$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78285bb0-7c66-43ad-a133-379ecf2fc1d8.cer File: 78285bb0-7c66-43ad-a133-379ecf2fc1d8.cer (raw, json) Hash identifier: 9xuo9XHU420eHSPoMr8xCyK3zHINj7czFjQO6meZymw= Subject key identifier: 26:86:6E:C4:C6:C1:DA:10:F0:62:F6:16:79:5A:E9:19:0D:4F:75:EB Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F72D44029EAC2BC0670530B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78285bb0-7c66-43ad-a133-379ecf2fc1d8/78285bb0-7c66-43ad-a133-379ecf2fc1d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78285bb0-7c66-43ad-a133-379ecf2fc1d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Oct 2026 20:45:16 +0000 Certificate not after: Tue 09 Jan 2029 20:58:19 +0000 Subordinate resources: AS: 403062 IP: 198.252.226.0/24 IP: 2602:f2ac::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:d4:40:29:ea:c2:bc:06:70:53:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 9 20:45:16 2026 GMT Not After : Jan 9 20:58:19 2029 GMT Subject: CN=78285bb0-7c66-43ad-a133-379ecf2fc1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:03:29:38:25:6a:54:33:8d:09:f5:1a:96: ea:50:7a:2a:2f:c0:16:cd:5b:e5:48:17:4d:cb:84: 9f:03:33:c3:9c:28:5a:62:5e:61:ac:64:c9:da:fa: a2:4d:c5:ff:c3:77:8d:d1:00:50:93:ff:8a:ab:e6: 10:cd:c6:f4:f4:76:d4:1e:f8:e8:57:5c:3d:0c:48: 29:1a:6a:59:4e:5b:04:b0:a0:1a:37:35:2d:6e:50: 55:b4:44:ee:6a:71:c4:56:83:a8:89:2a:02:68:66: 18:66:8a:c8:27:e1:24:0a:77:77:31:d5:c5:4e:6c: 38:08:0a:2d:a8:c1:83:97:0f:4f:3d:55:8b:7a:4e: 53:2e:21:d4:86:2d:d4:c6:5e:67:9d:87:f6:cc:50: 70:5c:92:43:a5:3f:3f:47:1d:76:e2:5c:4b:12:d8: d0:c1:61:99:f1:94:77:10:cf:62:ad:9d:2c:b3:cd: c3:5e:ef:e8:11:30:15:31:7d:79:5e:28:87:69:97: e4:42:f6:3b:ea:12:0f:bd:a8:78:fb:bc:53:b0:47: 18:fd:a5:e0:92:16:d8:8e:fc:71:8c:ba:f6:cb:8e: 0c:45:50:9c:1b:f5:51:ed:61:bf:2c:67:90:71:08: 99:b2:e5:9a:b3:5b:94:48:5d:2e:2f:8f:9b:2c:32: bf:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:86:6E:C4:C6:C1:DA:10:F0:62:F6:16:79:5A:E9:19:0D:4F:75:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78285bb0-7c66-43ad-a133-379ecf2fc1d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78285bb0-7c66-43ad-a133-379ecf2fc1d8/78285bb0-7c66-43ad-a133-379ecf2fc1d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.252.226.0/24 IPv6: 2602:f2ac::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403062 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:42:e0:2d:b7:a6:69:59:f9:5d:81:a4:0e:48:04:1f:3d:15: 8b:e6:f8:c0:fb:c9:6a:c3:56:23:f8:55:c2:4c:c0:0b:e7:39: cb:61:ec:b3:db:82:94:96:1f:52:e6:71:9a:46:e1:34:62:5f: 35:f5:5d:cb:13:01:b6:fb:ca:1a:f4:11:4d:67:55:5d:f5:77: 46:25:01:61:57:03:3f:89:2f:25:db:9c:94:7b:78:7c:03:fe: 89:8d:97:d1:7b:a5:9c:b5:c7:1a:b9:ec:d7:6b:2a:64:79:22: 3e:d8:af:27:63:c9:2a:36:ed:ab:89:5e:7a:da:55:fe:9f:d0: 24:92:08:d4:f1:20:c4:19:63:65:b5:39:17:44:fb:c2:38:2b: 89:6c:f9:84:2f:83:21:ac:c7:d6:5b:f0:68:12:67:c8:6c:a5: ec:35:08:20:1c:f3:01:dd:7d:68:0b:44:3f:e6:ed:48:bf:1b: 94:c5:a1:17:91:9a:94:76:8b:ef:64:99:e9:8e:81:18:5d:71: d7:46:85:2c:2a:a1:12:b1:28:29:a1:b3:8f:54:1f:f6:16:ad: da:66:1d:41:3d:88:41:c6:a0:86:b3:86:3a:86:fa:1a:7c:9e: 4b:29:86:a9:bc:81:86:c5:af:68:f7:88:74:c9:d3:14:9b:c6: cb:00:f1:a1 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9y1EAp6sK8BnBTC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwOTIwNDUxNloXDTI5MDEwOTIwNTgxOVowLzEtMCsGA1UEAxMk NzgyODViYjAtN2M2Ni00M2FkLWExMzMtMzc5ZWNmMmZjMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO8DKTglalQzjQn1GpbqUHoqL8AWzVvlSBdN y4SfAzPDnChaYl5hrGTJ2vqiTcX/w3eN0QBQk/+Kq+YQzcb09HbUHvjoV1w9DEgp GmpZTlsEsKAaNzUtblBVtETuanHEVoOoiSoCaGYYZorIJ+EkCnd3MdXFTmw4CAot qMGDlw9PPVWLek5TLiHUhi3Uxl5nnYf2zFBwXJJDpT8/Rx124lxLEtjQwWGZ8ZR3 EM9irZ0ss83DXu/oETAVMX15XiiHaZfkQvY76hIPvah4+7xTsEcY/aXgkhbYjvxx jLr2y44MRVCcG/VR7WG/LGeQcQiZsuWas1uUSF0uL4+bLDK/lwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCaGbsTGwdoQ8GL2Fnla6RkNT3XrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83 ODI4NWJiMC03YzY2LTQzYWQtYTEzMy0zNzllY2YyZmMxZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5Lzc4Mjg1YmIwLTdjNjYtNDNhZC1h MTMzLTM3OWVjZjJmYzFkOC83ODI4NWJiMC03YzY2LTQzYWQtYTEzMy0zNzllY2Yy ZmMxZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADG/OIwDgQCAAIwCAMGACYC8qwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmdjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9QuAtt6ZpWfldgaQOSAQfPRWL 5vjA+8lqw1Yj+FXCTMAL5znLYeyz24KUlh9S5nGaRuE0Yl819V3LEwG2+8oa9BFN Z1Vd9XdGJQFhVwM/iS8l25yUe3h8A/6JjZfRe6WctccauezXaypkeSI+2K8nY8kq Nu2riV562lX+n9AkkgjU8SDEGWNltTkXRPvCOCuJbPmEL4MhrMfWW/BoEmfIbKXs NQggHPMB3X1oC0Q/5u1IvxuUxaEXkZqUdovvZJnpjoEYXXHXRoUsKqESsSgpobOP VB/2Fq3aZh1BPYhBxqCGs4Y6hvoafJ5LKYapvIGGxa9o94h0ydMUm8bLAPGh -----END CERTIFICATE-----Generated at Wed Nov 4 14:27:06 2026 by rpki-client