$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0df7f2ae-3256-4ff0-9b3e-99b10adf41c7.cer File: 0df7f2ae-3256-4ff0-9b3e-99b10adf41c7.cer (raw, json) Hash identifier: 9oOrVuctcy37o+ekM51UeOJg3jlh0GQf75a2LejErEc= Subject key identifier: 85:78:97:7C:6D:84:F1:A2:AB:DA:60:56:3E:19:DF:41:01:E5:01:E5 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FAA5A7CB1E782818DDB671380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0df7f2ae-3256-4ff0-9b3e-99b10adf41c7/0df7f2ae-3256-4ff0-9b3e-99b10adf41c7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0df7f2ae-3256-4ff0-9b3e-99b10adf41c7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Oct 2026 18:05:11 +0000 Certificate not after: Wed 31 Jan 2029 19:05:11 +0000 Subordinate resources: AS: 35913 IP: 23.147.224.0/21 IP: 172.81.40.0/22 IP: 2602:fe90::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:aa:5a:7c:b1:e7:82:81:8d:db:67:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 29 18:05:11 2026 GMT Not After : Jan 31 19:05:11 2029 GMT Subject: CN=0df7f2ae-3256-4ff0-9b3e-99b10adf41c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ac:0f:3d:47:9b:3c:e6:5f:ee:ed:34:34:09: e8:97:2f:6e:fc:11:af:97:92:b8:ed:67:09:37:7f: a3:5e:a7:bd:09:d1:a9:cb:69:82:4d:78:04:09:0e: 64:c7:d3:bf:a8:17:ee:a9:65:12:0f:11:04:76:62: 1e:e0:99:47:f7:d8:00:72:6c:76:2c:da:b7:92:da: d3:4c:59:e6:8c:cf:98:bd:9a:de:54:44:2b:48:30: 69:f5:68:c9:b9:63:20:aa:c8:9b:5c:79:83:31:72: 0c:c7:c7:32:e5:3d:61:d8:e2:3b:41:36:6d:04:26: 29:7c:21:b7:8a:42:54:6c:41:9d:3f:72:35:a6:db: c5:59:25:f4:91:4b:e1:46:e8:40:16:59:e0:f2:82: 7f:ed:2f:c8:b0:2b:91:c5:12:42:9a:ec:8c:28:e4: 16:e6:f5:f7:5b:e0:f2:06:c5:88:e0:32:3b:b6:6a: 43:29:c5:29:38:39:a5:07:f3:97:4a:29:4d:ed:be: 5d:80:df:b2:a4:53:32:77:2f:74:2c:a9:5e:3e:4e: ef:5f:6d:f9:db:29:26:74:7c:c6:06:44:22:df:fd: d9:c6:0c:7a:f4:37:b5:ab:ea:34:9e:56:7c:17:97: 45:97:57:8c:3e:2a:28:55:bf:3c:22:e0:ab:4a:94: d9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:78:97:7C:6D:84:F1:A2:AB:DA:60:56:3E:19:DF:41:01:E5:01:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0df7f2ae-3256-4ff0-9b3e-99b10adf41c7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0df7f2ae-3256-4ff0-9b3e-99b10adf41c7/0df7f2ae-3256-4ff0-9b3e-99b10adf41c7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 23.147.224.0/21 172.81.40.0/22 IPv6: 2602:fe90::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35913 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c6:b2:b7:d3:1d:c1:9c:73:71:a7:51:e5:7a:1c:64:81:f8: 03:33:52:c4:ae:c3:c1:d8:f4:07:36:13:cb:23:01:31:17:5a: ba:a1:e5:82:36:a1:1e:45:41:d3:18:10:40:7a:3d:74:7b:29: dc:88:18:5f:cf:45:9c:1e:73:8a:05:35:99:8e:ab:82:43:e9: 4e:04:b9:5b:1c:e2:3b:15:95:77:9d:27:94:f7:92:be:e8:17: 28:33:19:68:44:ad:49:4a:4d:4e:7b:9a:7e:bc:9f:a0:6b:0f: 50:6c:c6:31:ec:77:1d:66:d1:ec:ad:b3:51:c3:09:45:25:71: 31:51:79:65:a5:9d:b3:4c:2e:b8:24:c3:80:84:cb:95:34:c6: d9:bd:51:4f:ff:ce:01:04:66:8b:38:1e:e8:4a:f8:18:44:b1: fe:53:f3:55:cb:18:78:1e:47:2f:b3:46:e5:da:db:cd:ba:b9: fb:a2:f4:5e:8b:dc:24:e0:62:56:03:f3:c6:fd:fa:a4:b4:03: 4a:3c:7d:4f:de:66:ba:e8:b6:6b:6a:62:09:e5:d5:3e:da:e0: 3b:3e:89:71:97:44:e6:d8:8e:a2:db:f5:7f:e6:a1:8c:03:13: 5b:b9:1e:7e:62:ab:fa:a1:4e:21:51:6e:28:70:a8:92:b7:a4: f0:2e:58:25 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE+qWnyx54KBjdtnE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAyOTE4MDUxMVoXDTI5MDEzMTE5MDUxMVowLzEtMCsGA1UEAxMk MGRmN2YyYWUtMzI1Ni00ZmYwLTliM2UtOTliMTBhZGY0MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KwPPUebPOZf7u00NAnoly9u/BGvl5K47WcJ N3+jXqe9CdGpy2mCTXgECQ5kx9O/qBfuqWUSDxEEdmIe4JlH99gAcmx2LNq3ktrT TFnmjM+YvZreVEQrSDBp9WjJuWMgqsibXHmDMXIMx8cy5T1h2OI7QTZtBCYpfCG3 ikJUbEGdP3I1ptvFWSX0kUvhRuhAFlng8oJ/7S/IsCuRxRJCmuyMKOQW5vX3W+Dy BsWI4DI7tmpDKcUpODmlB/OXSilN7b5dgN+ypFMydy90LKlePk7vX2352ykmdHzG BkQi3/3Zxgx69De1q+o0nlZ8F5dFl1eMPiooVb88IuCrSpTZYwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFIV4l3xthPGiq9pgVj4Z30EB5QHlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8w ZGY3ZjJhZS0zMjU2LTRmZjAtOWIzZS05OWIxMGFkZjQxYzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzBkZjdmMmFlLTMyNTYtNGZmMC05 YjNlLTk5YjEwYWRmNDFjNy8wZGY3ZjJhZS0zMjU2LTRmZjAtOWIzZS05OWIxMGFk ZjQxYzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAMXk+ADBAKsUSgwDgQCAAIwCAMGBCYC/pAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCMSTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCoxrK30x3BnHNxp1Hl ehxkgfgDM1LErsPB2PQHNhPLIwExF1q6oeWCNqEeRUHTGBBAej10eynciBhfz0Wc HnOKBTWZjquCQ+lOBLlbHOI7FZV3nSeU95K+6BcoMxloRK1JSk1Oe5p+vJ+gaw9Q bMYx7HcdZtHsrbNRwwlFJXExUXllpZ2zTC64JMOAhMuVNMbZvVFP/84BBGaLOB7o SvgYRLH+U/NVyxh4Hkcvs0bl2tvNurn7ovRei9wk4GJWA/PG/fqktANKPH1P3ma6 6LZramIJ5dU+2uA7Polxl0Tm2I6i2/V/5qGMAxNbuR5+Yqv6oU4hUW4ocKiSt6Tw Llgl -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:43 2026 by rpki-client