$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/47d8a1ab-281b-42cc-9c07-bbadbeb9ff1a.cer File: 47d8a1ab-281b-42cc-9c07-bbadbeb9ff1a.cer (raw, json) Hash identifier: 5HqY8+kFIKrRtHL5rXJAFxltH2Iy5wYemYuVeD65nww= Subject key identifier: CA:B2:BF:21:EA:87:98:7E:19:C6:17:E6:4E:25:3F:0C:ED:6E:0B:2B Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FAAA6FAE32F82D9F2F18A67C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/47d8a1ab-281b-42cc-9c07-bbadbeb9ff1a/47d8a1ab-281b-42cc-9c07-bbadbeb9ff1a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/47d8a1ab-281b-42cc-9c07-bbadbeb9ff1a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Oct 2026 20:39:19 +0000 Certificate not after: Wed 31 Jan 2029 21:39:19 +0000 Subordinate resources: IP: 143.203.224.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:aa:a6:fa:e3:2f:82:d9:f2:f1:8a:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 29 20:39:19 2026 GMT Not After : Jan 31 21:39:19 2029 GMT Subject: CN=47d8a1ab-281b-42cc-9c07-bbadbeb9ff1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:79:d2:c0:0f:fe:2a:27:89:0d:bf:7a:04:8e: ff:b3:c3:76:7b:c6:69:51:e7:a8:7a:3e:88:26:94: 47:7e:5e:6f:75:8d:cc:02:33:0f:e2:9a:cb:2a:c0: e4:5a:cd:19:db:f8:9d:6d:33:75:08:46:b6:80:25: 7a:44:b8:f8:e2:52:54:bf:b0:7b:ec:02:5a:05:eb: 29:bc:50:b6:66:a0:95:42:83:89:72:ca:74:18:bd: 16:9a:09:6a:10:77:1a:b1:bb:c2:38:7f:b6:9c:c9: 80:3e:a6:f7:d4:97:0f:da:38:3f:b3:f3:34:c8:f8: b3:34:5c:33:94:8d:f1:5e:fc:03:e7:e7:fb:e7:27: aa:bd:48:d3:8c:f3:d8:6e:9f:ae:6e:68:ff:e0:e0: 11:1d:08:a9:c0:d7:1a:2c:fa:8d:4c:94:f1:ef:69: 17:a3:bd:1e:5b:63:37:55:3d:8b:ed:c7:51:2c:03: 5d:22:1c:b7:28:32:19:b8:09:22:4d:d6:01:01:4d: 1b:d9:d1:1b:e4:fa:69:b3:91:13:bb:0c:dd:15:7d: aa:fc:ed:23:3d:53:96:d5:0c:69:3e:a5:49:78:7e: a3:90:96:08:0b:82:18:87:3e:db:0c:5e:9f:12:8e: cf:cf:be:fe:f0:38:62:7b:7b:0a:ae:7f:ae:7a:d7: 88:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B2:BF:21:EA:87:98:7E:19:C6:17:E6:4E:25:3F:0C:ED:6E:0B:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/47d8a1ab-281b-42cc-9c07-bbadbeb9ff1a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/47d8a1ab-281b-42cc-9c07-bbadbeb9ff1a/47d8a1ab-281b-42cc-9c07-bbadbeb9ff1a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 143.203.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9f:c4:67:ff:9b:d8:f3:eb:e4:24:92:e9:7e:17:c4:6a:25: a0:8c:be:1a:bc:d6:34:d8:6f:66:1a:2a:af:cb:64:5d:b8:43: 6f:01:a2:e1:dd:31:d8:44:6a:a2:50:5c:8c:f6:8d:40:70:4c: 90:a3:dc:ac:e3:0e:c5:2b:d5:64:21:bc:86:ad:87:aa:92:93: 39:64:61:bc:34:b2:18:c4:38:bb:3b:37:4e:61:bd:4b:1d:1d: 00:46:dc:c2:c8:87:3a:29:54:67:7d:9f:93:59:76:6b:3b:18: 60:72:88:da:ba:6b:02:9e:58:a6:f9:06:08:fc:85:5e:19:b2: 11:4a:03:8a:f8:56:32:64:fd:31:15:39:c8:5c:0e:1b:35:af: 11:96:08:92:7d:14:1a:14:dd:32:4b:dd:43:24:01:2e:79:6a: 92:41:b6:d6:61:ab:2a:d5:0a:77:3b:f7:64:44:8c:67:9c:fa: a9:82:04:bd:27:90:34:c8:47:01:6a:65:84:1e:df:ed:bf:ee: 7b:d7:1f:6a:3e:a3:94:2b:c8:9d:ad:26:a3:c1:02:d2:38:7b: af:3b:8f:29:a0:a4:79:0c:0b:5a:fd:93:8b:eb:b6:d6:46:69: 95:e2:13:63:ca:6e:b3:de:a9:2b:47:05:1d:94:89:95:8c:48: 1d:e9:b4:79 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+qpvrjL4LZ8vGKZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAyOTIwMzkxOVoXDTI5MDEzMTIxMzkxOVowLzEtMCsGA1UEAxMk NDdkOGExYWItMjgxYi00MmNjLTljMDctYmJhZGJlYjlmZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnnSwA/+KieJDb96BI7/s8N2e8ZpUeeoej6I JpRHfl5vdY3MAjMP4prLKsDkWs0Z2/idbTN1CEa2gCV6RLj44lJUv7B77AJaBesp vFC2ZqCVQoOJcsp0GL0WmglqEHcasbvCOH+2nMmAPqb31JcP2jg/s/M0yPizNFwz lI3xXvwD5+f75yeqvUjTjPPYbp+ubmj/4OARHQipwNcaLPqNTJTx72kXo70eW2M3 VT2L7cdRLANdIhy3KDIZuAkiTdYBAU0b2dEb5Ppps5ETuwzdFX2q/O0jPVOW1Qxp PqVJeH6jkJYIC4IYhz7bDF6fEo7Pz77+8Dhie3sKrn+ueteIEwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMqyvyHqh5h+GcYX5k4lPwztbgsrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi80 N2Q4YTFhYi0yODFiLTQyY2MtOWMwNy1iYmFkYmViOWZmMWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzQ3ZDhhMWFiLTI4MWItNDJjYy05 YzA3LWJiYWRiZWI5ZmYxYS80N2Q4YTFhYi0yODFiLTQyY2MtOWMwNy1iYmFkYmVi OWZmMWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKPy+AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJJ/EZ/+b2PPr5CSS6X4X xGoloIy+GrzWNNhvZhoqr8tkXbhDbwGi4d0x2ERqolBcjPaNQHBMkKPcrOMOxSvV ZCG8hq2HqpKTOWRhvDSyGMQ4uzs3TmG9Sx0dAEbcwsiHOilUZ32fk1l2azsYYHKI 2rprAp5YpvkGCPyFXhmyEUoDivhWMmT9MRU5yFwOGzWvEZYIkn0UGhTdMkvdQyQB LnlqkkG21mGrKtUKdzv3ZESMZ5z6qYIEvSeQNMhHAWplhB7f7b/ue9cfaj6jlCvI na0mo8EC0jh7rzuPKaCkeQwLWv2Ti+u21kZpleITY8pus96pK0cFHZSJlYxIHem0 eQ== -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:41 2026 by rpki-client