$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/81c27047-b4f6-48f9-8e60-7347f3cd8023.cer File: 81c27047-b4f6-48f9-8e60-7347f3cd8023.cer (raw, json) Hash identifier: K6eJa6NGJ1Dh5rmk2QdjKjJRqd0GE9isP64phmhLyNo= Subject key identifier: 18:CF:EA:54:A0:A1:F1:BF:85:06:33:22:04:58:E5:FA:8D:F1:72:BA Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FA7C3A6FE449689AE5F241240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/81c27047-b4f6-48f9-8e60-7347f3cd8023/81c27047-b4f6-48f9-8e60-7347f3cd8023.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/81c27047-b4f6-48f9-8e60-7347f3cd8023/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Oct 2026 19:49:40 +0000 Certificate not after: Tue 30 Jan 2029 20:49:40 +0000 Subordinate resources: AS: 36255 IP: 199.21.180.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a7:c3:a6:fe:44:96:89:ae:5f:24:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 28 19:49:40 2026 GMT Not After : Jan 30 20:49:40 2029 GMT Subject: CN=81c27047-b4f6-48f9-8e60-7347f3cd8023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:b3:1f:62:bd:ad:4d:a2:b5:29:ab:34:cd: bb:dd:25:4c:68:08:15:57:6d:da:ba:62:d7:8d:9f: f7:bb:0c:e6:89:27:55:9b:f2:86:ef:7b:50:40:53: 02:bd:2c:26:45:61:9d:3b:5a:72:17:83:57:20:5f: 4d:45:33:99:54:5c:6d:c0:f2:9b:17:f4:34:e8:15: 56:a0:02:29:49:0d:ac:d4:c4:e2:c5:16:8e:2f:71: b4:38:d7:c3:34:0b:12:bb:49:91:b0:c0:50:94:69: f0:aa:88:75:08:6a:58:e1:6c:4d:7d:82:14:2d:ad: 1c:35:4c:e1:32:43:0f:62:ac:ee:fe:43:81:39:f3: 76:f7:bb:82:4a:74:1d:28:26:2f:d8:f7:f7:39:c8: 3f:59:02:20:26:05:36:cb:c8:d3:23:63:e3:52:2f: 1b:c8:a4:d7:45:d6:9d:31:c3:ee:d7:b1:e3:d8:e8: e5:a9:54:c2:d9:af:2f:21:3a:1d:78:b2:01:af:a3: a4:9e:36:a0:3f:63:09:6a:b1:f6:70:fb:9b:64:fa: cf:12:10:cc:60:c3:59:8e:16:bb:0b:a7:c5:f1:d3: eb:3e:ca:31:b5:da:54:97:1c:79:38:a6:62:e8:d7: 4b:d8:bc:8f:93:29:36:87:17:26:37:b2:8d:6b:ce: 0f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CF:EA:54:A0:A1:F1:BF:85:06:33:22:04:58:E5:FA:8D:F1:72:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/81c27047-b4f6-48f9-8e60-7347f3cd8023/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/81c27047-b4f6-48f9-8e60-7347f3cd8023/81c27047-b4f6-48f9-8e60-7347f3cd8023.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 199.21.180.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9b:d1:15:57:d7:e4:38:cc:75:ef:ff:f0:b5:bb:62:24:8e: ac:7c:fe:28:70:dd:9a:ee:6a:4f:37:ad:c2:89:ec:ef:d8:6e: d6:7a:4f:f9:d8:25:3f:b1:6b:7f:43:4d:4c:80:f9:4c:3d:45: 3e:d3:70:a4:ed:05:74:9a:0e:66:2c:24:46:b7:9d:1d:bb:9b: 66:3e:1e:63:f2:28:87:d5:6e:0f:be:ea:44:de:7b:95:49:10: 01:6b:33:29:29:e6:76:46:09:c1:39:3a:dd:ce:7f:b9:87:96: 36:35:d8:99:ef:a1:fd:b2:b7:fb:a4:83:13:26:26:7e:2f:e2: 3f:1e:80:9c:a2:b0:17:c2:f5:7e:59:dc:60:14:42:59:19:c3: 87:c6:c8:5e:b1:e8:d3:0b:d7:6e:b2:3c:8a:66:a9:f3:83:aa: f0:d0:2c:33:e4:4b:ff:41:cc:3c:05:36:04:36:bd:bb:8c:33: 8e:1c:38:60:36:22:84:6e:5c:64:85:80:42:9a:1b:c0:d4:dd: d2:e1:fe:9c:92:fb:15:2d:ac:6a:c7:a5:9a:39:78:64:c9:28: 2e:a8:23:89:da:0a:18:f5:2a:fc:74:f7:1a:79:91:08:53:f9: ea:b3:21:4d:2f:81:b9:bc:f3:74:38:bc:b2:d9:0f:3d:8f:c8: 32:f4:e7:c6 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE+nw6b+RJaJrl8kEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAyODE5NDk0MFoXDTI5MDEzMDIwNDk0MFowLzEtMCsGA1UEAxMk ODFjMjcwNDctYjRmNi00OGY5LThlNjAtNzM0N2YzY2Q4MDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBGzH2K9rU2itSmrNM273SVMaAgVV23aumLX jZ/3uwzmiSdVm/KG73tQQFMCvSwmRWGdO1pyF4NXIF9NRTOZVFxtwPKbF/Q06BVW oAIpSQ2s1MTixRaOL3G0ONfDNAsSu0mRsMBQlGnwqoh1CGpY4WxNfYIULa0cNUzh MkMPYqzu/kOBOfN297uCSnQdKCYv2Pf3Ocg/WQIgJgU2y8jTI2PjUi8byKTXRdad McPu17Hj2OjlqVTC2a8vITodeLIBr6OknjagP2MJarH2cPubZPrPEhDMYMNZjha7 C6fF8dPrPsoxtdpUlxx5OKZi6NdL2LyPkyk2hxcmN7KNa84PGwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBjP6lSgofG/hQYzIgRY5fqN8XK6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi84 MWMyNzA0Ny1iNGY2LTQ4ZjktOGU2MC03MzQ3ZjNjZDgwMjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzgxYzI3MDQ3LWI0ZjYtNDhmOS04 ZTYwLTczNDdmM2NkODAyMy84MWMyNzA0Ny1iNGY2LTQ4ZjktOGU2MC03MzQ3ZjNj ZDgwMjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHFbQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AI2fMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACib0RVX1+Q4zHXv//C1u2Ikjqx8/ihw3Zruak83rcKJ7O/Y btZ6T/nYJT+xa39DTUyA+Uw9RT7TcKTtBXSaDmYsJEa3nR27m2Y+HmPyKIfVbg++ 6kTee5VJEAFrMykp5nZGCcE5Ot3Of7mHljY12Jnvof2yt/ukgxMmJn4v4j8egJyi sBfC9X5Z3GAUQlkZw4fGyF6x6NML126yPIpmqfODqvDQLDPkS/9BzDwFNgQ2vbuM M44cOGA2IoRuXGSFgEKaG8DU3dLh/pyS+xUtrGrHpZo5eGTJKC6oI4naChj1Kvx0 9xp5kQhT+eqzIU0vgbm883Q4vLLZDz2PyDL058Y= -----END CERTIFICATE-----Generated at Sun Nov 1 14:35:21 2026 by rpki-client