$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ea32f5af-6f67-400c-9e6f-2b8754546979.cer File: ea32f5af-6f67-400c-9e6f-2b8754546979.cer (raw, json) Hash identifier: zzANTZ2xEICyyNnzG1IyuhXZWevpcN7cGhdY52AD1mY= Subject key identifier: 53:D5:77:83:52:C8:37:C4:E4:27:45:24:43:5B:BD:28:03:46:CC:6D Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FD01B05EB9F932867B6AAB940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ea32f5af-6f67-400c-9e6f-2b8754546979/ea32f5af-6f67-400c-9e6f-2b8754546979.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ea32f5af-6f67-400c-9e6f-2b8754546979/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Nov 2026 06:38:02 +0000 Certificate not after: Wed 14 Feb 2029 06:38:02 +0000 Subordinate resources: IP: 23.166.156.0/24 IP: 2602:f295::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d0:1b:05:eb:9f:93:28:67:b6:aa:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 12 06:38:02 2026 GMT Not After : Feb 14 06:38:02 2029 GMT Subject: CN=ea32f5af-6f67-400c-9e6f-2b8754546979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6f:c8:b9:cb:0a:bd:0f:cd:c1:aa:d0:09:76: 09:66:44:8e:79:16:25:8d:fe:ef:cd:2a:40:a8:56: a6:d2:d5:68:43:5d:38:42:97:f2:56:fc:7e:ed:9e: 23:81:cc:84:48:8c:1b:f4:6a:24:7c:e5:7f:48:b1: 51:0a:10:51:3f:99:e6:ba:fd:62:7b:32:ce:60:52: 05:c3:36:db:ba:52:c6:73:76:67:6e:9d:17:e2:60: 3d:2f:27:b1:2d:1e:4c:cb:21:0b:fc:4c:5d:73:f4: 16:c6:41:e0:d3:69:b5:34:9e:f0:32:56:5d:2a:7b: 81:be:f0:bb:40:25:43:e8:20:0e:64:e6:3b:9a:4f: 2a:51:71:5d:b0:03:f3:7c:ef:07:c5:d6:b0:2a:79: fd:09:81:a2:eb:6f:20:13:ae:0f:b2:03:28:9b:f1: 47:b0:a9:e6:36:69:e6:fb:6f:ed:42:db:bf:38:74: 66:c0:05:42:48:b4:e8:ac:f8:de:82:cb:b6:3e:b1: fe:1e:e4:5a:2d:b8:f9:28:76:b0:0a:69:3c:35:60: 3b:cb:21:0e:74:a2:e2:55:f2:c7:3e:fa:e5:62:82: 08:bb:d3:66:ea:8f:8f:18:3f:0b:81:ff:7b:1e:1a: c6:82:fe:e0:c9:e1:b9:b0:47:82:62:78:43:bd:fa: a2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D5:77:83:52:C8:37:C4:E4:27:45:24:43:5B:BD:28:03:46:CC:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ea32f5af-6f67-400c-9e6f-2b8754546979/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ea32f5af-6f67-400c-9e6f-2b8754546979/ea32f5af-6f67-400c-9e6f-2b8754546979.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 23.166.156.0/24 IPv6: 2602:f295::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:5d:49:bb:f8:07:a9:d4:d6:05:12:1b:f3:88:1e:6e:98:b4: 42:b1:9f:08:63:e2:8e:2e:d3:8a:40:0b:a5:11:f9:68:05:42: da:60:cf:94:97:9b:5d:d0:d0:c7:4d:a4:ed:45:dd:38:8c:d0: a9:85:e6:b8:1f:2b:01:02:af:f6:c6:5c:2d:e0:03:40:0a:a8: 87:83:58:a4:12:2c:49:3d:2f:8c:97:36:f1:81:3d:07:b1:e2: 6b:26:3f:b3:1a:e5:0c:37:64:b8:c8:e1:49:27:e1:55:e5:a7: b8:3d:a9:7e:30:41:ea:7d:40:d1:f7:d5:75:e6:bd:bb:b0:ea: 9a:6a:de:61:32:d9:a2:6c:eb:4d:cf:d3:d7:4c:a8:c6:3f:99: 57:aa:2a:00:d7:63:4e:c8:6e:96:98:bc:cb:f5:70:c7:c0:83: 1b:44:33:51:a4:f4:02:4c:a1:ec:85:c8:56:95:82:87:7a:ee: 71:58:f3:f5:46:e7:65:69:b7:72:a5:95:5e:7f:fa:fb:97:d9: 24:13:b6:41:57:ce:38:5d:10:e7:0b:0f:55:51:c3:91:89:23: ac:93:ef:76:b0:71:85:31:6c:fe:45:4c:4c:79:20:ba:56:95: 39:5c:9b:d2:20:b1:ca:b7:98:16:e6:2d:3d:45:96:3b:e7:1e: cb:bc:9c:45 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE/QGwXrn5MoZ7aquUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTExMjA2MzgwMloXDTI5MDIxNDA2MzgwMlowLzEtMCsGA1UEAxMk ZWEzMmY1YWYtNmY2Ny00MDBjLTllNmYtMmI4NzU0NTQ2OTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2/IucsKvQ/NwarQCXYJZkSOeRYljf7vzSpA qFam0tVoQ104QpfyVvx+7Z4jgcyESIwb9GokfOV/SLFRChBRP5nmuv1iezLOYFIF wzbbulLGc3Znbp0X4mA9LyexLR5MyyEL/Exdc/QWxkHg02m1NJ7wMlZdKnuBvvC7 QCVD6CAOZOY7mk8qUXFdsAPzfO8HxdawKnn9CYGi628gE64PsgMom/FHsKnmNmnm +2/tQtu/OHRmwAVCSLTorPjegsu2PrH+HuRaLbj5KHawCmk8NWA7yyEOdKLiVfLH PvrlYoIIu9Nm6o+PGD8Lgf97HhrGgv7gyeG5sEeCYnhDvfqidQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFFPVd4NSyDfE5CdFJENbvSgDRsxtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9l YTMyZjVhZi02ZjY3LTQwMGMtOWU2Zi0yYjg3NTQ1NDY5NzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2VhMzJmNWFmLTZmNjctNDAwYy05 ZTZmLTJiODc1NDU0Njk3OS9lYTMyZjVhZi02ZjY3LTQwMGMtOWU2Zi0yYjg3NTQ1 NDY5NzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXppwwDgQCAAIwCAMGACYC8pUAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGZdSbv4B6nU1gUSG/OIHm6YtEKxnwhj4o4u04pAC6UR+WgFQtpgz5SXm13Q0MdN pO1F3TiM0KmF5rgfKwECr/bGXC3gA0AKqIeDWKQSLEk9L4yXNvGBPQex4msmP7Ma 5Qw3ZLjI4Ukn4VXlp7g9qX4wQep9QNH31XXmvbuw6ppq3mEy2aJs603P09dMqMY/ mVeqKgDXY07IbpaYvMv1cMfAgxtEM1Gk9AJMoeyFyFaVgod67nFY8/VG52Vpt3Kl lV5/+vuX2SQTtkFXzjhdEOcLD1VRw5GJI6yT73awcYUxbP5FTEx5ILpWlTlcm9Ig scq3mBbmLT1FljvnHsu8nEU= -----END CERTIFICATE-----Generated at Sun Nov 15 11:42:50 2026 by rpki-client