$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/3f66541b-e418-4161-a04a-61b4ed1a3d9d.cer File: 3f66541b-e418-4161-a04a-61b4ed1a3d9d.cer (raw, json) Hash identifier: E1ljsg2kZ7lLic57ydTdkLsWHvO+AxXaHnMZzhj+nJQ= Subject key identifier: 1D:2A:79:04:3A:8F:6F:A4:46:0B:C9:59:34:93:C3:9B:19:FE:F1:B1 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FC164DA170B0D42413D32FF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/3f66541b-e418-4161-a04a-61b4ed1a3d9d/3f66541b-e418-4161-a04a-61b4ed1a3d9d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/3f66541b-e418-4161-a04a-61b4ed1a3d9d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Nov 2026 00:09:40 +0000 Certificate not after: Fri 09 Feb 2029 00:09:40 +0000 Subordinate resources: AS: 53901 IP: 205.167.232.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c1:64:da:17:0b:0d:42:41:3d:32:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 7 00:09:40 2026 GMT Not After : Feb 9 00:09:40 2029 GMT Subject: CN=3f66541b-e418-4161-a04a-61b4ed1a3d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:ad:3c:6b:ce:29:47:15:40:9b:f6:ac:33: 36:55:1b:e0:e6:e9:b9:f7:27:22:b3:21:14:2f:98: ea:43:47:7c:4f:fd:fd:82:ce:dc:9a:0c:15:be:c3: 0a:05:b0:b9:ed:7a:88:e0:62:99:11:ca:33:a6:48: 97:ce:37:bb:bc:a6:3d:cc:8c:3e:12:ed:eb:b0:32: 60:85:fe:39:d4:4b:bb:88:66:b8:b8:65:55:79:5b: f0:20:48:16:ab:99:80:5f:a0:f2:1b:2a:88:73:b5: b2:51:f8:e6:f6:59:98:0d:03:91:29:98:a8:d0:c3: f3:4b:e6:51:48:21:8b:ae:ec:97:eb:6e:08:fd:80: df:7a:75:73:7b:e1:83:8b:44:9d:c4:57:0a:42:f5: 4a:b7:11:e8:f2:9d:9f:c4:8e:cf:2f:e1:df:6c:34: 05:11:11:d9:d3:64:71:3f:b2:fb:a4:ed:73:d9:52: c2:1c:d9:f1:df:89:2e:53:1b:59:e1:65:e9:f9:05: e0:d1:76:8d:ca:64:71:2f:11:bf:da:8b:70:c6:15: 43:7d:0c:c4:5d:ae:22:89:f8:1b:89:2b:b4:55:21: e5:00:70:2b:6d:f0:38:27:1f:1b:ec:61:3e:2f:b8: 43:99:4d:8a:22:18:59:7d:49:34:3f:ce:a7:a4:2d: c5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2A:79:04:3A:8F:6F:A4:46:0B:C9:59:34:93:C3:9B:19:FE:F1:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/3f66541b-e418-4161-a04a-61b4ed1a3d9d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/3f66541b-e418-4161-a04a-61b4ed1a3d9d/3f66541b-e418-4161-a04a-61b4ed1a3d9d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 205.167.232.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53901 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:8d:aa:a8:45:1d:30:be:06:cf:84:37:2d:19:36:96:eb:30: fc:fa:73:64:32:55:59:07:f5:e6:97:a3:37:f2:0e:d0:96:13: 8b:2c:4b:e5:7c:e5:9b:49:df:a8:96:9c:ec:82:d7:1d:0c:d3: 8b:23:0e:8f:b1:fb:d1:b3:93:88:c5:81:a9:80:97:be:8a:32: 65:39:4c:39:c0:f2:fc:69:02:e2:2d:7b:bf:f9:bc:b2:77:be: 47:17:39:f3:b8:7f:d1:9f:7f:3d:1c:0a:64:27:a5:f6:ed:66: 32:85:e4:9b:28:a7:73:ce:d7:e7:b7:13:1d:06:95:78:cb:a2: 5f:5f:90:71:09:b1:ef:00:83:d5:ee:b2:c1:a1:d1:0a:33:e5: 42:4e:50:02:34:5f:03:1c:0a:54:86:65:21:a3:f4:98:c9:54: 6f:58:ee:29:2f:34:c6:21:ef:c9:b5:ef:6a:57:a3:82:07:92: 2e:67:c2:99:0e:17:c9:7f:4c:73:ac:85:61:88:14:02:6c:5d: ef:7d:2f:a7:b0:16:c7:c0:19:d3:36:89:62:95:97:c8:d9:17: c6:c0:ff:50:35:0b:39:87:62:4d:b9:c4:a8:2d:30:86:d7:ba: 59:ca:f8:b4:e7:6c:73:b4:92:fd:4d:6d:01:2f:87:41:9a:82: 35:44:ff:4f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE/BZNoXCw1CQT0y/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwNzAwMDk0MFoXDTI5MDIwOTAwMDk0MFowLzEtMCsGA1UEAxMk M2Y2NjU0MWItZTQxOC00MTYxLWEwNGEtNjFiNGVkMWEzZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsStPGvOKUcVQJv2rDM2VRvg5um59ycisyEU L5jqQ0d8T/39gs7cmgwVvsMKBbC57XqI4GKZEcozpkiXzje7vKY9zIw+Eu3rsDJg hf451Eu7iGa4uGVVeVvwIEgWq5mAX6DyGyqIc7WyUfjm9lmYDQORKZio0MPzS+ZR SCGLruyX624I/YDfenVze+GDi0SdxFcKQvVKtxHo8p2fxI7PL+HfbDQFERHZ02Rx P7L7pO1z2VLCHNnx34kuUxtZ4WXp+QXg0XaNymRxLxG/2otwxhVDfQzEXa4iifgb iSu0VSHlAHArbfA4Jx8b7GE+L7hDmU2KIhhZfUk0P86npC3FJwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFB0qeQQ6j2+kRgvJWTSTw5sZ/vGxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8z ZjY2NTQxYi1lNDE4LTQxNjEtYTA0YS02MWI0ZWQxYTNkOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzNmNjY1NDFiLWU0MTgtNDE2MS1h MDRhLTYxYjRlZDFhM2Q5ZC8zZjY2NTQxYi1lNDE4LTQxNjEtYTA0YS02MWI0ZWQx YTNkOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHNp+gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANKNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADeNqqhFHTC+Bs+ENy0ZNpbrMPz6c2QyVVkH9eaXozfyDtCW E4ssS+V85ZtJ36iWnOyC1x0M04sjDo+x+9Gzk4jFgamAl76KMmU5TDnA8vxpAuIt e7/5vLJ3vkcXOfO4f9Gffz0cCmQnpfbtZjKF5Jsop3PO1+e3Ex0GlXjLol9fkHEJ se8Ag9XussGh0Qoz5UJOUAI0XwMcClSGZSGj9JjJVG9Y7ikvNMYh78m172pXo4IH ki5nwpkOF8l/THOshWGIFAJsXe99L6ewFsfAGdM2iWKVl8jZF8bA/1A1CzmHYk25 xKgtMIbXulnK+LTnbHO0kv1NbQEvh0GagjVE/08= -----END CERTIFICATE-----Generated at Sun Nov 15 11:42:11 2026 by rpki-client