$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed.cer File: 4f03c6aa-8d91-4885-b92c-f839de5529ed.cer (raw, json) Hash identifier: pzyBysOTkjgt5TdsiNKxmj0a482XY3JhAJDl+fF/758= Subject key identifier: BE:1B:CA:7F:4C:49:F6:28:BE:9B:4A:B9:AC:88:23:59:97:AC:27:AB Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FB8C4966CB332F3C8634255C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/4f03c6aa-8d91-4885-b92c-f839de5529ed.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Nov 2026 22:00:17 +0000 Certificate not after: Fri 02 Feb 2029 08:50:31 +0000 Subordinate resources: IP: 198.134.24.0/22 IP: 2602:f277::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b8:c4:96:6c:b3:32:f3:c8:63:42:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 3 22:00:17 2026 GMT Not After : Feb 2 08:50:31 2029 GMT Subject: CN=4f03c6aa-8d91-4885-b92c-f839de5529ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ca:85:3b:ed:f9:62:6d:ab:40:6e:2f:77:23: 5c:19:4d:06:11:c6:f0:0a:32:b5:75:c3:19:3a:13: 25:ea:89:a1:47:55:cd:ea:96:47:cc:45:72:0f:84: 09:48:85:21:97:e9:3f:f9:d5:03:93:4a:f1:1d:75: db:a6:6d:0c:02:b8:e6:7a:9b:49:6b:bd:0a:c4:91: c9:d9:3a:2e:43:3f:64:97:eb:38:d8:b8:c8:1e:f5: bb:92:42:6b:f1:b3:f2:27:37:4a:fe:b0:14:09:b8: f6:32:04:87:c2:74:b2:0a:72:c8:ac:e0:cb:d2:d8: ab:ea:c8:89:77:18:b2:97:75:2a:77:bf:e0:4e:7f: 6d:16:43:9b:39:12:49:10:ac:13:c8:8f:f2:e1:de: aa:65:97:e6:de:5c:3e:48:83:08:2a:1c:08:5f:34: a5:5f:d2:6d:a9:43:1f:36:3e:0e:95:3a:54:09:34: b8:6c:d3:1c:20:7c:1a:b7:e1:22:0f:c3:70:05:ee: ce:a9:72:ca:a7:5d:ce:f0:4d:52:ee:97:e6:b0:04: 8d:b0:90:07:72:02:8c:da:a9:4c:78:b0:26:95:ed: 77:e1:9f:37:98:b9:d1:2d:56:7f:c0:10:8b:a8:e4: ba:25:41:d4:4e:0a:07:14:07:42:a1:10:9f:cc:1c: 98:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1B:CA:7F:4C:49:F6:28:BE:9B:4A:B9:AC:88:23:59:97:AC:27:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/4f03c6aa-8d91-4885-b92c-f839de5529ed.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 198.134.24.0/22 IPv6: 2602:f277::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7c:fa:1c:f9:da:2f:9a:00:65:03:df:7e:fa:3b:0b:25:9f: c0:a6:9b:75:a6:3f:36:e5:98:07:67:1f:32:2f:40:df:e7:1b: f0:ef:10:0e:4c:be:51:c6:a9:95:cb:aa:4a:82:24:d8:45:40: ff:73:b0:1c:c5:e5:b5:3d:a1:d6:4e:64:88:49:14:16:9c:5b: 62:8a:3f:f6:b3:60:3a:a3:ac:dc:3a:97:ea:67:89:1a:df:bb: f5:37:bd:24:54:85:92:4f:4f:59:59:9f:0c:51:35:4b:59:5c: 5d:a2:30:25:cc:86:de:11:0e:51:41:24:88:50:c8:e8:3e:20: a0:f2:37:2c:5f:03:af:e5:31:9a:f0:28:4f:43:4b:28:7a:71: 71:fa:99:0b:5d:cf:64:cc:38:0e:73:c6:5d:9e:2d:97:31:1a: 5e:13:8f:b0:20:d5:17:0b:5c:48:6e:d0:92:6b:d6:6c:d0:1d: bd:4b:f6:b8:fc:e1:bc:29:15:e6:66:70:dd:ac:0b:76:f9:04: 56:f7:87:0c:6d:a2:07:d6:fe:78:22:5c:77:a3:09:87:de:70: a6:7e:22:77:bc:11:63:e9:7b:e8:3e:6f:a7:8f:20:26:94:81: 01:dc:18:3e:6d:3d:9c:61:06:38:89:d9:05:2a:44:cb:db:65: 65:30:71:60 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+4xJZsszLzyGNCVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwMzIyMDAxN1oXDTI5MDIwMjA4NTAzMVowLzEtMCsGA1UEAxMk NGYwM2M2YWEtOGQ5MS00ODg1LWI5MmMtZjgzOWRlNTUyOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsqFO+35Ym2rQG4vdyNcGU0GEcbwCjK1dcMZ OhMl6omhR1XN6pZHzEVyD4QJSIUhl+k/+dUDk0rxHXXbpm0MArjmeptJa70KxJHJ 2TouQz9kl+s42LjIHvW7kkJr8bPyJzdK/rAUCbj2MgSHwnSyCnLIrODL0tir6siJ dxiyl3Uqd7/gTn9tFkObORJJEKwTyI/y4d6qZZfm3lw+SIMIKhwIXzSlX9JtqUMf Nj4OlTpUCTS4bNMcIHwat+EiD8NwBe7OqXLKp13O8E1S7pfmsASNsJAHcgKM2qlM eLAmle134Z83mLnRLVZ/wBCLqOS6JUHUTgoHFAdCoRCfzByYQwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFL4byn9MSfYovptKuayII1mXrCerMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi80 ZjAzYzZhYS04ZDkxLTQ4ODUtYjkyYy1mODM5ZGU1NTI5ZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzRmMDNjNmFhLThkOTEtNDg4NS1i OTJjLWY4MzlkZTU1MjllZC80ZjAzYzZhYS04ZDkxLTQ4ODUtYjkyYy1mODM5ZGU1 NTI5ZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALGhhgwDgQCAAIwCAMGBCYC8ncAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHx8+hz52i+aAGUD3376Owsln8Cmm3WmPzblmAdnHzIvQN/nG/DvEA5MvlHGqZXL qkqCJNhFQP9zsBzF5bU9odZOZIhJFBacW2KKP/azYDqjrNw6l+pniRrfu/U3vSRU hZJPT1lZnwxRNUtZXF2iMCXMht4RDlFBJIhQyOg+IKDyNyxfA6/lMZrwKE9DSyh6 cXH6mQtdz2TMOA5zxl2eLZcxGl4Tj7Ag1RcLXEhu0JJr1mzQHb1L9rj84bwpFeZm cN2sC3b5BFb3hwxtogfW/ngiXHejCYfecKZ+Ine8EWPpe+g+b6ePICaUgQHcGD5t PZxhBjiJ2QUqRMvbZWUwcWA= -----END CERTIFICATE-----Generated at Thu Nov 5 04:40:44 2026 by rpki-client