$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/f5a4db49-5c56-4121-8ebb-60299ff2f74b.cer File: f5a4db49-5c56-4121-8ebb-60299ff2f74b.cer (raw, json) Hash identifier: a57CvylpJWol/dZcZ8Hg5UbiUGhmYuvGhaDhLA0w53I= Subject key identifier: D3:25:CD:E1:5F:9D:C5:91:3A:AF:64:FF:5C:3D:76:04:58:45:2A:EB Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FAA1CDDB0E54049F981D88400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/f5a4db49-5c56-4121-8ebb-60299ff2f74b/f5a4db49-5c56-4121-8ebb-60299ff2f74b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/f5a4db49-5c56-4121-8ebb-60299ff2f74b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Oct 2026 16:01:02 +0000 Certificate not after: Wed 31 Jan 2029 17:01:02 +0000 Subordinate resources: AS: 46451 AS: 54093 AS: 54610 IP: 198.160.5.0/24 IP: 205.211.148.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:aa:1c:dd:b0:e5:40:49:f9:81:d8:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 29 16:01:02 2026 GMT Not After : Jan 31 17:01:02 2029 GMT Subject: CN=f5a4db49-5c56-4121-8ebb-60299ff2f74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5c:4b:d8:19:c6:03:d5:ec:e7:af:0f:2c:9f: 81:83:2c:62:f4:ff:a2:94:f7:66:07:d9:71:88:d9: 27:7d:a2:bb:71:5c:da:77:c7:40:6b:1e:de:6c:cc: bd:79:c7:af:ee:4d:80:17:b8:85:f5:ad:5a:36:87: 0c:db:9c:31:61:3c:f5:0b:de:93:9a:2e:0f:90:aa: 72:2b:6d:e3:80:f9:37:e2:05:26:0b:e5:ff:03:72: b0:59:ae:bf:c1:76:10:37:69:d1:01:0c:3d:c4:24: 05:84:e2:6e:25:2f:76:43:1e:8b:fc:3c:a5:80:54: 8d:fa:c6:a1:15:cb:68:0a:30:fa:e1:a3:75:52:0e: 67:a4:0c:c4:3d:f7:7a:3d:6b:57:3a:4b:1f:f7:cd: d5:54:1c:c6:2f:93:bd:72:1e:59:d0:67:6e:7c:59: fe:08:92:53:dd:7c:b7:e9:bc:cb:1a:02:3d:0d:ce: 9e:c5:16:43:68:c3:1a:ca:e3:2d:3f:1d:4e:5c:d5: 80:93:42:da:a0:d1:fd:1b:53:50:01:e6:53:5f:ea: 48:25:71:60:c4:80:8d:42:18:2f:5a:41:6a:34:a7: a1:b4:10:c3:e5:f2:37:97:74:29:07:10:e4:cb:62: d4:ac:6f:c0:f1:43:1b:ef:2b:6a:d3:8c:24:00:0f: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:25:CD:E1:5F:9D:C5:91:3A:AF:64:FF:5C:3D:76:04:58:45:2A:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/f5a4db49-5c56-4121-8ebb-60299ff2f74b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/f5a4db49-5c56-4121-8ebb-60299ff2f74b/f5a4db49-5c56-4121-8ebb-60299ff2f74b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 198.160.5.0/24 205.211.148.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46451 54093 54610 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:cf:32:74:f5:d0:b8:cb:1d:f2:f8:4d:b6:28:97:5d:78:aa: 32:5d:84:88:20:d4:87:64:dc:07:59:f4:55:7c:b6:3f:d6:68: bc:c7:c1:5b:23:55:c5:29:2a:0f:ec:69:8e:a0:e9:b5:bb:de: ea:e2:d3:83:69:9b:03:8a:18:14:a2:d4:57:af:fa:53:22:84: 74:c3:2e:38:67:79:cc:c2:87:30:1f:f3:84:d0:92:49:20:dc: 70:4b:b4:87:ae:d0:0d:07:ae:e1:f9:b5:87:03:ab:1e:58:9b: 68:07:7d:40:40:2d:0c:9a:e7:46:55:86:69:1c:5b:f4:48:72: f7:f6:42:48:8d:f0:2a:ca:46:a4:83:53:c6:f1:3f:33:62:5b: 7d:87:55:bd:a4:e0:69:bc:a3:28:13:a7:78:ad:ba:95:4d:9b: 68:4e:94:f0:fa:e6:4e:8b:42:40:1e:a4:b0:4f:36:30:03:a4: 92:f5:6c:e0:f6:dd:ef:a9:35:d6:d4:4e:14:68:55:6d:fc:78: a0:02:da:de:e3:91:15:db:fd:4e:f6:b2:65:52:69:ed:cd:d6: 82:9c:d7:88:13:2d:9b:fe:8d:ff:25:07:f0:31:3a:91:e6:d1: f2:4b:9a:c9:0c:72:c2:7f:96:9f:7c:00:71:d7:6a:39:e9:22: 29:59:c4:eb -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+qHN2w5UBJ+YHYhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAyOTE2MDEwMloXDTI5MDEzMTE3MDEwMlowLzEtMCsGA1UEAxMk ZjVhNGRiNDktNWM1Ni00MTIxLThlYmItNjAyOTlmZjJmNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VxL2BnGA9Xs568PLJ+Bgyxi9P+ilPdmB9lx iNknfaK7cVzad8dAax7ebMy9ecev7k2AF7iF9a1aNocM25wxYTz1C96Tmi4PkKpy K23jgPk34gUmC+X/A3KwWa6/wXYQN2nRAQw9xCQFhOJuJS92Qx6L/DylgFSN+sah FctoCjD64aN1Ug5npAzEPfd6PWtXOksf983VVBzGL5O9ch5Z0GdufFn+CJJT3Xy3 6bzLGgI9Dc6exRZDaMMayuMtPx1OXNWAk0LaoNH9G1NQAeZTX+pIJXFgxICNQhgv WkFqNKehtBDD5fI3l3QpBxDky2LUrG/A8UMb7ytq04wkAA/tmQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNMlzeFfncWROq9k/1w9dgRYRSrrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9m NWE0ZGI0OS01YzU2LTQxMjEtOGViYi02MDI5OWZmMmY3NGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2Y1YTRkYjQ5LTVjNTYtNDEyMS04 ZWJiLTYwMjk5ZmYyZjc0Yi9mNWE0ZGI0OS01YzU2LTQxMjEtOGViYi02MDI5OWZm MmY3NGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGoAUDBADN05QwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDALVzAgMA000CAwDVUjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUzzJ09dC4yx3y+E22KJddeKoy XYSIINSHZNwHWfRVfLY/1mi8x8FbI1XFKSoP7GmOoOm1u97q4tODaZsDihgUotRX r/pTIoR0wy44Z3nMwocwH/OE0JJJINxwS7SHrtANB67h+bWHA6seWJtoB31AQC0M mudGVYZpHFv0SHL39kJIjfAqykakg1PG8T8zYlt9h1W9pOBpvKMoE6d4rbqVTZto TpTw+uZOi0JAHqSwTzYwA6SS9Wzg9t3vqTXW1E4UaFVt/HigAtre45EV2/1O9rJl UmntzdaCnNeIEy2b/o3/JQfwMTqR5tHyS5rJDHLCf5affABx12o56SIpWcTr -----END CERTIFICATE-----Generated at Mon Nov 2 07:09:02 2026 by rpki-client