$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56.cer File: 76438f54-166d-43b0-bc0c-8073c447fe56.cer (raw, json) Hash identifier: IkFnoru52FRbpgM6FJ/W4DpxgepFmqRmzq7bJFZYMYQ= Subject key identifier: 08:60:6A:00:32:84:01:78:D3:C7:AF:56:D3:DB:F5:65:63:5D:58:7C Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F8DDA26BB4EC520C9046DF080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56/76438f54-166d-43b0-bc0c-8073c447fe56.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 Oct 2026 13:03:59 +0000 Certificate not after: Sun 21 Jan 2029 14:03:59 +0000 Subordinate resources: IP: 153.79.104.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:da:26:bb:4e:c5:20:c9:04:6d:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 19 13:03:59 2026 GMT Not After : Jan 21 14:03:59 2029 GMT Subject: CN=76438f54-166d-43b0-bc0c-8073c447fe56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4d:b7:e1:6a:72:33:ea:00:e9:9c:fc:de:c5: 27:67:41:90:c1:d2:9d:a3:a1:2f:61:42:dd:57:0c: 9d:ab:44:b7:41:4b:d0:1f:6b:3a:ff:84:6e:59:6f: 29:72:9f:44:13:3d:c1:88:80:ac:83:00:75:f4:5d: 43:21:d1:ee:d4:4e:c0:44:b9:e3:fc:eb:07:e9:e4: 8b:ec:94:73:94:85:8a:ce:82:e2:78:72:50:31:79: 2d:2a:83:ca:1a:e5:47:a9:ea:21:fc:a0:6e:48:85: 3d:6f:32:cb:28:1a:9d:f9:2d:e9:d8:32:89:73:92: 18:7e:74:50:4a:0f:87:5e:d5:65:1f:d9:65:47:33: ad:2c:c7:fd:ac:d0:0d:09:8b:57:fb:3d:e2:7a:7c: 90:f0:50:7c:cc:b1:49:e3:90:9c:0d:ca:9a:76:3a: 4a:65:e6:67:61:29:31:25:4a:8e:61:a2:9a:1c:52: 32:61:54:e7:dc:b0:ea:e2:9d:3e:6e:74:ad:db:41: f5:19:21:44:f2:f2:3a:e9:cd:ad:37:43:a8:c9:ab: 74:77:fc:36:19:17:b9:48:92:82:2f:f9:8f:05:67: 5c:f4:b2:e4:20:a3:a2:68:60:2a:67:49:e7:2d:43: b8:15:8f:6f:b5:88:74:7b:73:61:53:71:11:38:82: b2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:60:6A:00:32:84:01:78:D3:C7:AF:56:D3:DB:F5:65:63:5D:58:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56/76438f54-166d-43b0-bc0c-8073c447fe56.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 153.79.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:77:c4:f1:00:0d:7e:57:71:66:78:e2:b5:9c:46:da:e9:09: 53:92:8c:a2:0a:bd:d3:b0:9d:f4:ac:ac:28:5f:d7:be:97:91: 93:3b:35:ac:c8:8b:c9:52:dc:0d:87:85:96:b4:e0:17:c2:be: 9b:bb:8a:5d:4e:18:80:e0:9b:a5:2a:b1:70:8b:27:69:fe:ab: a1:a7:e1:94:09:49:2e:9a:c8:c5:0e:46:e8:36:ea:32:b9:b3: 46:42:d3:0b:8a:60:23:d9:27:bd:b0:15:7c:46:93:b9:c0:f4: 72:aa:a6:bf:3b:d5:62:e7:9e:c0:da:5c:5e:fb:57:99:d3:ea: b1:27:af:30:fc:40:06:06:ed:e0:27:8b:f3:ef:84:32:cb:27: 65:fc:a4:bb:3d:31:d7:39:be:84:2b:92:21:45:4a:5e:f8:8e: b5:12:a3:65:d7:32:17:c5:5f:4b:61:1c:4c:33:d8:4a:30:08: a6:15:34:44:72:49:07:36:87:e6:a7:28:8b:73:89:b8:eb:9d: af:f6:d7:0d:2d:ae:0c:ba:2b:7a:c8:88:25:94:26:d6:7f:82: 1d:4e:2b:18:49:67:27:25:ef:9b:c8:15:d6:b9:88:01:67:b6: 52:c0:47:91:07:61:61:98:61:13:e5:df:e6:ac:d8:2a:0d:18: e6:4d:bb:09 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+N2ia7TsUgyQRt8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxOTEzMDM1OVoXDTI5MDEyMTE0MDM1OVowLzEtMCsGA1UEAxMk NzY0MzhmNTQtMTY2ZC00M2IwLWJjMGMtODA3M2M0NDdmZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU234WpyM+oA6Zz83sUnZ0GQwdKdo6EvYULd Vwydq0S3QUvQH2s6/4RuWW8pcp9EEz3BiICsgwB19F1DIdHu1E7ARLnj/OsH6eSL 7JRzlIWKzoLieHJQMXktKoPKGuVHqeoh/KBuSIU9bzLLKBqd+S3p2DKJc5IYfnRQ Sg+HXtVlH9llRzOtLMf9rNANCYtX+z3ienyQ8FB8zLFJ45CcDcqadjpKZeZnYSkx JUqOYaKaHFIyYVTn3LDq4p0+bnSt20H1GSFE8vI66c2tN0Ooyat0d/w2GRe5SJKC L/mPBWdc9LLkIKOiaGAqZ0nnLUO4FY9vtYh0e3NhU3EROIKycwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAhgagAyhAF408evVtPb9WVjXVh8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83 NjQzOGY1NC0xNjZkLTQzYjAtYmMwYy04MDczYzQ0N2ZlNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5Lzc2NDM4ZjU0LTE2NmQtNDNiMC1i YzBjLTgwNzNjNDQ3ZmU1Ni83NjQzOGY1NC0xNjZkLTQzYjAtYmMwYy04MDczYzQ0 N2ZlNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAOZT2gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfXfE8QANfldxZnjitZxG 2ukJU5KMogq907Cd9KysKF/XvpeRkzs1rMiLyVLcDYeFlrTgF8K+m7uKXU4YgOCb pSqxcIsnaf6roafhlAlJLprIxQ5G6DbqMrmzRkLTC4pgI9knvbAVfEaTucD0cqqm vzvVYueewNpcXvtXmdPqsSevMPxABgbt4CeL8++EMssnZfykuz0x1zm+hCuSIUVK XviOtRKjZdcyF8VfS2EcTDPYSjAIphU0RHJJBzaH5qcoi3OJuOudr/bXDS2uDLor esiIJZQm1n+CHU4rGElnJyXvm8gV1rmIAWe2UsBHkQdhYZhhE+Xf5qzYKg0Y5k27 CQ== -----END CERTIFICATE-----Generated at Tue Nov 3 22:20:58 2026 by rpki-client