$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/e55e4ce3-eac0-45f4-b3c5-aeef90f6e6d1.cer File: e55e4ce3-eac0-45f4-b3c5-aeef90f6e6d1.cer (raw, json) Hash identifier: mOKhoMHFwETsTAqHTG06q4WGcbT2XtPyV7JhUSGcWBw= Subject key identifier: F7:E5:EB:BB:8C:23:71:48:56:AA:9A:29:84:BF:B7:95:5D:0C:53:C1 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FA9957C87F9925E791BFEEA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/e55e4ce3-eac0-45f4-b3c5-aeef90f6e6d1/e55e4ce3-eac0-45f4-b3c5-aeef90f6e6d1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/e55e4ce3-eac0-45f4-b3c5-aeef90f6e6d1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Oct 2026 11:28:15 +0000 Certificate not after: Wed 31 Jan 2029 12:28:15 +0000 Subordinate resources: AS: 403151 IP: 23.166.220.0/24 IP: 2602:f28f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a9:95:7c:87:f9:92:5e:79:1b:fe:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 29 11:28:15 2026 GMT Not After : Jan 31 12:28:15 2029 GMT Subject: CN=e55e4ce3-eac0-45f4-b3c5-aeef90f6e6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:48:b3:e3:c3:a4:3c:1d:47:62:bb:32:b9:52: 29:26:e7:46:b3:fc:86:6b:3f:d1:a8:ee:00:34:fc: ea:43:b7:b8:fc:ea:0b:42:0d:aa:07:0e:7c:84:ef: f6:50:d5:c7:df:47:d2:b5:5a:b4:44:b8:a1:03:d6: 9c:ff:08:fc:98:37:ea:2f:41:47:1d:c9:61:ad:c1: 7f:68:ec:5c:7c:77:15:1f:5b:4c:07:e5:16:77:28: d3:a1:f6:9d:e7:00:7c:b0:70:59:02:21:eb:9e:2a: d2:f5:19:19:59:98:f5:85:5d:09:99:19:f2:ad:4e: 0f:74:48:69:45:e6:36:c9:57:d9:36:43:3d:3c:f7: 9f:38:1f:a4:be:4a:d7:a8:86:d6:58:23:8e:8d:86: 1a:a9:ee:44:72:aa:48:7d:b0:2c:1e:e0:9e:3c:97: d4:18:59:81:03:e4:8c:47:c3:74:0e:99:9e:9d:cc: cf:35:6d:0d:62:79:d4:47:66:06:a2:ed:a8:2d:68: c6:b6:fc:0f:d1:34:0a:5b:52:83:91:d8:c9:2a:cb: d9:f9:67:26:f2:3f:95:36:d8:b2:f5:52:c7:b5:57: c9:a8:80:6b:bd:5c:15:f3:8e:0d:6c:96:b3:1d:5f: db:94:a8:b1:55:fd:53:d5:e2:79:4b:2e:06:d6:90: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E5:EB:BB:8C:23:71:48:56:AA:9A:29:84:BF:B7:95:5D:0C:53:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/e55e4ce3-eac0-45f4-b3c5-aeef90f6e6d1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/e55e4ce3-eac0-45f4-b3c5-aeef90f6e6d1/e55e4ce3-eac0-45f4-b3c5-aeef90f6e6d1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 23.166.220.0/24 IPv6: 2602:f28f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403151 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:6f:1c:24:9c:2c:96:4f:3f:eb:ac:d9:0e:fc:78:29:e3:59: 91:54:f4:4a:de:44:4f:3c:0c:7c:0c:8f:6a:25:ff:c5:7a:a1: 16:ba:6a:a3:72:fa:39:57:dd:1f:3e:04:7b:a4:0f:a6:8d:41: 3e:8d:fa:eb:10:b1:88:17:77:9a:78:8e:c1:5f:3d:a1:4a:1c: fa:c1:13:f2:71:cf:98:76:50:4b:ea:c3:d5:4b:7a:3f:93:91: e7:dd:8a:ed:77:7c:95:9d:3e:64:34:d2:b5:7d:44:87:e5:9e: 5e:90:b1:8b:08:8e:40:de:57:e8:0b:7e:13:43:97:f5:0b:6a: 6a:c5:63:0d:4d:56:37:34:bc:ec:ad:8a:62:ea:6e:be:bd:04: bd:15:6a:23:0b:89:69:37:a2:be:1f:f0:aa:f6:f3:2e:56:c0: 87:c8:c5:61:53:b2:31:12:45:eb:76:92:0e:aa:85:d0:3e:2b: 31:c9:8c:36:c0:65:67:59:b3:c0:1d:2d:c2:89:e9:3a:dd:2b: 6d:ac:b1:c4:19:81:20:c2:ff:ec:c5:18:fa:fb:cb:57:4d:fc: 0a:91:22:2d:11:d7:eb:17:e1:d0:4b:2f:30:a8:78:42:9f:56: fc:f2:fc:9e:dc:56:db:dc:71:f8:fc:b6:21:e3:29:a6:59:44: 94:67:35:ff -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+plXyH+ZJeeRv+6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAyOTExMjgxNVoXDTI5MDEzMTEyMjgxNVowLzEtMCsGA1UEAxMk ZTU1ZTRjZTMtZWFjMC00NWY0LWIzYzUtYWVlZjkwZjZlNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0iz48OkPB1HYrsyuVIpJudGs/yGaz/RqO4A NPzqQ7e4/OoLQg2qBw58hO/2UNXH30fStVq0RLihA9ac/wj8mDfqL0FHHclhrcF/ aOxcfHcVH1tMB+UWdyjTofad5wB8sHBZAiHrnirS9RkZWZj1hV0JmRnyrU4PdEhp ReY2yVfZNkM9PPefOB+kvkrXqIbWWCOOjYYaqe5EcqpIfbAsHuCePJfUGFmBA+SM R8N0DpmenczPNW0NYnnUR2YGou2oLWjGtvwP0TQKW1KDkdjJKsvZ+Wcm8j+VNtiy 9VLHtVfJqIBrvVwV844NbJazHV/blKixVf1T1eJ5Sy4G1pC7NwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPfl67uMI3FIVqqaKYS/t5VdDFPBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9l NTVlNGNlMy1lYWMwLTQ1ZjQtYjNjNS1hZWVmOTBmNmU2ZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2U1NWU0Y2UzLWVhYzAtNDVmNC1i M2M1LWFlZWY5MGY2ZTZkMS9lNTVlNGNlMy1lYWMwLTQ1ZjQtYjNjNS1hZWVmOTBm NmU2ZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXptwwDgQCAAIwCAMGACYC8o8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmzzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCabxwknCyWTz/rrNkO/Hgp41mR VPRK3kRPPAx8DI9qJf/FeqEWumqjcvo5V90fPgR7pA+mjUE+jfrrELGIF3eaeI7B Xz2hShz6wRPycc+YdlBL6sPVS3o/k5Hn3Yrtd3yVnT5kNNK1fUSH5Z5ekLGLCI5A 3lfoC34TQ5f1C2pqxWMNTVY3NLzsrYpi6m6+vQS9FWojC4lpN6K+H/Cq9vMuVsCH yMVhU7IxEkXrdpIOqoXQPisxyYw2wGVnWbPAHS3Ciek63SttrLHEGYEgwv/sxRj6 +8tXTfwKkSItEdfrF+HQSy8wqHhCn1b88vye3Fbb3HH4/LYh4ymmWUSUZzX/ -----END CERTIFICATE-----Generated at Mon Nov 2 15:22:25 2026 by rpki-client