$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0be3b220-122b-4ff7-a7d8-20d97b54f4c1.cer File: 0be3b220-122b-4ff7-a7d8-20d97b54f4c1.cer (raw, json) Hash identifier: 67LN7MyMQ1e46XsiEhpkgsPfgoEVFInOqUF1yP63Xi8= Subject key identifier: DA:AE:23:8F:D4:7B:26:55:45:1D:D5:A9:04:D8:0C:85:6A:21:7C:D4 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FB534C9BE6A0648E7B6E16900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0be3b220-122b-4ff7-a7d8-20d97b54f4c1/0be3b220-122b-4ff7-a7d8-20d97b54f4c1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0be3b220-122b-4ff7-a7d8-20d97b54f4c1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Nov 2026 15:23:07 +0000 Certificate not after: Sun 04 Feb 2029 15:23:07 +0000 Subordinate resources: IP: 64.246.160.0/19 IP: 206.83.10.0/23 IP: 2001:478::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:34:c9:be:6a:06:48:e7:b6:e1:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 2 15:23:07 2026 GMT Not After : Feb 4 15:23:07 2029 GMT Subject: CN=0be3b220-122b-4ff7-a7d8-20d97b54f4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:dc:29:30:14:27:67:fa:96:c2:3c:5a:62: 4f:58:3f:46:4d:2e:e4:79:a4:97:ae:f8:07:95:29: fd:f8:c7:ff:f7:49:18:79:ad:57:41:a8:ce:55:6e: ad:1d:e1:05:2a:30:bf:55:cb:f0:78:a9:6a:32:e2: 4a:ec:56:3c:52:78:e4:05:0d:a2:5e:dd:82:a1:8f: 55:66:2c:15:af:01:c4:00:9a:7c:52:09:8e:07:e7: 46:60:62:c2:3e:1e:60:42:21:ce:b2:2e:5b:fa:09: 0c:4b:b9:14:d0:16:90:bc:16:71:5a:78:24:5c:6e: 4a:7c:93:c4:58:79:a5:ca:29:44:a5:a9:16:9e:16: c8:83:e9:f6:b6:78:39:7b:08:f0:2f:13:9f:0c:ac: a2:33:b3:bb:49:ec:6a:f5:61:5b:5e:cc:0d:39:0d: f0:5d:81:a6:15:cb:3a:b0:61:20:15:55:8d:a5:41: 75:5b:8c:a8:46:69:14:22:5b:73:81:4f:35:df:a8: 51:46:b9:42:f4:80:53:c6:3b:cd:ae:f1:c5:57:95: c4:4e:c5:4a:f1:ac:b1:94:b3:fe:a9:e0:6a:82:25: f9:02:9a:09:f1:97:f6:a1:66:72:9b:ce:5f:9f:24: 43:2d:1e:11:c7:c6:1e:1c:fc:f6:e7:87:c6:7a:89: 56:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AE:23:8F:D4:7B:26:55:45:1D:D5:A9:04:D8:0C:85:6A:21:7C:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0be3b220-122b-4ff7-a7d8-20d97b54f4c1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/0be3b220-122b-4ff7-a7d8-20d97b54f4c1/0be3b220-122b-4ff7-a7d8-20d97b54f4c1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 64.246.160.0/19 206.83.10.0/23 IPv6: 2001:478::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:71:0a:66:e5:7b:42:98:25:0d:a6:b3:07:67:04:89:7b:09: 36:4b:56:c5:35:63:b7:a8:a5:98:9a:37:a5:2c:2e:34:a9:06: c1:0b:c5:c8:fc:51:2e:01:2a:2b:3a:ca:fa:17:aa:39:90:64: 00:04:83:13:88:f0:b2:89:e9:73:7e:cf:41:db:08:50:b7:cd: cc:3b:49:38:58:6f:5d:70:84:04:a5:1d:88:4e:a1:7e:c0:b4: 34:e9:eb:90:b2:81:63:b3:a7:25:59:ea:e7:03:03:4e:54:3f: 8a:87:6d:00:fc:db:25:c5:35:26:40:11:ec:01:bc:3b:3c:00: b6:6e:95:92:8d:cc:4d:a0:d4:49:b6:77:3d:b0:69:fe:f8:8b: 44:da:c5:85:12:b3:c3:1a:8e:ef:de:19:06:09:87:8e:f2:6c: 29:63:06:ee:b6:3b:2f:9a:2c:85:a7:76:ca:1e:1f:9d:cb:c8: 7f:0f:b8:d7:12:c6:bc:dc:8b:69:e4:93:22:2c:72:66:4a:92: 73:8a:fb:5d:ed:96:e1:5f:63:0f:7c:31:d3:aa:91:de:da:df: a3:ca:41:9d:6b:25:54:5b:41:bc:2a:36:b7:eb:fd:4a:d9:9b: 41:b7:09:7a:de:52:e3:76:dc:92:de:ae:4d:6f:55:71:ad:1f: 08:a3:4c:01 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWE+1NMm+agZI57bhaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwMjE1MjMwN1oXDTI5MDIwNDE1MjMwN1owLzEtMCsGA1UEAxMk MGJlM2IyMjAtMTIyYi00ZmY3LWE3ZDgtMjBkOTdiNTRmNGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0ncKTAUJ2f6lsI8WmJPWD9GTS7keaSXrvgH lSn9+Mf/90kYea1XQajOVW6tHeEFKjC/VcvweKlqMuJK7FY8UnjkBQ2iXt2CoY9V ZiwVrwHEAJp8UgmOB+dGYGLCPh5gQiHOsi5b+gkMS7kU0BaQvBZxWngkXG5KfJPE WHmlyilEpakWnhbIg+n2tng5ewjwLxOfDKyiM7O7Sexq9WFbXswNOQ3wXYGmFcs6 sGEgFVWNpUF1W4yoRmkUIltzgU8136hRRrlC9IBTxjvNrvHFV5XETsVK8ayxlLP+ qeBqgiX5ApoJ8Zf2oWZym85fnyRDLR4Rx8YeHPz254fGeolW3wIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFNquI4/UeyZVRR3VqQTYDIVqIXzUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8w YmUzYjIyMC0xMjJiLTRmZjctYTdkOC0yMGQ5N2I1NGY0YzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzBiZTNiMjIwLTEyMmItNGZmNy1h N2Q4LTIwZDk3YjU0ZjRjMS8wYmUzYjIyMC0xMjJiLTRmZjctYTdkOC0yMGQ5N2I1 NGY0YzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAVA9qADBAHOUwowDQQCAAIwBwMFACABBHgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAnHEKZuV7QpglDaazB2cEiXsJNktWxTVjt6ilmJo3pSwuNKkGwQvFyPxR LgEqKzrK+heqOZBkAASDE4jwsonpc37PQdsIULfNzDtJOFhvXXCEBKUdiE6hfsC0 NOnrkLKBY7OnJVnq5wMDTlQ/iodtAPzbJcU1JkAR7AG8OzwAtm6Vko3MTaDUSbZ3 PbBp/viLRNrFhRKzwxqO794ZBgmHjvJsKWMG7rY7L5oshad2yh4fncvIfw+41xLG vNyLaeSTIixyZkqSc4r7Xe2W4V9jD3wx06qR3trfo8pBnWslVFtBvCo2t+v9Stmb QbcJet5S43bckt6uTW9Vca0fCKNMAQ== -----END CERTIFICATE-----Generated at Thu Nov 5 02:42:19 2026 by rpki-client