZR52RH7M8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyNjIyMzQxNloXDTI5MDEyODIzMzQxNlowLzEtMCsGA1UEAxMk YjIyNDUxOGItOTIxZC00NTExLTgzNzgtYjQ1Y2YyY2ZhMTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn100UuQFN9AIbHCX5ApEREFIiHnjVUT4S48 S4XZ2ITIYswLWyr7LO0ir0uDmvBvKrlNa7oboYKWghzQUrL1UsaOryt8U4H7Gqsf Tay0MnefvJ8HGFpaFS6VMKiP3lm18PJjm8HajFeWi9kgyhuQl6XSYF6ZO4V0hC/T 8Q3xL3FyqHzjYmJZcA7VkHWCLJshHAXt8+7PVEFd9+XbfsJnJcMixU+C6OloeooK PoRlrSwgOFzz//44F465jo+ZhTfpccynJQIfjw+lpbsK8x0EBmgv0CLz93hYiaaf GyBpKzLzbhHMYApcojqGHFII4At7I4/fftMxJMsHeB1l1KexyQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFDgzzEgk2lr33407OvG2BR8AmY9HMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i MjI0NTE4Yi05MjFkLTQ1MTEtODM3OC1iNDVjZjJjZmExOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2IyMjQ1MThiLTkyMWQtNDUxMS04 Mzc4LWI0NWNmMmNmYTE5ZC9iMjI0NTE4Yi05MjFkLTQ1MTEtODM3OC1iNDVjZjJj ZmExOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACOyhUwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC SuswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAMlp68ThQ/4N+UcwX4EZPbSWolMj37JVxgf5V7b+DLDrQVfps 4CMpdUYxPo8kaj9ZDUf8SMfj0MZYQ/QyBmYXZoymp3UHNp+k6ZeoUesRScUiEIr6 0j5eRBnQNnP2mrt5/bQfQ9yzA5fh5RvY29gi7oa4nt25GPCYNLZ1rZRA03kigw9A a9fJYYmROEY1ReGwiQoE2KWYnkL1o/TCQ2+UxVxJzmX94Rm8TgQ1JE+4Iy+4rFhM obTdWsvMUN3UNV2WaLQSegvMB51o94mUcKzv1bS0Rv7WEUfouCkU92nDiowKXEoo fZfxg+JX9v4/OsP5aO0iPg8Yfw+uCUyqSb7CiA== -----END CERTIFICATE-----Generated at Sun Nov 1 14:44:38 2026 by rpki-client