$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d9198350-631f-46ab-8b5f-e4e1894bc8ae.cer File: d9198350-631f-46ab-8b5f-e4e1894bc8ae.cer (raw, json) Hash identifier: nnxyvWBBGh26zKm7GxjCnh8z/1iMGBUrHz04QEqrsUs= Subject key identifier: 49:4A:D9:78:2B:FD:67:09:6B:CD:AF:DD:16:A6:29:B5:06:5E:50:53 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6F231302B0CE1BE1C0EE0700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d9198350-631f-46ab-8b5f-e4e1894bc8ae/d9198350-631f-46ab-8b5f-e4e1894bc8ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d9198350-631f-46ab-8b5f-e4e1894bc8ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 Oct 2026 13:00:51 +0000 Certificate not after: Wed 10 Jan 2029 14:00:51 +0000 Subordinate resources: AS: 19398 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:13:02:b0:ce:1b:e1:c0:ee:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 8 13:00:51 2026 GMT Not After : Jan 10 14:00:51 2029 GMT Subject: CN=d9198350-631f-46ab-8b5f-e4e1894bc8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:62:3d:60:33:24:aa:8d:ff:85:3d:78:55:5d: da:27:5f:da:13:6c:2b:9e:f2:7d:f0:ca:00:08:fb: 64:d5:9a:30:ca:da:e8:4c:4d:4d:f6:a1:14:5f:47: 14:6b:5d:91:f0:0b:c8:fe:fc:f9:5f:c2:43:c5:79: fb:b1:f6:be:88:08:26:f4:ae:1f:73:70:d6:f7:65: c0:a1:ad:f8:41:bc:10:3c:e3:45:9d:d0:24:b3:2e: 73:62:80:58:94:be:00:dd:19:50:53:57:6a:48:af: ea:7d:06:60:c8:8c:df:2c:18:d6:91:5e:21:b5:9b: d1:e2:32:81:7b:81:8e:9d:2f:6e:ce:e3:b0:44:7d: 62:39:ff:ef:11:4d:ed:57:bc:8d:7b:f2:75:a9:2e: bb:3f:87:04:cc:5b:af:1c:aa:8f:1b:f7:90:af:b1: 6e:63:94:db:bf:2f:95:2b:ff:cc:1a:80:15:77:4b: 20:88:40:a3:c2:be:16:1c:be:d7:4a:3a:9e:f4:b9: 43:2f:ba:52:cb:a6:8b:4e:5b:28:45:b4:eb:0e:22: 23:06:9a:44:11:bf:ab:8e:64:b4:45:16:bc:81:de: 07:23:5d:26:34:75:77:84:12:db:1d:50:81:38:bb: ea:8f:bc:e9:9a:ee:26:96:79:52:d0:1a:e2:1f:97: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4A:D9:78:2B:FD:67:09:6B:CD:AF:DD:16:A6:29:B5:06:5E:50:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d9198350-631f-46ab-8b5f-e4e1894bc8ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d9198350-631f-46ab-8b5f-e4e1894bc8ae/d9198350-631f-46ab-8b5f-e4e1894bc8ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 19398 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d7:39:25:11:f3:19:0d:0c:78:13:0a:e2:bf:5f:07:cb:64: 45:ff:74:be:32:33:c8:28:3b:c7:99:b4:80:78:62:ce:be:9e: ef:49:6a:51:31:73:89:da:6e:43:e7:db:89:3f:51:ce:cf:0d: 53:29:41:b3:d2:ca:7a:1d:96:06:8c:41:d4:81:92:8f:5f:b5: 77:d6:b4:4c:ab:26:40:47:0c:ab:7b:a6:c4:31:1b:2b:f0:62: ce:0b:8a:f3:93:88:ea:29:fe:e2:a7:27:77:95:01:30:b9:e5: 67:aa:53:bd:24:74:02:3c:fb:09:10:7e:10:84:2a:16:a4:f4: 77:4d:ca:07:da:91:6d:7e:9b:3f:35:95:22:57:a3:2d:59:6b: e1:75:ae:e3:0b:3c:73:8d:f8:39:68:ce:79:d2:42:67:77:32: bb:5f:1d:58:bb:41:6d:6a:dd:23:48:9f:0a:e0:23:1f:e3:6b: 4e:e1:dd:29:df:b2:fe:49:00:76:01:ee:3b:86:8f:9f:81:fe: 08:61:22:6b:3e:4c:c1:42:83:82:90:ba:a7:ee:6b:01:f4:58: 26:97:7d:80:de:5b:7c:e3:27:f3:4a:0c:f2:24:19:6f:37:e7: dc:b5:3d:0b:29:63:88:c1:04:13:44:f5:0c:48:83:d4:82:87: 51:34:d1:ea -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE9vIxMCsM4b4cDuBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwODEzMDA1MVoXDTI5MDExMDE0MDA1MVowLzEtMCsGA1UEAxMk ZDkxOTgzNTAtNjMxZi00NmFiLThiNWYtZTRlMTg5NGJjOGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGI9YDMkqo3/hT14VV3aJ1/aE2wrnvJ98MoA CPtk1ZowytroTE1N9qEUX0cUa12R8AvI/vz5X8JDxXn7sfa+iAgm9K4fc3DW92XA oa34QbwQPONFndAksy5zYoBYlL4A3RlQU1dqSK/qfQZgyIzfLBjWkV4htZvR4jKB e4GOnS9uzuOwRH1iOf/vEU3tV7yNe/J1qS67P4cEzFuvHKqPG/eQr7FuY5Tbvy+V K//MGoAVd0sgiECjwr4WHL7XSjqe9LlDL7pSy6aLTlsoRbTrDiIjBppEEb+rjmS0 RRa8gd4HI10mNHV3hBLbHVCBOLvqj7zpmu4mlnlS0BriH5dEbwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFElK2Xgr/WcJa82v3RamKbUGXlBTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9k OTE5ODM1MC02MzFmLTQ2YWItOGI1Zi1lNGUxODk0YmM4YWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2Q5MTk4MzUwLTYzMWYtNDZhYi04 YjVmLWU0ZTE4OTRiYzhhZS9kOTE5ODM1MC02MzFmLTQ2YWItOGI1Zi1lNGUxODk0 YmM4YWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICS8YwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAtc5JRHzGQ0MeBMK4r9fB8tkRf90 vjIzyCg7x5m0gHhizr6e70lqUTFzidpuQ+fbiT9Rzs8NUylBs9LKeh2WBoxB1IGS j1+1d9a0TKsmQEcMq3umxDEbK/BizguK85OI6in+4qcnd5UBMLnlZ6pTvSR0Ajz7 CRB+EIQqFqT0d03KB9qRbX6bPzWVIlejLVlr4XWu4ws8c434OWjOedJCZ3cyu18d WLtBbWrdI0ifCuAjH+NrTuHdKd+y/kkAdgHuO4aPn4H+CGEiaz5MwUKDgpC6p+5r AfRYJpd9gN5bfOMn80oM8iQZbzfn3LU9CyljiMEEE0T1DEiD1IKHUTTR6g== -----END CERTIFICATE-----Generated at Sun Nov 1 08:27:49 2026 by rpki-client