$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/1e1712ff-4c76-4b48-a27a-ac7d0dcbf3c7.cer File: 1e1712ff-4c76-4b48-a27a-ac7d0dcbf3c7.cer (raw, json) Hash identifier: yzrQBiIiIA58W7sEUy+r/xzSJYRN6iJMCyafc2anqIU= Subject key identifier: C7:CB:00:41:A9:9F:98:46:80:BE:DD:D7:EA:2F:2E:0B:2B:E9:9F:F6 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FCE7F9B12618C19BC4A75B580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/1e1712ff-4c76-4b48-a27a-ac7d0dcbf3c7/1e1712ff-4c76-4b48-a27a-ac7d0dcbf3c7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/1e1712ff-4c76-4b48-a27a-ac7d0dcbf3c7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Nov 2026 16:49:05 +0000 Certificate not after: Tue 13 Feb 2029 16:49:05 +0000 Subordinate resources: IP: 156.9.108.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ce:7f:9b:12:61:8c:19:bc:4a:75:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 11 16:49:05 2026 GMT Not After : Feb 13 16:49:05 2029 GMT Subject: CN=1e1712ff-4c76-4b48-a27a-ac7d0dcbf3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e3:a8:9d:74:ad:8e:67:58:9f:1b:7d:29:ef: 87:9e:82:42:3f:bf:04:8d:0d:24:33:68:c6:65:bb: ea:15:e8:d5:ce:c4:f6:40:db:62:95:87:e0:c5:6b: 86:da:27:1f:02:b8:88:d5:16:d8:2a:a3:2c:be:e3: 4f:b6:1a:6a:7d:ad:2a:e7:f7:0b:f2:d7:2a:cb:18: bd:26:c1:38:cc:f2:15:19:79:78:cc:7f:83:22:09: 1e:30:a8:08:9f:c5:c8:63:01:26:04:a0:66:33:f7: 6e:6f:62:54:4d:06:5b:dd:e0:f7:6b:4b:ff:6b:5f: b3:3b:21:b6:76:32:e3:60:42:f6:3c:fe:78:8d:45: 4c:ae:76:7d:af:34:47:4c:f0:23:0e:79:96:6a:8c: 86:7e:b9:4e:ed:b7:4e:b2:da:a0:68:4d:76:34:4d: f5:20:27:dd:59:c5:6f:93:bf:45:84:a1:0c:b0:2c: a1:29:de:2c:6c:84:b9:76:9d:e4:23:14:6b:94:d8: 04:a4:99:cf:8c:51:ed:7e:91:5c:08:27:7e:55:33: a6:48:68:cd:8e:f9:6e:df:c8:88:ce:0f:04:8e:ff: e7:69:76:44:57:e9:e2:77:8b:e0:99:20:20:f3:bb: 03:15:d7:b7:06:d7:39:2f:cd:f6:c1:a0:5c:fb:b6: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CB:00:41:A9:9F:98:46:80:BE:DD:D7:EA:2F:2E:0B:2B:E9:9F:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/1e1712ff-4c76-4b48-a27a-ac7d0dcbf3c7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/1e1712ff-4c76-4b48-a27a-ac7d0dcbf3c7/1e1712ff-4c76-4b48-a27a-ac7d0dcbf3c7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 156.9.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:26:b5:56:a5:e6:3e:9d:b6:de:06:7d:de:83:41:65:e1:38: 73:7c:db:8f:2e:6d:a1:67:48:06:73:4c:87:c1:93:3f:4d:a8: f2:23:8e:6a:0b:5a:75:d6:87:b3:e3:96:20:be:1d:7a:8e:35: 81:06:d3:a4:7e:66:b0:61:b0:c6:8b:17:25:d3:42:92:04:58: 02:3a:ff:a2:ac:31:17:11:a0:a1:61:25:5c:e5:ab:21:a3:77: aa:97:37:2d:78:cc:5a:9e:07:88:9b:9c:34:76:8c:fd:22:87: 62:db:e9:c1:be:44:c4:15:ef:ce:c9:92:79:3d:53:30:ef:4f: 26:43:ba:ae:2b:0f:26:e7:be:95:b6:69:4c:f9:cf:34:25:36: e8:4e:c3:32:36:13:47:44:3c:85:c0:a4:bf:4c:49:dd:c4:7b: 9f:33:ae:13:30:f7:50:87:db:28:bb:3c:0c:ec:7a:f4:50:23: 0d:8d:73:87:5e:5a:e3:41:53:8f:5d:6c:48:ac:0d:31:66:cb: 68:a1:eb:73:54:ee:8c:90:68:54:ae:28:f3:a7:af:ad:fd:bd: 5c:27:12:49:1e:a1:6b:19:0c:7d:3a:73:bd:48:29:df:c8:46: 1a:9a:57:41:41:80:bd:66:8f:4c:09:b9:31:0a:1b:97:b6:1b: 42:5e:b9:ed -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE/Of5sSYYwZvEp1tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTExMTE2NDkwNVoXDTI5MDIxMzE2NDkwNVowLzEtMCsGA1UEAxMk MWUxNzEyZmYtNGM3Ni00YjQ4LWEyN2EtYWM3ZDBkY2JmM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuOonXStjmdYnxt9Ke+HnoJCP78EjQ0kM2jG ZbvqFejVzsT2QNtilYfgxWuG2icfAriI1RbYKqMsvuNPthpqfa0q5/cL8tcqyxi9 JsE4zPIVGXl4zH+DIgkeMKgIn8XIYwEmBKBmM/dub2JUTQZb3eD3a0v/a1+zOyG2 djLjYEL2PP54jUVMrnZ9rzRHTPAjDnmWaoyGfrlO7bdOstqgaE12NE31ICfdWcVv k79FhKEMsCyhKd4sbIS5dp3kIxRrlNgEpJnPjFHtfpFcCCd+VTOmSGjNjvlu38iI zg8Ejv/naXZEV+nid4vgmSAg87sDFde3Btc5L832waBc+7YBkQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMfLAEGpn5hGgL7d1+ovLgsr6Z/2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8x ZTE3MTJmZi00Yzc2LTRiNDgtYTI3YS1hYzdkMGRjYmYzYzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzFlMTcxMmZmLTRjNzYtNGI0OC1h MjdhLWFjN2QwZGNiZjNjNy8xZTE3MTJmZi00Yzc2LTRiNDgtYTI3YS1hYzdkMGRj YmYzYzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKcCWwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaSa1VqXmPp223gZ93oNB ZeE4c3zbjy5toWdIBnNMh8GTP02o8iOOagtaddaHs+OWIL4deo41gQbTpH5msGGw xosXJdNCkgRYAjr/oqwxFxGgoWElXOWrIaN3qpc3LXjMWp4HiJucNHaM/SKHYtvp wb5ExBXvzsmSeT1TMO9PJkO6risPJue+lbZpTPnPNCU26E7DMjYTR0Q8hcCkv0xJ 3cR7nzOuEzD3UIfbKLs8DOx69FAjDY1zh15a40FTj11sSKwNMWbLaKHrc1TujJBo VK4o86evrf29XCcSSR6haxkMfTpzvUgp38hGGppXQUGAvWaPTAm5MQobl7YbQl65 7Q== -----END CERTIFICATE-----Generated at Sun Nov 15 11:42:29 2026 by rpki-client