$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/8a4f1d80-d2c9-4f97-90f3-4ebea38a5874.cer File: 8a4f1d80-d2c9-4f97-90f3-4ebea38a5874.cer (raw, json) Hash identifier: 7cHUUdG+UWi1v/nTuYdw1k+TIVY96vs4pMkffyMLU8A= Subject key identifier: 47:17:9D:28:7B:C8:D9:3C:9E:FB:DE:25:AF:4D:AA:D3:62:4F:87:DA Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FCC41F8750B8C1744CA5DA810 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/8a4f1d80-d2c9-4f97-90f3-4ebea38a5874/8a4f1d80-d2c9-4f97-90f3-4ebea38a5874.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/8a4f1d80-d2c9-4f97-90f3-4ebea38a5874/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Nov 2026 21:33:17 +0000 Certificate not after: Sat 10 Feb 2029 23:53:16 +0000 Subordinate resources: AS: 22058 IP: 23.136.144.0/24 IP: 2602:fde4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:41:f8:75:0b:8c:17:44:ca:5d:a8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 10 21:33:17 2026 GMT Not After : Feb 10 23:53:16 2029 GMT Subject: CN=8a4f1d80-d2c9-4f97-90f3-4ebea38a5874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b2:71:03:31:b5:10:c5:d6:ff:3a:eb:33:c3: c7:b1:2c:7d:4d:9b:11:4c:b0:df:1e:65:09:1b:c0: b1:d5:7f:eb:20:59:c6:a4:78:ff:b1:58:23:33:d9: f3:b7:2d:9c:22:0a:5f:af:0a:17:ea:fd:c8:00:ae: 8d:f5:fc:28:33:77:6f:ca:d4:40:db:25:f0:db:7b: 95:dc:7b:51:64:9f:89:05:c4:ae:24:70:ac:13:0b: 0e:7b:72:68:60:19:52:c6:89:2f:67:3b:ba:3a:e2: 7f:78:8b:59:0d:04:9a:07:7a:d9:54:47:a0:e1:e7: 6d:62:74:36:85:45:ef:83:b9:27:5f:e3:f7:44:08: 57:a9:83:84:bd:22:38:e3:f3:69:dd:29:e4:e0:e8: e9:d0:cc:31:09:b4:c2:d7:db:6f:43:3d:dc:ad:da: 1f:cc:79:c4:d6:07:2a:1e:ae:04:ab:f4:7b:5c:80: 5e:fd:bf:f1:ee:1b:63:29:91:47:58:9c:f0:27:b3: ca:df:ce:b7:6a:03:28:9e:70:e8:9a:cb:20:58:0a: 83:24:ca:83:7b:6e:f0:20:bc:c8:aa:45:cc:f4:15: 33:b6:6e:c4:51:29:b4:fb:cf:b3:92:bc:6f:99:33: 37:2b:b6:3f:be:cb:90:e4:c9:93:9f:e5:53:ec:bb: 32:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:17:9D:28:7B:C8:D9:3C:9E:FB:DE:25:AF:4D:AA:D3:62:4F:87:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/8a4f1d80-d2c9-4f97-90f3-4ebea38a5874/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/8a4f1d80-d2c9-4f97-90f3-4ebea38a5874/8a4f1d80-d2c9-4f97-90f3-4ebea38a5874.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 23.136.144.0/24 IPv6: 2602:fde4::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22058 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9f:ed:7f:0d:b8:97:6b:80:24:d9:ee:63:c3:63:21:89:57: 2e:b2:ab:03:d4:57:fb:db:2b:fb:b0:06:58:71:d1:c9:79:cd: 81:db:9c:dd:ff:47:9d:3e:1c:18:e3:ac:83:83:84:8c:5e:87: 69:df:8f:4a:17:da:02:fe:0f:c5:4f:3f:08:58:42:7e:32:06: b8:7b:38:ca:19:bc:13:df:b1:4a:93:38:c3:08:14:63:f3:41: f0:bc:e8:ac:51:47:57:db:b3:12:92:a2:b6:db:75:b6:fc:07: 23:41:72:4a:b2:a1:cc:8b:bc:ae:e4:e6:0c:b7:ca:00:26:38: e3:80:cf:a5:54:51:4b:f0:d7:f4:47:ee:05:06:2c:43:34:e2: 4b:35:5e:a3:1b:93:16:16:39:6c:57:d4:71:5e:cd:e4:ab:b1: c1:ce:33:23:ff:cc:1c:f9:d9:35:dd:97:7d:7f:95:f4:df:39: 6d:dd:6d:d1:de:15:db:c1:ab:1e:0c:69:39:32:c8:ba:68:a3: 8f:83:19:5a:14:d2:1c:90:ea:4e:2d:40:bc:bd:61:4d:a5:e9: 9c:d6:00:a0:28:5a:50:4e:08:9f:32:70:9e:c7:e0:14:fa:44: c0:a8:a5:11:60:6f:e7:d2:4a:62:65:e2:d3:d5:b3:8c:73:a7: df:05:c5:8e -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE/MQfh1C4wXRMpdqBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTExMDIxMzMxN1oXDTI5MDIxMDIzNTMxNlowLzEtMCsGA1UEAxMk OGE0ZjFkODAtZDJjOS00Zjk3LTkwZjMtNGViZWEzOGE1ODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibJxAzG1EMXW/zrrM8PHsSx9TZsRTLDfHmUJ G8Cx1X/rIFnGpHj/sVgjM9nzty2cIgpfrwoX6v3IAK6N9fwoM3dvytRA2yXw23uV 3HtRZJ+JBcSuJHCsEwsOe3JoYBlSxokvZzu6OuJ/eItZDQSaB3rZVEeg4edtYnQ2 hUXvg7knX+P3RAhXqYOEvSI44/Np3Snk4Ojp0MwxCbTC19tvQz3crdofzHnE1gcq Hq4Eq/R7XIBe/b/x7htjKZFHWJzwJ7PK3863agMonnDomssgWAqDJMqDe27wILzI qkXM9BUztm7EUSm0+8+zkrxvmTM3K7Y/vsuQ5MmTn+VT7LsyyQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFEcXnSh7yNk8nvveJa9NqtNiT4faMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi84 YTRmMWQ4MC1kMmM5LTRmOTctOTBmMy00ZWJlYTM4YTU4NzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzhhNGYxZDgwLWQyYzktNGY5Ny05 MGYzLTRlYmVhMzhhNTg3NC84YTRmMWQ4MC1kMmM5LTRmOTctOTBmMy00ZWJlYTM4 YTU4NzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiJAwDgQCAAIwCAMGACYC/eQAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlYqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAICf7X8NuJdrgCTZ7mPDYyGJVy6y qwPUV/vbK/uwBlhx0cl5zYHbnN3/R50+HBjjrIODhIxeh2nfj0oX2gL+D8VPPwhY Qn4yBrh7OMoZvBPfsUqTOMMIFGPzQfC86KxRR1fbsxKSorbbdbb8ByNBckqyocyL vK7k5gy3ygAmOOOAz6VUUUvw1/RH7gUGLEM04ks1XqMbkxYWOWxX1HFezeSrscHO MyP/zBz52TXdl31/lfTfOW3dbdHeFdvBqx4MaTkyyLpoo4+DGVoU0hyQ6k4tQLy9 YU2l6ZzWAKAoWlBOCJ8ycJ7H4BT6RMCopRFgb+fSSmJl4tPVs4xzp98FxY4= -----END CERTIFICATE-----Generated at Sun Nov 15 11:42:08 2026 by rpki-client