$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4.cer File: a3235a85-44fd-4442-9a84-88cb0572fdd4.cer (raw, json) Hash identifier: Qw1lc918vdm2z2xB3E0Qcec4fPoAKeJn0tlebDIMUX4= Subject key identifier: BE:EC:3E:1B:6F:BF:B8:58:66:52:DC:CC:6D:E2:9B:AF:62:47:F4:9B Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FAD74046744B11C5FAA9DF480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4/a3235a85-44fd-4442-9a84-88cb0572fdd4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Oct 2026 20:44:03 +0000 Certificate not after: Thu 01 Feb 2029 21:44:03 +0000 Subordinate resources: AS: 403138 IP: 23.167.12.0/24 IP: 2602:f287::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ad:74:04:67:44:b1:1c:5f:aa:9d:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 30 20:44:03 2026 GMT Not After : Feb 1 21:44:03 2029 GMT Subject: CN=a3235a85-44fd-4442-9a84-88cb0572fdd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b1:64:95:f1:9d:f8:3b:47:11:2c:c7:ad:4e: 9e:4c:0b:13:f8:f5:e3:0b:a5:5f:41:6f:97:42:3f: 74:3f:73:64:5e:19:e2:0e:d7:35:31:14:1b:bb:84: a1:82:86:19:75:e1:c5:78:89:01:a4:0b:c7:ea:d5: 7d:32:fd:00:ce:75:09:d6:ba:05:20:fe:8a:1c:23: a9:29:8f:6f:35:0b:c7:34:d3:45:38:77:df:84:26: 6e:37:5c:1a:97:20:0b:e2:66:98:68:83:c7:ec:7a: 35:a4:36:79:c3:e4:40:f4:96:2d:89:df:a4:cc:89: 64:86:89:6d:c5:36:f7:28:7f:01:9a:dc:d1:2a:bb: 5d:60:f6:d0:d2:ca:58:aa:79:c2:d8:62:ff:9d:1b: 57:77:d2:a4:c2:40:72:57:12:7c:60:12:04:19:e3: cf:ed:a1:e6:87:bc:53:2e:72:d3:5c:e1:9f:ef:d1: ec:0e:1a:17:9b:ae:75:dc:29:43:f9:60:a8:11:c5: bb:e3:9d:a4:bc:2f:6f:6f:63:5a:c8:6b:53:fb:e7: 04:42:3f:ca:c1:22:80:95:30:76:e7:fc:8b:88:b0: 57:75:72:38:9e:e2:9d:83:5f:47:83:b9:be:4e:7e: 06:1a:ea:b6:d4:2a:00:c5:40:47:a8:94:a5:6b:58: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EC:3E:1B:6F:BF:B8:58:66:52:DC:CC:6D:E2:9B:AF:62:47:F4:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a3235a85-44fd-4442-9a84-88cb0572fdd4/a3235a85-44fd-4442-9a84-88cb0572fdd4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 23.167.12.0/24 IPv6: 2602:f287::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403138 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:70:77:71:ec:93:dd:2b:50:9e:15:ff:1c:09:c3:2b:e9:14: ea:90:f8:96:20:3b:44:3a:75:e6:4b:67:ca:50:ed:1d:12:fa: f1:cc:9d:f8:4b:db:95:ea:54:f8:c4:a2:c5:0c:f0:f3:c6:8a: 5d:e3:a9:b9:b7:da:55:0a:3f:ed:44:7f:50:85:f2:c3:c3:a5: 16:1b:35:54:62:bd:29:40:d1:93:f2:f9:78:12:55:be:8a:17: 9e:b2:7f:00:08:21:6f:fa:29:c7:26:80:ca:36:75:39:56:4a: d8:24:d7:6d:5a:b5:67:6b:c9:b3:ed:3c:9a:83:a9:22:7b:36: 78:46:5d:3c:23:af:2e:8b:0d:0a:0d:50:0d:f6:af:e7:75:c0: bf:2b:37:8f:63:de:a4:50:76:c6:65:aa:e0:c5:77:d9:e8:e0: 22:38:35:e8:9f:16:e7:b2:da:17:34:a7:2e:6b:2e:82:5d:32: 0a:fb:7b:ef:73:67:d3:b6:a5:36:66:b4:15:a4:d8:80:6a:a3: 1d:2f:06:04:4b:47:04:10:a1:3a:f3:3f:67:b0:0e:b5:2b:f1: e2:c4:ef:d4:56:91:a0:63:cb:f0:6d:6f:50:a3:40:fd:06:f5: ff:c0:87:2f:a8:98:7c:03:dd:f2:50:a8:46:01:d7:25:aa:1e: b6:06:35:dd -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+tdARnRLEcX6qd9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAzMDIwNDQwM1oXDTI5MDIwMTIxNDQwM1owLzEtMCsGA1UEAxMk YTMyMzVhODUtNDRmZC00NDQyLTlhODQtODhjYjA1NzJmZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbFklfGd+DtHESzHrU6eTAsT+PXjC6VfQW+X Qj90P3NkXhniDtc1MRQbu4ShgoYZdeHFeIkBpAvH6tV9Mv0AznUJ1roFIP6KHCOp KY9vNQvHNNNFOHffhCZuN1walyAL4maYaIPH7Ho1pDZ5w+RA9JYtid+kzIlkholt xTb3KH8BmtzRKrtdYPbQ0spYqnnC2GL/nRtXd9KkwkByVxJ8YBIEGePP7aHmh7xT LnLTXOGf79HsDhoXm6513ClD+WCoEcW7452kvC9vb2NayGtT++cEQj/KwSKAlTB2 5/yLiLBXdXI4nuKdg19Hg7m+Tn4GGuq21CoAxUBHqJSla1jYpwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFL7sPhtvv7hYZlLczG3im69iR/SbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9h MzIzNWE4NS00NGZkLTQ0NDItOWE4NC04OGNiMDU3MmZkZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2EzMjM1YTg1LTQ0ZmQtNDQ0Mi05 YTg0LTg4Y2IwNTcyZmRkNC9hMzIzNWE4NS00NGZkLTQ0NDItOWE4NC04OGNiMDU3 MmZkZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpwwwDgQCAAIwCAMGACYC8ocAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmwjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQcHdx7JPdK1CeFf8cCcMr6RTq kPiWIDtEOnXmS2fKUO0dEvrxzJ34S9uV6lT4xKLFDPDzxopd46m5t9pVCj/tRH9Q hfLDw6UWGzVUYr0pQNGT8vl4ElW+iheesn8ACCFv+inHJoDKNnU5VkrYJNdtWrVn a8mz7Tyag6kiezZ4Rl08I68uiw0KDVAN9q/ndcC/KzePY96kUHbGZargxXfZ6OAi ODXonxbnstoXNKcuay6CXTIK+3vvc2fTtqU2ZrQVpNiAaqMdLwYES0cEEKE68z9n sA61K/HixO/UVpGgY8vwbW9Qo0D9BvX/wIcvqJh8A93yUKhGAdclqh62BjXd -----END CERTIFICATE-----Generated at Sun Nov 1 09:17:05 2026 by rpki-client