$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/7f77b2b0-789f-4d7a-9da7-37bad7f7fac5.cer File: 7f77b2b0-789f-4d7a-9da7-37bad7f7fac5.cer (raw, json) Hash identifier: XYmFihJX5mbSLsE1s43zaWSl5RfLEB4k8qCgaS8fUv4= Subject key identifier: 14:F4:00:07:C1:23:05:87:DC:B9:E2:BE:85:2E:4E:CB:C9:3C:1B:85 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FBA060C583C25AEDC6E70CE49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/7f77b2b0-789f-4d7a-9da7-37bad7f7fac5/7f77b2b0-789f-4d7a-9da7-37bad7f7fac5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/7f77b2b0-789f-4d7a-9da7-37bad7f7fac5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Nov 2026 08:47:59 +0000 Certificate not after: Tue 06 Feb 2029 08:47:59 +0000 Subordinate resources: IP: 2620:7d:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:06:0c:58:3c:25:ae:dc:6e:70:ce:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 4 08:47:59 2026 GMT Not After : Feb 6 08:47:59 2029 GMT Subject: CN=7f77b2b0-789f-4d7a-9da7-37bad7f7fac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4b:3c:ab:4c:6a:d4:cc:85:e5:58:04:26:79: a3:4b:82:39:47:3b:38:88:41:3c:07:d0:36:98:21: 24:ac:04:9d:be:cd:d6:33:41:c3:d0:8e:14:6d:33: 31:d4:43:26:b9:10:96:70:8b:e3:ec:38:28:91:38: fa:29:08:58:c8:92:3a:61:fb:0a:16:d0:f0:14:ae: f3:ed:94:65:16:ff:d2:30:9a:c8:5a:c9:1d:1e:c0: 1b:64:f8:c5:cf:79:7a:4e:95:15:56:f9:43:ca:ef: 9a:01:7b:c1:03:f6:b8:9d:30:67:d0:01:c8:c1:65: d0:24:b7:99:17:6d:53:83:46:cd:77:47:b2:2c:73: b5:9a:94:4b:fe:c3:ef:8e:da:d4:6d:a2:4d:b8:33: d8:89:a7:14:f1:70:ae:95:c4:60:f1:2b:40:ac:41: b5:9c:5b:47:df:61:99:70:c0:b7:71:51:04:5d:1b: e1:79:17:b4:b8:1a:99:3c:d3:05:72:4a:24:de:2e: d1:00:74:5a:92:f8:7e:97:2a:5e:a1:4b:b2:09:63: 18:07:3e:31:eb:1e:6a:90:14:c8:6c:aa:7f:32:42: 6e:e4:59:e6:7f:8b:c1:00:ff:68:7f:87:63:a0:bd: 81:4c:68:6d:01:e5:79:3f:89:6b:8e:d0:c0:72:6f: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F4:00:07:C1:23:05:87:DC:B9:E2:BE:85:2E:4E:CB:C9:3C:1B:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/7f77b2b0-789f-4d7a-9da7-37bad7f7fac5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/7f77b2b0-789f-4d7a-9da7-37bad7f7fac5/7f77b2b0-789f-4d7a-9da7-37bad7f7fac5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv6: 2620:7d:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:02:43:cd:9c:34:7e:d1:c4:ea:97:eb:fc:cc:14:71:3a:e5: 1c:de:2a:e9:95:0f:7f:3d:9f:5e:93:34:4f:b8:06:06:80:71: 2b:b4:f9:fc:92:49:85:73:0f:c3:63:f8:de:68:b4:2b:87:7e: 04:6d:63:bb:15:51:df:ad:c2:fe:d4:9a:c8:d5:28:00:11:b2: 6a:2d:fa:33:a1:86:f8:d2:e2:6c:ae:ce:fb:30:09:97:2d:f1: 02:0c:c8:3c:d5:a8:e6:ce:0f:43:7d:0d:f6:46:0d:a9:14:e0: 37:49:eb:57:a6:d9:47:44:57:6c:a8:d3:9e:7d:8c:dc:fc:f9: aa:b7:af:e3:18:ea:84:af:f5:60:68:7a:41:7b:c4:b0:1a:76: 8d:7c:1b:c2:c5:23:ac:4b:46:b3:2c:ee:c9:42:5e:b7:21:d8: 43:58:6e:d1:5e:3c:65:62:6f:cb:1e:66:c5:2a:6f:e2:39:7b: 8f:fb:0f:9e:96:c0:0c:78:2c:a4:94:ee:b7:7a:57:c9:50:fa: 2b:fc:e5:88:3d:cc:a3:00:f4:55:df:99:df:95:52:63:7b:ad: b7:59:c7:da:4d:d1:b5:34:74:54:21:0b:8e:47:cb:25:c2:6a: 57:ab:1a:24:3e:69:73:7d:27:7d:87:5a:c0:3d:c0:dc:27:20: 23:ea:6b:88 -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE+6BgxYPCWu3G5wzkkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwNDA4NDc1OVoXDTI5MDIwNjA4NDc1OVowLzEtMCsGA1UEAxMk N2Y3N2IyYjAtNzg5Zi00ZDdhLTlkYTctMzdiYWQ3ZjdmYWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUs8q0xq1MyF5VgEJnmjS4I5Rzs4iEE8B9A2 mCEkrASdvs3WM0HD0I4UbTMx1EMmuRCWcIvj7DgokTj6KQhYyJI6YfsKFtDwFK7z 7ZRlFv/SMJrIWskdHsAbZPjFz3l6TpUVVvlDyu+aAXvBA/a4nTBn0AHIwWXQJLeZ F21Tg0bNd0eyLHO1mpRL/sPvjtrUbaJNuDPYiacU8XCulcRg8StArEG1nFtH32GZ cMC3cVEEXRvheRe0uBqZPNMFckok3i7RAHRakvh+lypeoUuyCWMYBz4x6x5qkBTI bKp/MkJu5Fnmf4vBAP9of4djoL2BTGhtAeV5P4lrjtDAcm8VvQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFBT0AAfBIwWH3LnivoUuTsvJPBuFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi83 Zjc3YjJiMC03ODlmLTRkN2EtOWRhNy0zN2JhZDdmN2ZhYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzdmNzdiMmIwLTc4OWYtNGQ3YS05 ZGE3LTM3YmFkN2Y3ZmFjNS83Zjc3YjJiMC03ODlmLTRkN2EtOWRhNy0zN2JhZDdm N2ZhYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAB94AAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJQJDzZw0ftHE6pfr /MwUcTrlHN4q6ZUPfz2fXpM0T7gGBoBxK7T5/JJJhXMPw2P43mi0K4d+BG1juxVR 363C/tSayNUoABGyai36M6GG+NLibK7O+zAJly3xAgzIPNWo5s4PQ30N9kYNqRTg N0nrV6bZR0RXbKjTnn2M3Pz5qrev4xjqhK/1YGh6QXvEsBp2jXwbwsUjrEtGsyzu yUJetyHYQ1hu0V48ZWJvyx5mxSpv4jl7j/sPnpbADHgspJTut3pXyVD6K/zliD3M owD0Vd+Z35VSY3utt1nH2k3RtTR0VCELjkfLJcJqV6saJD5pc30nfYdawD3A3Ccg I+priA== -----END CERTIFICATE-----Generated at Thu Nov 5 19:51:55 2026 by rpki-client