$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e.cer File: a09ec778-c92b-4639-800b-b8fdb34a496e.cer (raw, json) Hash identifier: sM2WaIT7dUZUecErGKGmQ380Ra/B/+5NfM9PTftTzgM= Subject key identifier: 47:65:D0:E0:CF:74:16:E3:AC:BC:9F:22:0E:38:CA:E8:58:53:F1:F6 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FA733DAAD3C84FF5A6CD0D400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e/a09ec778-c92b-4639-800b-b8fdb34a496e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Oct 2026 14:59:55 +0000 Certificate not after: Tue 30 Jan 2029 15:59:55 +0000 Subordinate resources: AS: 400588 IP: 164.152.157.0/24 IP: 192.195.216.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a7:33:da:ad:3c:84:ff:5a:6c:d0:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 28 14:59:55 2026 GMT Not After : Jan 30 15:59:55 2029 GMT Subject: CN=a09ec778-c92b-4639-800b-b8fdb34a496e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:66:56:63:2a:f0:30:64:d9:ba:92:1c:07: e9:4d:48:f9:24:49:8a:2d:45:cb:06:66:9f:d4:7a: fe:55:79:9c:3b:c8:ff:ba:e7:b2:55:bf:7f:87:83: bf:e6:88:62:25:29:4d:d5:5e:14:10:a2:f0:88:20: 9d:52:b4:49:3d:a2:15:55:f5:48:1d:e3:0e:31:64: ba:7c:84:35:3d:ae:51:d9:fa:5e:ca:60:5e:54:5e: 75:10:fc:41:b4:af:3c:ef:26:72:77:a7:b9:86:4c: 2c:b1:8e:51:48:00:20:7f:88:ce:33:7d:ef:3c:37: 0b:c1:5f:13:f7:84:6a:e3:b4:2e:1b:09:d2:26:54: 31:b6:40:b4:99:c1:13:25:f9:d8:0b:47:61:bc:10: 64:0d:85:a4:6c:c6:a0:43:19:20:17:6f:ba:74:57: 4c:7e:67:b7:94:fd:c2:26:fa:ce:f8:37:a9:b5:98: 2f:c7:b9:08:18:e8:a6:63:80:97:08:bf:84:5a:f7: 9c:0a:71:cf:a3:27:68:41:bd:1b:da:bf:eb:bc:c7: f3:7d:7c:fc:f8:0b:b1:82:8d:09:f8:bd:60:b3:85: 6b:bb:53:3b:96:08:d1:05:3c:c9:0e:87:87:0c:f3: f1:5b:bd:a9:75:0a:1a:a8:b1:2d:9e:ce:4b:4a:5e: 0f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:65:D0:E0:CF:74:16:E3:AC:BC:9F:22:0E:38:CA:E8:58:53:F1:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e/a09ec778-c92b-4639-800b-b8fdb34a496e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 164.152.157.0/24 192.195.216.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400588 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a5:6c:48:fd:a4:1c:da:1f:0a:51:60:f5:19:84:08:2f:67: 6f:84:91:4b:88:f5:d7:c6:50:70:ee:38:4c:b9:55:6c:1c:dc: ae:58:a5:f6:86:07:36:a5:23:63:43:b4:80:cb:e5:d1:01:8f: 8c:34:62:2d:bb:8e:f6:6f:ef:c8:34:de:bb:13:e4:8d:81:9d: f6:8f:4e:1d:99:b6:35:bc:29:9a:d7:44:48:c7:0d:d7:96:32: 0e:8a:b4:bf:e2:9c:9e:d9:72:2a:67:96:19:95:f9:7b:1e:bf: 59:3f:f4:96:26:11:fb:74:a0:64:1e:55:49:cb:24:af:0c:d9: f9:3b:27:86:6e:5c:eb:8e:2e:ae:b5:9d:2b:13:76:71:8d:41: 1d:8e:de:c5:9d:d5:4d:0a:30:95:dd:cb:a1:c5:32:3b:50:b9: 21:e2:1e:83:6d:06:db:63:f1:f9:13:d5:f7:4d:0d:42:bb:22: 88:7f:5d:79:ab:80:82:6d:54:0c:af:ac:f0:0a:d1:a7:0e:b9: 8c:09:ea:ee:3d:92:5f:1d:44:9f:48:da:0f:d2:fe:1d:e1:e0: 58:f5:41:27:4d:ca:23:b8:ed:bb:35:a8:f7:bf:59:01:03:2b: 4b:de:56:a5:66:29:fb:80:07:71:89:dc:d4:09:ba:65:99:d7: f2:27:84:bb -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE+nM9qtPIT/WmzQ1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAyODE0NTk1NVoXDTI5MDEzMDE1NTk1NVowLzEtMCsGA1UEAxMk YTA5ZWM3NzgtYzkyYi00NjM5LTgwMGItYjhmZGIzNGE0OTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotZmVmMq8DBk2bqSHAfpTUj5JEmKLUXLBmaf 1Hr+VXmcO8j/uueyVb9/h4O/5ohiJSlN1V4UEKLwiCCdUrRJPaIVVfVIHeMOMWS6 fIQ1Pa5R2fpeymBeVF51EPxBtK887yZyd6e5hkwssY5RSAAgf4jOM33vPDcLwV8T 94Rq47QuGwnSJlQxtkC0mcETJfnYC0dhvBBkDYWkbMagQxkgF2+6dFdMfme3lP3C JvrO+DeptZgvx7kIGOimY4CXCL+EWvecCnHPoydoQb0b2r/rvMfzfXz8+Auxgo0J +L1gs4Vru1M7lgjRBTzJDoeHDPPxW72pdQoaqLEtns5LSl4PcwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFEdl0ODPdBbjrLyfIg44yuhYU/H2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9h MDllYzc3OC1jOTJiLTQ2MzktODAwYi1iOGZkYjM0YTQ5NmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2EwOWVjNzc4LWM5MmItNDYzOS04 MDBiLWI4ZmRiMzRhNDk2ZS9hMDllYzc3OC1jOTJiLTQ2MzktODAwYi1iOGZkYjM0 YTQ5NmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACkmJ0DBADAw9gwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhzMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAqlbEj9pBzaHwpRYPUZhAgvZ2+EkUuI9dfGUHDu OEy5VWwc3K5YpfaGBzalI2NDtIDL5dEBj4w0Yi27jvZv78g03rsT5I2BnfaPTh2Z tjW8KZrXREjHDdeWMg6KtL/inJ7ZcipnlhmV+Xsev1k/9JYmEft0oGQeVUnLJK8M 2fk7J4ZuXOuOLq61nSsTdnGNQR2O3sWd1U0KMJXdy6HFMjtQuSHiHoNtBttj8fkT 1fdNDUK7Ioh/XXmrgIJtVAyvrPAK0acOuYwJ6u49kl8dRJ9I2g/S/h3h4Fj1QSdN yiO47bs1qPe/WQEDK0veVqVmKfuAB3GJ3NQJumWZ1/InhLs= -----END CERTIFICATE-----Generated at Sun Nov 1 12:37:43 2026 by rpki-client