$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89.cer File: 95c38de3-af72-4334-87b9-ab2e5c049c89.cer (raw, json) Hash identifier: lOQLfM5icocQuyRIbGZE7zF08ndaNgiyMRArkPk2cys= Subject key identifier: 25:43:75:05:3B:D7:63:07:70:4B:68:46:AF:7D:43:98:5F:B9:F2:DF Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6FF37C000A4695254498B380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89/95c38de3-af72-4334-87b9-ab2e5c049c89.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 Oct 2026 20:00:46 +0000 Certificate not after: Wed 10 Jan 2029 21:00:46 +0000 Subordinate resources: AS: 403048 IP: 192.124.156.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:f3:7c:00:0a:46:95:25:44:98:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 8 20:00:46 2026 GMT Not After : Jan 10 21:00:46 2029 GMT Subject: CN=95c38de3-af72-4334-87b9-ab2e5c049c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:5d:84:93:3d:7b:ff:35:c5:0c:97:82:f5: 9a:bf:8f:55:b9:17:00:e8:5b:e8:cc:fb:cc:05:53: b5:ab:b9:7e:f7:66:30:0f:7b:a7:6f:25:e2:95:51: c6:3d:bf:81:e1:18:b8:af:8d:79:1d:5d:62:ee:f7: 1a:fe:46:80:c5:18:e2:37:8d:97:92:44:3e:7a:0c: eb:d6:a3:48:cd:34:41:a9:be:d0:2c:61:19:2e:ac: 2e:2e:15:34:1f:23:fb:d5:d0:b8:7c:40:c8:b4:1f: 7c:57:89:d0:c4:72:f0:91:d7:17:00:5a:13:c4:09: 37:a0:fe:85:11:a4:d8:df:86:d4:14:cc:71:d6:f1: 7a:26:19:eb:1f:b9:f9:59:6f:88:6c:bc:bf:ea:38: ad:d4:e8:00:a8:06:85:29:de:98:70:18:f6:a1:6b: da:6c:cb:75:d0:c0:90:bd:95:75:06:7f:c4:d8:51: f9:6f:1b:75:31:97:cf:de:6d:20:d6:f9:12:4e:c1: f3:88:96:04:dc:c3:be:0f:4d:ad:1d:51:7c:23:bc: 65:d7:37:8d:00:57:c4:e2:43:44:aa:20:bc:dc:dc: 87:87:80:22:da:b6:d8:4e:e5:01:8d:3b:dd:57:74: 5c:1b:2c:cb:54:3b:e1:ff:13:61:32:4d:5d:4c:10: c2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:43:75:05:3B:D7:63:07:70:4B:68:46:AF:7D:43:98:5F:B9:F2:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95c38de3-af72-4334-87b9-ab2e5c049c89/95c38de3-af72-4334-87b9-ab2e5c049c89.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 192.124.156.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403048 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ac:d4:98:97:a0:26:c9:96:2e:ef:94:a4:75:14:78:16:b4: 9c:5a:65:64:63:2f:50:f3:51:87:e9:4d:39:e7:73:26:7c:0b: 09:35:a9:77:98:1c:a2:bb:cd:76:0b:31:7c:be:60:da:d9:1c: d3:1b:38:c4:2f:bf:f7:6a:08:2b:6b:01:ee:9d:52:60:15:1c: 24:84:36:af:af:97:ed:7e:e2:c7:fb:ab:af:a0:77:f1:21:f2: b7:e7:6c:dd:84:c7:15:15:3c:ac:32:f6:4d:6d:11:97:a8:c2: 44:20:00:80:07:70:62:18:d3:47:45:9b:26:d9:b8:12:54:a9: 74:46:70:34:13:5d:aa:2d:e6:4c:2a:2a:a1:44:aa:89:12:e3: 1e:60:e9:f1:89:05:2b:e1:7b:1e:bc:6e:57:3b:84:2f:11:a0: 3c:9d:45:14:d0:1d:3c:87:98:3f:1b:8e:37:f4:02:0c:98:67: 3a:26:7f:ea:38:4b:c1:b8:67:ae:48:d2:97:91:58:86:e7:42: 3d:b5:48:43:e1:f9:cf:ca:43:a8:5e:85:fb:b7:be:92:e4:26: 2b:59:79:a5:a1:ba:3e:48:30:27:2d:e7:6b:62:f2:de:e0:f2: 29:05:8e:b8:1d:38:15:43:22:c8:d4:9b:c8:71:7c:ac:68:af: 98:89:39:ac -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9v83wACkaVJUSYs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwODIwMDA0NloXDTI5MDExMDIxMDA0NlowLzEtMCsGA1UEAxMk OTVjMzhkZTMtYWY3Mi00MzM0LTg3YjktYWIyZTVjMDQ5Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhRdhJM9e/81xQyXgvWav49VuRcA6FvozPvM BVO1q7l+92YwD3unbyXilVHGPb+B4Ri4r415HV1i7vca/kaAxRjiN42XkkQ+egzr 1qNIzTRBqb7QLGEZLqwuLhU0HyP71dC4fEDItB98V4nQxHLwkdcXAFoTxAk3oP6F EaTY34bUFMxx1vF6JhnrH7n5WW+IbLy/6jit1OgAqAaFKd6YcBj2oWvabMt10MCQ vZV1Bn/E2FH5bxt1MZfP3m0g1vkSTsHziJYE3MO+D02tHVF8I7xl1zeNAFfE4kNE qiC83NyHh4Ai2rbYTuUBjTvdV3RcGyzLVDvh/xNhMk1dTBDCZQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCVDdQU712MHcEtoRq99Q5hfufLfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85 NWMzOGRlMy1hZjcyLTQzMzQtODdiOS1hYjJlNWMwNDljODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5Lzk1YzM4ZGUzLWFmNzItNDMzNC04 N2I5LWFiMmU1YzA0OWM4OS85NWMzOGRlMy1hZjcyLTQzMzQtODdiOS1hYjJlNWMw NDljODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAfJwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiZoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIus1JiXoCbJli7vlKR1FHgWtJxaZWRjL1DzUYfpTTnncyZ8 Cwk1qXeYHKK7zXYLMXy+YNrZHNMbOMQvv/dqCCtrAe6dUmAVHCSENq+vl+1+4sf7 q6+gd/Eh8rfnbN2ExxUVPKwy9k1tEZeowkQgAIAHcGIY00dFmybZuBJUqXRGcDQT Xaot5kwqKqFEqokS4x5g6fGJBSvhex68blc7hC8RoDydRRTQHTyHmD8bjjf0AgyY Zzomf+o4S8G4Z65I0peRWIbnQj21SEPh+c/KQ6hehfu3vpLkJitZeaWhuj5IMCct 52ti8t7g8ikFjrgdOBVDIsjUm8hxfKxor5iJOaw= -----END CERTIFICATE-----Generated at Mon Nov 2 08:10:31 2026 by rpki-client