$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2f292766-3d4f-4747-9c54-08b28d8e6691.cer File: 2f292766-3d4f-4747-9c54-08b28d8e6691.cer (raw, json) Hash identifier: 3XN3HFNffhm65qcgGkTvhDqzksXrHq14lIn3ByqHVtU= Subject key identifier: 3B:DD:16:FA:9B:7B:46:3F:A7:5E:7F:D0:08:52:76:76:C0:BF:10:96 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FAFB1475C3B1AC58072FF7E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2f292766-3d4f-4747-9c54-08b28d8e6691/2f292766-3d4f-4747-9c54-08b28d8e6691.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2f292766-3d4f-4747-9c54-08b28d8e6691/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 31 Oct 2026 15:59:06 +0000 Certificate not after: Fri 02 Feb 2029 16:59:06 +0000 Subordinate resources: IP: 158.51.155.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:af:b1:47:5c:3b:1a:c5:80:72:ff:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 31 15:59:06 2026 GMT Not After : Feb 2 16:59:06 2029 GMT Subject: CN=2f292766-3d4f-4747-9c54-08b28d8e6691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:26:5a:57:c5:75:1a:9a:71:5f:0e:be:eb: 74:ea:34:ea:d2:a5:16:de:27:69:27:1e:6c:56:8f: 2d:98:c8:cf:12:42:e1:66:de:96:ca:c1:d2:3d:c9: 19:25:00:8c:e9:be:0e:8f:9a:93:ce:23:b2:0a:fa: 1a:da:1b:e5:d8:8f:84:47:06:56:77:4e:66:fb:0b: d6:47:2e:a5:cf:95:0c:29:92:a9:e3:ca:a6:25:c1: 62:be:94:96:5d:89:eb:95:84:54:1c:ba:ac:14:61: f8:bf:50:53:ae:a2:3f:ab:09:ae:42:a2:95:9b:8e: 38:60:ee:90:fd:6b:b1:a4:96:23:eb:02:41:3d:77: 3d:1e:92:bf:4d:18:83:ae:6e:8b:4b:91:86:45:c9: 63:f0:32:d2:cf:6c:e2:bd:62:ae:88:62:ee:c5:ee: 4c:c7:b9:29:1a:fa:fa:96:0d:af:a6:83:f2:cf:6f: 5d:0f:78:2c:04:a0:7e:fe:57:5a:39:ce:cf:0c:25: 03:62:46:37:79:80:c2:b3:6f:8b:ed:71:80:b3:c0: ab:ff:20:a6:43:57:4a:3b:1b:5b:5f:ee:d1:00:8b: 28:f9:bd:73:90:79:28:5d:ab:72:3c:16:34:11:37: ff:c1:84:41:0a:e4:40:f3:ca:26:d8:99:8a:53:e8: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DD:16:FA:9B:7B:46:3F:A7:5E:7F:D0:08:52:76:76:C0:BF:10:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2f292766-3d4f-4747-9c54-08b28d8e6691/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2f292766-3d4f-4747-9c54-08b28d8e6691/2f292766-3d4f-4747-9c54-08b28d8e6691.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 158.51.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:99:dc:ef:dc:91:d9:52:64:62:ec:a1:ed:64:3e:1c:b6:1f: 0f:bb:3c:5f:77:73:2e:83:20:ba:59:b7:5c:96:30:a9:1b:a9: 58:0d:2d:35:87:ac:fc:35:da:23:37:6f:fa:74:61:01:9b:df: f7:d0:02:13:e7:32:8a:e2:5e:c4:72:29:72:d3:2c:5c:e5:ae: ad:b9:79:f8:25:b9:87:0f:0c:ce:a6:e8:21:41:2a:2f:8e:73: 2e:0d:ca:9e:a5:42:78:2a:d7:1f:a6:3d:80:bf:b9:de:50:2e: 24:79:7d:22:43:b1:c2:18:ac:1d:3a:21:a0:c1:cb:18:59:9b: 1f:15:ef:4d:a1:ce:f4:63:dd:5b:35:db:f9:dd:c7:d2:55:1d: d0:cd:76:33:46:6d:0a:20:aa:25:ea:27:37:16:00:f9:b5:b0: 9b:9e:59:00:7e:ae:ea:d2:33:f6:63:34:aa:17:47:f0:3c:0d: ee:2d:7f:f0:18:9c:14:02:a6:73:00:b8:9f:05:ec:7a:c1:17: 42:b5:88:95:93:85:f1:92:36:6b:fe:de:15:98:a6:5f:cc:35: 3f:86:51:fe:cb:da:f5:79:4d:b3:66:82:51:cc:20:8e:57:d3: 24:1c:43:c3:19:da:8b:62:45:64:aa:e1:bd:72:44:c7:b7:21: 33:53:03:55 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+vsUdcOxrFgHL/fkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAzMTE1NTkwNloXDTI5MDIwMjE2NTkwNlowLzEtMCsGA1UEAxMk MmYyOTI3NjYtM2Q0Zi00NzQ3LTljNTQtMDhiMjhkOGU2NjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2omWlfFdRqacV8Ovut06jTq0qUW3idpJx5s Vo8tmMjPEkLhZt6WysHSPckZJQCM6b4Oj5qTziOyCvoa2hvl2I+ERwZWd05m+wvW Ry6lz5UMKZKp48qmJcFivpSWXYnrlYRUHLqsFGH4v1BTrqI/qwmuQqKVm444YO6Q /WuxpJYj6wJBPXc9HpK/TRiDrm6LS5GGRclj8DLSz2zivWKuiGLuxe5Mx7kpGvr6 lg2vpoPyz29dD3gsBKB+/ldaOc7PDCUDYkY3eYDCs2+L7XGAs8Cr/yCmQ1dKOxtb X+7RAIso+b1zkHkoXatyPBY0ETf/wYRBCuRA88om2JmKU+hujQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDvdFvqbe0Y/p15/0AhSdnbAvxCWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8y ZjI5Mjc2Ni0zZDRmLTQ3NDctOWM1NC0wOGIyOGQ4ZTY2OTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzJmMjkyNzY2LTNkNGYtNDc0Ny05 YzU0LTA4YjI4ZDhlNjY5MS8yZjI5Mjc2Ni0zZDRmLTQ3NDctOWM1NC0wOGIyOGQ4 ZTY2OTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACeM5swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKJnc79yR2VJkYuyh7WQ+ HLYfD7s8X3dzLoMgulm3XJYwqRupWA0tNYes/DXaIzdv+nRhAZvf99ACE+cyiuJe xHIpctMsXOWurbl5+CW5hw8MzqboIUEqL45zLg3KnqVCeCrXH6Y9gL+53lAuJHl9 IkOxwhisHTohoMHLGFmbHxXvTaHO9GPdWzXb+d3H0lUd0M12M0ZtCiCqJeonNxYA +bWwm55ZAH6u6tIz9mM0qhdH8DwN7i1/8BicFAKmcwC4nwXsesEXQrWIlZOF8ZI2 a/7eFZimX8w1P4ZR/sva9XlNs2aCUcwgjlfTJBxDwxnai2JFZKrhvXJEx7chM1MD VQ== -----END CERTIFICATE-----Generated at Sun Nov 1 14:35:12 2026 by rpki-client