$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc2db7bb-24d3-4575-9ff7-e5db1602a656.cer File: bc2db7bb-24d3-4575-9ff7-e5db1602a656.cer (raw, json) Hash identifier: bjoshhlPecadX12/ftb8JJKXvHzhA0E1HCboBiSPOf0= Subject key identifier: 0A:33:53:61:6F:90:25:18:3E:D0:F7:C7:7E:84:B7:6B:81:B4:3B:B6 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FD5A7A6BFFD6807CF77B64380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc2db7bb-24d3-4575-9ff7-e5db1602a656/bc2db7bb-24d3-4575-9ff7-e5db1602a656.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc2db7bb-24d3-4575-9ff7-e5db1602a656/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 14 Nov 2026 06:20:26 +0000 Certificate not after: Fri 16 Feb 2029 06:20:26 +0000 Subordinate resources: AS: 32001 IP: 140.235.158.0/23 IP: 2602:2a0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d5:a7:a6:bf:fd:68:07:cf:77:b6:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 14 06:20:26 2026 GMT Not After : Feb 16 06:20:26 2029 GMT Subject: CN=bc2db7bb-24d3-4575-9ff7-e5db1602a656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0f:3a:1e:ab:1d:8f:98:92:31:67:0a:60:1d: 9b:88:c7:ad:7f:37:59:ac:5f:e6:8c:46:09:51:2d: 2e:b0:f4:5e:7c:31:ec:5a:d9:98:94:e3:25:3e:5e: 08:e9:f3:18:b8:c5:b2:f5:11:ea:8b:18:87:db:cb: 01:57:2a:33:fb:3a:06:c1:a2:62:70:47:26:bf:cb: 5f:2a:de:1a:e2:e5:36:d9:37:07:91:ff:44:32:3d: 02:95:1b:8f:3c:bc:8a:84:fb:e8:03:eb:b3:ee:8d: 48:3f:31:33:4d:d4:a1:20:6c:7e:a7:0f:e0:48:26: cf:a2:75:59:3d:e6:ae:4a:06:c8:3d:19:16:5d:a7: 53:a8:fb:04:44:52:4f:95:40:8b:a2:7a:a6:69:64: e3:f3:10:18:ac:34:dd:74:e6:49:8b:2e:9b:32:30: 41:34:9e:12:6a:6c:52:12:f5:68:86:cf:19:74:92: 3e:76:a1:c4:97:bd:e5:d2:56:fe:fd:6f:63:49:79: da:84:86:1b:88:0b:8d:1d:37:40:ae:df:f1:80:3c: 63:22:72:7e:dc:eb:ad:d5:83:70:8f:20:7d:11:d2: f5:72:50:3d:2a:32:56:ee:30:05:04:d0:c1:db:a5: d1:2c:fc:fe:6d:cf:c2:c1:eb:b9:2c:09:c0:60:52: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:33:53:61:6F:90:25:18:3E:D0:F7:C7:7E:84:B7:6B:81:B4:3B:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc2db7bb-24d3-4575-9ff7-e5db1602a656/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc2db7bb-24d3-4575-9ff7-e5db1602a656/bc2db7bb-24d3-4575-9ff7-e5db1602a656.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 140.235.158.0/23 IPv6: 2602:2a0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32001 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:aa:c4:81:ef:58:ef:bb:cd:19:6f:ee:9f:60:42:16:97:7a: ba:74:69:9b:e4:48:c8:3e:17:40:2e:45:03:cb:b7:c3:30:b1: 06:e2:3b:69:12:f7:ee:a6:3f:c5:43:4b:bd:a8:92:89:72:89: 55:2a:48:82:37:d9:f6:fe:14:30:cf:27:e9:ec:94:10:1b:21: 21:14:27:05:0b:1a:cc:59:fe:fd:6c:f1:1c:64:a3:85:5c:9d: fe:34:36:23:b5:5f:3c:51:7a:ab:09:79:52:db:31:4a:53:c8: 8c:ff:45:57:fe:0f:66:66:87:fd:92:84:2c:f6:f6:95:98:f7: ec:60:65:dc:e8:ff:8c:bc:71:5f:85:8d:19:6d:a4:84:9e:d8: 6d:5a:e8:c9:f5:2b:77:d2:70:48:df:b2:4d:15:2b:e5:12:79: 0d:8a:51:5f:10:67:c1:c8:da:31:8c:7e:83:49:cb:4b:07:f7: ef:7c:76:b5:cd:c3:4b:cd:ba:fc:93:1f:e9:52:ea:97:c8:f8: 5e:e9:b3:99:d9:9a:f5:8c:88:37:3b:65:4d:41:e8:cb:0d:69: c1:c5:8c:c9:69:f1:24:19:a9:d7:f6:99:85:da:53:a1:05:cc: 62:0a:17:00:91:a5:eb:b6:80:b6:ad:09:2c:4c:00:4c:d8:9d: a7:d8:c3:e6 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE/Vp6a//WgHz3e2Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTExNDA2MjAyNloXDTI5MDIxNjA2MjAyNlowLzEtMCsGA1UEAxMk YmMyZGI3YmItMjRkMy00NTc1LTlmZjctZTVkYjE2MDJhNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA86Hqsdj5iSMWcKYB2biMetfzdZrF/mjEYJ US0usPRefDHsWtmYlOMlPl4I6fMYuMWy9RHqixiH28sBVyoz+zoGwaJicEcmv8tf Kt4a4uU22TcHkf9EMj0ClRuPPLyKhPvoA+uz7o1IPzEzTdShIGx+pw/gSCbPonVZ PeauSgbIPRkWXadTqPsERFJPlUCLonqmaWTj8xAYrDTddOZJiy6bMjBBNJ4SamxS EvVohs8ZdJI+dqHEl73l0lb+/W9jSXnahIYbiAuNHTdArt/xgDxjInJ+3Out1YNw jyB9EdL1clA9KjJW7jAFBNDB26XRLPz+bc/Cweu5LAnAYFLrCwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAozU2FvkCUYPtD3x36Et2uBtDu2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9i YzJkYjdiYi0yNGQzLTQ1NzUtOWZmNy1lNWRiMTYwMmE2NTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2JjMmRiN2JiLTI0ZDMtNDU3NS05 ZmY3LWU1ZGIxNjAyYTY1Ni9iYzJkYjdiYi0yNGQzLTQ1NzUtOWZmNy1lNWRiMTYw MmE2NTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAGM654wDgQCAAIwCAMGACYCAqAAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAn0BMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF6qxIHvWO+7zRlv7p9gQhaXerp0 aZvkSMg+F0AuRQPLt8MwsQbiO2kS9+6mP8VDS72okolyiVUqSII32fb+FDDPJ+ns lBAbISEUJwULGsxZ/v1s8Rxko4Vcnf40NiO1XzxReqsJeVLbMUpTyIz/RVf+D2Zm h/2ShCz29pWY9+xgZdzo/4y8cV+FjRltpISe2G1a6Mn1K3fScEjfsk0VK+USeQ2K UV8QZ8HI2jGMfoNJy0sH9+98drXNw0vNuvyTH+lS6pfI+F7ps5nZmvWMiDc7ZU1B 6MsNacHFjMlp8SQZqdf2mYXaU6EFzGIKFwCRpeu2gLatCSxMAEzYnafYw+Y= -----END CERTIFICATE-----Generated at Sun Nov 15 11:42:00 2026 by rpki-client