$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d20445fb-0754-44d0-9d96-946af7fca249.cer File: d20445fb-0754-44d0-9d96-946af7fca249.cer (raw, json) Hash identifier: NKQzNcr2SrmgAK2gxm0lYTVN2fZ+CsA0GC3CYUyt2nw= Subject key identifier: B5:DB:D6:3B:12:84:88:8A:6B:25:C6:E9:F8:0C:37:B2:63:2C:78:D1 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FB541D3A0112D44DDC5CC7E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d20445fb-0754-44d0-9d96-946af7fca249/d20445fb-0754-44d0-9d96-946af7fca249.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d20445fb-0754-44d0-9d96-946af7fca249/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Nov 2026 15:49:24 +0000 Certificate not after: Sun 04 Feb 2029 15:49:24 +0000 Subordinate resources: IP: 157.234.0.0/16 IP: 2620:109:9000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:41:d3:a0:11:2d:44:dd:c5:cc:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 2 15:49:24 2026 GMT Not After : Feb 4 15:49:24 2029 GMT Subject: CN=d20445fb-0754-44d0-9d96-946af7fca249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:36:f6:6b:25:6a:cd:dc:b9:19:f7:df:96:a3: e2:88:c5:cc:34:97:c5:b6:87:7d:18:4d:72:35:5c: d4:59:15:cd:bd:f1:3e:f2:5b:62:1f:45:35:0a:74: 00:dc:5d:c3:81:a9:38:e6:ba:51:68:9a:fc:ce:46: e6:8e:8e:93:24:a4:47:c7:05:bd:74:06:64:e0:ed: 36:a2:cb:0a:e5:bb:99:49:69:d9:f7:7f:60:7b:3d: 74:a0:35:3b:52:9f:71:26:51:f4:86:c1:77:18:48: 2d:c1:d5:8f:37:40:cb:78:f3:7d:40:74:7b:72:53: b0:99:b5:e3:d6:f3:bf:54:e5:36:e4:fb:1d:58:60: ce:cb:74:52:96:a7:2e:db:6a:fa:e1:d2:b8:0e:07: d9:2b:05:ed:d9:47:83:c5:e2:d9:28:c1:20:df:76: 42:e8:39:6f:ee:e5:9e:50:fa:f2:0c:58:f6:be:ea: 73:6a:64:65:90:ea:ca:9a:6b:61:44:6a:b1:da:ec: ef:94:26:1e:5e:97:93:67:c0:a5:d9:6e:49:31:cc: a0:1b:fd:81:56:28:a0:89:5d:20:b6:ff:dc:13:ed: ea:da:20:53:a6:08:cb:46:8c:07:a4:b7:39:87:5f: 7f:a0:fe:da:b2:a8:ab:bf:d9:1d:24:33:11:fc:02: df:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DB:D6:3B:12:84:88:8A:6B:25:C6:E9:F8:0C:37:B2:63:2C:78:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d20445fb-0754-44d0-9d96-946af7fca249/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d20445fb-0754-44d0-9d96-946af7fca249/d20445fb-0754-44d0-9d96-946af7fca249.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 157.234.0.0/16 IPv6: 2620:109:9000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:bc:f7:8f:f9:84:04:d8:3e:63:45:90:8e:1b:3b:81:d1:8e: 9e:49:7e:19:d9:ea:99:81:47:87:48:1e:1d:fe:55:dc:e1:13: 28:4e:7f:37:52:d4:52:3b:29:4c:db:3a:7e:46:b6:bc:e9:a3: 7f:8b:b7:b1:e2:61:8c:e3:cd:0e:bf:48:fd:d0:77:75:6b:5e: d2:ca:9d:f6:42:75:ec:f6:81:76:be:81:82:5d:16:d6:98:e6: 82:38:47:3c:f5:10:ac:29:92:b1:88:57:dc:68:39:34:24:1c: 9c:b1:9c:a7:e2:8d:a1:e1:ce:d0:3b:56:28:6b:10:d1:19:77: 8e:58:79:b6:09:25:8d:cb:f0:4f:96:c3:e0:e9:5d:e5:4a:74: 78:b4:6c:a8:95:f1:79:d5:c7:ca:9c:c8:38:dc:b0:84:08:7a: 17:27:4b:ba:7f:6e:d6:6e:ab:27:83:c8:27:20:c2:fa:1b:81: c6:85:6b:63:8d:b2:45:66:20:79:9f:2d:9f:31:16:e6:36:0c: 45:e1:37:b0:69:b3:90:db:3f:d5:75:5b:38:9c:8a:c5:2b:49: 84:be:ce:33:e1:27:4f:20:48:4a:1d:fe:15:5c:4b:4b:33:b0: 2e:fc:57:bf:12:7e:9f:8a:57:ef:e6:0f:27:76:a2:bf:ba:76: 45:f3:5e:c7 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE+1QdOgES1E3cXMfiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTEwMjE1NDkyNFoXDTI5MDIwNDE1NDkyNFowLzEtMCsGA1UEAxMk ZDIwNDQ1ZmItMDc1NC00NGQwLTlkOTYtOTQ2YWY3ZmNhMjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjb2ayVqzdy5GffflqPiiMXMNJfFtod9GE1y NVzUWRXNvfE+8ltiH0U1CnQA3F3Dgak45rpRaJr8zkbmjo6TJKRHxwW9dAZk4O02 ossK5buZSWnZ939gez10oDU7Up9xJlH0hsF3GEgtwdWPN0DLePN9QHR7clOwmbXj 1vO/VOU25PsdWGDOy3RSlqcu22r64dK4DgfZKwXt2UeDxeLZKMEg33ZC6Dlv7uWe UPryDFj2vupzamRlkOrKmmthRGqx2uzvlCYeXpeTZ8Cl2W5JMcygG/2BViigiV0g tv/cE+3q2iBTpgjLRowHpLc5h19/oP7asqirv9kdJDMR/ALfjwIDAQABo4IEDjCC BAowHQYDVR0OBBYEFLXb1jsShIiKayXG6fgMN7JjLHjRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9k MjA0NDVmYi0wNzU0LTQ0ZDAtOWQ5Ni05NDZhZjdmY2EyNDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2QyMDQ0NWZiLTA3NTQtNDRkMC05 ZDk2LTk0NmFmN2ZjYTI0OS9kMjA0NDVmYi0wNzU0LTQ0ZDAtOWQ5Ni05NDZhZjdm Y2EyNDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAsEAgABMAUDAwCd6jAOBAIAAjAIAwYAJiABCZAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA l7z3j/mEBNg+Y0WQjhs7gdGOnkl+GdnqmYFHh0geHf5V3OETKE5/N1LUUjspTNs6 fka2vOmjf4u3seJhjOPNDr9I/dB3dWte0sqd9kJ17PaBdr6Bgl0W1pjmgjhHPPUQ rCmSsYhX3Gg5NCQcnLGcp+KNoeHO0DtWKGsQ0Rl3jlh5tgkljcvwT5bD4Old5Up0 eLRsqJXxedXHypzIONywhAh6FydLun9u1m6rJ4PIJyDC+huBxoVrY42yRWYgeZ8t nzEW5jYMReE3sGmzkNs/1XVbOJyKxStJhL7OM+EnTyBISh3+FVxLSzOwLvxXvxJ+ n4pX7+YPJ3aiv7p2RfNexw== -----END CERTIFICATE-----Generated at Sun Nov 15 11:43:40 2026 by rpki-client