$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf8da86a-9eab-4c67-ab88-813739f945fd.cer File: bf8da86a-9eab-4c67-ab88-813739f945fd.cer (raw, json) Hash identifier: RTXJhOyrf2wV+4/Qpsga3iAbeqHIxCaB7U+AXUvgxE0= Subject key identifier: E4:66:46:72:7E:12:0D:8B:8D:CC:95:10:3B:21:60:3C:D4:86:EF:E6 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FB51D89C0515C02F57F2F15C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf8da86a-9eab-4c67-ab88-813739f945fd/bf8da86a-9eab-4c67-ab88-813739f945fd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf8da86a-9eab-4c67-ab88-813739f945fd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Nov 2026 14:36:17 +0000 Certificate not after: Tue 30 Jan 2029 12:38:52 +0000 Subordinate resources: AS: 403102 IP: 23.167.20.0/24 IP: 2620:c5:d000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:1d:89:c0:51:5c:02:f5:7f:2f:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 2 14:36:17 2026 GMT Not After : Jan 30 12:38:52 2029 GMT Subject: CN=bf8da86a-9eab-4c67-ab88-813739f945fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:23:7d:70:60:50:de:6e:b4:ab:54:ad:16: 9f:79:97:8d:3c:21:4d:ac:d1:de:ee:1f:da:dc:6c: bd:a5:d8:1b:1d:90:5d:e2:dd:b5:1e:be:f3:e2:c7: f8:25:34:b4:cb:ad:35:6b:ab:22:d5:09:35:5e:1d: a8:e9:61:50:8c:8a:09:7f:31:a6:b6:e1:cb:48:39: 52:5a:7f:de:91:5e:ad:53:d2:21:35:43:bc:87:62: 77:ba:61:4e:07:fa:3c:c0:7d:d8:ae:fd:00:1c:50: 1b:52:c4:02:0a:4e:76:6f:7f:0d:0b:b4:ce:11:ef: 63:a9:2f:a7:a0:77:94:3e:cb:27:60:22:f9:3a:ff: 4a:99:85:fd:b4:66:5c:0f:cd:b0:1b:e0:26:5d:bf: 5d:8b:cb:c8:36:ca:98:6d:e7:de:91:42:cb:04:5c: 77:4f:6d:86:05:57:0a:56:e8:a9:59:4e:7d:4a:02: 24:94:f2:f0:ef:6a:c7:87:29:96:3f:97:2e:57:05: 13:5b:da:67:6f:6a:e0:89:ea:03:ef:37:4e:de:12: 37:17:f0:6d:f7:41:c3:b2:f9:83:e9:b9:52:4a:79: 97:bf:8b:8d:58:bb:7a:83:51:31:31:92:6a:3c:23: cb:5b:b3:31:1d:26:06:21:0c:b2:8a:38:dc:62:97: c4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:66:46:72:7E:12:0D:8B:8D:CC:95:10:3B:21:60:3C:D4:86:EF:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf8da86a-9eab-4c67-ab88-813739f945fd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf8da86a-9eab-4c67-ab88-813739f945fd/bf8da86a-9eab-4c67-ab88-813739f945fd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 23.167.20.0/24 IPv6: 2620:c5:d000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403102 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c0:9a:f8:cf:44:e7:06:a9:9b:51:05:ee:df:75:c1:71:c1: d7:cc:c0:3c:fc:0f:c4:9a:40:a3:6c:70:db:f8:f9:54:85:66: 70:92:1b:2f:62:2c:2e:bb:0d:90:ba:95:b4:7e:31:53:40:ac: 97:c3:d7:00:18:1e:01:c6:33:b6:23:f3:59:20:c6:bc:87:ec: 12:2d:c4:38:4b:1e:09:1a:f7:e8:8d:82:7e:29:df:b5:cd:40: 07:9e:f7:36:8d:45:71:0a:6e:9f:1a:8a:42:24:55:db:11:e4: 78:2f:c6:03:f9:ed:9d:7e:b2:b2:a9:14:24:fe:92:2b:8e:66: b8:44:c6:69:d8:35:a0:3f:dd:9a:e2:da:0d:fa:eb:54:be:a7: bf:6f:2a:b5:75:56:fe:3c:4e:6d:3c:34:1b:aa:a0:39:86:07: 7f:a9:b4:db:cc:29:a9:07:bf:d6:d3:47:85:e2:01:07:85:55: fd:5a:16:ce:28:05:e7:7e:45:c5:89:37:fe:0d:fa:44:14:85: c1:91:32:92:00:1d:2d:90:3e:27:ac:2d:cc:5d:7e:67:69:29: 29:f8:fc:3a:5f:8d:f0:5f:de:39:6b:12:9a:43:82:ca:d6:b4: c1:35:9c:1a:b7:1e:ae:24:79:24:85:25:38:76:76:1c:20:10: a2:5a:61:47 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE+1HYnAUVwC9X8vFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwMjE0MzYxN1oXDTI5MDEzMDEyMzg1MlowLzEtMCsGA1UEAxMk YmY4ZGE4NmEtOWVhYi00YzY3LWFiODgtODEzNzM5Zjk0NWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujQjfXBgUN5utKtUrRafeZeNPCFNrNHe7h/a 3Gy9pdgbHZBd4t21Hr7z4sf4JTS0y601a6si1Qk1Xh2o6WFQjIoJfzGmtuHLSDlS Wn/ekV6tU9IhNUO8h2J3umFOB/o8wH3Yrv0AHFAbUsQCCk52b38NC7TOEe9jqS+n oHeUPssnYCL5Ov9KmYX9tGZcD82wG+AmXb9di8vINsqYbefekULLBFx3T22GBVcK VuipWU59SgIklPLw72rHhymWP5cuVwUTW9pnb2rgieoD7zdO3hI3F/Bt90HDsvmD 6blSSnmXv4uNWLt6g1ExMZJqPCPLW7MxHSYGIQyyijjcYpfEkwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFORmRnJ+Eg2LjcyVEDshYDzUhu/mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9i ZjhkYTg2YS05ZWFiLTRjNjctYWI4OC04MTM3MzlmOTQ1ZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2JmOGRhODZhLTllYWItNGM2Ny1h Yjg4LTgxMzczOWY5NDVmZC9iZjhkYTg2YS05ZWFiLTRjNjctYWI4OC04MTM3Mzlm OTQ1ZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXpxQwDwQCAAIwCQMHACYgAMXQADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGJp4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqMCa+M9E5wapm1EF7t91wXHB 18zAPPwPxJpAo2xw2/j5VIVmcJIbL2IsLrsNkLqVtH4xU0Csl8PXABgeAcYztiPz WSDGvIfsEi3EOEseCRr36I2Cfinftc1AB573No1FcQpunxqKQiRV2xHkeC/GA/nt nX6ysqkUJP6SK45muETGadg1oD/dmuLaDfrrVL6nv28qtXVW/jxObTw0G6qgOYYH f6m028wpqQe/1tNHheIBB4VV/VoWzigF535FxYk3/g36RBSFwZEykgAdLZA+J6wt zF1+Z2kpKfj8Ol+N8F/eOWsSmkOCyta0wTWcGrceriR5JIUlOHZ2HCAQolphRw== -----END CERTIFICATE-----Generated at Wed Nov 4 20:39:59 2026 by rpki-client