$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ff7c3c90-cb31-46f6-95c9-11f521839968.cer File: ff7c3c90-cb31-46f6-95c9-11f521839968.cer (raw, json) Hash identifier: RehIi1SmrAnONm8zH3K4Y01EQ8GzC/bDEVDRPjgyBQQ= Subject key identifier: BD:0D:FF:C8:00:DA:75:DD:15:BD:54:CA:A6:31:D1:C6:12:45:CD:AC Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FB84CED5DAB77312A9CB62380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ff7c3c90-cb31-46f6-95c9-11f521839968/ff7c3c90-cb31-46f6-95c9-11f521839968.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ff7c3c90-cb31-46f6-95c9-11f521839968/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Nov 2026 17:59:11 +0000 Certificate not after: Mon 05 Feb 2029 17:59:11 +0000 Subordinate resources: AS: 33355 IP: 23.185.224.0/24 IP: 2602:f456::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b8:4c:ed:5d:ab:77:31:2a:9c:b6:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 3 17:59:11 2026 GMT Not After : Feb 5 17:59:11 2029 GMT Subject: CN=ff7c3c90-cb31-46f6-95c9-11f521839968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:31:14:15:7b:d6:a0:91:8b:59:0f:f1:36:43: 3e:a1:cb:66:6c:75:51:5a:06:36:95:0a:8e:f6:64: 89:04:d9:af:74:a9:89:5e:bf:ab:cc:77:7f:2f:77: 3b:3c:80:71:53:0d:6b:cf:80:25:55:3e:6d:4a:be: 0d:6e:d7:fb:36:66:39:52:3f:b7:22:b2:1c:44:3c: 59:3e:6f:0b:c8:62:97:1e:fc:0a:c5:86:9f:0c:2a: 2b:86:43:08:1e:90:a2:8c:76:f5:09:6f:1b:d1:e6: 2d:ed:74:13:d4:cc:8b:57:86:54:02:08:ea:dc:cc: 23:6e:fa:86:c0:80:da:32:fb:f3:7e:17:22:34:a4: 75:40:34:b3:df:55:f8:b2:11:23:44:8f:ab:9a:26: 60:49:63:17:a1:09:d0:2e:cd:e8:13:43:ef:fb:ed: 2e:76:2c:44:30:28:57:45:cf:4e:a7:a5:2e:a5:fb: 2f:49:2d:ed:78:d5:43:72:0e:06:44:47:40:d3:36: d1:a8:4e:a2:6e:0a:42:47:8b:ef:cc:5d:60:3b:65: 6b:a6:d3:85:be:64:0d:88:ea:98:5f:f7:9b:ef:01: 9f:52:a2:45:6c:7e:28:6f:41:24:4f:b0:c9:ca:5d: 78:e9:3b:db:45:ea:ab:26:0f:ac:42:90:2f:7c:33: 34:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0D:FF:C8:00:DA:75:DD:15:BD:54:CA:A6:31:D1:C6:12:45:CD:AC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ff7c3c90-cb31-46f6-95c9-11f521839968/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ff7c3c90-cb31-46f6-95c9-11f521839968/ff7c3c90-cb31-46f6-95c9-11f521839968.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 23.185.224.0/24 IPv6: 2602:f456::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33355 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:82:33:ba:58:9d:47:4e:19:ea:fd:e8:2d:b4:e9:a3:ca:09: 19:02:5e:29:c9:7f:0c:c8:d9:cb:48:5b:2f:95:b8:e8:96:c5: 26:de:4e:cc:bf:7f:1b:98:db:f1:6d:f3:12:1d:0e:78:72:80: b5:ff:ac:3c:a4:c1:16:59:eb:46:99:03:70:b4:f0:f9:4a:fc: 3d:08:17:78:3e:b1:65:bd:a4:43:ec:fa:a9:41:3e:23:e8:0f: 46:69:7c:68:fb:82:94:2d:b8:99:19:59:3c:37:27:c3:12:4a: 26:0b:c8:63:97:22:25:16:cd:e3:72:ed:f5:00:4a:d6:ca:44: 3a:ce:c2:97:9b:0d:f1:cb:7b:46:bd:33:d0:68:65:54:fe:f6: 9d:e9:6d:67:f8:d5:81:66:24:61:5e:72:9d:e9:8c:43:7e:b6: 9b:63:de:45:00:31:5c:9f:b1:30:0c:f7:10:44:08:a8:b6:00: ff:25:ec:fd:19:a6:d1:51:d3:22:1a:76:8a:9a:db:46:3c:38: d8:23:da:11:41:b9:ff:01:61:09:89:23:b8:33:54:b8:69:76: f9:7f:de:89:8e:8e:d7:9d:6b:7f:3f:2e:cb:5b:06:24:14:aa: e1:7e:06:60:59:64:1d:09:af:34:a4:71:d5:bb:22:77:52:e4: 12:de:83:0c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+4TO1dq3cxKpy2I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwMzE3NTkxMVoXDTI5MDIwNTE3NTkxMVowLzEtMCsGA1UEAxMk ZmY3YzNjOTAtY2IzMS00NmY2LTk1YzktMTFmNTIxODM5OTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTEUFXvWoJGLWQ/xNkM+octmbHVRWgY2lQqO 9mSJBNmvdKmJXr+rzHd/L3c7PIBxUw1rz4AlVT5tSr4Nbtf7NmY5Uj+3IrIcRDxZ Pm8LyGKXHvwKxYafDCorhkMIHpCijHb1CW8b0eYt7XQT1MyLV4ZUAgjq3MwjbvqG wIDaMvvzfhciNKR1QDSz31X4shEjRI+rmiZgSWMXoQnQLs3oE0Pv++0udixEMChX Rc9Op6UupfsvSS3teNVDcg4GREdA0zbRqE6ibgpCR4vvzF1gO2VrptOFvmQNiOqY X/eb7wGfUqJFbH4ob0EkT7DJyl146TvbReqrJg+sQpAvfDM03QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFL0N/8gA2nXdFb1UyqYx0cYSRc2sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9m ZjdjM2M5MC1jYjMxLTQ2ZjYtOTVjOS0xMWY1MjE4Mzk5NjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2ZmN2MzYzkwLWNiMzEtNDZmNi05 NWM5LTExZjUyMTgzOTk2OC9mZjdjM2M5MC1jYjMxLTQ2ZjYtOTVjOS0xMWY1MjE4 Mzk5NjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXueAwDgQCAAIwCAMGACYC9FYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCCSzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFgjO6WJ1HThnq/egttOmjygkZ Al4pyX8MyNnLSFsvlbjolsUm3k7Mv38bmNvxbfMSHQ54coC1/6w8pMEWWetGmQNw tPD5Svw9CBd4PrFlvaRD7PqpQT4j6A9GaXxo+4KULbiZGVk8NyfDEkomC8hjlyIl Fs3jcu31AErWykQ6zsKXmw3xy3tGvTPQaGVU/vad6W1n+NWBZiRhXnKd6YxDfrab Y95FADFcn7EwDPcQRAiotgD/Jez9GabRUdMiGnaKmttGPDjYI9oRQbn/AWEJiSO4 M1S4aXb5f96Jjo7XnWt/Py7LWwYkFKrhfgZgWWQdCa80pHHVuyJ3UuQS3oMM -----END CERTIFICATE-----Generated at Thu Nov 5 03:52:16 2026 by rpki-client