$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fd012ea0-fe7c-4f9c-9b8e-d44cf2ba651d.cer File: fd012ea0-fe7c-4f9c-9b8e-d44cf2ba651d.cer (raw, json) Hash identifier: Uw0544ft50BCKYceD0XVdDy1oCjRJJrLYMmCveAPQRk= Subject key identifier: E5:CF:56:94:89:07:10:7F:BB:E1:12:77:DD:C2:26:B8:D4:EA:F4:FD Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FB6B72D8778B6C2F06C4985C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fd012ea0-fe7c-4f9c-9b8e-d44cf2ba651d/fd012ea0-fe7c-4f9c-9b8e-d44cf2ba651d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fd012ea0-fe7c-4f9c-9b8e-d44cf2ba651d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Nov 2026 04:21:39 +0000 Certificate not after: Mon 05 Feb 2029 04:21:39 +0000 Subordinate resources: IP: 199.242.163.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:b7:2d:87:78:b6:c2:f0:6c:49:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 3 04:21:39 2026 GMT Not After : Feb 5 04:21:39 2029 GMT Subject: CN=fd012ea0-fe7c-4f9c-9b8e-d44cf2ba651d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f2:8d:d8:4a:f3:15:7d:45:f2:be:8e:08:7e: df:98:64:83:47:d2:8b:4e:c2:83:3e:f7:cd:1d:08: f3:3b:91:fc:9b:15:6e:77:41:a2:bd:14:b4:fa:cb: 4d:87:d6:59:c3:c4:13:72:f9:32:84:a4:d6:e9:0c: 27:18:65:d3:0a:f8:76:90:f2:eb:e6:8c:e2:90:72: 8b:be:cd:f8:5d:0f:1c:20:be:5a:51:f6:2d:e8:38: c2:99:bd:b2:7b:aa:e3:ac:5d:c1:d8:79:7d:68:da: 14:0e:63:f7:71:97:28:65:be:6a:12:fc:48:14:eb: 4c:17:8b:51:41:fa:78:4a:0c:9d:cd:73:1b:15:ac: dc:82:1c:01:93:20:f9:c3:df:98:fb:16:ad:56:44: 09:b9:ad:fa:21:77:de:05:83:40:97:97:3f:da:d5: 93:00:6e:f3:0b:00:35:d6:d4:2f:36:53:55:79:2e: f3:fe:cf:c2:00:07:35:65:3c:4e:8e:6a:79:b5:27: e7:b0:78:ef:0a:58:ed:8b:3f:1d:b2:33:df:35:f2: 0c:2e:16:21:21:be:ac:4c:7e:09:6e:ab:b5:47:33: 70:2b:7f:c1:3b:97:5a:65:b8:b1:b2:a2:60:34:52: ae:9e:ca:70:15:ea:0b:3d:9f:cb:50:2e:9d:62:fe: 63:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CF:56:94:89:07:10:7F:BB:E1:12:77:DD:C2:26:B8:D4:EA:F4:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fd012ea0-fe7c-4f9c-9b8e-d44cf2ba651d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fd012ea0-fe7c-4f9c-9b8e-d44cf2ba651d/fd012ea0-fe7c-4f9c-9b8e-d44cf2ba651d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 199.242.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:cf:ee:8a:b4:be:de:34:24:be:20:0f:cf:6b:1c:d4:af:94: cb:69:68:74:82:00:71:8a:7c:1e:27:b6:50:03:b5:20:3e:31: 1c:b4:8f:1e:0a:1d:9b:83:db:34:1f:29:07:f4:cc:b7:e3:60: ee:5f:4a:3c:76:7c:ac:89:05:32:2a:31:22:f4:3c:94:6c:cd: 87:98:37:c5:e4:e7:2e:4d:df:3d:b3:f5:6d:68:43:42:79:11: ff:9c:86:d4:4d:5f:9c:c1:13:0b:80:37:cc:2a:40:9d:34:ba: 5b:ab:af:c6:74:95:d9:67:0b:fe:5a:11:29:5e:99:b4:26:c9: 47:57:c9:53:b2:48:19:f4:f8:b8:f1:fe:17:f8:50:8b:c9:46: 95:68:0c:bf:5f:72:0a:c1:1e:5b:84:68:c5:8e:e2:3a:ff:c6: ec:42:d5:bc:e5:5a:a3:81:f7:18:38:88:f3:b8:ba:eb:c1:70: f8:1f:f1:a8:2a:a8:2a:d3:e2:1c:c0:94:d3:b5:4b:a5:42:3a: 78:81:e7:6d:b6:a1:86:4b:d5:58:15:c4:cb:31:ae:34:ad:90: 7b:b9:21:8a:0c:41:7f:ab:b0:ae:5e:74:86:ea:b1:be:24:3d: 7b:95:4a:b7:38:72:b1:32:12:5f:35:82:a1:49:7a:16:59:a7: 7c:bd:0a:a2 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+2ty2HeLbC8GxJhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwMzA0MjEzOVoXDTI5MDIwNTA0MjEzOVowLzEtMCsGA1UEAxMk ZmQwMTJlYTAtZmU3Yy00ZjljLTliOGUtZDQ0Y2YyYmE2NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/KN2ErzFX1F8r6OCH7fmGSDR9KLTsKDPvfN HQjzO5H8mxVud0GivRS0+stNh9ZZw8QTcvkyhKTW6QwnGGXTCvh2kPLr5ozikHKL vs34XQ8cIL5aUfYt6DjCmb2ye6rjrF3B2Hl9aNoUDmP3cZcoZb5qEvxIFOtMF4tR Qfp4SgydzXMbFazcghwBkyD5w9+Y+xatVkQJua36IXfeBYNAl5c/2tWTAG7zCwA1 1tQvNlNVeS7z/s/CAAc1ZTxOjmp5tSfnsHjvCljtiz8dsjPfNfIMLhYhIb6sTH4J bqu1RzNwK3/BO5daZbixsqJgNFKunspwFeoLPZ/LUC6dYv5jRQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOXPVpSJBxB/u+ESd93CJrjU6vT9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9m ZDAxMmVhMC1mZTdjLTRmOWMtOWI4ZS1kNDRjZjJiYTY1MWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2ZkMDEyZWEwLWZlN2MtNGY5Yy05 YjhlLWQ0NGNmMmJhNjUxZC9mZDAxMmVhMC1mZTdjLTRmOWMtOWI4ZS1kNDRjZjJi YTY1MWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADH8qMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbM/uirS+3jQkviAPz2sc 1K+Uy2lodIIAcYp8Hie2UAO1ID4xHLSPHgodm4PbNB8pB/TMt+Ng7l9KPHZ8rIkF MioxIvQ8lGzNh5g3xeTnLk3fPbP1bWhDQnkR/5yG1E1fnMETC4A3zCpAnTS6W6uv xnSV2WcL/loRKV6ZtCbJR1fJU7JIGfT4uPH+F/hQi8lGlWgMv19yCsEeW4RoxY7i Ov/G7ELVvOVao4H3GDiI87i668Fw+B/xqCqoKtPiHMCU07VLpUI6eIHnbbahhkvV WBXEyzGuNK2Qe7khigxBf6uwrl50huqxviQ9e5VKtzhysTISXzWCoUl6FlmnfL0K og== -----END CERTIFICATE-----Generated at Thu Nov 5 18:46:04 2026 by rpki-client