$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/7c33704c-e08c-4677-b0b7-6dbbad4f71f8.cer File: 7c33704c-e08c-4677-b0b7-6dbbad4f71f8.cer (raw, json) Hash identifier: plIwNVpuvhMkNUsWU8ohfE5twjdddWx2SJeCnsHgthM= Subject key identifier: 19:71:E5:4A:BF:F8:EE:EE:76:41:54:4E:82:45:08:F6:86:A1:1C:33 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FAA0E787F8DC2F6BEBC950D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/7c33704c-e08c-4677-b0b7-6dbbad4f71f8/7c33704c-e08c-4677-b0b7-6dbbad4f71f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/7c33704c-e08c-4677-b0b7-6dbbad4f71f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Oct 2026 15:32:02 +0000 Certificate not after: Wed 31 Jan 2029 16:32:02 +0000 Subordinate resources: IP: 205.196.117.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:aa:0e:78:7f:8d:c2:f6:be:bc:95:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 29 15:32:02 2026 GMT Not After : Jan 31 16:32:02 2029 GMT Subject: CN=7c33704c-e08c-4677-b0b7-6dbbad4f71f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:82:93:20:a4:d6:e2:78:e5:43:8e:5b:5f: 0a:7a:02:1e:1b:c9:52:69:1e:4d:37:7b:ac:13:63: b4:32:3b:b7:49:eb:e4:24:8a:ff:0a:32:c4:56:b7: ed:91:8b:2a:79:e9:60:f4:d1:d8:dd:a6:8c:d0:38: be:4f:91:2b:ce:ae:ff:40:ba:c7:48:0c:31:ee:ce: 0d:09:8c:c1:11:8b:d2:c4:53:06:95:0e:0b:a2:3e: 9a:5d:ea:be:f8:ac:38:c9:05:5b:fc:53:ef:55:40: cb:f9:13:eb:db:b9:e9:ac:b1:69:b9:cb:75:81:58: 52:58:a3:a4:2c:ea:4e:06:32:69:32:1d:a3:2f:8d: ce:12:f1:20:65:b1:92:22:c4:b2:13:03:87:53:df: c0:7c:9a:a9:41:71:f8:69:b1:19:27:0c:51:7d:42: 65:d1:d0:88:52:2e:31:02:99:b1:27:99:a7:32:70: 02:32:e7:fa:82:72:68:23:68:02:0c:9e:bf:28:cc: 10:4d:15:72:70:61:47:c5:01:42:1e:07:8a:f2:ff: 75:69:e5:e3:ea:b3:5e:87:d0:84:fd:55:7e:bb:cc: 65:83:42:b8:4d:d0:22:a9:16:fb:28:e2:61:58:55: 35:44:b1:9d:2b:3a:55:0c:64:99:67:2f:b5:26:5e: a4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:71:E5:4A:BF:F8:EE:EE:76:41:54:4E:82:45:08:F6:86:A1:1C:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/7c33704c-e08c-4677-b0b7-6dbbad4f71f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/7c33704c-e08c-4677-b0b7-6dbbad4f71f8/7c33704c-e08c-4677-b0b7-6dbbad4f71f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 205.196.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:40:db:7c:36:68:28:fc:d9:5f:91:48:e3:27:a8:7f:3f:1f: df:ca:d1:50:51:c3:9a:0e:26:dc:72:49:45:31:89:85:a5:64: 88:1b:b7:fe:7d:c6:85:47:b3:0a:74:ec:65:68:ad:f9:17:99: dd:7e:0a:44:e3:43:42:ff:2f:a9:fa:21:c5:3c:a7:09:87:66: 16:39:c4:be:2a:1c:3a:f0:92:d0:48:d8:b3:66:d4:db:bb:b3: d6:f2:2c:94:22:ed:87:5d:b4:9d:6e:f4:11:43:26:ae:c6:dd: 70:85:67:d7:ef:b7:06:01:c0:9f:b9:08:0b:ec:ac:19:32:c0: 24:ba:68:62:7c:3d:1f:3b:75:e9:76:76:f5:01:04:10:ec:42: d2:7e:dd:c7:87:58:be:d7:8e:ce:8c:f6:43:cc:ed:87:7c:42: ae:29:10:d4:b3:3d:5c:67:05:02:05:8e:e2:0a:73:67:59:c6: 72:6d:30:fe:a3:8f:c1:58:a1:0d:fe:e9:5d:35:1f:37:65:46: d2:5a:18:2c:0b:3d:7e:06:72:3b:69:14:d9:49:ea:55:29:45: 33:ae:e0:33:14:ed:6c:20:68:6e:04:91:9b:d2:3b:6b:3e:1e: 0d:b8:bf:cb:1f:4b:df:65:95:ea:26:56:fe:5a:a6:38:78:2d: 95:21:18:71 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+qDnh/jcL2vryVDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAyOTE1MzIwMloXDTI5MDEzMTE2MzIwMlowLzEtMCsGA1UEAxMk N2MzMzcwNGMtZTA4Yy00Njc3LWIwYjctNmRiYmFkNGY3MWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilKCkyCk1uJ45UOOW18KegIeG8lSaR5NN3us E2O0Mju3SevkJIr/CjLEVrftkYsqeelg9NHY3aaM0Di+T5Erzq7/QLrHSAwx7s4N CYzBEYvSxFMGlQ4Loj6aXeq++Kw4yQVb/FPvVUDL+RPr27nprLFpuct1gVhSWKOk LOpOBjJpMh2jL43OEvEgZbGSIsSyEwOHU9/AfJqpQXH4abEZJwxRfUJl0dCIUi4x ApmxJ5mnMnACMuf6gnJoI2gCDJ6/KMwQTRVycGFHxQFCHgeK8v91aeXj6rNeh9CE /VV+u8xlg0K4TdAiqRb7KOJhWFU1RLGdKzpVDGSZZy+1Jl6kLwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBlx5Uq/+O7udkFUToJFCPaGoRwzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi83 YzMzNzA0Yy1lMDhjLTQ2NzctYjBiNy02ZGJiYWQ0ZjcxZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzdjMzM3MDRjLWUwOGMtNDY3Ny1i MGI3LTZkYmJhZDRmNzFmOC83YzMzNzA0Yy1lMDhjLTQ2NzctYjBiNy02ZGJiYWQ0 ZjcxZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADNxHUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARUDbfDZoKPzZX5FI4yeo fz8f38rRUFHDmg4m3HJJRTGJhaVkiBu3/n3GhUezCnTsZWit+ReZ3X4KRONDQv8v qfohxTynCYdmFjnEviocOvCS0EjYs2bU27uz1vIslCLth120nW70EUMmrsbdcIVn 1++3BgHAn7kIC+ysGTLAJLpoYnw9Hzt16XZ29QEEEOxC0n7dx4dYvteOzoz2Q8zt h3xCrikQ1LM9XGcFAgWO4gpzZ1nGcm0w/qOPwVihDf7pXTUfN2VG0loYLAs9fgZy O2kU2UnqVSlFM67gMxTtbCBobgSRm9I7az4eDbi/yx9L32WV6iZW/lqmOHgtlSEY cQ== -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:43 2026 by rpki-client