$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9e7fd143-65a3-4dbe-aa89-4a3b5fce5c89.cer File: 9e7fd143-65a3-4dbe-aa89-4a3b5fce5c89.cer (raw, json) Hash identifier: 2WmGYqwhEeBm01CGDKcmrt5Am/e2vXVKdb6wujrzQnQ= Subject key identifier: 67:17:BD:16:F3:48:93:77:85:80:95:26:9D:96:D5:DC:E3:FD:7E:16 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FBDC540F2064F8D31FD723B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9e7fd143-65a3-4dbe-aa89-4a3b5fce5c89/9e7fd143-65a3-4dbe-aa89-4a3b5fce5c89.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9e7fd143-65a3-4dbe-aa89-4a3b5fce5c89/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Nov 2026 17:00:40 +0000 Certificate not after: Wed 07 Feb 2029 17:00:40 +0000 Subordinate resources: AS: 33545 IP: 173.46.96.0/19 IP: 192.76.239.0/24 IP: 192.83.253.0/24 IP: 2620:12d:2000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bd:c5:40:f2:06:4f:8d:31:fd:72:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 5 17:00:40 2026 GMT Not After : Feb 7 17:00:40 2029 GMT Subject: CN=9e7fd143-65a3-4dbe-aa89-4a3b5fce5c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1e:e5:71:e0:f7:2e:45:f0:1e:84:b3:fe:93: 7e:1c:79:7a:66:09:85:27:ce:17:64:16:3e:69:6e: f8:ba:86:2d:d9:5f:1f:71:56:07:21:25:e2:55:02: a7:96:73:0e:49:74:b1:93:e2:b8:24:8b:c2:4c:a9: 0d:23:1a:20:2f:38:bb:6a:6c:65:53:59:ad:f1:54: 44:29:18:44:c0:d0:7e:3a:18:10:f2:25:a0:53:fb: c2:85:47:c0:b8:0c:b5:92:bf:a0:1b:ac:4d:5b:91: 11:9d:aa:82:e8:3a:e3:e7:b5:29:82:fa:11:4f:79: ee:6a:f9:a2:ab:eb:09:f3:c0:38:07:16:dc:46:2c: a2:e9:3a:ec:a5:76:be:6f:d9:f4:b4:97:96:85:23: fa:7e:43:b9:e7:48:82:7e:d7:f2:c3:07:ef:93:7b: 99:c4:7e:be:08:5c:d7:15:9f:9a:f7:dc:ee:05:f6: 25:2f:4b:33:97:ad:15:5e:9c:38:3d:b7:4f:d6:4f: 66:03:3f:fe:e4:ca:35:cf:30:bd:49:17:03:f2:eb: bb:88:7f:e5:2c:fa:d0:dc:c8:14:3f:cc:36:ee:2a: 87:0c:40:b6:f8:6d:e6:1e:cb:26:d4:b8:db:46:16: 57:d8:44:67:8e:09:bf:cb:c9:13:57:59:a6:05:8b: e4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:17:BD:16:F3:48:93:77:85:80:95:26:9D:96:D5:DC:E3:FD:7E:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9e7fd143-65a3-4dbe-aa89-4a3b5fce5c89/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9e7fd143-65a3-4dbe-aa89-4a3b5fce5c89/9e7fd143-65a3-4dbe-aa89-4a3b5fce5c89.