$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/38111bda-ad44-419c-b994-fb22e490084a.cer File: 38111bda-ad44-419c-b994-fb22e490084a.cer (raw, json) Hash identifier: MkB2XH7Gk261eT3BbPvVsUI01if9iqhK/33tUejQ4rA= Subject key identifier: 42:7A:BD:F8:2A:BE:FB:C0:DB:B6:E6:DD:11:B0:12:57:33:F4:65:7F Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FCA987AE55B808F64B345D500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/38111bda-ad44-419c-b994-fb22e490084a/38111bda-ad44-419c-b994-fb22e490084a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/38111bda-ad44-419c-b994-fb22e490084a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Nov 2026 07:15:58 +0000 Certificate not after: Mon 12 Feb 2029 07:15:58 +0000 Subordinate resources: AS: 62838 IP: 23.179.32.0/24 IP: 104.37.168.0/22 IP: 104.219.16.0/22 IP: 142.202.4.0/22 IP: 162.248.4.0/22 IP: 162.253.152.0/22 IP: 2607:d680::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ca:98:7a:e5:5b:80:8f:64:b3:45:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 10 07:15:58 2026 GMT Not After : Feb 12 07:15:58 2029 GMT Subject: CN=38111bda-ad44-419c-b994-fb22e490084a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:cb:8c:56:97:64:cf:97:c4:25:17:1f:b7: 7e:b2:12:01:c5:42:ef:a4:1c:cc:96:4c:a1:1c:9f: 86:77:72:f8:44:65:51:08:77:66:07:f2:62:07:d9: b5:5e:10:87:66:23:ef:8a:d4:73:e3:1c:2e:b5:84: e8:ea:82:67:a9:c1:11:c6:b3:2f:6c:d7:17:b3:6c: cd:57:ed:27:6c:12:5a:a0:b2:5e:0f:71:fb:aa:77: c4:b9:3e:16:08:82:58:fe:b6:f8:88:66:f9:1c:e9: 5f:b8:4b:f4:bc:34:a3:4c:33:41:6e:1d:bc:5f:1a: fd:f0:1e:f5:ab:85:9d:f9:20:1f:36:18:7d:d0:96: 9c:38:ad:a1:1c:eb:24:1b:86:99:95:b0:0c:10:dc: 97:29:b6:09:e0:1a:34:a0:d9:ee:ff:d6:34:de:e8: fa:ea:54:ec:33:af:96:bf:ac:cb:a2:33:5f:ca:32: 02:99:d5:8b:4e:39:15:3a:71:32:af:a1:21:2e:72: 15:15:72:50:26:54:73:be:6c:5b:21:1c:fb:09:15: cd:66:21:fc:95:49:9b:be:01:16:a1:44:0e:ad:90: b5:36:0d:33:28:e3:6f:b3:10:4d:e6:65:ab:61:71: 48:11:a8:6c:63:1a:63:e5:d8:ff:f8:e9:d2:6f:1e: ec:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7A:BD:F8:2A:BE:FB:C0:DB:B6:E6:DD:11:B0:12:57:33:F4:65:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/38111bda-ad44-419c-b994-fb22e490084a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/38111bda-ad44-419c-b994-fb22e490084a/38111bda-ad44-419c-b994-fb22e490084a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 23.179.32.0/24 104.37.168.0/22 104.219.16.0/22 142.202.4.0/22 162.248.4.0/22 162.253.152.0/22 IPv6: 