$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b.cer File: 78a241a0-4d95-4e18-8459-11fa601d557b.cer (raw, json) Hash identifier: QggTOFHGWFDM0eZ8ubEEivK/ziXHN/amH0wWABi1FE4= Subject key identifier: 53:7E:7E:16:9F:8D:F9:29:10:A6:13:AD:43:E0:C6:84:5B:72:94:B2 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F87BD69A1C90D306C95B99F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b/78a241a0-4d95-4e18-8459-11fa601d557b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 17 Oct 2026 08:31:13 +0000 Certificate not after: Fri 19 Jan 2029 09:31:13 +0000 Subordinate resources: AS: 402765 IP: 192.225.220.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:87:bd:69:a1:c9:0d:30:6c:95:b9:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 17 08:31:13 2026 GMT Not After : Jan 19 09:31:13 2029 GMT Subject: CN=78a241a0-4d95-4e18-8459-11fa601d557b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:30:c1:c2:4b:bd:6a:e0:5e:47:08:d1:67:9f: d9:dc:91:8e:98:45:b0:ca:dc:b2:2f:cc:02:92:e7: 0d:ae:97:47:6e:03:c8:85:3a:cc:f9:32:03:e2:13: 55:79:3b:d7:5a:35:fb:76:7f:61:31:ea:44:db:da: 99:9a:9b:0b:a6:35:8e:2c:fd:eb:e5:36:00:f1:9c: 62:67:38:af:84:67:64:41:6e:71:f9:61:65:66:ad: b7:01:59:5a:5b:29:20:6e:bc:ba:0b:89:5d:f4:f5: cc:33:89:9a:d1:11:24:4b:0e:80:5f:18:c0:8e:5d: 7f:23:91:0d:54:f7:f6:38:52:7e:51:11:24:8d:18: 67:f0:58:9c:20:92:8e:40:07:38:15:bc:0e:1f:8f: c1:04:1a:81:98:96:20:8d:fe:cc:fa:51:14:e2:dd: b5:92:70:01:85:38:e4:91:39:57:3f:53:8d:9d:9b: 62:2c:8e:24:34:8e:3c:31:02:36:c0:42:5e:78:d5: cb:d1:af:bc:d2:ce:28:4a:75:ca:cc:ae:0c:3d:c7: 8c:9a:c2:78:5d:9b:67:b8:41:0f:a3:67:54:84:2c: 4d:33:f1:ce:b3:dd:22:88:6f:43:70:e7:e3:51:d5: 9e:f7:5d:39:62:78:7e:fe:46:fb:bb:01:93:c3:a3: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7E:7E:16:9F:8D:F9:29:10:A6:13:AD:43:E0:C6:84:5B:72:94:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/78a241a0-4d95-4e18-8459-11fa601d557b/78a241a0-4d95-4e18-8459-11fa601d557b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 192.225.220.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402765 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:da:f9:bb:bd:4f:01:03:34:e0:26:99:19:4d:85:4f:27:55: 29:dd:a7:17:35:57:1b:d7:b1:3d:41:9d:4d:93:e7:c0:70:ca: 3d:5c:19:74:51:c4:9c:87:87:1a:01:3e:93:bf:c7:5e:15:ee: bf:8e:fb:7a:71:1b:04:c7:8e:16:a9:b4:f1:4c:00:a8:ee:f3: a5:ef:72:4c:99:a2:f3:de:4f:cc:55:d7:7f:41:00:aa:0c:5c: f6:e0:ab:b5:04:a4:fe:00:65:aa:ec:58:b2:21:4f:b7:81:2c: 87:2e:b5:7a:0e:5e:9d:f1:4e:40:12:d8:99:86:25:d0:a2:e4: 42:20:f1:a1:24:d0:b2:20:06:19:5d:bb:20:72:46:b2:63:b2: 50:dd:a8:dc:b6:c0:ac:31:98:cb:5d:09:5c:97:41:3c:2c:40: c3:ca:3b:b9:51:06:be:50:b0:39:65:88:b4:84:2d:61:2b:d7: f3:5d:90:15:a1:33:34:61:ba:f7:72:89:fa:8d:10:ae:e4:ba: b6:82:3c:4f:af:7f:be:80:eb:47:3b:cf:28:20:7c:e1:be:8a: dc:e7:22:83:87:01:98:ea:5d:a5:ce:43:ee:62:ea:99:d6:20: 57:7f:e9:d2:c3:2a:09:4d:78:1d:73:77:f8:7e:a0:7c:6f:15: 3e:7f:1d:e7 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE+HvWmhyQ0wbJW5nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNzA4MzExM1oXDTI5MDExOTA5MzExM1owLzEtMCsGA1UEAxMk NzhhMjQxYTAtNGQ5NS00ZTE4LTg0NTktMTFmYTYwMWQ1NTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjDBwku9auBeRwjRZ5/Z3JGOmEWwytyyL8wC kucNrpdHbgPIhTrM+TID4hNVeTvXWjX7dn9hMepE29qZmpsLpjWOLP3r5TYA8Zxi ZzivhGdkQW5x+WFlZq23AVlaWykgbry6C4ld9PXMM4ma0REkSw6AXxjAjl1/I5EN VPf2OFJ+UREkjRhn8FicIJKOQAc4FbwOH4/BBBqBmJYgjf7M+lEU4t21knABhTjk kTlXP1ONnZtiLI4kNI48MQI2wEJeeNXL0a+80s4oSnXKzK4MPceMmsJ4XZtnuEEP o2dUhCxNM/HOs90iiG9DcOfjUdWe9105Ynh+/kb7uwGTw6OLlQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFFN+fhafjfkpEKYTrUPgxoRbcpSyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83 OGEyNDFhMC00ZDk1LTRlMTgtODQ1OS0xMWZhNjAxZDU1N2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5Lzc4YTI0MWEwLTRkOTUtNGUxOC04 NDU5LTExZmE2MDFkNTU3Yi83OGEyNDFhMC00ZDk1LTRlMTgtODQ1OS0xMWZhNjAx ZDU1N2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALA4dwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiVNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFLa+bu9TwEDNOAmmRlNhU8nVSndpxc1VxvXsT1BnU2T58Bw yj1cGXRRxJyHhxoBPpO/x14V7r+O+3pxGwTHjhaptPFMAKju86XvckyZovPeT8xV 139BAKoMXPbgq7UEpP4AZarsWLIhT7eBLIcutXoOXp3xTkAS2JmGJdCi5EIg8aEk 0LIgBhlduyByRrJjslDdqNy2wKwxmMtdCVyXQTwsQMPKO7lRBr5QsDlliLSELWEr 1/NdkBWhMzRhuvdyifqNEK7kuraCPE+vf76A60c7zyggfOG+itznIoOHAZjqXaXO Q+5i6pnWIFd/6dLDKglNeB1zd/h+oHxvFT5/Hec= -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:36 2026 by rpki-client