$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16c728fa-8d1f-4521-a68f-f4f573ad75b7.cer File: 16c728fa-8d1f-4521-a68f-f4f573ad75b7.cer (raw, json) Hash identifier: wluYPBEY7mfqop+GXvGMouzEoDzDElW8WfR1DszqAis= Subject key identifier: CB:AC:E4:7C:F2:C9:D3:21:A7:D6:3C:7E:11:5F:9B:E7:40:33:B4:C1 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FACD6DD549D562813DF17E700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16c728fa-8d1f-4521-a68f-f4f573ad75b7/16c728fa-8d1f-4521-a68f-f4f573ad75b7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16c728fa-8d1f-4521-a68f-f4f573ad75b7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Oct 2026 15:27:25 +0000 Certificate not after: Thu 01 Feb 2029 16:27:25 +0000 Subordinate resources: IP: 198.180.199.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ac:d6:dd:54:9d:56:28:13:df:17:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 30 15:27:25 2026 GMT Not After : Feb 1 16:27:25 2029 GMT Subject: CN=16c728fa-8d1f-4521-a68f-f4f573ad75b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:29:30:e8:39:60:b5:a6:ff:fb:d7:d0:6e:d7: a2:6c:4a:19:85:0c:df:18:71:1c:fc:9b:7a:68:47: 10:da:44:c3:05:6b:05:a9:a1:57:d5:45:20:a1:68: 72:17:58:e7:bd:fc:f3:61:db:66:63:a7:04:b5:d4: 31:7b:4c:7d:3c:04:08:fb:85:60:3f:7a:b8:6b:56: c8:c9:01:94:65:b0:42:09:56:72:68:fc:a0:e7:b5: ca:bd:a6:25:0c:c8:1a:e8:60:7f:ca:61:bd:db:3b: 0f:a2:5d:64:c7:e8:36:f8:ed:74:13:ea:2e:75:59: da:4c:f4:2e:07:d8:ea:c1:f2:de:2d:71:33:28:ba: f0:4f:6c:d0:bc:96:98:fb:bc:59:e9:51:8d:e9:86: ce:e0:5b:3b:12:99:c5:54:2c:0a:eb:77:54:10:a1: 96:2d:a9:8a:34:c1:6a:b0:3b:0e:26:07:6b:d5:27: 5e:58:aa:c6:37:e0:4d:71:55:04:dd:ec:e6:37:89: e3:a7:12:1a:c0:3a:dd:17:7e:ee:ed:35:cb:cb:56: 7d:2b:ed:f3:33:35:c2:ff:c0:28:14:01:b4:ba:ea: 5f:20:e1:bd:6c:11:2c:24:75:f1:0f:34:0d:90:50: b9:cb:7c:e1:11:54:71:5e:9d:b4:05:ff:e1:d6:1a: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AC:E4:7C:F2:C9:D3:21:A7:D6:3C:7E:11:5F:9B:E7:40:33:B4:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16c728fa-8d1f-4521-a68f-f4f573ad75b7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/16c728fa-8d1f-4521-a68f-f4f573ad75b7/16c728fa-8d1f-4521-a68f-f4f573ad75b7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 198.180.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d8:9c:b4:19:8e:a7:90:79:ba:cf:19:ac:9a:ec:6f:e1:a0: da:21:7a:ce:76:16:18:80:bd:17:96:37:bd:83:81:74:4f:37: d8:93:5d:a7:34:ef:81:01:6b:8e:e3:35:09:a5:17:33:e8:03: 7d:00:ee:b1:38:74:0e:de:8a:e7:59:7a:06:76:ec:fe:18:30: c4:43:db:77:71:b8:6c:ed:38:3d:59:18:5b:aa:97:76:17:a8: dc:62:af:0a:9b:a4:73:b5:96:16:13:44:9e:36:7b:17:da:95: d7:18:f0:b3:fe:2f:fe:48:37:c9:7f:dd:28:bd:09:0d:e3:53: 19:5c:44:9b:32:1e:e5:53:77:ef:00:6b:3d:2d:8f:c8:aa:6f: ee:fb:5e:f5:96:23:b4:e7:03:71:9a:83:4a:7e:d3:b2:c3:b6: b2:34:c1:c5:45:f2:59:a2:cf:3e:30:c9:e8:8f:73:e6:6f:30: f9:34:ba:4f:01:57:eb:66:96:46:79:52:73:ca:01:ff:f8:58: 6d:74:d8:0b:1c:1b:d4:e8:d8:de:e0:16:ee:c3:dc:10:29:cc: 2e:69:68:41:4f:8a:e6:52:a0:40:be:a0:94:56:f4:11:09:a6: f7:88:6b:c0:c6:d9:a1:06:22:58:8c:04:c0:b8:15:43:37:52: 11:30:72:47 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+s1t1UnVYoE98X5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAzMDE1MjcyNVoXDTI5MDIwMTE2MjcyNVowLzEtMCsGA1UEAxMk MTZjNzI4ZmEtOGQxZi00NTIxLWE2OGYtZjRmNTczYWQ3NWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkikw6Dlgtab/+9fQbteibEoZhQzfGHEc/Jt6 aEcQ2kTDBWsFqaFX1UUgoWhyF1jnvfzzYdtmY6cEtdQxe0x9PAQI+4VgP3q4a1bI yQGUZbBCCVZyaPyg57XKvaYlDMga6GB/ymG92zsPol1kx+g2+O10E+oudVnaTPQu B9jqwfLeLXEzKLrwT2zQvJaY+7xZ6VGN6YbO4Fs7EpnFVCwK63dUEKGWLamKNMFq sDsOJgdr1SdeWKrGN+BNcVUE3ezmN4njpxIawDrdF37u7TXLy1Z9K+3zMzXC/8Ao FAG0uupfIOG9bBEsJHXxDzQNkFC5y3zhEVRxXp20Bf/h1hp87QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMus5HzyydMhp9Y8fhFfm+dAM7TBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8x NmM3MjhmYS04ZDFmLTQ1MjEtYTY4Zi1mNGY1NzNhZDc1YjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzE2YzcyOGZhLThkMWYtNDUyMS1h NjhmLWY0ZjU3M2FkNzViNy8xNmM3MjhmYS04ZDFmLTQ1MjEtYTY4Zi1mNGY1NzNh ZDc1YjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGtMcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALdictBmOp5B5us8ZrJrs b+Gg2iF6znYWGIC9F5Y3vYOBdE832JNdpzTvgQFrjuM1CaUXM+gDfQDusTh0Dt6K 51l6Bnbs/hgwxEPbd3G4bO04PVkYW6qXdheo3GKvCpukc7WWFhNEnjZ7F9qV1xjw s/4v/kg3yX/dKL0JDeNTGVxEmzIe5VN37wBrPS2PyKpv7vte9ZYjtOcDcZqDSn7T ssO2sjTBxUXyWaLPPjDJ6I9z5m8w+TS6TwFX62aWRnlSc8oB//hYbXTYCxwb1OjY 3uAW7sPcECnMLmloQU+K5lKgQL6glFb0EQmm94hrwMbZoQYiWIwEwLgVQzdSETBy Rw== -----END CERTIFICATE-----Generated at Sun Nov 1 14:35:25 2026 by rpki-client