$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9221a24f-d456-4b32-90a4-dcfb8b9e0171.cer File: 9221a24f-d456-4b32-90a4-dcfb8b9e0171.cer (raw, json) Hash identifier: rYHV59HGtk3G5fu89SYJZaNkUZWLIsVKHMqFnjtajuE= Subject key identifier: 67:E8:F7:79:17:BC:84:EB:B0:75:C2:67:B9:A9:39:FB:39:6C:B7:4A Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FC106A1F3C21A0FE3F9A55200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9221a24f-d456-4b32-90a4-dcfb8b9e0171/9221a24f-d456-4b32-90a4-dcfb8b9e0171.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9221a24f-d456-4b32-90a4-dcfb8b9e0171/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Nov 2026 20:59:50 +0000 Certificate not after: Thu 08 Feb 2029 20:59:50 +0000 Subordinate resources: AS: 398401 IP: 149.19.110.0/24 IP: 206.109.78.0/24 IP: 2606:35c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c1:06:a1:f3:c2:1a:0f:e3:f9:a5:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 6 20:59:50 2026 GMT Not After : Feb 8 20:59:50 2029 GMT Subject: CN=9221a24f-d456-4b32-90a4-dcfb8b9e0171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:ad:cc:74:89:e6:57:9f:ce:56:89:6d:85: 95:76:9f:4c:59:a6:24:9a:8b:81:62:b3:5c:4c:1d: 3f:5f:65:9d:03:c6:29:78:49:3d:50:96:c3:05:64: ba:bd:d4:c0:7e:56:9e:fe:e5:52:88:1f:10:7f:f8: 76:6b:fb:72:b6:fe:86:6a:2d:27:fc:b9:40:21:3a: f7:e0:9a:01:f8:c4:5b:d0:c1:72:e9:b8:07:a2:71: e5:04:8a:13:e5:83:90:8c:96:ec:d3:fc:62:13:e2: 0f:bf:37:e1:c6:6f:b2:4f:80:bf:20:95:e1:f7:bf: 91:ab:b4:5f:11:55:4a:ff:eb:1d:79:5f:a3:58:28: 90:11:b3:ad:3c:0d:31:8e:45:b8:66:71:da:ed:1d: 38:8a:22:43:c2:21:79:f7:36:92:01:62:3d:a5:cd: 70:35:1e:93:56:cf:9f:d9:41:08:6b:f7:82:84:19: 19:8d:d9:2c:3d:0d:d3:9f:34:3e:66:3c:4d:e7:32: b4:7f:47:cf:99:9b:2a:6b:d9:9a:a1:40:05:da:bc: 5c:b9:47:43:58:ab:c6:ce:9d:d6:33:e9:04:c0:d1: 95:83:b3:6c:45:4f:01:2b:98:ce:a3:41:0b:a9:18: 28:56:32:3a:d5:98:1c:8e:b8:8f:ae:96:21:e8:62: b0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E8:F7:79:17:BC:84:EB:B0:75:C2:67:B9:A9:39:FB:39:6C:B7:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9221a24f-d456-4b32-90a4-dcfb8b9e0171/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9221a24f-d456-4b32-90a4-dcfb8b9e0171/9221a24f-d456-4b32-90a4-dcfb8b9e0171.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 149.19.110.0/24 206.109.78.0/24 IPv6: 2606:35c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398401 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:46:27:1c:a3:a3:2d:8a:fd:fb:ba:19:76:be:71:c9:f4:c7: b6:e4:98:38:5e:55:e2:0e:d4:27:10:f4:35:67:0b:6d:d6:6d: 4e:8a:b9:0b:26:33:e6:2c:20:52:d6:75:1a:1b:e8:14:b2:34: 3e:b2:8d:c9:03:7f:2f:aa:5e:30:5e:2c:ea:f6:ea:ef:50:4d: 8f:a5:4a:17:bc:3d:77:af:e3:2a:b3:07:ce:5d:e2:48:54:92: 94:cb:9e:89:1f:48:59:2c:0d:e3:32:7a:77:0e:19:d1:8f:57: 15:3f:14:50:26:2e:1c:b7:a1:f4:ad:93:5c:dc:7e:5d:07:70: 12:34:17:14:7c:6e:44:03:75:98:03:56:3e:31:a2:3c:a8:8e: 01:12:d1:c1:a7:63:5a:7e:02:a4:eb:99:1a:63:a1:c5:88:ec: 86:48:f0:61:14:2c:93:04:32:c5:80:5d:ec:a6:ed:4b:1a:b4: 6e:9d:a2:12:6b:9b:2a:e8:0e:2a:62:45:de:c2:4e:75:cf:a0: 73:3b:4a:c2:6f:aa:25:a8:bf:ac:2f:66:3d:ea:c5:1c:a5:97: bd:c4:fa:ac:c6:8f:a6:a7:95:08:6d:01:8d:5e:e3:08:ef:4e: 32:ad:6f:25:14:06:d0:77:02:03:03:93:e4:8b:c5:72:27:c6: c8:4e:e2:95 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE/BBqHzwhoP4/mlUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwNjIwNTk1MFoXDTI5MDIwODIwNTk1MFowLzEtMCsGA1UEAxMk OTIyMWEyNGYtZDQ1Ni00YjMyLTkwYTQtZGNmYjhiOWUwMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveGtzHSJ5lefzlaJbYWVdp9MWaYkmouBYrNc TB0/X2WdA8YpeEk9UJbDBWS6vdTAflae/uVSiB8Qf/h2a/tytv6Gai0n/LlAITr3 4JoB+MRb0MFy6bgHonHlBIoT5YOQjJbs0/xiE+IPvzfhxm+yT4C/IJXh97+Rq7Rf EVVK/+sdeV+jWCiQEbOtPA0xjkW4ZnHa7R04iiJDwiF59zaSAWI9pc1wNR6TVs+f 2UEIa/eChBkZjdksPQ3TnzQ+ZjxN5zK0f0fPmZsqa9maoUAF2rxcuUdDWKvGzp3W M+kEwNGVg7NsRU8BK5jOo0ELqRgoVjI61ZgcjriPrpYh6GKwpQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFGfo93kXvITrsHXCZ7mpOfs5bLdKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi85 MjIxYTI0Zi1kNDU2LTRiMzItOTBhNC1kY2ZiOGI5ZTAxNzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzkyMjFhMjRmLWQ0NTYtNGIzMi05 MGE0LWRjZmI4YjllMDE3MS85MjIxYTI0Zi1kNDU2LTRiMzItOTBhNC1kY2ZiOGI5 ZTAxNzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBACVE24DBADObU4wDQQCAAIwBwMFACYGNcAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhRBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFtGJxyjoy2K/fu6GXa+ ccn0x7bkmDheVeIO1CcQ9DVnC23WbU6KuQsmM+YsIFLWdRob6BSyND6yjckDfy+q XjBeLOr26u9QTY+lShe8PXev4yqzB85d4khUkpTLnokfSFksDeMyencOGdGPVxU/ FFAmLhy3ofStk1zcfl0HcBI0FxR8bkQDdZgDVj4xojyojgES0cGnY1p+AqTrmRpj ocWI7IZI8GEULJMEMsWAXeym7UsatG6dohJrmyroDipiRd7CTnXPoHM7SsJvqiWo v6wvZj3qxRyll73E+qzGj6anlQhtAY1e4wjvTjKtbyUUBtB3AgMDk+SLxXInxshO 4pU= -----END CERTIFICATE-----Generated at Sun Nov 15 11:42:29 2026 by rpki-client