$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed.cer File: 4f03c6aa-8d91-4885-b92c-f839de5529ed.cer (raw, json) Hash identifier: G7ZdhCDKg5facNd1AT2OmyRS0YrDQGbUvQJFF9w4F7I= Subject key identifier: BE:1B:CA:7F:4C:49:F6:28:BE:9B:4A:B9:AC:88:23:59:97:AC:27:AB Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FAEBECA38A7EFEFD2BB3F12A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/4f03c6aa-8d91-4885-b92c-f839de5529ed.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 31 Oct 2026 07:50:31 +0000 Certificate not after: Fri 02 Feb 2029 08:50:31 +0000 Subordinate resources: IP: 198.134.24.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ae:be:ca:38:a7:ef:ef:d2:bb:3f:12:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 31 07:50:31 2026 GMT Not After : Feb 2 08:50:31 2029 GMT Subject: CN=4f03c6aa-8d91-4885-b92c-f839de5529ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ca:85:3b:ed:f9:62:6d:ab:40:6e:2f:77:23: 5c:19:4d:06:11:c6:f0:0a:32:b5:75:c3:19:3a:13: 25:ea:89:a1:47:55:cd:ea:96:47:cc:45:72:0f:84: 09:48:85:21:97:e9:3f:f9:d5:03:93:4a:f1:1d:75: db:a6:6d:0c:02:b8:e6:7a:9b:49:6b:bd:0a:c4:91: c9:d9:3a:2e:43:3f:64:97:eb:38:d8:b8:c8:1e:f5: bb:92:42:6b:f1:b3:f2:27:37:4a:fe:b0:14:09:b8: f6:32:04:87:c2:74:b2:0a:72:c8:ac:e0:cb:d2:d8: ab:ea:c8:89:77:18:b2:97:75:2a:77:bf:e0:4e:7f: 6d:16:43:9b:39:12:49:10:ac:13:c8:8f:f2:e1:de: aa:65:97:e6:de:5c:3e:48:83:08:2a:1c:08:5f:34: a5:5f:d2:6d:a9:43:1f:36:3e:0e:95:3a:54:09:34: b8:6c:d3:1c:20:7c:1a:b7:e1:22:0f:c3:70:05:ee: ce:a9:72:ca:a7:5d:ce:f0:4d:52:ee:97:e6:b0:04: 8d:b0:90:07:72:02:8c:da:a9:4c:78:b0:26:95:ed: 77:e1:9f:37:98:b9:d1:2d:56:7f:c0:10:8b:a8:e4: ba:25:41:d4:4e:0a:07:14:07:42:a1:10:9f:cc:1c: 98:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1B:CA:7F:4C:49:F6:28:BE:9B:4A:B9:AC:88:23:59:97:AC:27:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/4f03c6aa-8d91-4885-b92c-f839de5529ed.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 198.134.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f5:25:bb:99:f4:fe:1e:2d:f2:44:a0:51:e5:3f:1f:e7:ca: ba:aa:f4:8e:a9:d9:26:be:df:c2:85:30:06:28:a1:52:cc:03: b4:ed:e4:20:d5:48:48:a3:4a:39:35:a8:49:fe:e9:61:13:47: 92:3d:e3:67:32:9d:af:bc:5a:c7:6d:0e:2e:ab:e5:7b:81:51: f7:02:ec:7c:53:db:bd:47:1d:7f:66:14:78:d6:02:d0:d8:ed: 81:af:0a:bf:79:6f:d9:e7:92:48:9d:26:7d:6f:fa:92:0b:fd: e4:80:b9:13:bc:85:9e:59:db:4f:8a:ff:19:b2:d5:ff:8d:44: 7c:3f:5b:59:fb:1d:24:36:09:1b:e8:b5:7c:a6:72:35:50:b2: 42:51:07:39:de:93:e2:ec:e0:2e:19:bf:b1:ae:cb:2c:f9:3d: 25:83:11:1b:38:55:96:47:e2:66:5b:ca:a5:26:fb:85:4a:7a: e2:2b:bd:19:6d:f2:c6:5c:9a:4e:16:9a:07:c2:1f:85:76:76: 64:3f:06:dd:ff:14:fe:f9:76:2b:40:60:e6:1e:49:42:8f:87: cb:1a:6d:52:09:53:e8:87:0c:f5:a0:1b:1a:20:50:0c:2e:eb: ae:3c:e2:61:57:86:fc:d5:2c:2a:0a:d1:19:d6:06:6a:35:7a: ca:8d:d8:62 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+uvso4p+/v0rs/EqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAzMTA3NTAzMVoXDTI5MDIwMjA4NTAzMVowLzEtMCsGA1UEAxMk NGYwM2M2YWEtOGQ5MS00ODg1LWI5MmMtZjgzOWRlNTUyOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsqFO+35Ym2rQG4vdyNcGU0GEcbwCjK1dcMZ OhMl6omhR1XN6pZHzEVyD4QJSIUhl+k/+dUDk0rxHXXbpm0MArjmeptJa70KxJHJ 2TouQz9kl+s42LjIHvW7kkJr8bPyJzdK/rAUCbj2MgSHwnSyCnLIrODL0tir6siJ dxiyl3Uqd7/gTn9tFkObORJJEKwTyI/y4d6qZZfm3lw+SIMIKhwIXzSlX9JtqUMf Nj4OlTpUCTS4bNMcIHwat+EiD8NwBe7OqXLKp13O8E1S7pfmsASNsJAHcgKM2qlM eLAmle134Z83mLnRLVZ/wBCLqOS6JUHUTgoHFAdCoRCfzByYQwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFL4byn9MSfYovptKuayII1mXrCerMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi80 ZjAzYzZhYS04ZDkxLTQ4ODUtYjkyYy1mODM5ZGU1NTI5ZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzRmMDNjNmFhLThkOTEtNDg4NS1i OTJjLWY4MzlkZTU1MjllZC80ZjAzYzZhYS04ZDkxLTQ4ODUtYjkyYy1mODM5ZGU1 NTI5ZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALGhhgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV/Ulu5n0/h4t8kSgUeU/ H+fKuqr0jqnZJr7fwoUwBiihUswDtO3kINVISKNKOTWoSf7pYRNHkj3jZzKdr7xa x20OLqvle4FR9wLsfFPbvUcdf2YUeNYC0Njtga8Kv3lv2eeSSJ0mfW/6kgv95IC5 E7yFnlnbT4r/GbLV/41EfD9bWfsdJDYJG+i1fKZyNVCyQlEHOd6T4uzgLhm/sa7L LPk9JYMRGzhVlkfiZlvKpSb7hUp64iu9GW3yxlyaThaaB8IfhXZ2ZD8G3f8U/vl2 K0Bg5h5JQo+HyxptUglT6IcM9aAbGiBQDC7rrjziYVeG/NUsKgrRGdYGajV6yo3Y Yg== -----END CERTIFICATE-----Generated at Sun Nov 1 13:30:56 2026 by rpki-client