$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer File: 7df054b7-0dbd-410a-8a6a-10af5728e84a.cer (raw, json) Hash identifier: TdgAd5UackFw1sXfE3B1wgEKOcwVpnVuidzZ70bOFRg= Subject key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FC2F99AF7B76140AB231E3C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Nov 2026 13:45:11 +0000 Certificate not after: Fri 09 Feb 2029 13:45:11 +0000 Subordinate resources: IP: 167.253.120.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c2:f9:9a:f7:b7:61:40:ab:23:1e:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 7 13:45:11 2026 GMT Not After : Feb 9 13:45:11 2029 GMT Subject: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:6f:81:72:65:07:ea:e1:8c:cd:1f:3e:22: 40:8e:c0:d9:75:a4:b8:3d:55:fc:dd:a4:a3:23:9d: e9:35:10:5c:78:a3:0e:98:cd:22:70:ef:32:b9:73: f9:0e:92:bd:4f:b6:5a:09:6a:84:c8:b2:3c:66:72: a7:81:fc:92:fb:eb:4b:0b:0f:1f:3d:4d:65:57:f1: 69:d3:52:4b:8b:b9:b1:7f:e9:39:b7:31:41:9f:a6: 55:fb:69:99:0e:52:2a:30:63:cd:56:76:4c:51:2f: 64:d6:79:ad:ee:63:bb:91:83:ba:57:4b:b6:07:c6: bd:3e:21:bb:6f:23:0d:fb:25:a5:1b:d3:51:63:e4: 70:fe:17:60:6a:09:36:5c:9c:6a:65:84:50:ea:ed: 88:bb:a4:08:0f:79:c2:27:0f:bc:57:97:2e:ad:7f: 53:f0:42:15:00:34:e2:36:a0:74:5f:ac:80:59:4a: 6f:39:e8:22:88:7c:80:39:63:73:11:2c:19:b4:58: ad:4b:7f:f2:79:64:5b:c9:35:2e:da:5a:b8:ee:f2: 3c:77:59:94:62:5a:2f:38:b0:b9:07:3b:05:fc:15: 67:0d:0e:b5:b9:63:cc:5a:0c:eb:82:c5:b8:bb:93: 61:19:1d:35:11:e6:7f:d9:c5:6c:48:a5:3a:95:c1: 8d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 167.253.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d6:82:d2:b7:2c:d0:52:0f:7c:7f:17:d3:1f:d4:c6:d9:9f: bd:bb:80:30:4f:fd:92:c4:b8:5d:1b:5b:d0:b3:e8:59:61:71: 94:07:45:ec:f7:bb:79:41:7c:81:c6:51:62:3f:df:b2:ae:97: 98:b0:a2:5a:0a:91:19:af:76:b9:9a:7c:38:31:04:23:97:9d: 35:d8:b8:3c:83:5c:98:02:5a:75:54:83:2c:0c:96:2a:30:a0: 29:84:88:fb:9d:61:ac:bd:a3:91:9c:0d:44:a3:a6:53:49:c8: 35:0d:55:f7:2f:33:0b:84:69:5e:d9:36:fc:87:40:3d:52:f4: 6e:97:aa:cf:79:76:54:de:35:4f:da:ef:98:b9:19:ed:1a:0a: 07:8b:e6:65:1e:c2:5e:1f:9d:1a:ac:b9:4e:35:0b:18:0e:5d: fb:e4:2f:4e:5f:c7:16:9f:ec:3c:42:a9:96:7b:3c:69:c3:49: 61:bd:80:af:20:1a:1d:77:12:f4:1b:de:bb:0e:3e:36:3c:7b: b4:5a:f4:a6:d8:4a:34:80:50:54:86:94:03:89:95:a9:30:2b: 8e:7a:ea:52:c8:e0:6b:0b:a1:ab:d9:45:c0:4b:e1:a1:bc:8f: 32:e7:c6:a0:b0:d6:0b:2d:dc:5c:08:b1:4f:3a:a7:79:38:de: 61:15:08:c8 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE/C+Zr3t2FAqyMePAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTEwNzEzNDUxMVoXDTI5MDIwOTEzNDUxMVowLzEtMCsGA1UEAxMk N2RmMDU0YjctMGRiZC00MTBhLThhNmEtMTBhZjU3MjhlODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApalvgXJlB+rhjM0fPiJAjsDZdaS4PVX83aSj I53pNRBceKMOmM0icO8yuXP5DpK9T7ZaCWqEyLI8ZnKngfyS++tLCw8fPU1lV/Fp 01JLi7mxf+k5tzFBn6ZV+2mZDlIqMGPNVnZMUS9k1nmt7mO7kYO6V0u2B8a9PiG7 byMN+yWlG9NRY+Rw/hdgagk2XJxqZYRQ6u2Iu6QID3nCJw+8V5curX9T8EIVADTi NqB0X6yAWUpvOegiiHyAOWNzESwZtFitS3/yeWRbyTUu2lq47vI8d1mUYlovOLC5 BzsF/BVnDQ61uWPMWgzrgsW4u5NhGR01EeZ/2cVsSKU6lcGNVQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOj8O8evIEXWUxeCzlJGmIDlWIArMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83 ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcyOGU4NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzdkZjA1NGI3LTBkYmQtNDEwYS04 YTZhLTEwYWY1NzI4ZTg0YS83ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcy OGU4NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/XgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPdaC0rcs0FIPfH8X0x/U xtmfvbuAME/9ksS4XRtb0LPoWWFxlAdF7Pe7eUF8gcZRYj/fsq6XmLCiWgqRGa92 uZp8ODEEI5edNdi4PINcmAJadVSDLAyWKjCgKYSI+51hrL2jkZwNRKOmU0nINQ1V 9y8zC4RpXtk2/IdAPVL0bpeqz3l2VN41T9rvmLkZ7RoKB4vmZR7CXh+dGqy5TjUL GA5d++QvTl/HFp/sPEKplns8acNJYb2AryAaHXcS9Bveuw4+Njx7tFr0pthKNIBQ VIaUA4mVqTArjnrqUsjgawuhq9lFwEvhobyPMufGoLDWCy3cXAixTzqneTjeYRUI yA== -----END CERTIFICATE-----Generated at Sun Nov 15 14:24:51 2026 by rpki-client