$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/34467d72-419b-4440-aa49-77c72e2c80f0.cer File: 34467d72-419b-4440-aa49-77c72e2c80f0.cer (raw, json) Hash identifier: xxDICCSQGaxF7/2jCXzLNFMoxxO1fAokOUxwanXwrt8= Subject key identifier: E2:16:4E:BF:5A:73:6B:90:BD:0F:8E:D9:08:B2:77:10:88:94:03:7F Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FB03741463BCB89D5D8198B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/34467d72-419b-4440-aa49-77c72e2c80f0/34467d72-419b-4440-aa49-77c72e2c80f0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/34467d72-419b-4440-aa49-77c72e2c80f0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 31 Oct 2026 20:29:03 +0000 Certificate not after: Fri 02 Feb 2029 21:29:03 +0000 Subordinate resources: IP: 216.116.129.0/24 IP: 2602:f3d6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:37:41:46:3b:cb:89:d5:d8:19:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 31 20:29:03 2026 GMT Not After : Feb 2 21:29:03 2029 GMT Subject: CN=34467d72-419b-4440-aa49-77c72e2c80f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c6:70:e6:61:d2:da:d1:36:05:bc:99:ef:2c: f4:07:e1:8a:e7:d7:ac:b1:d4:bc:2e:83:f8:d7:9c: 43:01:2b:00:89:65:87:ec:e0:ff:76:0c:fe:19:63: 6e:84:bb:d9:8e:1a:e5:44:cd:59:7b:0a:46:de:6a: 56:7e:f0:8a:91:4a:6d:fa:35:22:14:2f:89:14:9c: 05:0a:59:c3:0d:45:d3:95:a2:23:71:68:a3:86:98: ac:31:be:60:22:9d:46:07:ed:c8:80:19:bf:45:7a: 21:67:d8:94:04:c4:fb:66:66:15:ca:8b:9a:e0:f6: ba:c8:32:cb:14:56:9d:54:6a:0d:f2:59:dd:b2:88: 3b:9f:90:4c:19:9e:81:f4:5e:26:22:1e:42:92:ce: b7:88:16:3a:68:7a:36:45:6f:da:97:e1:cd:c6:56: 2e:5b:33:4b:49:c1:ea:12:9b:77:7b:2b:01:7c:00: 78:30:31:fc:10:0b:40:83:ee:4b:90:68:fa:e1:56: 56:ab:86:22:da:0f:21:77:68:fa:d9:02:7b:5b:9e: 39:9d:51:d3:de:c7:c6:61:80:c4:1f:f7:ee:1b:f6: 7f:e3:19:34:4f:5b:62:97:12:86:a5:75:2c:ef:8f: 1c:96:03:2b:ae:1f:4a:66:55:c6:ac:7b:68:4f:c0: b0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:16:4E:BF:5A:73:6B:90:BD:0F:8E:D9:08:B2:77:10:88:94:03:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/34467d72-419b-4440-aa49-77c72e2c80f0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/34467d72-419b-4440-aa49-77c72e2c80f0/34467d72-419b-4440-aa49-77c72e2c80f0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 216.116.129.0/24 IPv6: 2602:f3d6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:80:58:20:92:32:8a:c6:32:dd:f7:70:2c:6c:cd:a8:02:0c: b2:cd:6f:e6:e3:87:27:75:4f:cc:61:a2:ba:45:f5:84:66:33: ff:34:f4:d2:ae:9d:a1:3a:cd:07:dc:0a:53:97:ee:d9:9d:4a: 63:8c:1d:de:e4:58:87:fc:d7:26:e1:68:f9:fa:f1:59:92:68: f0:36:5f:18:31:3a:01:9c:0e:50:82:be:aa:d2:a1:1b:d9:35: 82:1e:d3:e1:fb:e4:83:fc:d8:ae:4b:84:d6:e2:06:29:60:a1: 43:b3:db:d4:0a:ca:d6:9a:87:47:64:8e:6f:75:58:14:69:0b: 96:14:3c:ad:cf:1f:57:75:60:50:7d:c5:4b:10:d7:89:fe:f0: a1:82:fd:fa:67:f3:69:73:85:34:d8:5c:61:a9:c4:0a:00:4c: d8:ec:ef:26:db:4d:48:78:d5:e5:87:32:e9:53:61:0e:1d:fc: f3:c3:e0:8d:3f:df:53:88:61:fd:76:0d:b6:57:4a:b1:45:85: 80:63:4a:4b:41:21:5d:61:14:ed:1d:7f:ba:bf:0b:15:21:45: 99:ae:2b:f4:63:34:83:b5:f6:32:a7:8c:2c:3c:f8:b2:1b:86: 5a:55:65:b1:08:53:3a:38:ba:f8:8b:f4:c5:fd:86:8d:6d:21: 5e:31:41:be -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+wN0FGO8uJ1dgZiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAzMTIwMjkwM1oXDTI5MDIwMjIxMjkwM1owLzEtMCsGA1UEAxMk MzQ0NjdkNzItNDE5Yi00NDQwLWFhNDktNzdjNzJlMmM4MGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsZw5mHS2tE2BbyZ7yz0B+GK59essdS8LoP4 15xDASsAiWWH7OD/dgz+GWNuhLvZjhrlRM1ZewpG3mpWfvCKkUpt+jUiFC+JFJwF ClnDDUXTlaIjcWijhpisMb5gIp1GB+3IgBm/RXohZ9iUBMT7ZmYVyoua4Pa6yDLL FFadVGoN8lndsog7n5BMGZ6B9F4mIh5Cks63iBY6aHo2RW/al+HNxlYuWzNLScHq Ept3eysBfAB4MDH8EAtAg+5LkGj64VZWq4Yi2g8hd2j62QJ7W545nVHT3sfGYYDE H/fuG/Z/4xk0T1tilxKGpXUs748clgMrrh9KZlXGrHtoT8CwvQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFOIWTr9ac2uQvQ+O2QiydxCIlAN/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8z NDQ2N2Q3Mi00MTliLTQ0NDAtYWE0OS03N2M3MmUyYzgwZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzM0NDY3ZDcyLTQxOWItNDQ0MC1h YTQ5LTc3YzcyZTJjODBmMC8zNDQ2N2Q3Mi00MTliLTQ0NDAtYWE0OS03N2M3MmUy YzgwZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADYdIEwDgQCAAIwCAMGACYC89YAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJKAWCCSMorGMt33cCxszagCDLLNb+bjhyd1T8xhorpF9YRmM/809NKunaE6zQfc ClOX7tmdSmOMHd7kWIf81ybhaPn68VmSaPA2XxgxOgGcDlCCvqrSoRvZNYIe0+H7 5IP82K5LhNbiBilgoUOz29QKytaah0dkjm91WBRpC5YUPK3PH1d1YFB9xUsQ14n+ 8KGC/fpn82lzhTTYXGGpxAoATNjs7ybbTUh41eWHMulTYQ4d/PPD4I0/31OIYf12 DbZXSrFFhYBjSktBIV1hFO0df7q/CxUhRZmuK/RjNIO19jKnjCw8+LIbhlpVZbEI Uzo4uviL9MX9ho1tIV4xQb4= -----END CERTIFICATE-----Generated at Sun Nov 1 14:35:09 2026 by rpki-client