$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/cad97ab6-10d5-47cb-a112-0c669c98d47e.cer File: cad97ab6-10d5-47cb-a112-0c669c98d47e.cer (raw, json) Hash identifier: 7rr6ixcAkkOfnwgghFRS1b2/a0P+2Vz8wIPyKUHKI1U= Subject key identifier: CB:BC:28:70:4C:C9:40:C6:1B:7C:E2:6F:A5:1B:A0:FC:60:5D:4B:09 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FAFF586D8A8BD01BFD63C1500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/cad97ab6-10d5-47cb-a112-0c669c98d47e/cad97ab6-10d5-47cb-a112-0c669c98d47e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/cad97ab6-10d5-47cb-a112-0c669c98d47e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 31 Oct 2026 18:16:37 +0000 Certificate not after: Fri 02 Feb 2029 19:16:37 +0000 Subordinate resources: IP: 199.84.212.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:af:f5:86:d8:a8:bd:01:bf:d6:3c:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 31 18:16:37 2026 GMT Not After : Feb 2 19:16:37 2029 GMT Subject: CN=cad97ab6-10d5-47cb-a112-0c669c98d47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:2a:67:4e:e6:f1:cd:ed:1f:c9:37:48:f9: b8:d2:e0:74:99:4d:db:7d:e6:58:b4:98:03:0b:78: 7a:a8:a6:47:8f:bf:31:40:d1:55:36:20:e9:70:dd: 77:aa:0b:64:5c:4d:d5:5b:69:17:c3:3a:23:1a:24: bd:b3:c3:ff:6e:a9:93:f5:26:d2:f7:3d:75:c5:a4: 8e:ee:e1:d9:f5:2a:f0:e0:8f:05:7d:44:9e:74:cc: b0:d3:af:0a:d8:78:76:23:fe:8f:9b:a3:87:d0:09: 34:0e:92:4e:5d:65:a6:d0:4a:a1:86:63:88:b9:1a: 1b:df:78:dc:f1:6a:73:96:8e:ae:a4:63:00:c9:b7: ef:8d:a9:ec:df:e6:60:89:e0:47:11:48:9e:9f:dc: 26:0d:4d:0c:67:e9:4e:4a:25:71:96:44:ff:6b:6f: b9:7e:22:28:a5:28:a8:23:14:48:4a:56:3c:80:19: 85:8a:aa:4b:de:99:9c:d6:5a:db:62:63:f8:54:b5: 03:1d:dd:e9:97:4b:a5:51:0b:1c:db:94:dc:74:31: ab:13:ca:42:76:f1:e3:22:7b:2f:b6:73:bd:8f:ea: 03:62:13:8f:a3:25:92:6e:07:02:d2:9f:df:fc:2c: 5e:d1:22:2c:ec:2e:7f:dd:19:c0:aa:e2:0a:d9:fc: cd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BC:28:70:4C:C9:40:C6:1B:7C:E2:6F:A5:1B:A0:FC:60:5D:4B:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/cad97ab6-10d5-47cb-a112-0c669c98d47e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/cad97ab6-10d5-47cb-a112-0c669c98d47e/cad97ab6-10d5-47cb-a112-0c669c98d47e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 199.84.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5d:58:46:58:45:b1:bb:c9:79:43:60:c1:f9:88:0c:e3:16: 38:a2:5d:40:87:f2:42:27:1e:4a:6b:f2:58:aa:cc:e0:d7:a5: be:4d:27:d2:34:d6:47:1d:73:9c:f4:9a:60:0f:f9:6f:3b:36: f5:63:ba:6e:73:86:c3:c4:14:35:0b:34:11:f2:d3:da:07:24: dc:bb:87:44:e6:04:2e:d1:d6:80:4a:e5:11:52:a4:c7:0f:aa: 2e:bb:96:d7:0d:fc:41:36:8e:3c:fb:4f:bb:96:55:73:1f:96: 39:37:0e:ee:7c:59:d9:b0:d9:9a:d1:60:40:b2:3f:05:e0:15: 42:66:24:ea:04:4d:55:82:c9:23:08:0c:c0:5a:01:f5:63:29: d5:f0:86:f6:39:92:df:38:19:e8:ac:a5:1e:c0:c5:66:59:6e: 49:d6:b5:7f:15:31:b2:28:c4:d9:28:ed:cd:07:e9:7e:e6:7e: 04:cf:ba:65:15:2b:3d:0e:98:02:ef:77:cb:e2:14:87:64:47: 24:c5:16:7f:a2:b2:72:44:2a:44:97:15:2c:08:85:36:ae:9d: 92:8d:7f:b3:3c:c5:f3:33:a5:83:73:22:b8:ce:8a:9d:3f:60: ca:40:dd:24:78:d5:c0:41:82:8c:7b:7b:ab:95:6f:91:d5:0b: de:f8:a3:a5 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+v9YbYqL0Bv9Y8FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAzMTE4MTYzN1oXDTI5MDIwMjE5MTYzN1owLzEtMCsGA1UEAxMk Y2FkOTdhYjYtMTBkNS00N2NiLWExMTItMGM2NjljOThkNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTIqZ07m8c3tH8k3SPm40uB0mU3bfeZYtJgD C3h6qKZHj78xQNFVNiDpcN13qgtkXE3VW2kXwzojGiS9s8P/bqmT9SbS9z11xaSO 7uHZ9Srw4I8FfUSedMyw068K2Hh2I/6Pm6OH0Ak0DpJOXWWm0EqhhmOIuRob33jc 8Wpzlo6upGMAybfvjans3+ZgieBHEUien9wmDU0MZ+lOSiVxlkT/a2+5fiIopSio IxRISlY8gBmFiqpL3pmc1lrbYmP4VLUDHd3pl0ulUQsc25TcdDGrE8pCdvHjInsv tnO9j+oDYhOPoyWSbgcC0p/f/Cxe0SIs7C5/3RnAquIK2fzNBQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMu8KHBMyUDGG3zib6UboPxgXUsJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9j YWQ5N2FiNi0xMGQ1LTQ3Y2ItYTExMi0wYzY2OWM5OGQ0N2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2NhZDk3YWI2LTEwZDUtNDdjYi1h MTEyLTBjNjY5Yzk4ZDQ3ZS9jYWQ5N2FiNi0xMGQ1LTQ3Y2ItYTExMi0wYzY2OWM5 OGQ0N2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHVNQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATV1YRlhFsbvJeUNgwfmI DOMWOKJdQIfyQiceSmvyWKrM4Nelvk0n0jTWRx1znPSaYA/5bzs29WO6bnOGw8QU NQs0EfLT2gck3LuHROYELtHWgErlEVKkxw+qLruW1w38QTaOPPtPu5ZVcx+WOTcO 7nxZ2bDZmtFgQLI/BeAVQmYk6gRNVYLJIwgMwFoB9WMp1fCG9jmS3zgZ6KylHsDF ZlluSda1fxUxsijE2SjtzQfpfuZ+BM+6ZRUrPQ6YAu93y+IUh2RHJMUWf6KyckQq RJcVLAiFNq6dko1/szzF8zOlg3MiuM6KnT9gykDdJHjVwEGCjHt7q5VvkdUL3vij pQ== -----END CERTIFICATE-----Generated at Mon Nov 2 19:47:41 2026 by rpki-client