$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32.cer File: 79cc570e-a3e0-4e8b-b090-8cf98b3fca32.cer (raw, json) Hash identifier: s1oeJjO7U0w1g46BxduZID0cuYDx0UFNfYEjmJeqIqE= Subject key identifier: 36:3E:8B:CB:59:07:84:2D:64:58:9E:49:DA:9D:1B:19:20:1B:6A:0A Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F8031D872A036FD2BA4DDD240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32/79cc570e-a3e0-4e8b-b090-8cf98b3fca32.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Oct 2026 15:39:21 +0000 Certificate not after: Tue 16 Jan 2029 16:39:21 +0000 Subordinate resources: IP: 136.176.128.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:80:31:d8:72:a0:36:fd:2b:a4:dd:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 14 15:39:21 2026 GMT Not After : Jan 16 16:39:21 2029 GMT Subject: CN=79cc570e-a3e0-4e8b-b090-8cf98b3fca32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:63:21:bb:3f:62:bf:03:08:c4:e6:ca:43: 5a:0b:cc:44:43:e2:4b:74:87:21:51:d6:ac:43:14: b3:e1:cb:09:63:65:a4:0e:c6:e1:0e:fb:b7:04:1a: ba:14:e2:07:82:6f:de:9b:ea:11:03:c5:fc:38:3c: b8:c9:b1:ef:a0:77:e0:5a:be:03:41:54:ac:ed:13: 6f:c8:db:c8:33:bd:85:1c:fc:75:15:ee:07:ed:98: 13:0a:8b:d4:47:54:ae:59:17:71:ad:ff:19:2b:e9: 3d:41:9f:ac:a7:5f:96:d7:75:17:ac:ff:d1:96:e4: df:c3:3b:04:1b:56:e5:c8:88:02:e9:3a:8f:48:01: 0b:a2:9c:2f:73:26:46:03:49:20:78:a9:bd:6d:c5: 51:b0:41:4e:2f:e9:1d:e4:52:e5:da:e8:a1:8c:22: 29:14:03:8d:a8:d9:d2:cd:59:4e:4c:84:4b:ea:ab: eb:a8:24:cd:83:61:60:ae:1a:aa:44:d8:b0:c2:38: 33:b9:54:fe:ac:18:6a:66:4f:f9:47:5e:6a:6a:73: b1:1c:bf:9e:9b:e4:89:b5:95:1b:57:96:cd:d0:ff: 67:ec:99:cd:98:50:8e:f1:2d:d8:c8:7d:37:82:55: fd:54:77:a6:54:a9:2f:36:72:51:57:b1:9e:45:50: 35:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3E:8B:CB:59:07:84:2D:64:58:9E:49:DA:9D:1B:19:20:1B:6A:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32/79cc570e-a3e0-4e8b-b090-8cf98b3fca32.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 136.176.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:82:26:88:de:66:b9:79:2f:e9:f7:09:f6:53:22:2c:54:77: 6d:17:92:22:7d:80:93:69:7b:e5:c1:d9:5a:e8:73:25:6c:a7: 62:da:a0:a0:65:5d:f7:2d:e7:f2:c1:8b:fb:40:45:a3:a0:d7: 39:0f:14:c3:03:58:d3:86:88:a2:e1:3f:6d:ed:1e:bd:e3:12: 2c:98:43:1b:43:8f:2e:fb:15:74:dc:83:3a:45:34:49:57:47: 4b:63:18:da:b0:53:60:eb:b2:bd:d6:2e:a6:e7:2a:86:94:f3: 4f:15:81:9f:4a:83:95:7c:9f:12:41:7f:99:5c:5a:98:6c:92: 1d:dd:13:2a:55:65:18:31:10:54:75:7e:d3:66:7c:97:f1:29: 24:14:04:53:76:c2:82:5d:32:a1:fc:dc:a6:11:02:33:1e:0a: 70:a9:16:1b:56:a2:5c:e6:cf:45:55:ed:b1:5f:50:8e:75:d4: 4c:5a:13:9d:d5:2b:84:f5:4f:d3:1b:37:a1:2d:79:44:87:62: 39:bd:07:93:22:0c:40:61:78:c3:51:49:30:4f:af:d6:a2:22: a3:1c:8b:99:8c:92:ef:10:a9:67:ac:a1:b7:75:b1:bc:a6:ee: 1f:2a:da:20:35:e4:b2:ad:cb:75:5f:35:2e:e1:45:52:bf:ac: b4:1a:9b:9e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+AMdhyoDb9K6Td0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNDE1MzkyMVoXDTI5MDExNjE2MzkyMVowLzEtMCsGA1UEAxMk NzljYzU3MGUtYTNlMC00ZThiLWIwOTAtOGNmOThiM2ZjYTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1RjIbs/Yr8DCMTmykNaC8xEQ+JLdIchUdas QxSz4csJY2WkDsbhDvu3BBq6FOIHgm/em+oRA8X8ODy4ybHvoHfgWr4DQVSs7RNv yNvIM72FHPx1Fe4H7ZgTCovUR1SuWRdxrf8ZK+k9QZ+sp1+W13UXrP/RluTfwzsE G1blyIgC6TqPSAELopwvcyZGA0kgeKm9bcVRsEFOL+kd5FLl2uihjCIpFAONqNnS zVlOTIRL6qvrqCTNg2FgrhqqRNiwwjgzuVT+rBhqZk/5R15qanOxHL+em+SJtZUb V5bN0P9n7JnNmFCO8S3YyH03glX9VHemVKkvNnJRV7GeRVA1mwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDY+i8tZB4QtZFieSdqdGxkgG2oKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83 OWNjNTcwZS1hM2UwLTRlOGItYjA5MC04Y2Y5OGIzZmNhMzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5Lzc5Y2M1NzBlLWEzZTAtNGU4Yi1i MDkwLThjZjk4YjNmY2EzMi83OWNjNTcwZS1hM2UwLTRlOGItYjA5MC04Y2Y5OGIz ZmNhMzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAWIsIAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmIImiN5muXkv6fcJ9lMi LFR3bReSIn2Ak2l75cHZWuhzJWynYtqgoGVd9y3n8sGL+0BFo6DXOQ8UwwNY04aI ouE/be0eveMSLJhDG0OPLvsVdNyDOkU0SVdHS2MY2rBTYOuyvdYupucqhpTzTxWB n0qDlXyfEkF/mVxamGySHd0TKlVlGDEQVHV+02Z8l/EpJBQEU3bCgl0yofzcphEC Mx4KcKkWG1aiXObPRVXtsV9QjnXUTFoTndUrhPVP0xs3oS15RIdiOb0HkyIMQGF4 w1FJME+v1qIioxyLmYyS7xCpZ6yht3WxvKbuHyraIDXksq3LdV81LuFFUr+stBqb ng== -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:27 2026 by rpki-client