$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/cb0cbc9d-91e9-4d5d-b0d7-335484c04643.cer File: cb0cbc9d-91e9-4d5d-b0d7-335484c04643.cer (raw, json) Hash identifier: opNEmmBQPq8U0vHFnLpNM0On4FHgwZ2vjX9jvfuAwMw= Subject key identifier: 2A:D1:6C:F3:06:97:77:9B:96:DC:DC:B5:2B:9D:DD:21:52:C1:B1:0B Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FA81C8AA76ABE02141A607210 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/cb0cbc9d-91e9-4d5d-b0d7-335484c04643/cb0cbc9d-91e9-4d5d-b0d7-335484c04643.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/cb0cbc9d-91e9-4d5d-b0d7-335484c04643/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Oct 2026 22:48:46 +0000 Certificate not after: Tue 30 Jan 2029 23:48:46 +0000 Subordinate resources: AS: 14569 AS: 32497 AS: 54707 IP: 64.32.60.0/22 IP: 162.219.40.0/22 IP: 162.220.80.0/22 IP: 199.231.108.0/22 IP: 2606:ac0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:1c:8a:a7:6a:be:02:14:1a:60:72:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 28 22:48:46 2026 GMT Not After : Jan 30 23:48:46 2029 GMT Subject: CN=cb0cbc9d-91e9-4d5d-b0d7-335484c04643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1b:98:24:43:64:02:26:88:6c:fb:9d:82:07: ab:23:f7:78:22:28:b2:55:19:8f:a7:a0:7a:98:3e: 8d:35:8e:15:93:ab:e0:f4:ef:de:1a:b4:8b:16:3e: d5:e3:82:7a:fa:b1:aa:43:91:e8:22:21:fe:e9:7b: 0a:76:81:73:a2:15:5d:0f:4d:25:6a:e1:01:d8:02: c6:33:08:be:ef:5c:06:11:99:be:b5:13:8a:94:6f: 2e:08:ac:d9:4c:17:1d:70:3e:19:7a:d1:bc:9d:62: eb:94:8f:5b:06:f9:e0:9f:e1:07:4c:11:4f:4b:1e: c6:d5:4f:b5:8b:4f:8f:98:ad:47:d8:0a:8e:20:a3: 1e:30:8c:ba:e0:25:d6:ae:8a:ab:a4:26:47:03:46: 21:38:3f:b6:e6:53:59:75:16:5c:81:4a:3b:4d:9e: 56:d4:fc:0f:73:a8:d2:f8:0a:98:88:1d:0e:89:2e: f1:d5:6d:ce:b3:ab:5a:b0:5b:46:9f:15:9c:4c:ff: bf:46:ec:78:45:17:9e:b5:41:e3:b5:6b:df:ad:61: 1a:dd:73:ff:dc:c1:4f:f3:2a:d7:b7:51:81:61:37: 98:dd:30:57:c0:0b:f8:2b:f4:15:34:e7:12:96:0f: 90:bb:ba:fb:26:b4:49:99:a5:9f:05:24:4f:fd:4f: 04:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D1:6C:F3:06:97:77:9B:96:DC:DC:B5:2B:9D:DD:21:52:C1:B1:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/cb0cbc9d-91e9-4d5d-b0d7-335484c04643/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/cb0cbc9d-91e9-4d5d-b0d7-335484c04643/cb0cbc9d-91e9-4d5d-b0d7-335484c04643.