$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/5b1dd3ff-d98e-4a77-ad86-247fcaa3dad3.cer File: 5b1dd3ff-d98e-4a77-ad86-247fcaa3dad3.cer (raw, json) Hash identifier: yHZLG0zE00OsorEZYeFpu3pk7A4RDQ8yodbcuoGtazI= Subject key identifier: 9B:93:D0:AB:72:71:E5:69:64:0B:F8:79:E8:0C:E5:7F:B1:C4:F5:96 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FBB14898C72800DE4071EDBC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/5b1dd3ff-d98e-4a77-ad86-247fcaa3dad3/5b1dd3ff-d98e-4a77-ad86-247fcaa3dad3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/5b1dd3ff-d98e-4a77-ad86-247fcaa3dad3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Nov 2026 17:52:59 +0000 Certificate not after: Tue 06 Feb 2029 17:52:59 +0000 Subordinate resources: AS: 35877 IP: 198.180.255.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bb:14:89:8c:72:80:0d:e4:07:1e:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 4 17:52:59 2026 GMT Not After : Feb 6 17:52:59 2029 GMT Subject: CN=5b1dd3ff-d98e-4a77-ad86-247fcaa3dad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d5:e4:72:4d:f3:e7:0a:f3:ad:5f:b0:b2:7a: dd:20:3a:39:b1:c6:6e:20:dc:33:d8:c6:79:09:51: b2:4b:46:aa:6c:7d:40:a4:e1:e5:0d:6b:fd:da:a0: 70:0f:54:71:59:58:de:5e:03:0d:29:23:6a:f4:ce: 95:3f:f8:5c:81:af:33:ad:4c:03:79:e1:ad:87:97: 36:cf:23:fc:af:04:f7:18:7a:80:01:77:5d:a5:cb: d1:e4:31:1d:8b:3e:3e:22:62:64:35:5c:a1:64:22: 87:c4:ac:26:8c:d2:f2:19:2a:3d:fb:7b:8f:67:fb: 34:94:60:a6:9f:df:f9:23:dd:be:ff:b2:6b:48:be: e7:ce:b4:8a:17:84:96:03:a4:1f:7e:f9:0d:a2:92: 0d:97:86:d2:fe:fe:c7:a6:35:6f:b3:c9:2c:55:58: 0b:39:38:e2:3b:8e:4a:4b:42:f7:a1:cf:36:08:6c: 6c:b7:66:8c:2e:cd:48:3f:4d:29:ee:ee:2c:9a:20: 81:55:c9:b4:e2:ec:71:60:d8:3e:d9:4d:e5:8f:20: 7d:08:88:bd:5c:37:1c:39:03:db:0f:9f:46:ed:a5: 07:c5:50:6a:de:34:d6:a7:25:9a:42:5c:81:92:fb: f5:b1:42:89:f9:64:23:b5:86:17:d7:fe:ab:1c:6a: a9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:93:D0:AB:72:71:E5:69:64:0B:F8:79:E8:0C:E5:7F:B1:C4:F5:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/5b1dd3ff-d98e-4a77-ad86-247fcaa3dad3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/5b1dd3ff-d98e-4a77-ad86-247fcaa3dad3/5b1dd3ff-d98e-4a77-ad86-247fcaa3dad3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 198.180.255.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35877 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e5:3f:47:36:fa:65:d0:ea:1f:a0:9f:8b:f5:9a:88:30:49: 93:e8:98:e6:a5:54:58:c8:37:54:4c:f5:db:02:61:78:e6:3e: 11:03:4a:ec:87:8e:bb:b3:93:7e:de:23:5a:81:79:67:62:0d: 08:b2:71:d0:ea:81:b4:fe:ef:ee:93:40:57:31:19:b0:93:18: 4c:47:f7:79:e4:60:6c:e6:16:40:1c:2f:59:91:0f:7e:74:5b: 79:64:b3:21:83:54:21:8f:30:f9:ce:d5:1e:05:a1:4a:a9:15: 33:c5:05:0a:09:4b:b0:48:c5:d0:ad:6f:49:24:d5:bc:8d:63: d0:e6:44:8b:88:c2:ee:27:0b:54:b4:13:80:ca:20:b7:b3:9d: 8a:d4:60:fa:33:e0:d5:cf:5d:33:64:3a:52:e6:5f:62:86:84: 94:48:f0:53:44:a5:1b:ed:46:ec:9a:ea:c1:42:58:5e:5d:bf: 60:1a:4d:45:08:57:ee:11:44:ff:62:af:b9:a5:00:e7:2b:76: e8:c1:da:c4:1b:b7:64:f2:88:b4:25:3b:20:f9:d9:9a:22:81: 91:fa:89:30:26:7b:70:28:aa:eb:8b:e0:88:ed:12:aa:1a:68: 0a:6d:48:ad:55:65:7a:73:5e:a7:8b:ca:07:81:3f:88:78:dc: 66:cc:26:6e -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE+7FImMcoAN5Ace28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwNDE3NTI1OVoXDTI5MDIwNjE3NTI1OVowLzEtMCsGA1UEAxMk NWIxZGQzZmYtZDk4ZS00YTc3LWFkODYtMjQ3ZmNhYTNkYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNXkck3z5wrzrV+wsnrdIDo5scZuINwz2MZ5 CVGyS0aqbH1ApOHlDWv92qBwD1RxWVjeXgMNKSNq9M6VP/hcga8zrUwDeeGth5c2 zyP8rwT3GHqAAXddpcvR5DEdiz4+ImJkNVyhZCKHxKwmjNLyGSo9+3uPZ/s0lGCm n9/5I92+/7JrSL7nzrSKF4SWA6QffvkNopINl4bS/v7HpjVvs8ksVVgLOTjiO45K S0L3oc82CGxst2aMLs1IP00p7u4smiCBVcm04uxxYNg+2U3ljyB9CIi9XDccOQPb D59G7aUHxVBq3jTWpyWaQlyBkvv1sUKJ+WQjtYYX1/6rHGqpTQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJuT0KtyceVpZAv4eegM5X+xxPWWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi81 YjFkZDNmZi1kOThlLTRhNzctYWQ4Ni0yNDdmY2FhM2RhZDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzViMWRkM2ZmLWQ5OGUtNGE3Ny1h ZDg2LTI0N2ZjYWEzZGFkMy81YjFkZDNmZi1kOThlLTRhNzctYWQ4Ni0yNDdmY2Fh M2RhZDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGtP8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIwlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADPlP0c2+mXQ6h+gn4v1mogwSZPomOalVFjIN1RM9dsCYXjm PhEDSuyHjruzk37eI1qBeWdiDQiycdDqgbT+7+6TQFcxGbCTGExH93nkYGzmFkAc L1mRD350W3lksyGDVCGPMPnO1R4FoUqpFTPFBQoJS7BIxdCtb0kk1byNY9DmRIuI wu4nC1S0E4DKILeznYrUYPoz4NXPXTNkOlLmX2KGhJRI8FNEpRvtRuya6sFCWF5d v2AaTUUIV+4RRP9ir7mlAOcrdujB2sQbt2TyiLQlOyD52ZoigZH6iTAme3AoquuL 4IjtEqoaaAptSK1VZXpzXqeLygeBP4h43GbMJm4= -----END CERTIFICATE-----Generated at Sun Nov 15 11:42:08 2026 by rpki-client