$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d.cer File: 558bf115-11b1-4e0f-88e8-4f38ecccf90d.cer (raw, json) Hash identifier: JQQsuo568Qy/qW3904MfJn/6szeTsICn7nqQZMtAKgE= Subject key identifier: 43:AC:23:55:8C:DB:0E:8B:49:9F:68:52:7E:DE:B7:6F:E8:D8:64:FB Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F82F0A04DD6E96C46E85EB680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d/558bf115-11b1-4e0f-88e8-4f38ecccf90d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 Oct 2026 15:15:22 +0000 Certificate not after: Wed 17 Jan 2029 16:15:22 +0000 Subordinate resources: IP: 170.219.0.0/16 IP: 205.145.224.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:f0:a0:4d:d6:e9:6c:46:e8:5e:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 15 15:15:22 2026 GMT Not After : Jan 17 16:15:22 2029 GMT Subject: CN=558bf115-11b1-4e0f-88e8-4f38ecccf90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:1c:65:89:e6:48:e8:ec:86:25:98:89:15: b8:ab:ba:ef:0b:bf:42:5b:34:16:17:ea:ea:97:a2: 3d:79:c7:d4:43:09:50:47:b4:84:3d:dc:f7:e5:0f: f3:65:5b:df:a1:89:dc:7f:fc:c8:2c:52:c8:b9:4b: b9:b4:05:d7:de:2d:45:4b:41:9c:e8:04:c5:7d:9c: 84:f5:9c:25:11:38:19:4a:9a:b3:19:d7:4a:28:70: 8d:7d:83:68:32:c4:20:14:ae:26:f1:f8:cb:6a:02: d2:ac:f6:3e:8d:72:75:97:8d:c5:cf:f3:be:4b:40: ab:4b:0f:d4:82:23:5a:db:0b:0a:44:40:fd:81:d6: 67:b2:f7:bb:be:d0:96:92:63:5b:4c:ff:82:99:46: 0c:86:d3:e3:ac:c4:7c:9e:ad:2a:15:f6:11:f3:24: 6f:3f:d2:d1:e8:dc:44:a4:cc:82:c8:ff:46:c6:f5: 69:a9:20:97:14:e5:ca:f0:c3:38:a7:45:96:fb:6d: 55:0e:87:18:a6:79:ca:8b:34:59:14:10:1f:fe:79: a1:e7:f9:4f:5e:00:93:0b:22:40:58:ea:9e:58:23: 88:dd:d6:bf:60:a8:96:ad:70:ed:82:01:8b:1a:6a: bf:9a:a9:bd:dc:3b:40:bb:65:99:85:82:78:7c:15: df:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AC:23:55:8C:DB:0E:8B:49:9F:68:52:7E:DE:B7:6F:E8:D8:64:FB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/558bf115-11b1-4e0f-88e8-4f38ecccf90d/558bf115-11b1-4e0f-88e8-4f38ecccf90d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 170.219.0.0/16 205.145.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:5a:f3:04:bf:e6:84:5c:14:03:1e:2f:01:b8:94:b3:f1:73: 15:7d:51:67:10:eb:8f:90:79:72:cd:fc:82:74:ab:c7:1b:d4: 5c:e6:67:2b:9f:5a:bb:81:15:b9:22:bc:63:b1:9f:43:80:88: 31:d2:5a:c0:27:4d:2b:e6:5c:6b:9e:cf:27:1c:5c:26:7c:88: 8a:9c:eb:6f:79:b9:ac:e4:63:32:ba:1f:a7:79:9f:f1:b1:e5: 2d:01:e9:ef:ec:dd:e0:1b:7f:32:fa:d7:8b:f2:28:52:8f:86: 23:ff:17:24:63:e4:a5:90:bb:a3:cd:16:60:7f:ee:2e:de:c5: 12:96:a5:e8:16:ac:8d:6a:55:5d:90:47:90:3c:e1:c3:df:41: 97:ec:02:43:56:79:07:fb:b2:17:79:4c:e6:7e:51:0a:a6:de: b8:3c:43:36:12:34:e5:01:18:83:b5:d1:52:59:f9:d2:93:d9: 2b:b9:b9:41:95:55:69:3d:36:1a:7a:b8:9f:7a:0e:ba:b9:ee: c1:08:70:f4:8b:e0:3d:ac:84:00:24:bb:7a:6e:77:e6:c9:2e: f9:a7:49:73:00:14:50:8b:25:c6:29:93:08:c0:28:09:cd:19: 5d:ea:f0:3e:b2:91:51:e3:df:21:7b:a6:b1:50:fa:ca:35:65: 00:75:c0:95 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWE+C8KBN1ulsRuhetoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNTE1MTUyMloXDTI5MDExNzE2MTUyMlowLzEtMCsGA1UEAxMk NTU4YmYxMTUtMTFiMS00ZTBmLTg4ZTgtNGYzOGVjY2NmOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5QcZYnmSOjshiWYiRW4q7rvC79CWzQWF+rq l6I9ecfUQwlQR7SEPdz35Q/zZVvfoYncf/zILFLIuUu5tAXX3i1FS0Gc6ATFfZyE 9ZwlETgZSpqzGddKKHCNfYNoMsQgFK4m8fjLagLSrPY+jXJ1l43Fz/O+S0CrSw/U giNa2wsKRED9gdZnsve7vtCWkmNbTP+CmUYMhtPjrMR8nq0qFfYR8yRvP9LR6NxE pMyCyP9GxvVpqSCXFOXK8MM4p0WW+21VDocYpnnKizRZFBAf/nmh5/lPXgCTCyJA WOqeWCOI3da/YKiWrXDtggGLGmq/mqm93DtAu2WZhYJ4fBXfWQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFEOsI1WM2w6LSZ9oUn7et2/o2GT7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS81 NThiZjExNS0xMWIxLTRlMGYtODhlOC00ZjM4ZWNjY2Y5MGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzU1OGJmMTE1LTExYjEtNGUwZi04 OGU4LTRmMzhlY2NjZjkwZC81NThiZjExNS0xMWIxLTRlMGYtODhlOC00ZjM4ZWNj Y2Y5MGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCq2wMEBc2R4DBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaWvMEv+aEXBQD Hi8BuJSz8XMVfVFnEOuPkHlyzfyCdKvHG9Rc5mcrn1q7gRW5IrxjsZ9DgIgx0lrA J00r5lxrns8nHFwmfIiKnOtvebms5GMyuh+neZ/xseUtAenv7N3gG38y+teL8ihS j4Yj/xckY+SlkLujzRZgf+4u3sUSlqXoFqyNalVdkEeQPOHD30GX7AJDVnkH+7IX eUzmflEKpt64PEM2EjTlARiDtdFSWfnSk9krublBlVVpPTYaerifeg66ue7BCHD0 i+A9rIQAJLt6bnfmyS75p0lzABRQiyXGKZMIwCgJzRld6vA+spFR498he6axUPrK NWUAdcCV -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:32 2026 by rpki-client