2607:d680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62838 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:57:25:15:c8:07:1c:56:65:e9:c2:fa:7c:95:59:e5:d6:3d: e5:2f:ba:6c:15:43:f9:1a:1b:ab:f5:c2:d8:1f:f8:0f:09:33: 2d:e6:1e:aa:a7:18:62:44:2c:0a:64:fd:24:13:b9:9a:78:f5: 90:0e:7c:7e:77:9d:c1:74:7c:08:8e:78:7a:5d:51:e8:3a:70: 09:8d:a8:33:61:ae:07:43:10:5e:07:d6:72:1a:52:48:b1:8c: e9:65:d3:b2:b9:32:ab:dc:43:f1:27:dd:68:3c:94:46:4c:11: f6:da:20:cb:f3:ca:79:38:7c:09:f5:ce:e9:30:95:25:44:ad: b9:08:09:b0:56:2e:7d:37:95:f3:a1:de:66:5e:d4:a5:74:54: df:92:08:2c:98:6d:fb:cc:5a:27:66:97:02:74:9d:60:34:19: e9:41:5c:bb:b9:cb:98:24:9b:78:36:3c:f9:9b:00:88:59:ab: 83:23:26:9c:dd:eb:4c:f2:9f:56:aa:3c:a4:be:11:39:3d:0b: 77:a6:21:8d:5f:95:ae:94:c7:ae:95:07:30:a1:8e:00:af:7d: a5:2b:8d:9b:d4:73:ed:28:f8:7d:b0:f9:3a:03:ff:31:3c:ea: 4a:a2:9e:59:c3:3e:eb:96:58:19:00:b8:53:6e:e8:c7:05:a1: 44:bd:89:bd -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWE/KmHrlW4CPZLNF1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTExMDA3MTU1OFoXDTI5MDIxMjA3MTU1OFowLzEtMCsGA1UEAxMk MzgxMTFiZGEtYWQ0NC00MTljLWI5OTQtZmIyMmU0OTAwODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA3LjFaXZM+XxCUXH7d+shIBxULvpBzMlkyh HJ+Gd3L4RGVRCHdmB/JiB9m1XhCHZiPvitRz4xwutYTo6oJnqcERxrMvbNcXs2zN V+0nbBJaoLJeD3H7qnfEuT4WCIJY/rb4iGb5HOlfuEv0vDSjTDNBbh28Xxr98B71 q4Wd+SAfNhh90JacOK2hHOskG4aZlbAMENyXKbYJ4Bo0oNnu/9Y03uj66lTsM6+W v6zLojNfyjICmdWLTjkVOnEyr6EhLnIVFXJQJlRzvmxbIRz7CRXNZiH8lUmbvgEW oUQOrZC1Ng0zKONvsxBN5mWrYXFIEahsYxpj5dj/+OnSbx7sKQIDAQABo4IESDCC BEQwHQYDVR0OBBYEFEJ6vfgqvvvA27bm3RGwElcz9GV/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8z ODExMWJkYS1hZDQ0LTQxOWMtYjk5NC1mYjIyZTQ5MDA4NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzM4MTExYmRhLWFkNDQtNDE5Yy1i OTk0LWZiMjJlNDkwMDg0YS8zODExMWJkYS1hZDQ0LTQxOWMtYjk5NC1mYjIyZTQ5 MDA4NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAAXsyADBAJoJagDBAJo2xADBAKOygQDBAKi+AQD BAKi/ZgwDQQCAAIwBwMFACYH1oAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPV2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIFXJRXIBxxWZenC+nyVWeXWPeUvumwVQ/kaG6v1wtgf+A8JMy3m HqqnGGJELApk/SQTuZp49ZAOfH53ncF0fAiOeHpdUeg6cAmNqDNhrgdDEF4H1nIa UkixjOll07K5MqvcQ/En3Wg8lEZMEfbaIMvzynk4fAn1zukwlSVErbkICbBWLn03 lfOh3mZe1KV0VN+SCCyYbfvMWidmlwJ0nWA0GelBXLu5y5gkm3g2PPmbAIhZq4Mj Jpzd60zyn1aqPKS+ETk9C3emIY1fla6Ux66VBzChjgCvfaUrjZvUc+0o+H2w+ToD /zE86kqinlnDPuuWWBkAuFNu6McFoUS9ib0= -----END CERTIFICATE-----Generated at Sun Nov 15 12:41:14 2026 by rpki-client