$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9.cer File: a4bcdcde-0df9-4f5c-a110-23c7b368baf9.cer (raw, json) Hash identifier: Ww/4h8tEoab/LkqcYkZLRHKV3no1nTsjtzCIKeCmFVg= Subject key identifier: 9F:CF:E8:CE:D7:19:AE:AE:14:34:E8:35:A0:9D:17:8E:EB:F9:68:A3 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FA9BE2EB06A0691203418B380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9/a4bcdcde-0df9-4f5c-a110-23c7b368baf9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Oct 2026 12:50:15 +0000 Certificate not after: Wed 31 Jan 2029 13:50:15 +0000 Subordinate resources: AS: 22990 IP: 2620:89:8000::/48 IP: 2620:123:4000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a9:be:2e:b0:6a:06:91:20:34:18:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 29 12:50:15 2026 GMT Not After : Jan 31 13:50:15 2029 GMT Subject: CN=a4bcdcde-0df9-4f5c-a110-23c7b368baf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8a:39:9a:37:81:1f:04:6a:e1:f7:f2:e4:51: 04:1e:85:b6:c4:43:9a:a4:d0:6c:e5:1d:7f:3e:b5: df:3b:d5:59:ff:98:a2:fd:06:ea:a3:e7:03:94:8b: d3:72:2a:1d:75:84:81:c6:c7:fa:fe:3d:26:eb:f6: 0c:93:4e:34:69:b0:26:8a:66:a0:c3:c5:ce:92:a9: 9d:0c:62:25:67:02:92:e2:0b:44:87:ec:e1:cd:44: 87:8b:fa:30:3a:ed:32:fd:e7:be:26:25:7b:65:c0: 9f:a2:a8:25:33:36:98:eb:5a:f2:4f:a8:72:2c:6a: 2c:78:8c:d2:bc:6f:68:c5:a8:d7:52:2f:85:8a:85: 20:b7:7e:56:52:e0:12:73:01:4e:db:df:2f:3c:4d: 15:c6:e6:d4:bd:3b:66:24:e8:09:35:5a:e3:8b:4a: b0:6e:cf:0a:3c:07:37:25:74:f6:45:a4:ac:85:91: e6:24:63:cf:e9:32:d6:f6:92:7a:51:21:23:4f:84: 76:ab:17:ad:0f:98:d8:3b:b9:9a:f8:cc:21:50:e9: 27:04:7d:0f:6a:05:13:b0:0b:64:f4:1e:f2:a8:9c: f6:be:27:2b:70:04:66:0a:92:f8:fb:3e:ee:8f:01: af:d0:3e:57:c8:58:89:9f:19:2c:eb:b1:5b:c7:53: 4d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CF:E8:CE:D7:19:AE:AE:14:34:E8:35:A0:9D:17:8E:EB:F9:68:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9/a4bcdcde-0df9-4f5c-a110-23c7b368baf9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv6: 2620:89:8000::/48 2620:123:4000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22990 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b2:1f:1f:72:9f:5a:2e:ba:12:e4:20:e2:05:14:5f:f6:1b: 79:05:8b:7e:42:db:be:d4:13:ec:61:17:01:03:44:69:4c:bf: 01:01:48:23:85:b5:b2:44:92:44:b7:3c:8c:d2:2d:98:2e:69: 8e:91:21:50:11:4a:28:01:ba:e1:70:a9:9e:54:32:e8:c6:87: a7:aa:d4:40:2c:e8:0e:b5:81:ff:93:2c:69:fd:e5:c7:71:5c: e2:bb:fc:c9:c9:8d:42:09:bb:fb:27:86:4c:bf:78:f5:b7:5f: 21:52:54:ef:3d:23:ac:6e:98:f5:96:e6:88:54:88:32:df:be: da:90:bb:09:9b:76:fc:13:2e:6f:f7:86:59:9c:ab:07:d7:ee: 19:6c:c5:26:2c:fb:9a:88:84:62:79:89:d1:9d:42:a8:3b:d5: 2a:f8:9f:58:97:23:49:c8:fa:72:85:a3:fd:79:b4:21:b3:20: 5b:88:f0:fc:72:bb:29:5d:df:fc:04:48:ec:e0:64:08:7d:33: 3c:93:2e:b6:be:c3:8a:4c:64:c5:0d:90:02:0c:df:e1:99:bd: 9b:1f:24:61:40:69:10:c6:7f:8d:cd:ee:e1:06:b9:b5:8f:40: a8:bf:fc:67:39:f9:86:b6:29:53:63:74:f3:da:00:80:f0:80: 45:39:e6:34 -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWE+pvi6wagaRIDQYs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAyOTEyNTAxNVoXDTI5MDEzMTEzNTAxNVowLzEtMCsGA1UEAxMk YTRiY2RjZGUtMGRmOS00ZjVjLWExMTAtMjNjN2IzNjhiYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84o5mjeBHwRq4ffy5FEEHoW2xEOapNBs5R1/ PrXfO9VZ/5ii/Qbqo+cDlIvTcioddYSBxsf6/j0m6/YMk040abAmimagw8XOkqmd DGIlZwKS4gtEh+zhzUSHi/owOu0y/ee+JiV7ZcCfoqglMzaY61ryT6hyLGoseIzS vG9oxajXUi+FioUgt35WUuAScwFO298vPE0VxubUvTtmJOgJNVrji0qwbs8KPAc3 JXT2RaSshZHmJGPP6TLW9pJ6USEjT4R2qxetD5jYO7ma+MwhUOknBH0PagUTsAtk 9B7yqJz2vicrcARmCpL4+z7ujwGv0D5XyFiJnxks67Fbx1NNxwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFJ/P6M7XGa6uFDToNaCdF47r+WijMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9h NGJjZGNkZS0wZGY5LTRmNWMtYTExMC0yM2M3YjM2OGJhZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2E0YmNkY2RlLTBkZjktNGY1Yy1h MTEwLTIzYzdiMzY4YmFmOS9hNGJjZGNkZS0wZGY5LTRmNWMtYTExMC0yM2M3YjM2 OGJhZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgACMBEDBwAmIACJgAADBgAmIAEjQDAZBggrBgEFBQcBCAEB /wQKMAigBjAEAgJZzjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbsh8fcp9aLroS5CDiBRRf9ht5BYt+Qtu+ 1BPsYRcBA0RpTL8BAUgjhbWyRJJEtzyM0i2YLmmOkSFQEUooAbrhcKmeVDLoxoen qtRALOgOtYH/kyxp/eXHcVziu/zJyY1CCbv7J4ZMv3j1t18hUlTvPSOsbpj1luaI VIgy377akLsJm3b8Ey5v94ZZnKsH1+4ZbMUmLPuaiIRieYnRnUKoO9Uq+J9YlyNJ yPpyhaP9ebQhsyBbiPD8crspXd/8BEjs4GQIfTM8ky62vsOKTGTFDZACDN/hmb2b HyRhQGkQxn+Nze7hBrm1j0Cov/xnOfmGtilTY3Tz2gCA8IBFOeY0 -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:48 2026 by rpki-client