$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0fca810e-c427-4e38-9c1e-fc6e907478cb.cer File: 0fca810e-c427-4e38-9c1e-fc6e907478cb.cer (raw, json) Hash identifier: ySB/Xcq+4QWSoTfmyeILxXFYTutdJcknQQ3X1Guhb20= Subject key identifier: FA:26:47:95:29:D5:C7:29:FC:F1:70:4F:9F:45:9F:9C:3C:55:1E:1A Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7B4B022924FCDD905FA6FA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0fca810e-c427-4e38-9c1e-fc6e907478cb/0fca810e-c427-4e38-9c1e-fc6e907478cb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0fca810e-c427-4e38-9c1e-fc6e907478cb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Oct 2026 21:31:01 +0000 Certificate not after: Sun 14 Jan 2029 22:31:01 +0000 Subordinate resources: AS: 15354 IP: 205.196.204.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:4b:02:29:24:fc:dd:90:5f:a6:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 12 21:31:01 2026 GMT Not After : Jan 14 22:31:01 2029 GMT Subject: CN=0fca810e-c427-4e38-9c1e-fc6e907478cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9e:22:6b:62:11:3f:9f:0a:12:d6:7a:55:a1: ba:3e:2d:15:29:88:61:92:56:5b:c2:ee:38:db:29: e1:6d:c6:cd:7b:9f:d8:9d:66:55:1f:08:f8:15:2a: c7:15:03:7e:8d:de:e6:f9:ee:c1:12:5e:63:87:b3: 8a:04:94:8e:82:95:65:86:bb:49:f8:38:dd:30:04: 07:81:2e:28:c5:ac:15:10:00:04:52:e4:0e:7e:db: 22:11:fe:33:56:7b:44:57:98:a1:87:55:59:7a:58: 7c:09:45:3b:a9:72:af:6c:a0:80:e8:94:d1:b0:ad: 2b:a1:9a:ac:d5:46:70:b6:8d:6b:d6:d3:3f:21:7c: 90:8c:44:8c:66:1e:87:ae:61:e5:08:2b:1b:de:9e: b7:69:e5:95:f3:fe:05:17:85:a7:54:08:04:95:03: 31:03:39:6a:c0:a6:ae:02:3c:c2:63:5c:1e:8d:0d: dc:a1:f9:94:f1:30:3a:c6:d1:24:71:6c:fa:e3:94: a9:3d:e6:a9:c2:04:fa:f9:61:fe:6a:95:f9:09:2c: 03:4f:ec:e3:38:61:45:43:55:75:c0:c2:4a:01:f1: 57:08:e5:f3:ab:72:9d:0d:e4:77:bc:f6:85:05:ca: c8:84:01:a4:e2:0b:ad:cc:b4:43:b7:fe:63:ff:17: 09:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:26:47:95:29:D5:C7:29:FC:F1:70:4F:9F:45:9F:9C:3C:55:1E:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0fca810e-c427-4e38-9c1e-fc6e907478cb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0fca810e-c427-4e38-9c1e-fc6e907478cb/0fca810e-c427-4e38-9c1e-fc6e907478cb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 205.196.204.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15354 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d6:83:85:30:c2:7b:07:f8:76:a1:95:2a:af:6c:a4:fa:07: 85:cc:5e:6c:e8:0e:77:11:d3:3c:7a:1a:f1:4d:c3:8a:70:2e: 7b:3c:64:1e:0e:3f:70:8a:0c:3d:47:63:0f:29:80:a7:35:42: d8:ff:f0:b7:af:44:1c:b6:52:7a:49:49:f2:1c:55:9d:ad:54: 55:8d:e7:86:02:2c:1b:b6:1c:5e:47:4d:a0:ff:08:9c:ae:b7: fc:94:dd:46:10:9c:70:92:2c:a5:4b:f1:17:e0:3c:97:ba:36: 1e:31:08:74:4c:1d:ed:d4:2f:6c:2a:c1:3a:a4:fa:cc:6e:aa: 0b:b4:9f:66:47:a0:b6:29:02:a0:98:65:1f:b2:db:dc:6a:b6: b9:a7:ee:64:32:20:35:9f:b0:56:4a:6a:dd:b3:e4:1c:81:27: ad:da:40:0d:b1:66:07:c4:12:60:fc:c4:32:5b:ab:ff:78:e4: cb:d2:64:3c:6b:22:46:92:8a:c4:a2:ef:e0:22:77:e3:06:08: 8d:49:20:09:f4:f9:f6:9a:47:f8:fa:ea:07:ee:22:c7:f4:aa: 64:df:e3:96:50:84:47:94:bc:25:19:c8:c7:68:6d:0c:c0:b2: 36:d3:8f:8c:74:a1:e8:eb:45:68:cd:3f:ea:2b:21:4e:e3:8c: 25:21:44:55 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE97SwIpJPzdkF+m+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMjIxMzEwMVoXDTI5MDExNDIyMzEwMVowLzEtMCsGA1UEAxMk MGZjYTgxMGUtYzQyNy00ZTM4LTljMWUtZmM2ZTkwNzQ3OGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ4ia2IRP58KEtZ6VaG6Pi0VKYhhklZbwu44 2ynhbcbNe5/YnWZVHwj4FSrHFQN+jd7m+e7BEl5jh7OKBJSOgpVlhrtJ+DjdMAQH gS4oxawVEAAEUuQOftsiEf4zVntEV5ihh1VZelh8CUU7qXKvbKCA6JTRsK0roZqs 1UZwto1r1tM/IXyQjESMZh6HrmHlCCsb3p63aeWV8/4FF4WnVAgElQMxAzlqwKau AjzCY1wejQ3cofmU8TA6xtEkcWz645SpPeapwgT6+WH+apX5CSwDT+zjOGFFQ1V1 wMJKAfFXCOXzq3KdDeR3vPaFBcrIhAGk4gutzLRDt/5j/xcJIQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFPomR5Up1ccp/PFwT59Fn5w8VR4aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8w ZmNhODEwZS1jNDI3LTRlMzgtOWMxZS1mYzZlOTA3NDc4Y2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzBmY2E4MTBlLWM0MjctNGUzOC05 YzFlLWZjNmU5MDc0NzhjYi8wZmNhODEwZS1jNDI3LTRlMzgtOWMxZS1mYzZlOTA3 NDc4Y2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALNxMwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC O/owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAeNaDhTDCewf4dqGVKq9spPoHhcxebOgOdxHTPHoa8U3DinAu ezxkHg4/cIoMPUdjDymApzVC2P/wt69EHLZSeklJ8hxVna1UVY3nhgIsG7YcXkdN oP8InK63/JTdRhCccJIspUvxF+A8l7o2HjEIdEwd7dQvbCrBOqT6zG6qC7SfZkeg tikCoJhlH7Lb3Gq2uafuZDIgNZ+wVkpq3bPkHIEnrdpADbFmB8QSYPzEMlur/3jk y9JkPGsiRpKKxKLv4CJ34wYIjUkgCfT59ppH+PrqB+4ix/SqZN/jllCER5S8JRnI x2htDMCyNtOPjHSh6OtFaM0/6ishTuOMJSFEVQ== -----END CERTIFICATE-----Generated at Sun Nov 1 08:30:00 2026 by rpki-client