$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/36e98fc1-0666-4384-950e-91d902bab668.cer File: 36e98fc1-0666-4384-950e-91d902bab668.cer (raw, json) Hash identifier: rUNTdUs+VfFGegMzjToV0+Ji8+3eymKS3nMwVxTbcJ8= Subject key identifier: 95:E7:D4:74:FE:25:17:C0:E6:7D:BF:29:7E:37:0D:DB:83:AF:F5:76 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FBB2B2955DE9E963C421E9720 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/36e98fc1-0666-4384-950e-91d902bab668/36e98fc1-0666-4384-950e-91d902bab668.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/36e98fc1-0666-4384-950e-91d902bab668/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Nov 2026 18:38:35 +0000 Certificate not after: Tue 06 Feb 2029 18:38:35 +0000 Subordinate resources: AS: 403160 IP: 23.167.4.0/24 IP: 2602:f285::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bb:2b:29:55:de:9e:96:3c:42:1e:97:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 4 18:38:35 2026 GMT Not After : Feb 6 18:38:35 2029 GMT Subject: CN=36e98fc1-0666-4384-950e-91d902bab668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:48:8a:fd:d8:35:db:f0:c8:2a:29:35:a3:a5: 22:83:3e:01:86:70:67:d2:39:f6:11:f0:14:00:e2: a3:d5:85:33:b8:df:f3:5a:59:60:b1:9a:58:da:cd: 04:b0:a5:b2:44:c2:9c:3f:3d:df:98:94:5f:1a:93: 8e:a7:e0:98:2a:f4:71:26:93:9d:3d:a3:07:8f:75: 01:3d:aa:85:06:8d:d9:7c:85:42:94:b4:44:07:7a: 32:44:2c:84:aa:f4:b8:b0:7c:f8:fe:b7:35:e6:68: 5c:e7:09:50:39:41:69:06:18:23:66:4a:aa:ee:62: 86:21:f7:00:a3:74:1e:7e:9a:f0:d7:d4:f4:ff:f0: ee:ce:58:95:bc:63:4f:76:19:a8:25:5b:68:47:16: 6a:2b:36:8f:28:9a:a9:61:65:6b:40:8c:af:a9:f4: 8a:f6:4f:29:bc:be:26:ac:db:1f:d5:e1:c4:db:b2: 5a:bc:86:8d:e9:ba:9e:19:24:dc:ae:35:28:98:22: 7e:09:ed:99:55:88:3e:44:07:ce:34:d4:22:49:54: b6:37:cc:5a:5a:e9:7f:58:a6:04:4e:08:16:ba:55: c6:61:07:4d:b4:d5:48:41:7f:fa:36:9d:0e:06:9d: 2e:9d:48:96:ec:dc:c5:a8:fd:0d:16:8d:aa:93:a0: 47:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E7:D4:74:FE:25:17:C0:E6:7D:BF:29:7E:37:0D:DB:83:AF:F5:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/36e98fc1-0666-4384-950e-91d902bab668/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/36e98fc1-0666-4384-950e-91d902bab668/36e98fc1-0666-4384-950e-91d902bab668.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 23.167.4.0/24 IPv6: 2602:f285::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403160 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:de:ba:1d:84:c1:88:15:7b:b2:e6:1e:78:a8:8a:64:f0:6c: a1:6d:d7:74:ec:a6:e9:8c:ac:c1:46:93:07:e6:f3:e7:c2:51: 80:0c:b2:62:97:9e:83:cd:9c:b3:be:6a:5d:96:2a:b1:3c:66: 9b:43:d7:cd:ab:67:34:cb:80:93:57:b0:0f:6f:e8:c0:99:56: 64:fa:26:33:da:89:64:50:40:3b:16:75:e1:ca:37:0a:45:d9: c9:2c:0e:90:94:6c:f1:9a:2e:c0:fa:2e:41:5f:67:e3:7c:2d: e5:f6:32:d2:10:54:51:21:63:51:56:32:90:ee:4a:9e:b2:be: 1d:f8:aa:59:93:01:f4:df:54:ee:25:89:cc:56:41:84:8d:d8: b6:f9:af:f0:13:b3:cd:ca:9e:0f:41:dd:16:1a:8d:c9:bb:27: 6f:24:9d:69:93:f9:cd:b3:dd:b5:86:b1:e9:7b:20:47:ec:fa: 70:5c:0b:06:3d:0a:e9:c5:07:a1:0d:30:a4:66:d5:28:50:00: cc:f6:79:18:f3:e6:89:13:cf:7f:50:d9:37:01:df:b3:42:88: cf:f4:b7:6f:6c:b7:7e:d1:f0:4f:55:3a:0e:34:e7:4d:3f:00: 4d:92:87:47:57:78:fc:40:1e:f6:82:f6:93:a2:a4:7d:aa:24: 9c:81:0a:b6 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+7KylV3p6WPEIelyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwNDE4MzgzNVoXDTI5MDIwNjE4MzgzNVowLzEtMCsGA1UEAxMk MzZlOThmYzEtMDY2Ni00Mzg0LTk1MGUtOTFkOTAyYmFiNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20iK/dg12/DIKik1o6Uigz4BhnBn0jn2EfAU AOKj1YUzuN/zWllgsZpY2s0EsKWyRMKcPz3fmJRfGpOOp+CYKvRxJpOdPaMHj3UB PaqFBo3ZfIVClLREB3oyRCyEqvS4sHz4/rc15mhc5wlQOUFpBhgjZkqq7mKGIfcA o3Qefprw19T0//DuzliVvGNPdhmoJVtoRxZqKzaPKJqpYWVrQIyvqfSK9k8pvL4m rNsf1eHE27JavIaN6bqeGSTcrjUomCJ+Ce2ZVYg+RAfONNQiSVS2N8xaWul/WKYE TggWulXGYQdNtNVIQX/6Np0OBp0unUiW7NzFqP0NFo2qk6BH/QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFJXn1HT+JRfA5n2/KX43DduDr/V2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8z NmU5OGZjMS0wNjY2LTQzODQtOTUwZS05MWQ5MDJiYWI2NjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzM2ZTk4ZmMxLTA2NjYtNDM4NC05 NTBlLTkxZDkwMmJhYjY2OC8zNmU5OGZjMS0wNjY2LTQzODQtOTUwZS05MWQ5MDJi YWI2NjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpwQwDgQCAAIwCAMGACYC8oUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYm2DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB73rodhMGIFXuy5h54qIpk8Gyh bdd07KbpjKzBRpMH5vPnwlGADLJil56DzZyzvmpdliqxPGabQ9fNq2c0y4CTV7AP b+jAmVZk+iYz2olkUEA7FnXhyjcKRdnJLA6QlGzxmi7A+i5BX2fjfC3l9jLSEFRR IWNRVjKQ7kqesr4d+KpZkwH031TuJYnMVkGEjdi2+a/wE7PNyp4PQd0WGo3Juydv JJ1pk/nNs921hrHpeyBH7PpwXAsGPQrpxQehDTCkZtUoUADM9nkY8+aJE89/UNk3 Ad+zQojP9LdvbLd+0fBPVToONOdNPwBNkodHV3j8QB72gvaToqR9qiScgQq2 -----END CERTIFICATE-----Generated at Sun Nov 15 11:43:42 2026 by rpki-client