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 173.46.96.0/19 192.76.239.0/24 192.83.253.0/24 IPv6: 2620:12d:2000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33545 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f0:f8:56:97:c4:ef:3c:53:bb:0e:af:7b:38:a5:ae:f2:1a: e8:0d:eb:d9:56:e1:70:8e:1c:e9:28:51:0c:5f:20:61:e9:ed: b7:ee:68:2c:66:88:42:e2:ef:18:e8:b2:6c:e9:32:14:1f:83: 36:be:65:8c:ef:fd:9d:af:2c:04:12:dd:7f:f3:26:01:13:5f: 9d:7f:26:ca:d9:ec:7f:f7:cf:85:71:d3:81:7f:20:4f:05:f1: 1c:60:bf:34:bc:11:b9:43:ad:08:02:3c:39:04:57:95:da:21: c0:8f:67:8e:13:bd:18:ab:73:d1:f0:d5:23:85:52:36:12:2f: 70:54:b6:94:1f:73:15:26:2e:87:d1:99:f2:28:a1:86:d8:c8: 60:9e:3c:7f:92:57:64:ef:8b:70:b9:b6:d0:73:96:84:56:b6: d0:5d:38:8f:57:ca:03:6f:35:03:c3:43:41:8a:75:f1:0f:b3: f6:ed:79:b7:c3:1c:11:b6:8b:30:42:7e:4d:9f:fb:ce:78:97: 05:c7:0d:f3:21:bb:61:c3:ed:5f:05:c6:6e:e5:27:53:7c:e7: 5d:76:e3:dc:d5:a5:20:48:ed:d8:49:a9:d5:46:c7:66:d4:78: d5:9c:92:78:7a:76:71:d6:39:2d:6d:b6:57:0b:a2:2b:18:53: 0d:6d:4e:1b -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWE+9xUDyBk+NMf1yOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwNTE3MDA0MFoXDTI5MDIwNzE3MDA0MFowLzEtMCsGA1UEAxMk OWU3ZmQxNDMtNjVhMy00ZGJlLWFhODktNGEzYjVmY2U1Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx7lceD3LkXwHoSz/pN+HHl6ZgmFJ84XZBY+ aW74uoYt2V8fcVYHISXiVQKnlnMOSXSxk+K4JIvCTKkNIxogLzi7amxlU1mt8VRE KRhEwNB+OhgQ8iWgU/vChUfAuAy1kr+gG6xNW5ERnaqC6Drj57UpgvoRT3nuavmi q+sJ88A4BxbcRiyi6TrspXa+b9n0tJeWhSP6fkO550iCftfywwfvk3uZxH6+CFzX FZ+a99zuBfYlL0szl60VXpw4PbdP1k9mAz/+5Mo1zzC9SRcD8uu7iH/lLPrQ3MgU P8w27iqHDEC2+G3mHssm1LjbRhZX2ERnjgm/y8kTV1mmBYvkEwIDAQABo4IENzCC BDMwHQYDVR0OBBYEFGcXvRbzSJN3hYCVJp2W1dzj/X4WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi85 ZTdmZDE0My02NWEzLTRkYmUtYWE4OS00YTNiNWZjZTVjODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzllN2ZkMTQzLTY1YTMtNGRiZS1h YTg5LTRhM2I1ZmNlNWM4OS85ZTdmZDE0My02NWEzLTRkYmUtYWE4OS00YTNiNWZj ZTVjODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAWtLmADBADATO8DBADAU/0wDgQCAAIwCAMGACYg AS0gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCDCTBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBw8PhWl8Tv PFO7Dq97OKWu8hroDevZVuFwjhzpKFEMXyBh6e237mgsZohC4u8Y6LJs6TIUH4M2 vmWM7/2drywEEt1/8yYBE1+dfybK2ex/98+FcdOBfyBPBfEcYL80vBG5Q60IAjw5 BFeV2iHAj2eOE70Yq3PR8NUjhVI2Ei9wVLaUH3MVJi6H0ZnyKKGG2Mhgnjx/kldk 74twubbQc5aEVrbQXTiPV8oDbzUDw0NBinXxD7P27Xm3wxwRtoswQn5Nn/vOeJcF xw3zIbthw+1fBcZu5SdTfOddduPc1aUgSO3YSanVRsdm1HjVnJJ4enZx1jktbbZX C6IrGFMNbU4b -----END CERTIFICATE-----Generated at Sun Nov 15 11:42:44 2026 by rpki-client