$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9bf7cb1-31f1-487c-a50b-3ffde93d57e9.cer File: c9bf7cb1-31f1-487c-a50b-3ffde93d57e9.cer (raw, json) Hash identifier: niJojo2y2w6eqT9t6I2YCdDtsvrQhe32xsE35l4JfTM= Subject key identifier: 4A:39:90:D1:97:67:EA:B7:4D:B3:C3:07:DD:C4:66:6F:16:50:14:0A Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F45E8F9608AC14D4D78B315A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9bf7cb1-31f1-487c-a50b-3ffde93d57e9/c9bf7cb1-31f1-487c-a50b-3ffde93d57e9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9bf7cb1-31f1-487c-a50b-3ffde93d57e9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Sep 2026 18:35:38 +0000 Certificate not after: Tue 26 Dec 2028 19:35:38 +0000 Subordinate resources: AS: 19543 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:e8:f9:60:8a:c1:4d:4d:78:b3:15:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 23 18:35:38 2026 GMT Not After : Dec 26 19:35:38 2028 GMT Subject: CN=c9bf7cb1-31f1-487c-a50b-3ffde93d57e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:76:6f:02:82:49:24:57:66:34:70:f0:41:32: 23:9c:47:d0:b0:e1:c2:e3:1f:00:69:0d:3e:bc:81: 96:59:65:2f:e4:3c:3a:97:89:ad:ff:d8:d2:09:93: a6:56:f0:9a:33:c0:b1:ee:e3:d7:fb:ff:39:82:e5: 05:19:cf:f2:12:7f:66:34:69:47:8d:05:e8:a8:d0: 98:cf:d6:ec:5a:d0:f7:70:ba:fb:9f:1c:5e:99:95: 7e:99:4a:87:e8:fe:42:4b:cd:09:19:88:4f:f9:75: d1:8f:42:73:d5:26:c1:7f:ae:5b:ad:3e:00:30:6f: d8:8c:ec:7a:d0:10:cc:0e:e7:bf:c5:3e:25:88:71: 6e:26:ec:c8:9a:f1:5b:b7:fd:af:8e:a0:bb:d9:4d: 2f:5a:82:d4:c8:45:73:43:d6:da:15:35:44:d2:02: f6:3f:d0:29:e6:33:24:8d:5e:b5:47:c4:27:f0:7b: 6c:48:f6:2e:ab:09:32:a7:8e:af:a4:23:bd:00:43: 94:94:c4:4b:b1:7f:06:fd:4e:71:ab:80:74:c0:5d: 88:12:f5:e4:c5:24:bf:6e:e2:5f:56:26:2a:d0:bf: de:bc:12:5d:24:b8:b0:b4:32:31:79:44:ce:b0:15: 72:85:77:38:d8:4d:22:96:ce:d7:fc:e8:2d:f7:f5: de:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:39:90:D1:97:67:EA:B7:4D:B3:C3:07:DD:C4:66:6F:16:50:14:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9bf7cb1-31f1-487c-a50b-3ffde93d57e9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9bf7cb1-31f1-487c-a50b-3ffde93d57e9/c9bf7cb1-31f1-487c-a50b-3ffde93d57e9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 19543 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:2a:e5:4a:03:18:42:29:87:3c:c8:ef:2d:b9:66:b3:ec:b6: 99:4b:0b:78:92:e6:b2:db:6a:33:c6:24:df:01:9f:48:1e:5b: 0f:87:48:80:41:ec:02:9c:7c:7d:46:ea:85:6a:cb:02:39:b9: 47:a6:95:14:2c:28:45:a0:19:5c:09:ec:06:28:7b:9a:0e:dd: 17:58:c9:97:18:da:76:0a:69:24:d1:da:60:7a:a9:94:fa:36: ef:21:3a:2b:d0:f9:d8:6e:02:79:41:c2:0d:4b:dd:41:0c:0e: 42:23:f1:8c:00:0f:ad:a3:05:ec:f5:4e:1c:35:fd:5d:15:58: 23:fb:24:81:a5:c6:21:04:12:fd:b3:9e:95:3b:09:df:c7:02: 83:06:9e:b8:ef:c8:d5:86:86:a3:a4:6c:f0:e6:62:0b:b1:7a: 05:79:f0:dc:2b:eb:d9:6e:47:84:04:46:38:ed:b6:8c:22:75: 48:cf:a6:44:00:c2:dc:54:58:2d:15:fa:a7:cf:f3:2c:00:9a: e4:7c:0f:de:3c:a0:7d:47:ae:a6:29:6f:3c:ee:c7:e0:27:73: d8:bf:2d:39:14:f2:9d:80:83:72:b2:a5:a4:a2:a0:54:ab:46: 37:af:74:76:09:21:c5:34:81:22:b5:5a:d2:b2:bd:5b:16:ff: a9:a6:d8:1d -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE9F6PlgisFNTXizFaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMzE4MzUzOFoXDTI4MTIyNjE5MzUzOFowLzEtMCsGA1UEAxMk YzliZjdjYjEtMzFmMS00ODdjLWE1MGItM2ZmZGU5M2Q1N2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXZvAoJJJFdmNHDwQTIjnEfQsOHC4x8AaQ0+ vIGWWWUv5Dw6l4mt/9jSCZOmVvCaM8Cx7uPX+/85guUFGc/yEn9mNGlHjQXoqNCY z9bsWtD3cLr7nxxemZV+mUqH6P5CS80JGYhP+XXRj0Jz1SbBf65brT4AMG/YjOx6 0BDMDue/xT4liHFuJuzImvFbt/2vjqC72U0vWoLUyEVzQ9baFTVE0gL2P9Ap5jMk jV61R8Qn8HtsSPYuqwkyp46vpCO9AEOUlMRLsX8G/U5xq4B0wF2IEvXkxSS/buJf ViYq0L/evBJdJLiwtDIxeUTOsBVyhXc42E0ils7X/Ogt9/Xe3wIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFEo5kNGXZ+q3TbPDB93EZm8WUBQKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9j OWJmN2NiMS0zMWYxLTQ4N2MtYTUwYi0zZmZkZTkzZDU3ZTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2M5YmY3Y2IxLTMxZjEtNDg3Yy1h NTBiLTNmZmRlOTNkNTdlOS9jOWJmN2NiMS0zMWYxLTQ4N2MtYTUwYi0zZmZkZTkz ZDU3ZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICTFcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAByrlSgMYQimHPMjvLblms+y2mUsL eJLmsttqM8Yk3wGfSB5bD4dIgEHsApx8fUbqhWrLAjm5R6aVFCwoRaAZXAnsBih7 mg7dF1jJlxjadgppJNHaYHqplPo27yE6K9D52G4CeUHCDUvdQQwOQiPxjAAPraMF 7PVOHDX9XRVYI/skgaXGIQQS/bOelTsJ38cCgwaeuO/I1YaGo6Rs8OZiC7F6BXnw 3Cvr2W5HhARGOO22jCJ1SM+mRADC3FRYLRX6p8/zLACa5HwP3jygfUeupilvPO7H 4Cdz2L8tORTynYCDcrKlpKKgVKtGN690dgkhxTSBIrVa0rK9Wxb/qabYHQ== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:30 2026 by rpki-client