$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/80b6d2eb-ac2d-4d52-ae4e-df5315fc1eb8.cer File: 80b6d2eb-ac2d-4d52-ae4e-df5315fc1eb8.cer (raw, json) Hash identifier: kdtf18JECYGzV9FWuSTbizJk+CMS13MyWaReRxzDfrs= Subject key identifier: 43:81:BC:D6:6B:7F:CE:BE:9C:EA:F9:9F:50:FB:91:8C:73:10:92:C6 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F82EBC708D10A865F34D015E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/80b6d2eb-ac2d-4d52-ae4e-df5315fc1eb8/80b6d2eb-ac2d-4d52-ae4e-df5315fc1eb8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/80b6d2eb-ac2d-4d52-ae4e-df5315fc1eb8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 Oct 2026 15:05:36 +0000 Certificate not after: Wed 17 Jan 2029 16:05:36 +0000 Subordinate resources: IP: 167.78.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:eb:c7:08:d1:0a:86:5f:34:d0:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 15 15:05:36 2026 GMT Not After : Jan 17 16:05:36 2029 GMT Subject: CN=80b6d2eb-ac2d-4d52-ae4e-df5315fc1eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:7e:b5:6e:69:fe:c7:85:df:53:38:ec:d9: 15:4b:09:b0:69:ae:1b:87:d1:73:f1:27:a4:8e:61: da:ef:df:6b:91:ec:51:30:f7:f2:af:fb:c1:65:b6: d3:a4:fe:8f:c4:7e:8b:6d:ad:d8:0e:52:25:6d:5b: 05:53:eb:b1:2b:fb:c6:79:9f:f5:2a:82:72:55:f2: 21:5e:11:2e:ff:dc:65:d4:d8:28:ac:bd:d7:81:50: 3a:67:5d:61:85:e9:84:f1:62:0b:8c:66:77:4a:e8: aa:20:e0:96:b3:65:b5:e1:7a:3f:69:41:e1:e4:82: 13:e5:c3:03:87:b0:0f:d6:11:23:e0:32:8c:dd:df: 8e:97:6e:f7:23:0e:a2:75:37:63:21:02:f7:96:7e: aa:6c:6a:d9:91:36:0d:04:70:10:a4:fc:54:a2:f1: 8c:ef:96:5c:ec:67:35:80:12:7a:fa:4b:fc:8d:7c: 57:59:ba:50:53:81:5e:8f:c4:cc:36:c4:7f:71:6b: e6:19:87:b4:c2:27:b9:4a:6e:2a:70:1e:c2:0d:15: af:28:69:af:08:30:04:f2:ea:ca:f5:fa:e3:13:56: db:23:5d:34:43:ca:e5:e8:bc:84:9a:7f:04:4c:91: 90:da:63:b2:72:34:dc:c6:ba:c0:fa:b4:a3:45:c5: f6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:81:BC:D6:6B:7F:CE:BE:9C:EA:F9:9F:50:FB:91:8C:73:10:92:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/80b6d2eb-ac2d-4d52-ae4e-df5315fc1eb8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/80b6d2eb-ac2d-4d52-ae4e-df5315fc1eb8/80b6d2eb-ac2d-4d52-ae4e-df5315fc1eb8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 167.78.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:45:ec:a4:0b:1c:6a:f9:a7:a2:50:c5:b9:f4:2e:f9:98:a7: 58:84:6f:22:70:f6:62:6a:c5:96:6f:09:ee:d4:b3:fb:7a:02: 72:34:a7:5f:8c:49:e7:70:9d:3a:99:ab:58:85:7c:55:5b:ff: c3:b0:e2:92:ef:48:6d:6f:ec:52:36:ac:7d:20:69:c0:98:af: f8:0b:44:66:47:d9:16:bc:5a:b8:a4:35:53:ae:2f:85:ce:8d: 81:3c:d1:02:2f:31:18:97:51:f8:6d:54:43:f8:36:04:44:cc: 84:d1:98:57:0f:bf:ba:de:1a:07:42:c7:c1:35:e8:e0:4a:67: dc:f0:b9:93:e8:23:b1:a8:d4:bd:51:4c:5f:e0:c2:3a:71:cc: 61:f7:6c:5c:5b:f1:d1:63:78:1b:79:82:3f:ef:7f:d4:cf:43: af:44:73:8f:df:b7:24:32:b9:9d:20:8f:eb:a3:63:f1:db:f8: 60:2d:82:20:da:93:a3:26:54:35:b8:04:3a:93:7a:1d:4a:06: 9e:ee:b8:2a:4e:7b:b5:b9:b8:5c:7f:65:50:1f:c9:0a:d9:14: f2:6f:ea:ec:b3:08:dc:b7:c2:f3:c0:64:7e:6a:de:1e:4c:1d: 48:0e:b4:bd:78:13:ba:db:b2:8c:06:34:58:1b:5d:f7:e2:38: 73:0b:b5:7e -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE+C68cI0QqGXzTQFeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNTE1MDUzNloXDTI5MDExNzE2MDUzNlowLzEtMCsGA1UEAxMk ODBiNmQyZWItYWMyZC00ZDUyLWFlNGUtZGY1MzE1ZmMxZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGV+tW5p/seF31M47NkVSwmwaa4bh9Fz8Sek jmHa799rkexRMPfyr/vBZbbTpP6PxH6Lba3YDlIlbVsFU+uxK/vGeZ/1KoJyVfIh XhEu/9xl1NgorL3XgVA6Z11hhemE8WILjGZ3SuiqIOCWs2W14Xo/aUHh5IIT5cMD h7AP1hEj4DKM3d+Ol273Iw6idTdjIQL3ln6qbGrZkTYNBHAQpPxUovGM75Zc7Gc1 gBJ6+kv8jXxXWbpQU4Fej8TMNsR/cWvmGYe0wie5Sm4qcB7CDRWvKGmvCDAE8urK 9frjE1bbI100Q8rl6LyEmn8ETJGQ2mOycjTcxrrA+rSjRcX2/QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFEOBvNZrf86+nOr5n1D7kYxzEJLGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 MGI2ZDJlYi1hYzJkLTRkNTItYWU0ZS1kZjUzMTVmYzFlYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzgwYjZkMmViLWFjMmQtNGQ1Mi1h ZTRlLWRmNTMxNWZjMWViOC84MGI2ZDJlYi1hYzJkLTRkNTItYWU0ZS1kZjUzMTVm YzFlYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCnTjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBuReykCxxq+aeiUMW59C75 mKdYhG8icPZiasWWbwnu1LP7egJyNKdfjEnncJ06matYhXxVW//DsOKS70htb+xS Nqx9IGnAmK/4C0RmR9kWvFq4pDVTri+Fzo2BPNECLzEYl1H4bVRD+DYERMyE0ZhX D7+63hoHQsfBNejgSmfc8LmT6COxqNS9UUxf4MI6ccxh92xcW/HRY3gbeYI/73/U z0OvRHOP37ckMrmdII/ro2Px2/hgLYIg2pOjJlQ1uAQ6k3odSgae7rgqTnu1ubhc f2VQH8kK2RTyb+rsswjct8LzwGR+at4eTB1IDrS9eBO627KMBjRYG1334jhzC7V+ -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:24 2026 by rpki-client