$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d8cc78e9-423a-4dd7-8f00-59edf26c4ef2.cer File: d8cc78e9-423a-4dd7-8f00-59edf26c4ef2.cer (raw, json) Hash identifier: 9MavKTElF6KB8+9PgzvEDK0XXnWTiRrLqz4qIKWl4zQ= Subject key identifier: 57:58:B0:FF:2B:AA:88:D7:68:17:19:90:41:E8:DD:6F:D0:59:DA:4E Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F725ABCF72B61E9399851C950 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d8cc78e9-423a-4dd7-8f00-59edf26c4ef2/d8cc78e9-423a-4dd7-8f00-59edf26c4ef2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d8cc78e9-423a-4dd7-8f00-59edf26c4ef2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Oct 2026 16:40:26 +0000 Certificate not after: Thu 11 Jan 2029 17:40:26 +0000 Subordinate resources: IP: 162.252.197.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:5a:bc:f7:2b:61:e9:39:98:51:c9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 9 16:40:26 2026 GMT Not After : Jan 11 17:40:26 2029 GMT Subject: CN=d8cc78e9-423a-4dd7-8f00-59edf26c4ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7c:5c:a1:87:ff:c7:4c:3e:80:79:c7:5c:ed: 7a:4c:f4:07:0a:11:19:fe:3d:5f:85:aa:43:80:c0: 69:8a:99:18:3a:ee:42:9f:38:bd:8b:0a:38:ba:be: cd:a3:c0:11:e6:a5:cd:b1:72:d7:6c:c1:94:d7:8b: 0c:ee:eb:c7:93:1c:bc:e8:32:45:d6:00:63:cb:a1: b4:30:98:27:eb:ba:2c:9d:99:61:07:ed:c0:8b:05: d4:03:99:33:b4:fa:36:a3:75:a2:f8:90:b0:b3:62: 58:d5:62:fb:de:1e:08:c0:72:9f:53:4a:1f:24:c3: b9:f7:9e:00:fc:80:63:c4:26:7a:76:15:f1:0d:93: 72:40:68:80:c8:ea:8c:c0:dd:2a:47:df:16:3d:51: e5:6c:1a:35:34:26:18:af:23:09:00:e8:5c:7b:0e: c6:1a:24:7d:18:25:2d:cc:06:22:9b:17:c1:40:6a: d9:28:59:f0:d0:a0:45:6b:6a:87:df:c5:c5:59:95: 14:cb:b6:9c:47:b0:ad:47:68:0a:d2:02:4d:38:af: 03:22:06:f3:73:4a:4f:72:24:3d:d2:01:10:c1:ad: 92:13:3c:f8:19:2a:7c:23:74:93:56:80:03:df:ea: a6:f9:bc:05:95:11:51:0f:12:64:03:bd:80:02:71: 38:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:58:B0:FF:2B:AA:88:D7:68:17:19:90:41:E8:DD:6F:D0:59:DA:4E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d8cc78e9-423a-4dd7-8f00-59edf26c4ef2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d8cc78e9-423a-4dd7-8f00-59edf26c4ef2/d8cc78e9-423a-4dd7-8f00-59edf26c4ef2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 162.252.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:bb:ab:e4:a9:f4:66:d6:18:48:c4:0a:e4:ff:89:93:4a:06: ca:3b:2c:e4:2b:47:9a:bb:97:b7:d3:6d:73:46:e7:6d:90:65: 26:7f:17:6c:09:b3:4c:58:24:2e:36:9f:15:b3:99:a3:1d:d6: 9a:3d:e8:d9:0b:eb:65:18:f6:8f:aa:3a:f6:b0:34:8d:48:8f: b9:66:f7:d3:b3:b1:e0:db:cb:62:8d:83:e9:1e:f3:f4:83:79: c6:8d:f1:9a:b0:fe:33:b0:7b:d4:62:d7:83:64:da:c8:19:d1: 69:7d:d9:58:27:02:22:c6:e5:c4:cf:10:4d:b1:87:bc:df:66: 3d:3b:3a:13:71:81:65:3f:c5:1c:8d:e1:0b:b1:89:2b:62:cf: 7c:de:ea:93:a4:b3:d7:ef:6d:18:11:79:2f:fa:65:f1:23:be: 7d:a4:b8:cd:8c:64:77:75:0d:bb:07:9f:fc:82:d7:fd:64:25: 67:48:5f:d2:ef:79:95:05:8a:fb:07:56:e3:e8:0f:60:13:61: 8e:34:2b:e7:52:ed:e6:f0:4c:68:8b:2c:61:0f:74:64:cc:59: 71:af:f0:87:9e:77:bf:46:13:80:42:22:0c:7c:4d:1c:fd:f8: 9c:e5:35:aa:47:0a:5b:40:d8:6d:34:56:bc:63:05:11:2f:43: ba:20:2b:bc -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE9yWrz3K2HpOZhRyVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwOTE2NDAyNloXDTI5MDExMTE3NDAyNlowLzEtMCsGA1UEAxMk ZDhjYzc4ZTktNDIzYS00ZGQ3LThmMDAtNTllZGYyNmM0ZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXxcoYf/x0w+gHnHXO16TPQHChEZ/j1fhapD gMBpipkYOu5Cnzi9iwo4ur7No8AR5qXNsXLXbMGU14sM7uvHkxy86DJF1gBjy6G0 MJgn67osnZlhB+3AiwXUA5kztPo2o3Wi+JCws2JY1WL73h4IwHKfU0ofJMO5954A /IBjxCZ6dhXxDZNyQGiAyOqMwN0qR98WPVHlbBo1NCYYryMJAOhcew7GGiR9GCUt zAYimxfBQGrZKFnw0KBFa2qH38XFWZUUy7acR7CtR2gK0gJNOK8DIgbzc0pPciQ9 0gEQwa2SEzz4GSp8I3STVoAD3+qm+bwFlRFRDxJkA72AAnE4TQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFdYsP8rqojXaBcZkEHo3W/QWdpOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9k OGNjNzhlOS00MjNhLTRkZDctOGYwMC01OWVkZjI2YzRlZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2Q4Y2M3OGU5LTQyM2EtNGRkNy04 ZjAwLTU5ZWRmMjZjNGVmMi9kOGNjNzhlOS00MjNhLTRkZDctOGYwMC01OWVkZjI2 YzRlZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACi/MUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOrur5Kn0ZtYYSMQK5P+J k0oGyjss5CtHmruXt9Ntc0bnbZBlJn8XbAmzTFgkLjafFbOZox3Wmj3o2QvrZRj2 j6o69rA0jUiPuWb307Ox4NvLYo2D6R7z9IN5xo3xmrD+M7B71GLXg2TayBnRaX3Z WCcCIsblxM8QTbGHvN9mPTs6E3GBZT/FHI3hC7GJK2LPfN7qk6Sz1+9tGBF5L/pl 8SO+faS4zYxkd3UNuwef/ILX/WQlZ0hf0u95lQWK+wdW4+gPYBNhjjQr51Lt5vBM aIssYQ90ZMxZca/wh553v0YTgEIiDHxNHP34nOU1qkcKW0DYbTRWvGMFES9DuiAr vA== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:25 2026 by rpki-client