$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d3fc64a6-afbf-41a0-a2f6-90b5d4ec2ebd.cer File: d3fc64a6-afbf-41a0-a2f6-90b5d4ec2ebd.cer (raw, json) Hash identifier: F/OTd+KSx8FTFmLFvHrjn6HM8imfJX6RzajGl+5D9jQ= Subject key identifier: 4C:C2:92:A4:56:79:DC:D2:31:7F:B1:22:FA:04:C9:2B:31:B5:4A:BD Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FB9F9B58FDB740AAE6E7DDE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d3fc64a6-afbf-41a0-a2f6-90b5d4ec2ebd/d3fc64a6-afbf-41a0-a2f6-90b5d4ec2ebd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d3fc64a6-afbf-41a0-a2f6-90b5d4ec2ebd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Nov 2026 08:23:08 +0000 Certificate not after: Tue 06 Feb 2029 08:23:08 +0000 Subordinate resources: AS: 1628 IP: 74.116.176.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b9:f9:b5:8f:db:74:0a:ae:6e:7d:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 4 08:23:08 2026 GMT Not After : Feb 6 08:23:08 2029 GMT Subject: CN=d3fc64a6-afbf-41a0-a2f6-90b5d4ec2ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b4:eb:9c:c0:8c:b5:0d:d3:58:c9:77:10:cb: 62:5b:5d:46:d6:89:93:d7:9b:0f:80:f7:47:6e:de: 6c:26:e3:8a:0e:58:b2:96:78:97:46:ae:44:35:84: 46:bf:7c:45:42:be:60:42:7c:5f:2d:3a:6d:73:02: 92:02:18:cf:ab:64:28:e3:f2:28:99:04:e7:54:5c: 6b:2b:ca:1a:14:34:bc:cc:78:e9:38:97:ed:c3:4c: 9a:07:09:8f:62:77:b1:30:75:95:a2:b6:dc:3a:ca: 86:45:75:32:32:80:ca:e7:1c:71:41:04:f2:8d:e7: 03:c7:26:03:37:66:b8:1a:05:02:67:c2:9d:14:f9: d2:3c:8d:c5:c2:2e:b6:1b:f6:7c:d2:f8:96:bd:a4: a7:26:66:4a:a6:71:f1:04:97:97:6a:01:6e:15:0d: 89:52:b6:01:7f:a9:69:59:c2:e0:42:11:a6:0b:a0: 8e:78:03:8c:46:27:be:e7:d0:29:3e:6d:da:ca:a3: cd:91:67:9b:03:10:0a:3f:f7:8e:f6:26:8c:55:fd: da:b2:b2:9d:84:43:64:b6:24:1d:a7:46:dd:8e:ae: 30:00:ea:99:f3:04:a9:1b:dd:1c:6d:0a:00:c4:68: 4a:ac:7c:fc:7b:a9:5f:ae:58:9a:f2:93:2e:89:41: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C2:92:A4:56:79:DC:D2:31:7F:B1:22:FA:04:C9:2B:31:B5:4A:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d3fc64a6-afbf-41a0-a2f6-90b5d4ec2ebd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d3fc64a6-afbf-41a0-a2f6-90b5d4ec2ebd/d3fc64a6-afbf-41a0-a2f6-90b5d4ec2ebd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 74.116.176.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1628 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:08:85:b0:1e:04:c8:43:5f:89:9c:d3:78:4e:c3:10:ae:f5: 51:b0:c5:ac:ed:7f:58:fd:ef:43:b4:49:50:c1:57:4a:91:05: 51:d6:45:c8:ba:7d:22:2e:a6:a1:07:19:db:3d:b3:68:00:40: 79:78:54:1a:90:80:56:28:35:b0:77:83:fc:f0:ec:00:89:3b: 34:07:f1:87:74:85:13:d3:d3:5e:de:85:28:13:70:31:a2:1c: 0c:20:e1:10:ca:7f:67:93:c6:a1:fb:5b:aa:3f:cb:fe:41:1f: f4:a4:4b:6a:5c:ab:8b:26:d5:41:f3:a8:a6:d1:c0:f4:b9:ac: 53:f1:8c:62:ad:93:b3:76:0e:d9:5a:04:31:38:80:ae:32:c1: e3:36:dc:eb:44:b2:5a:60:f7:eb:b4:62:2e:0d:78:ae:d5:2f: f3:51:43:9d:0f:00:5f:9e:6b:76:7a:cc:c5:40:e0:8d:bf:1e: bc:48:aa:f2:d5:f1:5f:29:99:60:32:5d:30:2a:75:60:3a:ff: 0d:3e:74:46:ef:f9:b0:5e:aa:a8:11:b4:4f:a5:bd:7f:86:79: 2c:1f:a3:a0:64:88:e0:54:03:93:3d:e2:e2:e8:db:84:15:1d: 7a:3c:d4:7c:7c:56:29:1a:7c:d0:4c:50:79:bb:f0:d5:f6:fb: ff:9f:ed:4b -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE+5+bWP23QKrm593oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwNDA4MjMwOFoXDTI5MDIwNjA4MjMwOFowLzEtMCsGA1UEAxMk ZDNmYzY0YTYtYWZiZi00MWEwLWEyZjYtOTBiNWQ0ZWMyZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLTrnMCMtQ3TWMl3EMtiW11G1omT15sPgPdH bt5sJuOKDliylniXRq5ENYRGv3xFQr5gQnxfLTptcwKSAhjPq2Qo4/IomQTnVFxr K8oaFDS8zHjpOJftw0yaBwmPYnexMHWVorbcOsqGRXUyMoDK5xxxQQTyjecDxyYD N2a4GgUCZ8KdFPnSPI3Fwi62G/Z80viWvaSnJmZKpnHxBJeXagFuFQ2JUrYBf6lp WcLgQhGmC6COeAOMRie+59ApPm3ayqPNkWebAxAKP/eO9iaMVf3asrKdhENktiQd p0bdjq4wAOqZ8wSpG90cbQoAxGhKrHz8e6lfrlia8pMuiUHxZQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFEzCkqRWedzSMX+xIvoEySsxtUq9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9k M2ZjNjRhNi1hZmJmLTQxYTAtYTJmNi05MGI1ZDRlYzJlYmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2QzZmM2NGE2LWFmYmYtNDFhMC1h MmY2LTkwYjVkNGVjMmViZC9kM2ZjNjRhNi1hZmJmLTQxYTAtYTJmNi05MGI1ZDRl YzJlYmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKdLAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC BlwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAegiFsB4EyENfiZzTeE7DEK71UbDFrO1/WP3vQ7RJUMFXSpEF UdZFyLp9Ii6moQcZ2z2zaABAeXhUGpCAVig1sHeD/PDsAIk7NAfxh3SFE9PTXt6F KBNwMaIcDCDhEMp/Z5PGoftbqj/L/kEf9KRLalyriybVQfOoptHA9LmsU/GMYq2T s3YO2VoEMTiArjLB4zbc60SyWmD367RiLg14rtUv81FDnQ8AX55rdnrMxUDgjb8e vEiq8tXxXymZYDJdMCp1YDr/DT50Ru/5sF6qqBG0T6W9f4Z5LB+joGSI4FQDkz3i 4ujbhBUdejzUfHxWKRp80ExQebvw1fb7/5/tSw== -----END CERTIFICATE-----Generated at Wed Nov 4 19:11:07 2026 by rpki-client