$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer File: 78ffdd14-7e7a-46d4-993a-4b51f8031030.cer (raw, json) Hash identifier: 6C4iyv7xvAkrAI/EAvZmXWzDCVQYo9cGyF2YLVaA1o4= Subject key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DDE7E31053E75BF26795A7CF8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 May 2026 00:45:17 +0000 Certificate not after: Sun 20 Aug 2028 00:45:17 +0000 Subordinate resources: IP: 165.140.58.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:7e:31:05:3e:75:bf:26:79:5a:7c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 18 00:45:17 2026 GMT Not After : Aug 20 00:45:17 2028 GMT Subject: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:06:0c:33:ae:78:47:01:7c:9c:1b:32:4c:8a: 2b:3e:20:ec:14:c5:f1:c9:4f:10:f3:bb:4e:e6:2f: d9:b4:52:29:37:c2:26:27:d3:55:12:32:ca:9c:82: ba:c3:55:8a:b3:82:88:a4:f1:2f:b4:1a:e0:22:a8: ed:78:86:6f:ec:9d:57:94:35:28:9b:6a:03:1c:f4: 87:c4:f4:83:ff:5c:7e:af:d4:5d:42:95:bd:fd:90: 99:95:5e:70:30:2e:97:5b:47:44:0e:a9:af:a0:5e: 6a:51:6d:7a:58:9c:28:52:a1:11:4d:28:1e:20:4d: d4:1c:2a:52:b6:1c:df:38:95:f4:59:fb:b4:cb:f8: 47:80:04:f4:a0:d3:5a:f5:1f:d8:57:63:8c:45:22: 75:cd:da:2b:b3:ea:70:77:94:63:38:93:fd:2e:e8: a6:65:28:0a:52:ce:15:45:35:6c:6b:c1:1f:08:27: ba:95:8e:9e:cd:2f:93:c2:0a:8f:67:e3:b9:de:c9: fc:75:06:d5:45:81:e2:02:22:d4:4d:77:26:7c:67: 85:6e:b8:ed:73:02:5c:be:1e:25:cb:1b:cd:c6:75: e3:f0:db:04:93:1d:12:82:8a:25:70:f1:1d:12:a8: 67:0b:9f:2f:f9:d8:5c:23:03:e5:2b:19:96:44:8d: 8a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 165.140.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:92:3c:69:60:42:36:c2:97:61:aa:fe:0a:1a:d2:48:4a:e9: 4f:63:aa:16:a4:f2:31:ee:b1:fb:e8:5f:3b:94:d4:55:ec:af: a0:bc:19:18:a5:0a:76:4b:e4:89:11:c2:dd:e0:4c:00:9d:d3: 1f:ad:72:69:34:4c:02:6b:72:6a:6e:a3:ff:03:ef:ab:5d:03: 39:79:3b:0a:26:b4:8b:62:0f:b5:bf:95:a5:a5:8a:86:c0:fa: d6:45:74:e1:90:9f:5d:5b:50:dd:6f:29:de:10:77:8a:12:7c: d1:0c:a6:11:c7:0d:b0:e3:79:a0:ba:00:fb:9c:b1:13:a5:a4: 42:ce:a1:96:0f:41:d1:6b:0b:35:43:00:d7:0a:a0:f3:ca:14: 4a:55:4e:d4:7d:d0:de:a2:43:3f:34:2e:ae:cf:7e:60:69:7c: 54:af:ef:93:f6:2e:80:65:a7:40:de:c9:de:ae:04:a1:89:7c: 36:a7:ba:74:fc:3e:ae:f8:cc:33:cc:54:7e:ca:23:5a:81:d3: f5:a1:05:45:55:08:ce:a0:a3:85:51:9b:54:4e:08:a1:eb:c4: 9c:0e:a1:80:5e:9b:71:b3:21:96:ab:05:37:1e:f5:38:fe:69: 25:7a:e2:16:9a:7d:df:b4:e6:dd:63:0d:36:0e:b7:75:2a:8f: 76:a4:99:d7 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3efjEFPnW/JnlafPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUxODAwNDUxN1oXDTI4MDgyMDAwNDUxN1owLzEtMCsGA1UEAxMk NzhmZmRkMTQtN2U3YS00NmQ0LTk5M2EtNGI1MWY4MDMxMDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwYMM654RwF8nBsyTIorPiDsFMXxyU8Q87tO 5i/ZtFIpN8ImJ9NVEjLKnIK6w1WKs4KIpPEvtBrgIqjteIZv7J1XlDUom2oDHPSH xPSD/1x+r9RdQpW9/ZCZlV5wMC6XW0dEDqmvoF5qUW16WJwoUqERTSgeIE3UHCpS thzfOJX0Wfu0y/hHgAT0oNNa9R/YV2OMRSJ1zdors+pwd5RjOJP9LuimZSgKUs4V RTVsa8EfCCe6lY6ezS+TwgqPZ+O53sn8dQbVRYHiAiLUTXcmfGeFbrjtcwJcvh4l yxvNxnXj8NsEkx0SgoolcPEdEqhnC58v+dhcIwPlKxmWRI2KEQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFP0Ls4YAFYYNfQovG1szl5e5lU67MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 OGZmZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUxZjgwMzEwMzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc4ZmZkZDE0LTdlN2EtNDZkNC05 OTNhLTRiNTFmODAzMTAzMC83OGZmZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUxZjgw MzEwMzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGljDowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADpI8aWBCNsKXYar+ChrS SErpT2OqFqTyMe6x++hfO5TUVeyvoLwZGKUKdkvkiRHC3eBMAJ3TH61yaTRMAmty am6j/wPvq10DOXk7Cia0i2IPtb+VpaWKhsD61kV04ZCfXVtQ3W8p3hB3ihJ80Qym EccNsON5oLoA+5yxE6WkQs6hlg9B0WsLNUMA1wqg88oUSlVO1H3Q3qJDPzQurs9+ YGl8VK/vk/YugGWnQN7J3q4EoYl8Nqe6dPw+rvjMM8xUfsojWoHT9aEFRVUIzqCj hVGbVE4IoevEnA6hgF6bcbMhlqsFNx71OP5pJXriFpp937Tm3WMNNg63dSqPdqSZ 1w== -----END CERTIFICATE-----Generated at Sat Jun 13 11:15:53 2026 by rpki-client