$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/8e6c4c77-0192-4f00-93ff-db2097092a69.cer File: 8e6c4c77-0192-4f00-93ff-db2097092a69.cer (raw, json) Hash identifier: MTonWp5TeNVKOZ9Ka7/LzIeTG8JGlGr6ib9su8lrncw= Subject key identifier: A7:92:65:21:96:BA:5E:0C:C8:6E:6A:F3:BB:8E:70:34:75:F5:4A:57 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FD1B3A3CD5807289347E27340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/8e6c4c77-0192-4f00-93ff-db2097092a69/8e6c4c77-0192-4f00-93ff-db2097092a69.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/8e6c4c77-0192-4f00-93ff-db2097092a69/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Nov 2026 20:21:21 +0000 Certificate not after: Wed 14 Feb 2029 20:21:21 +0000 Subordinate resources: AS: 395658 IP: 66.205.242.0/24 IP: 128.128.56.0/21 IP: 134.195.206.0/24 IP: 156.146.112.0/20 IP: 160.223.192.0/21 IP: 169.155.160.0/21 IP: 2605:46c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d1:b3:a3:cd:58:07:28:93:47:e2:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 12 20:21:21 2026 GMT Not After : Feb 14 20:21:21 2029 GMT Subject: CN=8e6c4c77-0192-4f00-93ff-db2097092a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7e:7e:3a:ac:6e:d9:22:30:7d:1c:49:95:4c: bf:48:ce:7d:65:12:fa:1b:fc:ec:ac:6d:59:7e:ce: 6f:6c:59:69:9b:98:89:59:e4:c2:1e:6d:43:13:8a: b6:36:8f:5b:7c:18:39:9f:28:3c:5d:2f:bc:a7:73: 8d:a1:05:72:ac:43:b6:cd:15:14:e5:61:65:4b:5c: 75:91:b4:84:ed:f4:28:0d:07:e4:f9:99:16:a3:f9: 3f:2a:4b:32:e9:ae:0f:e9:9f:ac:90:3b:e0:9c:58: 12:26:e4:44:54:77:c9:5c:aa:06:86:c7:d6:83:36: 28:09:16:ef:20:59:9c:69:63:76:8c:e1:3a:76:b4: b7:94:09:98:27:23:36:32:74:3b:61:ae:8e:2f:80: f2:08:5c:51:5b:5b:a4:58:3a:a8:7a:70:7f:58:48: b4:4c:14:4b:51:f1:ea:f9:55:dd:6e:f6:fb:9f:9d: eb:92:b7:a9:a2:c1:4c:c1:b7:2e:fb:0a:9d:d0:98: 2c:1f:9b:e1:1c:b7:ff:57:6d:a2:ed:ef:13:3b:c6: 5d:0b:0a:70:b7:42:c8:fa:f6:11:54:fe:30:93:f8: b3:88:54:79:16:a2:81:dd:c5:27:f8:94:49:83:8d: b1:cc:05:47:9d:22:28:0f:6a:99:35:18:ab:80:85: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:92:65:21:96:BA:5E:0C:C8:6E:6A:F3:BB:8E:70:34:75:F5:4A:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/8e6c4c77-0192-4f00-93ff-db2097092a69/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/8e6c4c77-0192-4f00-93ff-db2097092a69/8e6c4c77-0192-4f00-93ff-db2097092a69.