$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fab4fc0a-7151-4eb5-a165-f3f30a14843b.cer File: fab4fc0a-7151-4eb5-a165-f3f30a14843b.cer (raw, json) Hash identifier: hus7Vf5jsKkvUDU/KC2zadH3onUgFfhWhKArvSRB0nM= Subject key identifier: 51:24:DF:96:B6:09:68:98:96:7F:40:6E:DF:FE:88:B9:34:DF:25:A6 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F671B4FB3034F01465C4FB520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fab4fc0a-7151-4eb5-a165-f3f30a14843b/fab4fc0a-7151-4eb5-a165-f3f30a14843b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fab4fc0a-7151-4eb5-a165-f3f30a14843b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 15:58:44 +0000 Certificate not after: Sun 07 Jan 2029 16:58:44 +0000 Subordinate resources: AS: 20201 IP: 199.15.96.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:1b:4f:b3:03:4f:01:46:5c:4f:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 5 15:58:44 2026 GMT Not After : Jan 7 16:58:44 2029 GMT Subject: CN=fab4fc0a-7151-4eb5-a165-f3f30a14843b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:25:eb:95:8c:dc:fd:13:4d:db:a0:93:5a: da:32:0f:18:6b:98:6b:06:fc:e5:d4:12:f3:f7:74: 7c:67:63:84:d9:f5:b0:fa:6e:54:b5:4f:ef:3e:6b: 63:4a:69:b8:c6:b5:7e:5e:15:53:96:f1:a3:6f:b0: 9f:42:7a:39:43:cc:f1:16:2b:95:59:f2:08:d5:0a: 99:41:b0:c8:2b:3f:fe:d9:f4:98:eb:8c:7f:99:f7: f1:a4:01:ae:c3:3f:5e:86:60:ac:4f:6a:1c:29:23: 3e:cf:f8:5c:0d:ed:76:2a:7d:db:d6:a6:ae:49:6e: 0d:0b:8a:4f:5c:f3:6c:b7:26:03:aa:46:96:e6:f8: 79:d5:89:5e:0b:83:4b:da:7d:d0:0b:8e:f9:2b:a1: 25:14:29:38:36:8e:6d:bb:77:1a:de:25:19:46:0b: d1:3b:ed:cb:c4:31:61:7a:99:ed:8f:14:47:8e:cd: 10:96:07:74:ea:94:03:f9:01:15:20:11:cd:92:31: a8:03:c7:83:9e:5b:55:3d:b3:31:d7:26:00:d7:54: 6c:82:b4:5b:87:90:ff:1b:4b:84:af:00:b4:36:06: a1:52:b0:a6:d0:4c:6f:05:fc:12:19:3e:13:98:62: 78:b0:3a:e4:6d:d2:18:74:9a:57:be:dd:84:31:f5: 87:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:24:DF:96:B6:09:68:98:96:7F:40:6E:DF:FE:88:B9:34:DF:25:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fab4fc0a-7151-4eb5-a165-f3f30a14843b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fab4fc0a-7151-4eb5-a165-f3f30a14843b/fab4fc0a-7151-4eb5-a165-f3f30a14843b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 199.15.96.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20201 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:5d:bd:79:3f:1f:8c:49:17:d8:3f:54:11:f5:00:11:c9:2a: eb:4b:5b:35:27:54:60:59:d8:33:34:f5:74:8b:95:70:e7:b6: 9c:35:4d:9b:f9:6d:e6:52:7f:08:b3:e0:bb:51:9f:31:da:94: ab:df:40:dc:56:86:3b:b8:a9:d2:2c:e2:13:1a:79:ef:df:6c: 80:ce:f1:8e:b5:eb:86:28:29:22:07:64:bb:77:0c:f7:e6:31: 17:36:b5:2b:1d:98:97:66:3a:f3:36:5d:1b:f3:61:75:bf:d8: 9a:f8:20:10:78:2d:44:a1:91:d4:d3:fa:8a:47:91:21:c9:dc: 7b:16:0b:12:e7:51:bd:0d:22:4a:39:8a:b6:ed:6b:1d:ba:58: 2c:58:c1:7a:8f:85:ea:f0:8f:78:f8:1c:6b:d8:11:5a:30:09: 65:e2:10:22:94:b6:70:47:6e:c3:bd:35:09:66:52:aa:7d:ed: 54:ed:5e:aa:0f:07:41:53:ca:8d:a2:6a:b3:96:27:ab:89:f7: e5:72:e6:5a:a7:3c:87:ea:ff:29:cf:07:c9:41:dc:79:8b:f2: ad:78:30:72:de:3b:5c:1c:f7:61:17:ac:09:7d:12:2f:fd:fe: b0:17:ae:e1:0c:4b:a3:b6:bf:b8:b7:34:75:72:ab:d7:cb:bd: 31:87:d3:28 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE9nG0+zA08BRlxPtSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwNTE1NTg0NFoXDTI5MDEwNzE2NTg0NFowLzEtMCsGA1UEAxMk ZmFiNGZjMGEtNzE1MS00ZWI1LWExNjUtZjNmMzBhMTQ4NDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEcl65WM3P0TTdugk1raMg8Ya5hrBvzl1BLz 93R8Z2OE2fWw+m5UtU/vPmtjSmm4xrV+XhVTlvGjb7CfQno5Q8zxFiuVWfII1QqZ QbDIKz/+2fSY64x/mffxpAGuwz9ehmCsT2ocKSM+z/hcDe12Kn3b1qauSW4NC4pP XPNstyYDqkaW5vh51YleC4NL2n3QC475K6ElFCk4No5tu3ca3iUZRgvRO+3LxDFh epntjxRHjs0Qlgd06pQD+QEVIBHNkjGoA8eDnltVPbMx1yYA11RsgrRbh5D/G0uE rwC0NgahUrCm0ExvBfwSGT4TmGJ4sDrkbdIYdJpXvt2EMfWHJQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFFEk35a2CWiYln9Abt/+iLk03yWmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9m YWI0ZmMwYS03MTUxLTRlYjUtYTE2NS1mM2YzMGExNDg0M2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2ZhYjRmYzBhLTcxNTEtNGViNS1h MTY1LWYzZjMwYTE0ODQzYi9mYWI0ZmMwYS03MTUxLTRlYjUtYTE2NS1mM2YzMGEx NDg0M2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPHD2AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC TukwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAJl29eT8fjEkX2D9UEfUAEckq60tbNSdUYFnYMzT1dIuVcOe2 nDVNm/lt5lJ/CLPgu1GfMdqUq99A3FaGO7ip0iziExp5799sgM7xjrXrhigpIgdk u3cM9+YxFza1Kx2Yl2Y68zZdG/Nhdb/YmvggEHgtRKGR1NP6ikeRIcncexYLEudR vQ0iSjmKtu1rHbpYLFjBeo+F6vCPePgca9gRWjAJZeIQIpS2cEduw701CWZSqn3t VO1eqg8HQVPKjaJqs5Ynq4n35XLmWqc8h+r/Kc8HyUHceYvyrXgwct47XBz3YRes CX0SL/3+sBeu4QxLo7a/uLc0dXKr18u9MYfTKA== -----END CERTIFICATE-----Generated at Wed Oct 21 12:09:43 2026 by rpki-client