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 64.32.60.0/22 162.219.40.0/22 162.220.80.0/22 199.231.108.0/22 IPv6: 2606:ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14569 32497 54707 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e8:93:cf:c9:23:50:f1:3d:53:f9:49:47:0f:87:23:12:7c: dc:83:59:06:15:ba:0c:bb:f1:5b:4c:57:f7:8d:a4:8d:6b:e0: a8:e9:ec:ba:66:1b:86:fc:03:9e:d3:ec:53:33:f9:d2:cc:67: cd:7c:d0:d5:36:91:e7:91:fa:77:ac:91:bd:00:3e:da:98:79: e2:b4:b9:65:fd:df:d6:c6:97:6c:d9:2c:20:5c:b5:93:8a:b5: 03:ba:78:4f:50:19:46:09:b7:95:0b:bd:eb:da:dd:10:38:b2: dc:21:5d:32:2b:bd:30:7d:19:60:58:48:83:8a:7c:1b:e4:4e: 43:2d:69:35:08:06:10:6c:7a:84:1a:79:6f:13:a9:60:b3:b9: dd:39:80:ca:94:29:ad:76:b8:07:f2:43:74:44:87:09:1b:61: e7:57:f4:10:8e:d5:5d:22:ed:f5:17:4e:ab:71:d7:98:56:df: f9:e0:6a:ec:d8:3b:ae:b6:4f:9a:24:22:b1:1c:2b:a9:19:21: 99:1a:58:1c:1b:fb:51:6f:cc:a0:06:d1:42:68:05:88:cf:2c: 10:9f:a5:a7:18:ee:07:ef:3a:ad:e1:50:2f:a4:85:cd:7a:53: 76:a9:65:a4:f9:e7:ae:de:4f:15:b9:31:6b:c8:d1:06:3b:56: 0d:31:e1:31 -----BEGIN CERTIFICATE----- MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWE+oHIqnar4CFBpgchAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAyODIyNDg0NloXDTI5MDEzMDIzNDg0NlowLzEtMCsGA1UEAxMk Y2IwY2JjOWQtOTFlOS00ZDVkLWIwZDctMzM1NDg0YzA0NjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixuYJENkAiaIbPudggerI/d4IiiyVRmPp6B6 mD6NNY4Vk6vg9O/eGrSLFj7V44J6+rGqQ5HoIiH+6XsKdoFzohVdD00lauEB2ALG Mwi+71wGEZm+tROKlG8uCKzZTBcdcD4ZetG8nWLrlI9bBvngn+EHTBFPSx7G1U+1 i0+PmK1H2AqOIKMeMIy64CXWroqrpCZHA0YhOD+25lNZdRZcgUo7TZ5W1PwPc6jS +AqYiB0OiS7x1W3Os6tasFtGnxWcTP+/Rux4RReetUHjtWvfrWEa3XP/3MFP8yrX t1GBYTeY3TBXwAv4K/QVNOcSlg+Qu7r7JrRJmaWfBSRP/U8E9wIDAQABo4IERDCC BEAwHQYDVR0OBBYEFCrRbPMGl3ebltzctSud3SFSwbELMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9j YjBjYmM5ZC05MWU5LTRkNWQtYjBkNy0zMzU0ODRjMDQ2NDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2NiMGNiYzlkLTkxZTktNGQ1ZC1i MGQ3LTMzNTQ4NGMwNDY0My9jYjBjYmM5ZC05MWU5LTRkNWQtYjBkNy0zMzU0ODRj MDQ2NDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAJAIDwDBAKi2ygDBAKi3FADBALH52wwDQQCAAIw BwMFACYGCsAwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICOOkCAn7xAgMA1bMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAK+iTz8kjUPE9U/lJRw+HIxJ83INZBhW6DLvxW0xX942kjWvgqOnsumYb hvwDntPsUzP50sxnzXzQ1TaR55H6d6yRvQA+2ph54rS5Zf3f1saXbNksIFy1k4q1 A7p4T1AZRgm3lQu969rdEDiy3CFdMiu9MH0ZYFhIg4p8G+ROQy1pNQgGEGx6hBp5 bxOpYLO53TmAypQprXa4B/JDdESHCRth51f0EI7VXSLt9RdOq3HXmFbf+eBq7Ng7 rrZPmiQisRwrqRkhmRpYHBv7UW/MoAbRQmgFiM8sEJ+lpxjuB+86reFQL6SFzXpT dqllpPnnrt5PFbkxa8jRBjtWDTHhMQ== -----END CERTIFICATE-----Generated at Tue Nov 3 22:32:57 2026 by rpki-client