$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9be6195d-4ab0-4812-b07c-ea2dd161b790.cer File: 9be6195d-4ab0-4812-b07c-ea2dd161b790.cer (raw, json) Hash identifier: RApMiVL9gDoOSAaDKCN+MW+w5wuc3UCDtfw9iiqNGKQ= Subject key identifier: C3:D6:00:F8:AC:72:17:61:95:88:AC:F5:6D:7D:87:D1:4E:92:E7:E2 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FB7EA005B9809AC5CFEA12200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9be6195d-4ab0-4812-b07c-ea2dd161b790/9be6195d-4ab0-4812-b07c-ea2dd161b790.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9be6195d-4ab0-4812-b07c-ea2dd161b790/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Nov 2026 14:39:52 +0000 Certificate not after: Mon 05 Feb 2029 14:39:52 +0000 Subordinate resources: IP: 23.164.188.0/24 IP: 2602:f2df::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b7:ea:00:5b:98:09:ac:5c:fe:a1:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 3 14:39:52 2026 GMT Not After : Feb 5 14:39:52 2029 GMT Subject: CN=9be6195d-4ab0-4812-b07c-ea2dd161b790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ae:ac:84:9e:cb:df:d6:56:02:fd:4f:fa:fc: 9e:e1:f8:12:b5:9a:9a:72:af:09:7d:e4:c4:eb:4e: fa:bf:4d:e3:d0:b1:85:8c:4b:57:fd:f8:84:28:96: 09:81:bf:33:19:47:04:46:aa:c7:d1:69:0a:51:11: eb:44:8d:b8:34:cf:3e:7b:b8:92:bb:64:f4:fe:77: c6:ec:9b:6c:08:65:19:c2:6d:96:02:b3:4a:f2:51: ae:b5:56:01:10:f1:f7:fc:75:0e:72:24:c6:a2:7c: b8:c2:ce:4c:a6:d6:d4:54:10:97:af:d3:1b:b3:d0: b7:55:81:90:76:f9:b4:f7:71:c4:cc:82:22:9f:b4: cd:69:62:83:85:2d:16:c1:2e:d1:e6:fd:b4:9e:17: b6:c5:83:27:a4:96:21:29:4a:ab:6b:d4:ac:43:7e: 08:41:cd:eb:de:33:c0:f7:3b:e5:f8:f6:e2:ac:30: dc:a4:45:01:7f:76:9e:d9:83:08:ce:85:1b:6a:11: ce:11:94:04:2c:1e:89:36:e9:69:3d:45:66:17:6f: 19:bc:0b:7a:a4:e8:ac:9f:ac:9f:8f:72:97:3c:3d: d4:49:94:98:35:1e:57:7c:18:a4:d5:07:1f:f7:f3: e9:aa:40:f6:35:f6:11:8d:f5:1b:82:c2:56:88:cd: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D6:00:F8:AC:72:17:61:95:88:AC:F5:6D:7D:87:D1:4E:92:E7:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9be6195d-4ab0-4812-b07c-ea2dd161b790/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9be6195d-4ab0-4812-b07c-ea2dd161b790/9be6195d-4ab0-4812-b07c-ea2dd161b790.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 23.164.188.0/24 IPv6: 2602:f2df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:21:5b:16:79:83:6c:6a:6c:1c:af:58:a4:4c:45:56:69:87: 67:e2:9e:62:25:7f:79:78:ec:7b:f5:42:a3:d8:b2:75:1e:a4: f3:b3:02:51:73:30:e3:ff:76:0b:b3:c8:0e:14:6f:47:8f:58: f5:cf:bf:93:63:b1:8e:fa:37:bf:90:1f:1e:c4:59:2c:4a:9a: 82:7d:73:eb:bd:aa:f6:0d:fc:d1:2c:9b:b1:d2:72:de:20:88: b9:9f:2f:9e:b0:04:42:f2:7c:a7:78:f8:23:e1:d9:80:a9:4b: 83:c8:35:6c:f1:0c:32:b7:e4:19:17:76:88:5a:ce:2c:bf:de: a4:15:6e:d6:a0:e6:3e:86:a3:e2:f6:c9:1e:e9:bf:6e:ac:14: d8:d6:0e:54:41:c9:e4:df:72:21:b5:01:4b:ce:f6:b2:a0:37: fe:d1:37:9d:85:f5:da:62:25:cd:03:2c:7f:24:f9:ac:23:e4: a6:dc:7e:ae:cc:d2:f2:d5:6b:54:b6:ed:db:82:ed:34:a1:65: 6c:53:36:88:20:b6:67:9a:36:15:4a:2b:20:27:5c:86:bf:a3: 5a:05:43:f3:d1:f5:40:58:79:e7:ac:d1:98:59:41:2d:87:29: 5c:e4:c7:28:60:6e:e3:01:80:b9:3d:27:3d:a4:20:31:03:e5: f1:9a:74:c0 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+36gBbmAmsXP6hIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwMzE0Mzk1MloXDTI5MDIwNTE0Mzk1MlowLzEtMCsGA1UEAxMk OWJlNjE5NWQtNGFiMC00ODEyLWIwN2MtZWEyZGQxNjFiNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq6shJ7L39ZWAv1P+vye4fgStZqacq8JfeTE 6076v03j0LGFjEtX/fiEKJYJgb8zGUcERqrH0WkKURHrRI24NM8+e7iSu2T0/nfG 7JtsCGUZwm2WArNK8lGutVYBEPH3/HUOciTGony4ws5MptbUVBCXr9Mbs9C3VYGQ dvm093HEzIIin7TNaWKDhS0WwS7R5v20nhe2xYMnpJYhKUqra9SsQ34IQc3r3jPA 9zvl+PbirDDcpEUBf3ae2YMIzoUbahHOEZQELB6JNulpPUVmF28ZvAt6pOisn6yf j3KXPD3USZSYNR5XfBik1Qcf9/PpqkD2NfYRjfUbgsJWiM1Q4wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFMPWAPischdhlYis9W19h9FOkufiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi85 YmU2MTk1ZC00YWIwLTQ4MTItYjA3Yy1lYTJkZDE2MWI3OTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzliZTYxOTVkLTRhYjAtNDgxMi1i MDdjLWVhMmRkMTYxYjc5MC85YmU2MTk1ZC00YWIwLTQ4MTItYjA3Yy1lYTJkZDE2 MWI3OTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpLwwDgQCAAIwCAMGACYC8t8AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AFshWxZ5g2xqbByvWKRMRVZph2finmIlf3l47Hv1QqPYsnUepPOzAlFzMOP/dguz yA4Ub0ePWPXPv5NjsY76N7+QHx7EWSxKmoJ9c+u9qvYN/NEsm7HSct4giLmfL56w BELyfKd4+CPh2YCpS4PINWzxDDK35BkXdohaziy/3qQVbtag5j6Go+L2yR7pv26s FNjWDlRByeTfciG1AUvO9rKgN/7RN52F9dpiJc0DLH8k+awj5Kbcfq7M0vLVa1S2 7duC7TShZWxTNoggtmeaNhVKKyAnXIa/o1oFQ/PR9UBYeees0ZhZQS2HKVzkxyhg buMBgLk9Jz2kIDED5fGadMA= -----END CERTIFICATE-----Generated at Wed Nov 4 20:40:11 2026 by rpki-client