$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/e1e81592-4d27-4f60-a136-ca00ed2bdce9.cer File: e1e81592-4d27-4f60-a136-ca00ed2bdce9.cer (raw, json) Hash identifier: POaFkX+IYLiVQ39BOFVJJS3kdqYD18IlIb33Li/+FUU= Subject key identifier: 64:C7:62:23:57:4F:20:62:95:23:FF:D2:A0:98:85:35:F8:F8:B3:3D Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FCA3A822B58F4F58C2B1B7180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/e1e81592-4d27-4f60-a136-ca00ed2bdce9/e1e81592-4d27-4f60-a136-ca00ed2bdce9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/e1e81592-4d27-4f60-a136-ca00ed2bdce9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Nov 2026 04:06:37 +0000 Certificate not after: Mon 12 Feb 2029 04:06:37 +0000 Subordinate resources: AS: 53536 IP: 143.223.168.0/22 IP: 199.7.128.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ca:3a:82:2b:58:f4:f5:8c:2b:1b:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 10 04:06:37 2026 GMT Not After : Feb 12 04:06:37 2029 GMT Subject: CN=e1e81592-4d27-4f60-a136-ca00ed2bdce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:45:3c:a2:c2:1c:8d:91:35:00:c7:13:c5:7c: 36:e8:f3:e6:55:6f:94:0b:f8:f1:e0:8d:44:89:41: fe:fd:a6:cc:0f:02:9f:72:6e:a4:ae:50:6d:7f:e2: b2:72:f9:b1:21:24:56:c7:ff:0b:ff:99:7e:35:8f: d1:0d:1c:58:20:df:aa:c7:b5:33:f1:03:d4:91:7d: d8:9b:f4:16:f1:df:f0:4c:fa:a8:38:b0:40:bc:e5: 86:13:9b:0e:5a:03:9e:d8:44:85:5f:0b:fa:2f:7a: d4:58:ba:3f:4c:cd:9a:0f:73:56:c9:4f:41:65:1b: ca:19:ea:2b:c5:1e:57:77:56:27:e5:55:35:79:0d: 37:f7:32:85:06:13:2e:73:b8:3c:25:d4:45:4c:8a: ad:c3:e9:47:f3:13:4f:8a:6d:3b:48:58:0a:8c:5b: 5e:32:7c:f8:77:d0:45:27:ba:d6:13:49:b1:c1:12: 6c:39:4b:07:af:74:10:13:82:e1:d3:cb:fa:b1:01: 38:e7:65:55:ae:60:f9:d4:c1:7b:a6:5f:1f:79:03: 94:13:c7:55:19:13:ae:01:f3:34:cb:0e:b4:55:0e: 8a:41:16:b3:c4:a4:e4:64:16:39:ee:be:44:ce:9b: 40:bb:bf:f9:1b:03:4b:1c:8d:e4:1e:e0:90:96:07: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C7:62:23:57:4F:20:62:95:23:FF:D2:A0:98:85:35:F8:F8:B3:3D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/e1e81592-4d27-4f60-a136-ca00ed2bdce9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/e1e81592-4d27-4f60-a136-ca00ed2bdce9/e1e81592-4d27-4f60-a136-ca00ed2bdce9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 143.223.168.0/22 199.7.128.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53536 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:89:f6:42:f9:2d:36:8b:fa:b7:84:bc:3c:55:9f:69:b1:64: a8:e0:36:0a:26:b6:89:93:6f:22:e4:f3:cf:36:59:76:58:9b: 93:92:8c:c3:31:f2:7f:be:95:59:d6:48:ad:bd:a8:81:60:d3: ea:aa:ba:d3:a0:27:95:49:b4:0b:5e:bb:45:e9:99:34:0e:53: d2:70:18:83:ee:a1:08:66:d3:44:cf:92:1f:8f:ec:67:8b:36: 9e:13:93:1d:a9:a9:e6:a7:84:68:84:98:03:3e:ed:66:e2:32: 91:f8:52:a4:8d:e6:9d:20:6c:fe:88:ac:a8:2a:ae:90:62:ba: 5b:eb:02:9e:c1:80:4f:04:49:69:69:f4:a0:eb:72:42:ed:62: 2a:4b:cb:5d:86:73:79:62:fc:1f:c4:7b:b2:a1:49:46:15:42: 4e:99:99:b2:af:34:ba:26:55:f1:e6:85:42:df:b8:3b:ea:94: 25:8a:d8:a5:1f:f9:a8:7a:17:dd:cc:76:5c:bf:0a:e6:3d:63: e6:58:b8:a0:54:0e:94:47:0e:f4:d7:5f:8b:90:5f:59:5c:bd: 6a:cc:9c:43:26:56:bd:d2:94:d5:5f:8d:d4:c8:86:7f:63:1d: f4:24:65:f6:71:f4:cd:7c:5e:39:b4:28:13:4d:13:8a:ed:ab: 70:d0:71:00 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE/KOoIrWPT1jCsbcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTExMDA0MDYzN1oXDTI5MDIxMjA0MDYzN1owLzEtMCsGA1UEAxMk ZTFlODE1OTItNGQyNy00ZjYwLWExMzYtY2EwMGVkMmJkY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kU8osIcjZE1AMcTxXw26PPmVW+UC/jx4I1E iUH+/abMDwKfcm6krlBtf+KycvmxISRWx/8L/5l+NY/RDRxYIN+qx7Uz8QPUkX3Y m/QW8d/wTPqoOLBAvOWGE5sOWgOe2ESFXwv6L3rUWLo/TM2aD3NWyU9BZRvKGeor xR5Xd1Yn5VU1eQ039zKFBhMuc7g8JdRFTIqtw+lH8xNPim07SFgKjFteMnz4d9BF J7rWE0mxwRJsOUsHr3QQE4Lh08v6sQE452VVrmD51MF7pl8feQOUE8dVGROuAfM0 yw60VQ6KQRazxKTkZBY57r5EzptAu7/5GwNLHI3kHuCQlgdyKQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFGTHYiNXTyBilSP/0qCYhTX4+LM9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9l MWU4MTU5Mi00ZDI3LTRmNjAtYTEzNi1jYTAwZWQyYmRjZTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2UxZTgxNTkyLTRkMjctNGY2MC1h MTM2LWNhMDBlZDJiZGNlOS9lMWU4MTU5Mi00ZDI3LTRmNjAtYTEzNi1jYTAwZWQy YmRjZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAKP36gDBAPHB4AwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANEgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAaJ9kL5LTaL+reEvDxVn2mxZKjgNgomtomTbyLk 8882WXZYm5OSjMMx8n++lVnWSK29qIFg0+qqutOgJ5VJtAteu0XpmTQOU9JwGIPu oQhm00TPkh+P7GeLNp4Tkx2pqeanhGiEmAM+7WbiMpH4UqSN5p0gbP6IrKgqrpBi ulvrAp7BgE8ESWlp9KDrckLtYipLy12Gc3li/B/Ee7KhSUYVQk6ZmbKvNLomVfHm hULfuDvqlCWK2KUf+ah6F93Mdly/CuY9Y+ZYuKBUDpRHDvTXX4uQX1lcvWrMnEMm Vr3SlNVfjdTIhn9jHfQkZfZx9M18Xjm0KBNNE4rtq3DQcQA= -----END CERTIFICATE-----Generated at Sun Nov 15 11:42:22 2026 by rpki-client