$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d52ed255-8c8b-4af2-8eeb-86d7add525b3.cer File: d52ed255-8c8b-4af2-8eeb-86d7add525b3.cer (raw, json) Hash identifier: 9kpXGfOg2/R6EongWpmKjAsJP537x72T1btVHIQQZjU= Subject key identifier: CB:23:20:BB:FB:F8:44:2C:33:3D:29:6E:97:40:77:F2:B0:3D:63:50 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FA5409E2608606556779AFB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d52ed255-8c8b-4af2-8eeb-86d7add525b3/d52ed255-8c8b-4af2-8eeb-86d7add525b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d52ed255-8c8b-4af2-8eeb-86d7add525b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 Oct 2026 22:14:01 +0000 Certificate not after: Mon 29 Jan 2029 23:14:01 +0000 Subordinate resources: IP: 69.80.228.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:40:9e:26:08:60:65:56:77:9a:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 27 22:14:01 2026 GMT Not After : Jan 29 23:14:01 2029 GMT Subject: CN=d52ed255-8c8b-4af2-8eeb-86d7add525b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:ab:95:02:5b:3d:72:bc:59:94:30:f8:5a: 16:fa:62:2c:07:bc:f4:92:e7:8e:ce:f8:dd:f7:0b: 36:65:75:1d:67:8c:f8:89:fe:ca:89:3b:dc:0c:8c: 7e:66:79:f3:d8:77:77:d4:db:6a:3e:9f:bf:6c:87: 88:1b:3e:a2:d3:28:55:3a:08:14:d3:a6:e5:87:e2: 1e:41:41:d3:fd:cd:5f:d7:48:30:6b:bd:19:6c:e9: 0a:11:5c:19:b7:87:1f:59:ef:2a:a6:00:95:ca:34: c0:76:98:ca:6a:40:cb:c7:b6:49:f6:11:0f:b5:b7: fb:b6:b4:e5:32:cb:bd:49:6b:e3:d0:e3:49:e7:77: 0c:1e:16:c2:46:0a:53:1e:ae:fd:39:3b:fb:f3:7f: 61:d6:0b:b1:3b:7d:bc:c5:fe:2c:97:c4:1e:54:82: b4:67:9f:61:bb:47:8e:57:6b:77:e1:a4:76:99:db: 14:bc:4e:e8:53:6a:ff:d0:35:f5:30:ba:90:76:e6: d7:a0:4a:63:3c:9f:30:48:f0:88:90:8a:a7:38:60: df:ca:df:93:30:8f:5c:17:d0:cc:00:f3:d3:11:86: a3:6d:07:b4:54:a7:06:c0:f8:bd:d0:f2:72:be:27: 22:fc:82:ee:d1:f2:21:ce:f3:02:99:d8:f4:43:08: 74:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:23:20:BB:FB:F8:44:2C:33:3D:29:6E:97:40:77:F2:B0:3D:63:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d52ed255-8c8b-4af2-8eeb-86d7add525b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d52ed255-8c8b-4af2-8eeb-86d7add525b3/d52ed255-8c8b-4af2-8eeb-86d7add525b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 69.80.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:89:31:9a:5f:70:85:ba:f1:65:da:f2:af:22:12:33:e0:fd: b3:ed:3b:e6:20:73:36:08:db:26:75:5d:c3:4e:49:c1:93:22: ca:fe:5a:ae:36:85:03:1f:2e:63:21:28:a1:0f:0c:4b:eb:d8: 50:a2:c5:aa:a0:69:ec:31:84:56:8c:bf:4a:f9:e9:a2:d7:0e: 48:ad:9e:be:f6:3c:c8:1f:78:f5:90:30:e8:99:23:0c:56:28: 8c:da:67:2d:35:3a:f1:8b:73:d3:31:ee:c6:b9:74:9f:fc:98: fd:b2:40:13:ce:38:21:19:7a:20:ab:3d:63:a5:c8:f3:d0:a5: 94:f4:46:10:e8:05:39:cc:a7:c2:e5:1f:4b:e6:e8:d9:7a:8b: 36:8a:75:02:50:89:54:76:65:57:d5:18:10:34:44:29:c7:59: 67:27:9a:93:e8:48:2a:b1:cb:55:0a:18:ec:8d:df:24:e2:6c: 61:80:3c:97:05:e3:64:1b:09:34:e7:5c:49:36:2e:9f:02:9f: a1:76:49:ad:90:3c:d9:37:1c:d5:88:1e:6d:03:b8:aa:2b:94: 63:bf:c5:62:2e:b6:f0:4a:35:6d:98:52:b4:a6:15:fd:6c:03: 16:80:c8:95:e1:b7:70:f1:bb:bc:30:e8:77:fa:9b:8e:e4:b0: d8:88:db:4d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+lQJ4mCGBlVnea+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAyNzIyMTQwMVoXDTI5MDEyOTIzMTQwMVowLzEtMCsGA1UEAxMk ZDUyZWQyNTUtOGM4Yi00YWYyLThlZWItODZkN2FkZDUyNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaOrlQJbPXK8WZQw+FoW+mIsB7z0kueOzvjd 9ws2ZXUdZ4z4if7KiTvcDIx+Znnz2Hd31NtqPp+/bIeIGz6i0yhVOggU06blh+Ie QUHT/c1f10gwa70ZbOkKEVwZt4cfWe8qpgCVyjTAdpjKakDLx7ZJ9hEPtbf7trTl Msu9SWvj0ONJ53cMHhbCRgpTHq79OTv7839h1guxO328xf4sl8QeVIK0Z59hu0eO V2t34aR2mdsUvE7oU2r/0DX1MLqQdubXoEpjPJ8wSPCIkIqnOGDfyt+TMI9cF9DM APPTEYajbQe0VKcGwPi90PJyvici/ILu0fIhzvMCmdj0Qwh05QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMsjILv7+EQsMz0pbpdAd/KwPWNQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9k NTJlZDI1NS04YzhiLTRhZjItOGVlYi04NmQ3YWRkNTI1YjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2Q1MmVkMjU1LThjOGItNGFmMi04 ZWViLTg2ZDdhZGQ1MjViMy9kNTJlZDI1NS04YzhiLTRhZjItOGVlYi04NmQ3YWRk NTI1YjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJFUOQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFokxml9whbrxZdryryIS M+D9s+075iBzNgjbJnVdw05JwZMiyv5arjaFAx8uYyEooQ8MS+vYUKLFqqBp7DGE Voy/SvnpotcOSK2evvY8yB949ZAw6JkjDFYojNpnLTU68Ytz0zHuxrl0n/yY/bJA E844IRl6IKs9Y6XI89CllPRGEOgFOcynwuUfS+bo2XqLNop1AlCJVHZlV9UYEDRE KcdZZyeak+hIKrHLVQoY7I3fJOJsYYA8lwXjZBsJNOdcSTYunwKfoXZJrZA82Tcc 1YgebQO4qiuUY7/FYi628Eo1bZhStKYV/WwDFoDIleG3cPG7vDDod/qbjuSw2Ijb TQ== -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:46 2026 by rpki-client