$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/af58d0b0-0ce6-4760-8132-ee80d23ae9de.cer File: af58d0b0-0ce6-4760-8132-ee80d23ae9de.cer (raw, json) Hash identifier: eF1gcKA5SuT+SRe4i65gkEgbp9rmv0yjqRBXQZdEc7g= Subject key identifier: B6:53:6F:E7:24:C5:1D:77:09:EA:39:C0:F8:6C:0A:28:73:68:10:BD Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FA99E8CF2B7198A080A155A60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/af58d0b0-0ce6-4760-8132-ee80d23ae9de/af58d0b0-0ce6-4760-8132-ee80d23ae9de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/af58d0b0-0ce6-4760-8132-ee80d23ae9de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Oct 2026 11:46:31 +0000 Certificate not after: Wed 31 Jan 2029 12:46:31 +0000 Subordinate resources: IP: 205.173.148.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a9:9e:8c:f2:b7:19:8a:08:0a:15:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 29 11:46:31 2026 GMT Not After : Jan 31 12:46:31 2029 GMT Subject: CN=af58d0b0-0ce6-4760-8132-ee80d23ae9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:61:76:45:6e:0d:ab:41:40:b2:ce:d4:04:cd: e7:44:ea:3b:33:5d:69:b6:ab:4f:74:81:c8:5c:20: 67:0a:90:91:1d:06:83:7a:57:94:c5:b9:3f:a7:19: 58:7d:d7:dd:b9:b4:12:63:5a:b7:4d:92:c4:1e:cd: 87:58:25:a6:46:28:c9:1d:96:ce:63:69:77:86:57: c0:cd:3a:70:33:47:7d:19:9b:65:38:e4:9a:b4:9a: 93:7c:90:5c:17:cb:bc:cb:c2:94:25:e2:5e:1c:f3: 06:d9:57:b1:42:cd:9b:df:2b:ca:98:c5:c6:49:61: 7a:38:9f:4f:8a:f8:da:75:30:74:49:25:48:5b:15: 1d:25:86:87:cd:7d:b6:b5:8d:e2:df:64:52:b8:34: 7d:f4:b3:af:98:0f:44:27:d2:63:2c:e6:1a:15:19: be:bb:0e:e5:f7:ce:f7:56:94:31:a3:3b:25:02:a7: d7:69:c2:4c:3a:f5:e3:bf:92:6e:59:48:2f:1f:1a: aa:1b:3a:f5:04:c9:a7:50:62:6c:9e:5c:05:13:a5: 90:0f:92:d9:45:78:d9:ab:71:b3:bc:82:e9:68:ae: 5c:d2:21:1c:33:e7:ba:29:47:d4:4a:2c:e9:39:1c: e9:c4:62:96:b0:c1:28:85:25:9c:36:13:ac:40:cd: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:53:6F:E7:24:C5:1D:77:09:EA:39:C0:F8:6C:0A:28:73:68:10:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/af58d0b0-0ce6-4760-8132-ee80d23ae9de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/af58d0b0-0ce6-4760-8132-ee80d23ae9de/af58d0b0-0ce6-4760-8132-ee80d23ae9de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 205.173.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:cd:0b:2c:eb:01:36:26:ea:e3:63:77:68:3c:73:d2:9d:74: e0:a2:7a:9e:fa:9b:7b:2b:db:4a:4b:55:20:c5:a9:6d:a1:af: 06:0c:87:ff:3b:dc:26:bb:90:50:94:11:04:f5:ac:bf:bc:4d: ff:a9:29:6b:6c:e4:e7:ba:ee:e2:3f:e0:7f:3d:f9:f1:fa:35: ab:d8:ad:f4:f1:e5:0c:2e:df:72:e1:37:5f:59:6f:1f:43:f7: 39:4b:21:63:7b:a5:f5:e8:1a:a1:70:ef:9e:09:67:51:ca:4a: 59:86:fc:95:52:3e:ba:68:df:f5:2f:96:5f:05:5e:95:16:38: 6a:35:b9:04:e8:98:44:6f:b3:35:95:0c:bc:b1:c5:63:f9:5c: 92:33:ca:80:e5:0c:28:3a:5b:6b:c2:c0:a7:46:a9:c6:ba:6f: b6:16:8b:ed:42:82:3a:18:b5:61:60:18:38:3c:cd:b5:81:92: 3a:a2:e6:99:9f:b3:29:13:00:7d:50:87:67:70:5d:07:ff:d9: 43:a0:ea:94:48:d8:e1:c4:e8:64:0d:33:4c:87:a0:3d:fa:a8: b4:27:be:d5:29:83:99:88:03:f4:8b:70:c5:aa:05:a6:c2:92: 7c:9d:17:39:dd:20:dd:b8:19:9d:76:9f:af:f5:73:6f:64:87: 96:d9:0a:15 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+pnozytxmKCAoVWmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAyOTExNDYzMVoXDTI5MDEzMTEyNDYzMVowLzEtMCsGA1UEAxMk YWY1OGQwYjAtMGNlNi00NzYwLTgxMzItZWU4MGQyM2FlOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mF2RW4Nq0FAss7UBM3nROo7M11ptqtPdIHI XCBnCpCRHQaDeleUxbk/pxlYfdfdubQSY1q3TZLEHs2HWCWmRijJHZbOY2l3hlfA zTpwM0d9GZtlOOSatJqTfJBcF8u8y8KUJeJeHPMG2VexQs2b3yvKmMXGSWF6OJ9P ivjadTB0SSVIWxUdJYaHzX22tY3i32RSuDR99LOvmA9EJ9JjLOYaFRm+uw7l9873 VpQxozslAqfXacJMOvXjv5JuWUgvHxqqGzr1BMmnUGJsnlwFE6WQD5LZRXjZq3Gz vILpaK5c0iEcM+e6KUfUSizpORzpxGKWsMEohSWcNhOsQM1dFQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLZTb+ckxR13Ceo5wPhsCihzaBC9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9h ZjU4ZDBiMC0wY2U2LTQ3NjAtODEzMi1lZTgwZDIzYWU5ZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2FmNThkMGIwLTBjZTYtNDc2MC04 MTMyLWVlODBkMjNhZTlkZS9hZjU4ZDBiMC0wY2U2LTQ3NjAtODEzMi1lZTgwZDIz YWU5ZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALNrZQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAos0LLOsBNibq42N3aDxz 0p104KJ6nvqbeyvbSktVIMWpbaGvBgyH/zvcJruQUJQRBPWsv7xN/6kpa2zk57ru 4j/gfz358fo1q9it9PHlDC7fcuE3X1lvH0P3OUshY3ul9egaoXDvnglnUcpKWYb8 lVI+umjf9S+WXwVelRY4ajW5BOiYRG+zNZUMvLHFY/lckjPKgOUMKDpba8LAp0ap xrpvthaL7UKCOhi1YWAYODzNtYGSOqLmmZ+zKRMAfVCHZ3BdB//ZQ6DqlEjY4cTo ZA0zTIegPfqotCe+1SmDmYgD9ItwxaoFpsKSfJ0XOd0g3bgZnXafr/Vzb2SHltkK FQ== -----END CERTIFICATE-----Generated at Sun Nov 1 17:30:18 2026 by rpki-client