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 66.205.242.0/24 128.128.56.0/21 134.195.206.0/24 156.146.112.0/20 160.223.192.0/21 169.155.160.0/21 IPv6: 2605:46c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395658 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7d:6d:d1:35:de:f7:40:3e:34:fc:46:8d:bd:cc:d2:16:f0: 27:7e:ac:37:db:c0:22:84:4b:b2:2d:05:e9:43:6d:ca:3b:18: ab:86:ae:a9:3e:12:95:d9:92:e8:98:50:96:f7:2e:7e:59:40: 6e:ca:5a:61:95:1e:7b:21:07:8f:d5:62:6e:6b:cb:8c:08:ce: bd:a2:74:31:2d:d2:d7:db:ed:aa:b9:db:c5:92:94:5d:e9:71: 14:f0:92:e4:9c:bb:64:f4:f4:8f:f5:ab:73:10:27:cf:ae:f4: 11:f8:83:84:a2:f1:34:d0:14:f8:ef:94:87:9e:23:0b:e0:b0: a3:7c:f5:de:cb:83:b7:ec:18:4e:8f:4d:d5:03:a0:99:9f:5b: 7b:0f:40:21:1f:53:6e:43:36:d2:85:31:63:af:1a:6c:ca:32: 4d:f0:21:f4:3b:d0:4e:e0:74:7b:9f:a4:7d:95:69:2d:93:04: 98:fd:6a:13:f4:ce:ba:1e:73:4b:af:45:fc:36:49:15:c6:1d: c3:a2:0c:e3:fa:3f:cb:8a:db:6c:7f:5d:e6:4a:a1:01:a0:f0: 3f:80:e2:e3:9c:ea:53:58:5c:b9:2e:1d:2d:e1:7f:ba:a3:6d: 8b:ba:75:e9:49:1c:3a:b5:5a:31:98:36:58:97:f9:c4:fc:be: c3:00:f9:3f -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWE/Rs6PNWAcok0fic0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTExMjIwMjEyMVoXDTI5MDIxNDIwMjEyMVowLzEtMCsGA1UEAxMk OGU2YzRjNzctMDE5Mi00ZjAwLTkzZmYtZGIyMDk3MDkyYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH5+Oqxu2SIwfRxJlUy/SM59ZRL6G/zsrG1Z fs5vbFlpm5iJWeTCHm1DE4q2No9bfBg5nyg8XS+8p3ONoQVyrEO2zRUU5WFlS1x1 kbSE7fQoDQfk+ZkWo/k/Kksy6a4P6Z+skDvgnFgSJuREVHfJXKoGhsfWgzYoCRbv IFmcaWN2jOE6drS3lAmYJyM2MnQ7Ya6OL4DyCFxRW1ukWDqoenB/WEi0TBRLUfHq +VXdbvb7n53rkreposFMwbcu+wqd0JgsH5vhHLf/V22i7e8TO8ZdCwpwt0LI+vYR VP4wk/iziFR5FqKB3cUn+JRJg42xzAVHnSIoD2qZNRirgIVUkQIDAQABo4IESDCC BEQwHQYDVR0OBBYEFKeSZSGWul4MyG5q87uOcDR19UpXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi84 ZTZjNGM3Ny0wMTkyLTRmMDAtOTNmZi1kYjIwOTcwOTJhNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzhlNmM0Yzc3LTAxOTItNGYwMC05 M2ZmLWRiMjA5NzA5MmE2OS84ZTZjNGM3Ny0wMTkyLTRmMDAtOTNmZi1kYjIwOTcw OTJhNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBABCzfIDBAOAgDgDBACGw84DBAScknADBAOg38AD BAOpm6AwDQQCAAIwBwMFACYFRsAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgmK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB59bdE13vdAPjT8Ro29zNIW8Cd+rDfbwCKES7ItBelDbco7GKuG rqk+EpXZkuiYUJb3Ln5ZQG7KWmGVHnshB4/VYm5ry4wIzr2idDEt0tfb7aq528WS lF3pcRTwkuScu2T09I/1q3MQJ8+u9BH4g4Si8TTQFPjvlIeeIwvgsKN89d7Lg7fs GE6PTdUDoJmfW3sPQCEfU25DNtKFMWOvGmzKMk3wIfQ70E7gdHufpH2VaS2TBJj9 ahP0zroec0uvRfw2SRXGHcOiDOP6P8uK22x/XeZKoQGg8D+A4uOc6lNYXLkuHS3h f7qjbYu6delJHDq1WjGYNliX+cT8vsMA+T8= -----END CERTIFICATE-----Generated at Sun Nov 15 11:42:54 2026 by rpki-client