$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0a6d77dd-de8d-4757-b906-768bfbb17c6e.cer File: 0a6d77dd-de8d-4757-b906-768bfbb17c6e.cer (raw, json) Hash identifier: Xs1hYQ03cA0wFp9L5GUlAaPrHxm6NgBOa/68uhXg0kM= Subject key identifier: 6F:EA:B4:DE:B5:A1:6D:BB:77:B3:56:58:95:B2:65:E0:7A:79:17:4C Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FB54303A0A5F63F6F6CAFC8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0a6d77dd-de8d-4757-b906-768bfbb17c6e/0a6d77dd-de8d-4757-b906-768bfbb17c6e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0a6d77dd-de8d-4757-b906-768bfbb17c6e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Nov 2026 15:51:47 +0000 Certificate not after: Sun 04 Feb 2029 15:51:47 +0000 Subordinate resources: IP: 170.216.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:43:03:a0:a5:f6:3f:6f:6c:af:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 2 15:51:47 2026 GMT Not After : Feb 4 15:51:47 2029 GMT Subject: CN=0a6d77dd-de8d-4757-b906-768bfbb17c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:da:27:4b:88:e7:ff:49:98:a4:1f:ff:2f: 9f:78:85:54:3b:20:6a:1f:8a:b4:eb:64:81:c4:f5: ea:26:6e:d6:e4:00:50:82:e8:c3:bd:29:c1:f3:fc: 56:8a:f5:43:62:3c:43:9f:3a:66:63:d5:ad:1b:10: c2:af:9d:97:2d:de:dd:a3:7f:6c:d2:11:85:a5:51: 4b:90:11:bf:97:eb:1f:b9:94:60:ca:1b:d7:cf:51: 7b:46:74:ec:12:dd:bd:60:fe:02:99:55:01:18:3d: f9:02:58:94:87:85:ca:6f:04:07:be:85:78:02:7f: 3c:73:9a:0e:bf:ca:c8:62:e7:65:5b:9f:05:78:d3: eb:14:f8:ef:15:c6:36:88:41:aa:77:01:65:bb:bf: 37:59:bb:0a:2e:94:24:be:ef:a2:e0:f6:2b:bb:83: 5c:5c:68:0c:b2:9a:2e:5b:e4:b3:31:4e:9a:51:00: 52:89:56:9c:72:9a:a4:04:14:f7:02:9a:96:f6:f2: 5d:24:4b:40:e0:09:62:16:61:d6:bf:d6:7a:29:b6: 92:cc:3e:d9:0e:b7:ea:4b:6d:5c:f3:b4:04:44:bb: 83:ca:b0:5c:0a:a4:29:ef:c2:ea:87:02:07:cc:a5: b5:a8:1f:96:d6:cc:4d:e1:26:a6:af:99:b1:e6:25: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EA:B4:DE:B5:A1:6D:BB:77:B3:56:58:95:B2:65:E0:7A:79:17:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0a6d77dd-de8d-4757-b906-768bfbb17c6e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0a6d77dd-de8d-4757-b906-768bfbb17c6e/0a6d77dd-de8d-4757-b906-768bfbb17c6e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 170.216.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c6:40:0a:ce:b9:f1:08:83:dd:f1:3e:1a:54:c2:22:e0:b6: 7e:b7:4e:c2:f7:ad:7b:31:6c:a4:78:c1:e0:7c:fa:54:91:bb: 60:53:bf:f0:fe:d1:73:37:c5:13:b1:92:10:2a:96:48:db:5a: f1:2e:3d:cf:7b:44:3a:f7:5a:67:7f:ff:8e:3b:27:8e:1b:5c: 1c:ed:df:31:62:68:0a:04:38:fb:99:a0:bc:df:15:a3:dd:78: b8:da:b3:4a:61:38:ef:f0:c1:ec:ec:ba:c7:04:45:7a:81:e3: 19:0d:63:5c:5b:28:3e:1a:34:62:77:34:0b:9c:f9:bc:7b:9d: df:2d:95:69:72:3e:11:90:3d:72:c3:f5:26:f3:58:34:3c:a5: 8c:7a:60:98:35:3e:61:4d:42:18:a9:81:39:d0:76:e6:65:f1: 09:0a:9f:69:16:19:47:b4:b3:ed:5f:1b:97:b4:c7:6b:68:5c: 12:b2:8c:f0:cc:76:82:62:3d:04:36:f4:66:24:81:de:90:5a: ab:20:6b:72:0a:58:5a:c5:7f:7b:59:ac:ac:8a:ed:4a:2c:48: 8c:2f:ea:b0:84:1c:b6:02:20:08:74:3f:91:06:d0:3d:36:2a: 00:d1:71:d8:fd:e1:aa:64:c6:b7:cd:3d:50:45:53:9c:b1:9d: 24:d3:b8:9b -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE+1QwOgpfY/b2yvyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwMjE1NTE0N1oXDTI5MDIwNDE1NTE0N1owLzEtMCsGA1UEAxMk MGE2ZDc3ZGQtZGU4ZC00NzU3LWI5MDYtNzY4YmZiYjE3YzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbbaJ0uI5/9JmKQf/y+feIVUOyBqH4q062SB xPXqJm7W5ABQgujDvSnB8/xWivVDYjxDnzpmY9WtGxDCr52XLd7do39s0hGFpVFL kBG/l+sfuZRgyhvXz1F7RnTsEt29YP4CmVUBGD35AliUh4XKbwQHvoV4An88c5oO v8rIYudlW58FeNPrFPjvFcY2iEGqdwFlu783WbsKLpQkvu+i4PYru4NcXGgMspou W+SzMU6aUQBSiVaccpqkBBT3ApqW9vJdJEtA4AliFmHWv9Z6KbaSzD7ZDrfqS21c 87QERLuDyrBcCqQp78LqhwIHzKW1qB+W1sxN4Samr5mx5iWdwwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFG/qtN61oW27d7NWWJWyZeB6eRdMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8w YTZkNzdkZC1kZThkLTQ3NTctYjkwNi03NjhiZmJiMTdjNmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzBhNmQ3N2RkLWRlOGQtNDc1Ny1i OTA2LTc2OGJmYmIxN2M2ZS8wYTZkNzdkZC1kZThkLTQ3NTctYjkwNi03NjhiZmJi MTdjNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCq2DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgxkAKzrnxCIPd8T4aVMIi 4LZ+t07C9617MWykeMHgfPpUkbtgU7/w/tFzN8UTsZIQKpZI21rxLj3Pe0Q691pn f/+OOyeOG1wc7d8xYmgKBDj7maC83xWj3Xi42rNKYTjv8MHs7LrHBEV6geMZDWNc Wyg+GjRidzQLnPm8e53fLZVpcj4RkD1yw/Um81g0PKWMemCYNT5hTUIYqYE50Hbm ZfEJCp9pFhlHtLPtXxuXtMdraFwSsozwzHaCYj0ENvRmJIHekFqrIGtyClhaxX97 Waysiu1KLEiML+qwhBy2AiAIdD+RBtA9NioA0XHY/eGqZMa3zT1QRVOcsZ0k07ib -----END CERTIFICATE-----Generated at Wed Nov 4 21:18:08 2026 by rpki-client