$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04.cer File: d511ff26-c854-4c09-9ca9-d2090ae9af04.cer (raw, json) Hash identifier: R1GFVYohTWMwf5MFgMJ54q/WjFh552L7q8eYqXO5PTs= Subject key identifier: 13:71:09:6A:DD:35:11:57:DE:E1:27:3B:F6:C5:0A:29:5D:97:8F:10 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F80D199DDDD16161FF2F7E5C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04/d511ff26-c854-4c09-9ca9-d2090ae9af04.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Oct 2026 21:01:14 +0000 Certificate not after: Tue 16 Jan 2029 22:01:14 +0000 Subordinate resources: AS: 403069 IP: 192.150.114.0/24 IP: 2620:99:b000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:80:d1:99:dd:dd:16:16:1f:f2:f7:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 14 21:01:14 2026 GMT Not After : Jan 16 22:01:14 2029 GMT Subject: CN=d511ff26-c854-4c09-9ca9-d2090ae9af04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d1:93:7a:9b:29:59:5d:87:28:82:90:fe:bd: 6a:1f:e6:88:be:1d:2d:55:27:a5:5b:f7:71:e2:6e: 36:4b:20:58:65:79:51:b5:83:f6:3c:a6:01:2e:30: 84:99:b4:cb:bd:72:f0:99:25:6d:87:52:61:30:0a: 87:ef:5f:b5:a8:fa:10:4b:42:66:26:f7:95:d4:66: 73:94:7d:ac:bc:92:f5:8e:45:6d:21:99:03:fd:a2: fa:0f:d3:13:c1:84:98:7d:f6:83:95:46:bc:5c:3e: 74:cf:12:82:83:d0:ca:74:9f:a4:d7:7c:60:df:87: ba:5e:a6:ce:c2:39:42:fe:85:6e:24:1c:9e:5d:78: 31:ed:63:23:ec:27:94:82:95:93:d9:4a:1a:94:96: f8:a3:ee:97:00:9a:63:ad:69:dc:6c:8a:86:63:b9: 6b:07:af:5d:68:39:0c:d8:ee:33:46:9b:e0:a8:28: 89:80:1c:58:ad:7f:53:ad:ea:b7:58:00:24:79:4c: c7:eb:3d:80:b8:f9:6c:5d:6e:d3:6a:39:60:d9:0e: 85:0e:57:a0:a5:b7:a8:d2:8f:f3:ee:1f:9d:af:3e: 20:1d:82:f6:36:90:07:c7:c1:a6:63:d2:80:70:fa: 23:24:5d:7b:f0:7b:df:15:e6:29:02:06:80:2c:57: 02:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:71:09:6A:DD:35:11:57:DE:E1:27:3B:F6:C5:0A:29:5D:97:8F:10 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04/d511ff26-c854-4c09-9ca9-d2090ae9af04.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 192.150.114.0/24 IPv6: 2620:99:b000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403069 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:2e:78:4d:bf:dc:99:67:92:c9:3d:7e:c7:fe:ba:b4:07:ab: 24:d5:bd:cd:e0:a1:c9:05:5e:3a:3a:99:5f:cd:51:cd:4c:2d: fc:60:f8:fc:38:72:65:a0:af:25:14:dd:32:7b:d5:52:90:2c: 2a:d6:0c:c6:ae:6a:61:05:9c:f0:5c:d2:8f:42:b5:38:fe:86: dd:f6:1a:f5:f9:3d:64:93:9f:c8:68:7b:ef:06:fc:21:5d:11: f7:2b:b1:88:d0:b8:e1:47:9a:4f:95:7d:3e:9e:e9:06:3a:53: 9a:97:d3:34:73:e2:05:42:b2:a8:e4:64:8f:88:00:79:36:22: 6c:9e:f4:39:1e:0f:7d:f2:77:10:e6:47:da:2e:8d:ab:27:d2: ec:db:29:d5:af:85:4e:27:86:7b:be:41:77:ac:51:9b:bd:44: df:df:2d:71:da:b1:ac:5c:17:59:7c:cf:7a:6e:55:60:11:9d: f4:67:e1:71:f3:77:f0:79:27:62:6f:59:22:c8:42:b4:ac:94: f2:90:8c:55:b9:22:e1:9c:48:d7:63:62:2e:7a:8f:60:4b:f8: 6f:ed:67:4a:53:57:89:c0:69:b9:7d:2d:f2:72:6d:b5:52:8e: 8d:66:a2:f1:d5:9d:64:9f:c5:c3:ce:fe:0e:1f:fd:7c:61:8d: 47:a7:42:3f -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE+A0Znd3RYWH/L35cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNDIxMDExNFoXDTI5MDExNjIyMDExNFowLzEtMCsGA1UEAxMk ZDUxMWZmMjYtYzg1NC00YzA5LTljYTktZDIwOTBhZTlhZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtGTepspWV2HKIKQ/r1qH+aIvh0tVSelW/dx 4m42SyBYZXlRtYP2PKYBLjCEmbTLvXLwmSVth1JhMAqH71+1qPoQS0JmJveV1GZz lH2svJL1jkVtIZkD/aL6D9MTwYSYffaDlUa8XD50zxKCg9DKdJ+k13xg34e6XqbO wjlC/oVuJByeXXgx7WMj7CeUgpWT2UoalJb4o+6XAJpjrWncbIqGY7lrB69daDkM 2O4zRpvgqCiJgBxYrX9Treq3WAAkeUzH6z2AuPlsXW7Tajlg2Q6FDlegpbeo0o/z 7h+drz4gHYL2NpAHx8GmY9KAcPojJF178HvfFeYpAgaALFcCpwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFBNxCWrdNRFX3uEnO/bFCildl48QMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9k NTExZmYyNi1jODU0LTRjMDktOWNhOS1kMjA5MGFlOWFmMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2Q1MTFmZjI2LWM4NTQtNGMwOS05 Y2E5LWQyMDkwYWU5YWYwNC9kNTExZmYyNi1jODU0LTRjMDktOWNhOS1kMjA5MGFl OWFmMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADAlnIwDwQCAAIwCQMHACYgAJmwADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGJn0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGS54Tb/cmWeSyT1+x/66tAer JNW9zeChyQVeOjqZX81RzUwt/GD4/DhyZaCvJRTdMnvVUpAsKtYMxq5qYQWc8FzS j0K1OP6G3fYa9fk9ZJOfyGh77wb8IV0R9yuxiNC44UeaT5V9Pp7pBjpTmpfTNHPi BUKyqORkj4gAeTYibJ70OR4PffJ3EOZH2i6NqyfS7Nsp1a+FTieGe75Bd6xRm71E 398tcdqxrFwXWXzPem5VYBGd9GfhcfN38HknYm9ZIshCtKyU8pCMVbki4ZxI12Ni LnqPYEv4b+1nSlNXicBpuX0t8nJttVKOjWai8dWdZJ/Fw87+Dh/9fGGNR6dCPw== -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:39 2026 by rpki-client