$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9aeefabe-0f22-4419-b5d8-905691a66ea0.cer File: 9aeefabe-0f22-4419-b5d8-905691a66ea0.cer (raw, json) Hash identifier: 3kjJhGGMtzbx8DuXjQStTKvo0MAeH1qnA7WOI3Tpms8= Subject key identifier: 7E:BA:DA:93:76:CE:74:C8:70:55:45:DB:5E:73:C1:5D:33:99:B1:FF Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FB54AECABE8F9009666965A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9aeefabe-0f22-4419-b5d8-905691a66ea0/9aeefabe-0f22-4419-b5d8-905691a66ea0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9aeefabe-0f22-4419-b5d8-905691a66ea0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Nov 2026 16:07:43 +0000 Certificate not after: Sun 04 Feb 2029 16:07:43 +0000 Subordinate resources: IP: 204.153.4.0 -- 204.153.6.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:4a:ec:ab:e8:f9:00:96:66:96:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 2 16:07:43 2026 GMT Not After : Feb 4 16:07:43 2029 GMT Subject: CN=9aeefabe-0f22-4419-b5d8-905691a66ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:84:a0:96:cf:55:f7:97:08:d4:28:31:1d:8d: ff:38:07:ca:8b:c9:17:2b:b8:a8:ab:76:34:25:fa: 15:2d:93:19:b9:41:1d:0e:99:4e:96:b0:91:b6:a4: e9:3f:bd:f8:76:ad:95:f4:67:e6:9f:56:7c:08:f5: 3a:dd:3c:06:8d:38:37:e6:30:8c:14:83:db:69:6e: 65:47:c2:9b:3e:aa:c3:e7:39:18:ee:7f:9a:5c:35: 99:0a:52:b0:c4:06:11:c0:0f:4f:5b:bf:64:54:36: d1:3c:63:ba:97:d0:9a:84:74:02:bb:d2:c6:30:48: bb:15:a5:15:af:0e:c5:ba:a3:2f:3c:8b:c0:fc:86: 5e:1a:98:88:a3:69:f3:d2:0f:39:e3:84:c9:e2:bf: 92:bd:3c:40:b3:c6:6f:55:ae:85:e0:f9:e4:fc:17: af:c4:7e:a1:7d:99:be:eb:d4:ad:68:a4:e9:19:84: de:8d:ce:d4:5c:00:6f:01:ff:08:69:4c:3d:44:51: f6:4f:f1:f3:5f:69:33:bd:f8:e0:25:7a:59:00:44: c8:0c:1a:96:2e:c4:cb:c1:98:b9:94:5a:e0:2f:41: f4:ae:94:80:63:b4:ab:b0:ee:b7:30:2f:73:10:a0: 46:7a:c3:80:80:e1:8d:b2:3e:03:39:0f:e1:60:e8: 29:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BA:DA:93:76:CE:74:C8:70:55:45:DB:5E:73:C1:5D:33:99:B1:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9aeefabe-0f22-4419-b5d8-905691a66ea0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9aeefabe-0f22-4419-b5d8-905691a66ea0/9aeefabe-0f22-4419-b5d8-905691a66ea0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 204.153.4.0-204.153.6.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:12:a6:00:ca:7b:1b:0c:ac:48:a3:8b:e2:c1:d9:0a:30:cb: ae:e1:df:d2:2f:93:20:9d:d2:6b:70:1b:15:45:9e:78:5f:a8: 62:5c:cd:20:c3:6f:b8:a6:b1:ba:5d:3e:12:b1:1a:76:cf:cc: e5:d3:95:4e:b4:19:1b:19:c5:03:da:60:4c:8b:ed:1f:39:55: 87:70:01:f6:0b:b4:1d:db:6e:3d:ae:f7:19:17:f4:54:5a:cd: 8e:f3:47:01:8a:07:09:a5:c3:8f:d3:ff:bc:23:14:df:66:d0: 29:71:cf:da:68:d4:6b:d1:ab:72:ac:a4:38:01:43:15:ff:cf: 38:5c:ad:c9:d9:16:b7:14:84:75:59:79:a3:fc:fa:c9:81:41: 57:34:e3:b6:9a:91:2f:98:89:3f:c4:a3:34:d1:0b:ab:d9:da: 9d:ae:b2:4f:36:4c:12:f8:3d:f4:3b:ff:7d:fc:09:9d:e6:d7: e3:69:95:8e:4c:73:e4:b0:c7:74:a3:09:be:46:df:d2:97:44: 34:94:93:13:ba:51:52:ac:55:cc:f1:ed:bf:64:36:15:76:45: 43:3d:eb:8e:9d:31:a6:d7:c0:89:fc:ff:07:89:1f:a9:d8:b0: b3:ea:ee:01:05:52:dc:74:d3:72:23:fa:49:9b:bb:d8:23:34: 02:80:25:4b -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWE+1Suyr6PkAlmaWWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwMjE2MDc0M1oXDTI5MDIwNDE2MDc0M1owLzEtMCsGA1UEAxMk OWFlZWZhYmUtMGYyMi00NDE5LWI1ZDgtOTA1NjkxYTY2ZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ISgls9V95cI1CgxHY3/OAfKi8kXK7ioq3Y0 JfoVLZMZuUEdDplOlrCRtqTpP734dq2V9Gfmn1Z8CPU63TwGjTg35jCMFIPbaW5l R8KbPqrD5zkY7n+aXDWZClKwxAYRwA9PW79kVDbRPGO6l9CahHQCu9LGMEi7FaUV rw7FuqMvPIvA/IZeGpiIo2nz0g8544TJ4r+SvTxAs8ZvVa6F4Pnk/BevxH6hfZm+ 69StaKTpGYTejc7UXABvAf8IaUw9RFH2T/HzX2kzvfjgJXpZAETIDBqWLsTLwZi5 lFrgL0H0rpSAY7SrsO63MC9zEKBGesOAgOGNsj4DOQ/hYOgplwIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFH662pN2znTIcFVF215zwV0zmbH/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi85 YWVlZmFiZS0wZjIyLTQ0MTktYjVkOC05MDU2OTFhNjZlYTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzlhZWVmYWJlLTBmMjItNDQxOS1i NWQ4LTkwNTY5MWE2NmVhMC85YWVlZmFiZS0wZjIyLTQ0MTktYjVkOC05MDU2OTFh NjZlYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAsyZBAMEAMyZBjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnEqYAynsb DKxIo4viwdkKMMuu4d/SL5MgndJrcBsVRZ54X6hiXM0gw2+4prG6XT4SsRp2z8zl 05VOtBkbGcUD2mBMi+0fOVWHcAH2C7Qd2249rvcZF/RUWs2O80cBigcJpcOP0/+8 IxTfZtApcc/aaNRr0atyrKQ4AUMV/884XK3J2Ra3FIR1WXmj/PrJgUFXNOO2mpEv mIk/xKM00Qur2dqdrrJPNkwS+D30O/99/Amd5tfjaZWOTHPksMd0owm+Rt/Sl0Q0 lJMTulFSrFXM8e2/ZDYVdkVDPeuOnTGm18CJ/P8HiR+p2LCz6u4BBVLcdNNyI/pJ m7vYIzQCgCVL -----END CERTIFICATE-----Generated at Wed Nov 4 22:16:50 2026 by rpki-client