$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536.cer File: ea9d7579-0035-4da5-98c8-cea0cb517536.cer (raw, json) Hash identifier: 253rKY8s4FI92cY1siIaCNOIO3loWZJFkmvwU+3MKAg= Subject key identifier: C9:4D:BB:06:0B:45:B5:3F:08:F8:3D:6F:28:76:B5:D3:31:1A:70:B7 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F74682EBCEEF63CB4FAE56E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/ea9d7579-0035-4da5-98c8-cea0cb517536.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 10 Oct 2026 10:19:08 +0000 Certificate not after: Fri 12 Jan 2029 11:19:08 +0000 Subordinate resources: IP: 199.127.44.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:68:2e:bc:ee:f6:3c:b4:fa:e5:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 10 10:19:08 2026 GMT Not After : Jan 12 11:19:08 2029 GMT Subject: CN=ea9d7579-0035-4da5-98c8-cea0cb517536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:d2:62:9e:2e:e5:38:c2:8a:e7:2c:c4:9d: f9:2a:fb:41:76:c2:b8:73:44:ce:55:9f:46:ae:5f: 88:cf:6e:42:63:e5:02:b1:00:f5:a1:bc:6a:d8:30: c8:9f:16:57:3e:76:c8:0c:55:f9:8c:df:28:8b:b2: 9f:85:3b:ad:9c:bc:7e:50:39:6c:dc:81:a5:dd:3a: db:ee:00:b3:ca:bb:1d:56:e5:53:7e:1e:fe:2c:6c: 5e:f6:88:44:6c:cb:03:51:f5:b3:f4:e3:a3:5e:fc: f1:bd:8d:6c:79:e2:61:3c:65:bb:d1:bb:52:e1:93: d3:db:70:32:c2:6c:3e:37:65:26:6f:a0:5d:89:47: cc:30:25:32:e2:89:77:1b:ff:3d:ea:09:76:b0:c6: be:94:6d:ee:2c:0f:4c:b7:c5:cc:c8:76:02:47:28: a2:62:09:c0:a0:05:57:64:7e:c9:82:f4:78:3d:a0: ba:c7:b6:50:1e:1b:63:24:08:5b:c6:b2:fd:fa:a3: 28:3b:d0:ba:63:d5:3f:f8:8b:c5:66:52:af:9b:dd: b3:f8:23:0f:2b:aa:2e:76:d7:46:a8:c0:29:ad:0a: 60:c6:c3:8e:d3:cf:3c:a6:4d:de:d6:3e:52:b9:94: 49:4a:4d:3c:7f:1f:e0:33:85:f8:1a:d9:62:9b:2f: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4D:BB:06:0B:45:B5:3F:08:F8:3D:6F:28:76:B5:D3:31:1A:70:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/ea9d7579-0035-4da5-98c8-cea0cb517536.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 199.127.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a2:3c:e1:e7:6d:7b:76:d3:9e:97:c0:46:89:63:3e:7a:c9: 30:99:3e:21:a2:5c:db:90:3b:b7:14:5a:bd:1b:00:3c:84:1f: 5e:62:87:38:9a:f0:b5:36:d9:a3:6e:62:fa:cd:f2:7d:dd:1d: 87:4a:e5:cb:08:64:ec:d3:49:59:91:4d:b2:c4:cb:7b:de:41: a2:da:5d:63:10:e7:bc:fb:bf:66:41:28:0b:17:4f:79:96:ea: 71:5a:38:4d:28:fa:7f:09:2f:2d:a5:0e:eb:2e:09:ab:02:b8: 43:e8:1b:29:0d:fb:6d:d4:fe:d9:04:a0:76:7b:1a:22:4e:8f: ef:68:b5:65:83:0e:a7:2c:03:f3:69:01:b3:25:15:4b:55:15: c2:46:99:14:bd:a3:28:09:9f:bd:5e:d3:21:51:73:8d:f0:fa: 8b:db:1b:f7:05:ec:36:b1:47:f6:29:be:7d:98:b4:90:d9:83: 93:ce:93:77:ef:ec:fd:9d:8b:bd:5f:b1:4a:3c:70:e0:15:03: 63:31:e3:b2:b6:ec:6b:cf:e4:cf:2b:fe:00:c9:b0:58:ee:56: ac:64:99:32:9e:b5:4a:c4:9e:f4:1e:fa:3e:8e:90:99:52:30: e8:60:fe:f3:2f:89:f5:cd:a5:59:8c:88:c1:bd:d6:fc:ee:fb: 0e:0b:84:fa -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE90aC687vY8tPrlbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMDEwMTkwOFoXDTI5MDExMjExMTkwOFowLzEtMCsGA1UEAxMk ZWE5ZDc1NzktMDAzNS00ZGE1LTk4YzgtY2VhMGNiNTE3NTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl43SYp4u5TjCiucsxJ35KvtBdsK4c0TOVZ9G rl+Iz25CY+UCsQD1obxq2DDInxZXPnbIDFX5jN8oi7KfhTutnLx+UDls3IGl3Trb 7gCzyrsdVuVTfh7+LGxe9ohEbMsDUfWz9OOjXvzxvY1seeJhPGW70btS4ZPT23Ay wmw+N2Umb6BdiUfMMCUy4ol3G/896gl2sMa+lG3uLA9Mt8XMyHYCRyiiYgnAoAVX ZH7JgvR4PaC6x7ZQHhtjJAhbxrL9+qMoO9C6Y9U/+IvFZlKvm92z+CMPK6oudtdG qMAprQpgxsOO0888pk3e1j5SuZRJSk08fx/gM4X4Gtlimy+vcQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMlNuwYLRbU/CPg9byh2tdMxGnC3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9l YTlkNzU3OS0wMDM1LTRkYTUtOThjOC1jZWEwY2I1MTc1MzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2VhOWQ3NTc5LTAwMzUtNGRhNS05 OGM4LWNlYTBjYjUxNzUzNi9lYTlkNzU3OS0wMDM1LTRkYTUtOThjOC1jZWEwY2I1 MTc1MzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHfywwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhKI84edte3bTnpfARolj PnrJMJk+IaJc25A7txRavRsAPIQfXmKHOJrwtTbZo25i+s3yfd0dh0rlywhk7NNJ WZFNssTLe95BotpdYxDnvPu/ZkEoCxdPeZbqcVo4TSj6fwkvLaUO6y4JqwK4Q+gb KQ37bdT+2QSgdnsaIk6P72i1ZYMOpywD82kBsyUVS1UVwkaZFL2jKAmfvV7TIVFz jfD6i9sb9wXsNrFH9im+fZi0kNmDk86Td+/s/Z2LvV+xSjxw4BUDYzHjsrbsa8/k zyv+AMmwWO5WrGSZMp61SsSe9B76Po6QmVIw6GD+8y+J9c2lWYyIwb3W/O77DguE +g== -----END CERTIFICATE-----Generated at Mon Oct 19 20:57:54 2026 by rpki-client