$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/b123473a-d1fa-42f9-ad2c-7d3cb9c8e611.cer File: b123473a-d1fa-42f9-ad2c-7d3cb9c8e611.cer (raw, json) Hash identifier: cmcasPHtwBezBhUTa/X+N0qjb0EcYK4YK9bANkK1wnM= Subject key identifier: 7A:79:70:55:1A:78:45:9A:B9:99:5E:89:A8:04:0A:48:9E:7B:C4:FB Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FC07C30ABB0730ECFE7667800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/b123473a-d1fa-42f9-ad2c-7d3cb9c8e611/b123473a-d1fa-42f9-ad2c-7d3cb9c8e611.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/b123473a-d1fa-42f9-ad2c-7d3cb9c8e611/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Nov 2026 16:20:53 +0000 Certificate not after: Thu 08 Feb 2029 16:20:53 +0000 Subordinate resources: AS: 403159 IP: 198.134.167.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c0:7c:30:ab:b0:73:0e:cf:e7:66:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 6 16:20:53 2026 GMT Not After : Feb 8 16:20:53 2029 GMT Subject: CN=b123473a-d1fa-42f9-ad2c-7d3cb9c8e611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:df:6c:b4:b2:13:24:46:53:9f:5e:91:a5:77: 14:44:fe:24:ca:02:62:8d:b5:d9:59:ac:a3:ea:28: b3:2c:be:15:78:7e:9e:cc:b6:d3:3d:cf:1c:84:65: 9c:1e:dd:b4:1c:70:10:de:f9:26:0a:fe:a9:6a:40: 2b:35:25:7a:26:bf:72:2d:aa:69:b3:e1:f5:66:cd: 32:36:6b:e0:41:d7:d5:e7:e4:a4:f0:1c:05:f9:e7: f7:54:f3:fb:e6:fa:cb:08:ba:f8:23:9c:14:5c:d4: 10:77:cb:1c:00:dc:c3:22:4b:5b:28:00:44:37:ea: 03:36:e6:2a:2e:7d:69:5b:93:64:87:02:b9:f7:70: 67:31:49:e5:9d:4d:e7:f0:35:9a:9b:e3:3c:a8:37: 17:b3:e5:37:44:24:a7:75:b0:19:9f:cd:1e:16:19: dc:ac:55:b6:27:e8:28:24:02:b9:b5:e4:d1:62:8d: 0c:16:67:9f:c6:a7:3b:93:93:14:ef:e6:f2:82:b6: 5e:ee:19:5a:3d:6f:a7:b8:4b:7e:43:31:44:6a:db: 08:94:af:bf:00:92:07:33:3a:0d:bc:3d:a0:19:ee: bc:d9:45:f7:37:06:4c:21:fa:db:65:c2:e7:b0:e5: a7:92:95:f1:59:db:cf:00:ca:e3:f3:98:80:c6:27: ac:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:79:70:55:1A:78:45:9A:B9:99:5E:89:A8:04:0A:48:9E:7B:C4:FB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/b123473a-d1fa-42f9-ad2c-7d3cb9c8e611/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/b123473a-d1fa-42f9-ad2c-7d3cb9c8e611/b123473a-d1fa-42f9-ad2c-7d3cb9c8e611.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 198.134.167.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403159 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:61:62:af:9b:96:99:05:e5:fc:48:86:2e:66:c4:e0:92:a9: 4b:ba:61:d6:96:ad:7c:2d:57:a4:e7:28:93:c7:76:72:61:28: 18:46:ae:65:67:f6:d9:b6:e1:02:82:a6:e7:34:7b:5b:19:ce: 39:29:9c:de:af:f5:2b:8a:5e:9a:1d:e2:9a:f2:5b:db:df:0d: 66:e6:9c:2d:64:c5:20:1c:1e:38:61:0c:8c:11:20:9b:c8:44: eb:7e:2c:8b:18:46:71:37:0e:74:6f:25:fb:59:5b:5b:f8:87: 26:df:10:b6:0f:37:3a:af:fb:fd:1b:58:f1:56:0d:b7:c8:2d: 27:a1:e4:6b:1d:48:a2:52:e1:d4:a3:2f:9f:d0:0d:8a:a2:cb: eb:a2:ca:eb:bb:36:c1:ea:cd:d4:7e:38:09:c3:d8:50:3d:71: 0e:4d:2e:22:12:fb:a8:63:b8:28:1f:da:f9:dd:b2:b6:ee:b3: cc:5e:3f:df:31:be:af:3f:cd:77:87:5f:10:81:98:35:8f:8e: 5a:eb:5d:7d:7c:f5:d6:3a:61:c2:66:72:57:77:c4:28:a0:68: 5e:54:4e:3c:e9:87:d5:3a:93:ce:df:c1:c4:c2:12:09:89:a2: fe:ab:15:7f:2e:7f:2b:9c:fd:71:cd:7c:13:f7:18:ed:35:93: fa:21:ac:b2 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE/AfDCrsHMOz+dmeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwNjE2MjA1M1oXDTI5MDIwODE2MjA1M1owLzEtMCsGA1UEAxMk YjEyMzQ3M2EtZDFmYS00MmY5LWFkMmMtN2QzY2I5YzhlNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod9stLITJEZTn16RpXcURP4kygJijbXZWayj 6iizLL4VeH6ezLbTPc8chGWcHt20HHAQ3vkmCv6pakArNSV6Jr9yLapps+H1Zs0y NmvgQdfV5+Sk8BwF+ef3VPP75vrLCLr4I5wUXNQQd8scANzDIktbKABEN+oDNuYq Ln1pW5NkhwK593BnMUnlnU3n8DWam+M8qDcXs+U3RCSndbAZn80eFhncrFW2J+go JAK5teTRYo0MFmefxqc7k5MU7+bygrZe7hlaPW+nuEt+QzFEatsIlK+/AJIHMzoN vD2gGe682UX3NwZMIfrbZcLnsOWnkpXxWdvPAMrj85iAxiesuwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFHp5cFUaeEWauZleiagECkiee8T7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9i MTIzNDczYS1kMWZhLTQyZjktYWQyYy03ZDNjYjljOGU2MTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2IxMjM0NzNhLWQxZmEtNDJmOS1h ZDJjLTdkM2NiOWM4ZTYxMS9iMTIzNDczYS1kMWZhLTQyZjktYWQyYy03ZDNjYjlj OGU2MTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGhqcwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BibXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGRhYq+blpkF5fxIhi5mxOCSqUu6YdaWrXwtV6TnKJPHdnJh KBhGrmVn9tm24QKCpuc0e1sZzjkpnN6v9SuKXpod4pryW9vfDWbmnC1kxSAcHjhh DIwRIJvIROt+LIsYRnE3DnRvJftZW1v4hybfELYPNzqv+/0bWPFWDbfILSeh5Gsd SKJS4dSjL5/QDYqiy+uiyuu7NsHqzdR+OAnD2FA9cQ5NLiIS+6hjuCgf2vndsrbu s8xeP98xvq8/zXeHXxCBmDWPjlrrXX189dY6YcJmcld3xCigaF5UTjzph9U6k87f wcTCEgmJov6rFX8ufyuc/XHNfBP3GO01k/ohrLI= -----END CERTIFICATE-----Generated at Sun Nov 15 11:41:58 2026 by rpki-client