$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252.cer File: ef2c17bb-2de9-42bf-9197-37afb9fde252.cer (raw, json) Hash identifier: jHKQDL3yajZ6Bkef4AsJbFbr+IOipeufznh5FY02ln4= Subject key identifier: 49:4E:C9:57:D6:EF:24:B5:7A:2E:34:0B:B9:58:CD:20:55:FF:B4:7E Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FAA76477B3E3BCC2F41617AE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252/ef2c17bb-2de9-42bf-9197-37afb9fde252.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Oct 2026 19:01:11 +0000 Certificate not after: Wed 31 Jan 2029 20:01:11 +0000 Subordinate resources: AS: 15189 IP: 67.223.112.0/22 IP: 208.77.88.0/22 IP: 2607:f628::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:aa:76:47:7b:3e:3b:cc:2f:41:61:7a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 29 19:01:11 2026 GMT Not After : Jan 31 20:01:11 2029 GMT Subject: CN=ef2c17bb-2de9-42bf-9197-37afb9fde252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:60:54:88:fb:1c:c4:e5:c0:71:37:3c:c2: 9d:29:66:71:dd:8f:67:3e:9b:8d:99:35:14:9e:5d: b6:1f:bc:cb:ae:e0:60:e7:e5:1e:b2:9c:3b:a4:44: af:7a:fa:dc:80:6a:f0:53:96:11:11:4a:1a:ed:10: fd:f7:29:99:b6:1d:58:0c:58:ca:e4:3c:68:27:af: 72:30:39:00:69:a3:11:63:86:ba:cd:60:84:53:ea: 4d:45:b8:7e:67:55:8b:dc:b7:66:c4:7a:d9:9d:29: 59:00:af:b4:51:05:45:e3:53:16:cd:a1:30:53:1a: 65:88:58:62:b4:d6:6c:50:b5:26:17:a4:ef:74:08: 1d:66:93:db:36:4a:03:d7:95:20:c0:85:db:be:bb: f5:30:b1:38:3d:e9:7b:71:98:fd:f4:d4:03:dd:64: ef:9d:02:c1:8c:7f:c1:c7:a6:dc:3b:a9:22:4c:17: 95:bf:90:32:53:43:0b:24:37:e2:00:50:7e:0d:b9: 5a:57:62:a4:7a:91:97:1c:ec:d3:39:6d:8c:be:99: 9e:1a:03:22:96:30:cd:42:65:b5:b3:b8:23:2b:78: 7f:26:08:12:6b:8b:fc:6f:e7:3c:1d:78:0a:0d:53: 7e:21:e9:d6:28:85:2a:18:33:91:4f:41:6d:fd:ab: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4E:C9:57:D6:EF:24:B5:7A:2E:34:0B:B9:58:CD:20:55:FF:B4:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ef2c17bb-2de9-42bf-9197-37afb9fde252/ef2c17bb-2de9-42bf-9197-37afb9fde252.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 67.223.112.0/22 208.77.88.0/22 IPv6: 2607:f628::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15189 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:48:dc:65:94:6f:fa:15:bd:e0:b1:30:ba:b4:07:02:b9:31: a6:70:47:ea:77:69:64:ef:53:c2:eb:e6:ee:39:b3:e8:34:6d: af:3a:5e:a9:bc:52:16:7f:15:10:74:d2:fc:51:89:4a:66:c9: b3:de:3b:58:e3:11:f1:3d:cc:70:5b:8b:df:b0:5e:dc:fb:ad: ca:a6:0c:f1:54:77:a4:5f:c2:03:3a:88:fe:48:e5:d2:1a:2d: f2:d3:a3:ae:5a:ca:af:6f:24:3a:82:28:dd:39:cd:f2:0e:c5: 41:c2:08:c9:89:16:2d:8d:42:77:0c:77:4e:b8:6d:2f:47:e4: 39:5c:b0:13:64:66:75:79:c7:ff:58:80:5a:85:c7:a6:5c:f8: 5d:d9:23:ea:74:01:fe:db:62:16:44:bd:ef:64:dc:5f:22:ab: 73:ab:a4:30:da:d9:fc:14:04:86:28:6f:54:be:5a:a0:e9:3e: eb:52:bc:b8:f2:bf:80:fb:52:33:9d:7a:04:df:28:dc:ab:3e: 15:34:18:d2:6d:d8:92:31:75:31:2e:eb:8c:14:c2:53:17:6e: 7b:7a:6a:36:88:1d:fe:8c:0e:bb:51:f2:a5:60:4f:4d:8e:61: 7b:b4:74:30:89:2a:1c:c7:40:e8:8b:13:46:07:6d:a9:9d:06: 97:6d:f0:58 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE+qdkd7PjvML0FheuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAyOTE5MDExMVoXDTI5MDEzMTIwMDExMVowLzEtMCsGA1UEAxMk ZWYyYzE3YmItMmRlOS00MmJmLTkxOTctMzdhZmI5ZmRlMjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt79gVIj7HMTlwHE3PMKdKWZx3Y9nPpuNmTUU nl22H7zLruBg5+Uespw7pESvevrcgGrwU5YREUoa7RD99ymZth1YDFjK5DxoJ69y MDkAaaMRY4a6zWCEU+pNRbh+Z1WL3LdmxHrZnSlZAK+0UQVF41MWzaEwUxpliFhi tNZsULUmF6TvdAgdZpPbNkoD15UgwIXbvrv1MLE4Pel7cZj99NQD3WTvnQLBjH/B x6bcO6kiTBeVv5AyU0MLJDfiAFB+DblaV2KkepGXHOzTOW2MvpmeGgMiljDNQmW1 s7gjK3h/JggSa4v8b+c8HXgKDVN+IenWKIUqGDORT0Ft/av5pwIDAQABo4IELzCC BCswHQYDVR0OBBYEFElOyVfW7yS1ei40C7lYzSBV/7R+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9l ZjJjMTdiYi0yZGU5LTQyYmYtOTE5Ny0zN2FmYjlmZGUyNTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2VmMmMxN2JiLTJkZTktNDJiZi05 MTk3LTM3YWZiOWZkZTI1Mi9lZjJjMTdiYi0yZGU5LTQyYmYtOTE5Ny0zN2FmYjlm ZGUyNTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJD33ADBALQTVgwDQQCAAIwBwMFACYH9igwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICO1UwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVEjcZZRv+hW94LEwurQH ArkxpnBH6ndpZO9Twuvm7jmz6DRtrzpeqbxSFn8VEHTS/FGJSmbJs947WOMR8T3M cFuL37Be3PutyqYM8VR3pF/CAzqI/kjl0hot8tOjrlrKr28kOoIo3TnN8g7FQcII yYkWLY1Cdwx3TrhtL0fkOVywE2RmdXnH/1iAWoXHplz4Xdkj6nQB/ttiFkS972Tc XyKrc6ukMNrZ/BQEhihvVL5aoOk+61K8uPK/gPtSM516BN8o3Ks+FTQY0m3YkjF1 MS7rjBTCUxdue3pqNogd/owOu1HypWBPTY5he7R0MIkqHMdA6IsTRgdtqZ0Gl23w WA== -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:46 2026 by rpki-client