$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/09db7e98-f1b3-4442-937a-e9c80fde217b.cer File: 09db7e98-f1b3-4442-937a-e9c80fde217b.cer (raw, json) Hash identifier: 2F6uVsgfrjAt0QHEbcWMn584pgxFwz4cNL2muAGqLxo= Subject key identifier: 91:D1:7D:FE:A7:84:8B:75:FB:A6:26:85:2E:41:33:90:E1:CC:6E:99 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FD1A3E1CDB65C31C626A81D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/09db7e98-f1b3-4442-937a-e9c80fde217b/09db7e98-f1b3-4442-937a-e9c80fde217b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/09db7e98-f1b3-4442-937a-e9c80fde217b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Nov 2026 19:49:36 +0000 Certificate not after: Wed 14 Feb 2029 19:49:36 +0000 Subordinate resources: IP: 204.56.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d1:a3:e1:cd:b6:5c:31:c6:26:a8:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 12 19:49:36 2026 GMT Not After : Feb 14 19:49:36 2029 GMT Subject: CN=09db7e98-f1b3-4442-937a-e9c80fde217b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:34:cf:dd:31:91:31:67:3d:1e:82:9e:57: ca:b7:ce:db:34:26:cf:86:32:95:12:d4:93:f8:82: 31:95:04:08:c4:5a:43:5b:b5:15:41:f3:3b:34:16: f1:38:03:61:bf:d3:68:1c:cf:8b:b1:7c:27:8f:9d: 40:23:27:16:eb:a2:da:fd:04:26:c3:78:e8:a6:21: 6c:59:d2:ec:61:bc:d7:4c:89:b8:5c:3a:41:38:d1: 5c:02:2a:7d:f9:42:44:bc:10:d2:d7:c7:7e:9d:92: 26:b7:09:01:ce:d4:d6:31:a7:51:90:eb:2f:40:ad: b7:34:53:78:34:cd:63:52:bf:b1:da:3a:d5:95:a0: ef:8f:9a:9d:08:81:74:c9:02:2e:a0:90:25:ce:a7: 10:13:68:4c:50:20:e3:a3:0a:d3:c6:f6:5b:ff:cc: 1d:49:53:4f:89:51:4a:f3:ad:0d:17:13:8f:d4:bf: 5d:5e:06:15:36:05:03:52:1d:8b:09:ab:c5:c8:3d: c9:2e:c6:d8:4d:ac:20:5a:d1:a3:0c:c5:2a:85:dd: ac:d4:4b:dc:35:ee:2c:5c:31:71:41:e5:17:c7:5e: 93:44:ec:b0:d3:b4:5e:9b:1d:58:c6:d6:e6:a2:db: 4a:93:23:75:d6:c0:7a:f1:c4:6d:9e:7a:3d:85:de: 37:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D1:7D:FE:A7:84:8B:75:FB:A6:26:85:2E:41:33:90:E1:CC:6E:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/09db7e98-f1b3-4442-937a-e9c80fde217b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/09db7e98-f1b3-4442-937a-e9c80fde217b/09db7e98-f1b3-4442-937a-e9c80fde217b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 204.56.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:75:d1:f6:bc:b1:a6:63:b4:87:a0:c7:8f:4b:38:07:3c:a8: 1a:c0:33:5f:5d:60:fb:17:00:b2:93:66:ae:f7:c3:4a:35:21: 99:1e:2a:ee:25:a9:d5:0c:85:94:6b:46:9a:fc:d4:e5:ca:01: fd:e6:e9:45:06:09:68:16:da:10:77:17:62:e1:dc:a5:60:af: de:6a:88:4e:65:5e:c4:30:db:d7:29:5c:fb:f7:95:cc:fe:c9: 58:3c:5f:d7:4e:4b:b8:e7:85:7e:96:6e:96:0e:ac:01:42:0a: 3d:c7:94:4c:ac:7f:2d:9d:cb:fc:16:d8:e8:15:7d:d8:14:08: be:a8:18:40:93:36:ac:cd:32:fe:79:08:df:fd:9b:98:86:ab: 83:b8:10:74:c1:e1:65:d1:3e:4d:de:74:1c:c4:53:e7:00:77: e0:ce:92:18:74:91:43:d0:81:16:97:b2:ef:da:9e:24:9b:61: cc:2b:3f:b7:9c:25:ad:35:b5:75:38:f9:43:5a:8c:1f:2f:54: 55:87:83:28:4c:8e:4f:0d:a1:8b:0a:3f:56:63:a4:48:11:6d: 03:c2:f2:fc:ad:e2:23:0d:82:ef:88:18:1d:db:dc:5d:59:8f: 8c:e6:98:e4:3b:13:c4:62:3d:33:1c:b6:a5:21:61:46:64:ec: 7e:18:c2:22 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE/Ro+HNtlwxxiaoHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTExMjE5NDkzNloXDTI5MDIxNDE5NDkzNlowLzEtMCsGA1UEAxMk MDlkYjdlOTgtZjFiMy00NDQyLTkzN2EtZTljODBmZGUyMTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJg0z90xkTFnPR6CnlfKt87bNCbPhjKVEtST +IIxlQQIxFpDW7UVQfM7NBbxOANhv9NoHM+LsXwnj51AIycW66La/QQmw3jopiFs WdLsYbzXTIm4XDpBONFcAip9+UJEvBDS18d+nZImtwkBztTWMadRkOsvQK23NFN4 NM1jUr+x2jrVlaDvj5qdCIF0yQIuoJAlzqcQE2hMUCDjowrTxvZb/8wdSVNPiVFK 860NFxOP1L9dXgYVNgUDUh2LCavFyD3JLsbYTawgWtGjDMUqhd2s1EvcNe4sXDFx QeUXx16TROyw07Remx1YxtbmottKkyN11sB68cRtnno9hd431wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJHRff6nhIt1+6YmhS5BM5DhzG6ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8w OWRiN2U5OC1mMWIzLTQ0NDItOTM3YS1lOWM4MGZkZTIxN2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzA5ZGI3ZTk4LWYxYjMtNDQ0Mi05 MzdhLWU5YzgwZmRlMjE3Yi8wOWRiN2U5OC1mMWIzLTQ0NDItOTM3YS1lOWM4MGZk ZTIxN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXMOGAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAoHXR9ryxpmO0h6DHj0s4 BzyoGsAzX11g+xcAspNmrvfDSjUhmR4q7iWp1QyFlGtGmvzU5coB/ebpRQYJaBba EHcXYuHcpWCv3mqITmVexDDb1ylc+/eVzP7JWDxf105LuOeFfpZulg6sAUIKPceU TKx/LZ3L/BbY6BV92BQIvqgYQJM2rM0y/nkI3/2bmIarg7gQdMHhZdE+Td50HMRT 5wB34M6SGHSRQ9CBFpey79qeJJthzCs/t5wlrTW1dTj5Q1qMHy9UVYeDKEyOTw2h iwo/VmOkSBFtA8Ly/K3iIw2C74gYHdvcXVmPjOaY5DsTxGI9Mxy2pSFhRmTsfhjC Ig== -----END CERTIFICATE-----Generated at Sun Nov 15 11:42:57 2026 by rpki-client