$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d21dc138-aae7-4707-8022-e06045a8d5a4.cer File: d21dc138-aae7-4707-8022-e06045a8d5a4.cer (raw, json) Hash identifier: rcUIlZgPb4QWLPyIROoac/gTYKwSg/ggBVQBE6T4Ijs= Subject key identifier: 49:C6:84:30:55:85:69:E7:98:3E:66:74:11:58:19:FC:6D:73:B4:BB Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FD13FA6E6BBEFAA568F4CF800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d21dc138-aae7-4707-8022-e06045a8d5a4/d21dc138-aae7-4707-8022-e06045a8d5a4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d21dc138-aae7-4707-8022-e06045a8d5a4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Nov 2026 16:27:39 +0000 Certificate not after: Wed 14 Feb 2029 16:27:39 +0000 Subordinate resources: AS: 401001 IP: 130.12.212.0/22 IP: 2604:2920::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d1:3f:a6:e6:bb:ef:aa:56:8f:4c:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 12 16:27:39 2026 GMT Not After : Feb 14 16:27:39 2029 GMT Subject: CN=d21dc138-aae7-4707-8022-e06045a8d5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:81:8d:ce:46:77:45:bd:fd:25:15:14:bb:03: 15:32:b8:ea:d2:cd:3b:be:c6:7d:9d:76:55:36:34: 38:73:ee:ec:09:2b:03:51:d3:09:c3:76:cf:10:ee: 75:61:4c:a1:4a:03:a6:ee:42:5d:eb:2f:06:8d:d2: b3:7d:aa:3c:1d:30:6f:bb:cc:98:de:c9:94:de:53: b1:e7:f5:df:31:c3:dc:45:6d:56:c6:70:4c:09:c3: 98:00:a2:53:68:f7:1f:c5:3e:04:c1:7c:10:27:e4: bd:8a:1e:3a:5c:04:29:31:d3:3d:49:45:35:9e:4d: 83:77:61:f9:25:ac:1c:35:8d:0f:00:4e:39:3a:7c: 99:c4:2c:94:b8:f9:ec:73:b9:88:2c:52:47:cf:f9: cd:cb:fa:c1:8a:9e:19:8f:ce:fc:9d:96:3d:fa:35: 79:6a:7b:85:38:9f:d4:3b:cd:c4:7c:95:28:fd:3a: 26:be:d1:64:77:b8:e0:a2:97:02:1d:0d:8c:34:ad: 8e:80:08:fb:35:f8:3e:7f:4c:b3:f5:32:2c:d4:f7: b6:62:13:22:e8:bc:6a:e4:07:ac:06:d2:5d:d2:13: 44:15:4c:1a:d6:c5:c7:8e:fe:f4:46:d6:d6:43:7b: 01:97:bb:c2:e7:e9:b8:77:c5:89:43:ea:16:d9:75: 45:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C6:84:30:55:85:69:E7:98:3E:66:74:11:58:19:FC:6D:73:B4:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d21dc138-aae7-4707-8022-e06045a8d5a4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d21dc138-aae7-4707-8022-e06045a8d5a4/d21dc138-aae7-4707-8022-e06045a8d5a4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 130.12.212.0/22 IPv6: 2604:2920::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401001 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d8:97:ca:03:7e:2f:29:9c:a0:fe:91:ad:fb:a0:fd:09:6c: b9:2f:a8:4e:07:bb:1c:5c:d7:01:de:c7:39:c5:63:dd:35:5c: 5e:db:48:86:40:b8:00:88:34:60:84:0e:ea:7c:91:49:44:e6: 98:77:66:af:eb:77:2f:c1:f5:c6:1d:41:9a:83:e3:f7:66:1c: ba:ce:99:b0:75:b6:cb:06:5d:0d:bc:94:b2:e0:c7:6f:ac:9a: 00:d0:4e:08:86:f1:31:d6:42:9e:25:28:9d:81:23:9d:83:b7: 29:4d:6a:87:64:2e:63:b5:79:9c:0e:8b:b8:ce:e3:57:92:40: 8d:bf:7d:49:11:b9:38:78:a6:9e:2b:1a:e0:4b:31:31:fc:a0: 20:9a:b1:ec:f0:9c:32:ef:87:22:47:94:16:92:80:55:1a:8a: dd:83:88:cc:47:a0:62:7f:65:20:46:89:5e:74:50:e2:3d:dc: 63:c2:70:29:d7:7d:90:04:90:8f:65:a7:b6:37:cc:2c:e2:6a: 42:64:91:3f:ea:88:11:31:32:aa:f1:b1:47:46:af:2d:1a:be: 9e:52:8e:59:91:7e:94:53:ef:63:ab:68:f2:ff:f5:4a:f1:ee: 45:b8:23:5e:b7:c9:ff:72:79:fb:8c:45:01:d7:66:1f:76:fa: d5:d7:4a:39 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE/RP6bmu++qVo9M+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTExMjE2MjczOVoXDTI5MDIxNDE2MjczOVowLzEtMCsGA1UEAxMk ZDIxZGMxMzgtYWFlNy00NzA3LTgwMjItZTA2MDQ1YThkNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIGNzkZ3Rb39JRUUuwMVMrjq0s07vsZ9nXZV NjQ4c+7sCSsDUdMJw3bPEO51YUyhSgOm7kJd6y8GjdKzfao8HTBvu8yY3smU3lOx 5/XfMcPcRW1WxnBMCcOYAKJTaPcfxT4EwXwQJ+S9ih46XAQpMdM9SUU1nk2Dd2H5 JawcNY0PAE45OnyZxCyUuPnsc7mILFJHz/nNy/rBip4Zj878nZY9+jV5anuFOJ/U O83EfJUo/TomvtFkd7jgopcCHQ2MNK2OgAj7Nfg+f0yz9TIs1Pe2YhMi6Lxq5Aes BtJd0hNEFUwa1sXHjv70RtbWQ3sBl7vC5+m4d8WJQ+oW2XVFAwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFEnGhDBVhWnnmD5mdBFYGfxtc7S7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9k MjFkYzEzOC1hYWU3LTQ3MDctODAyMi1lMDYwNDVhOGQ1YTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2QyMWRjMTM4LWFhZTctNDcwNy04 MDIyLWUwNjA0NWE4ZDVhNC9kMjFkYzEzOC1hYWU3LTQ3MDctODAyMi1lMDYwNDVh OGQ1YTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKCDNQwDQQCAAIwBwMFACYEKSAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh5pMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABTYl8oDfi8pnKD+ka37oP0JbLkv qE4Huxxc1wHexznFY901XF7bSIZAuACINGCEDup8kUlE5ph3Zq/rdy/B9cYdQZqD 4/dmHLrOmbB1tssGXQ28lLLgx2+smgDQTgiG8THWQp4lKJ2BI52DtylNaodkLmO1 eZwOi7jO41eSQI2/fUkRuTh4pp4rGuBLMTH8oCCasezwnDLvhyJHlBaSgFUait2D iMxHoGJ/ZSBGiV50UOI93GPCcCnXfZAEkI9lp7Y3zCziakJkkT/qiBExMqrxsUdG ry0avp5SjlmRfpRT72OraPL/9Urx7kW4I163yf9yefuMRQHXZh92+tXXSjk= -----END CERTIFICATE-----Generated at Sun Nov 15 11:42:13 2026 by rpki-client