$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/f0499f3a-1dc9-4627-bf12-5b3fb44bbb5a.cer File: f0499f3a-1dc9-4627-bf12-5b3fb44bbb5a.cer (raw, json) Hash identifier: 5Ugp3iKsgKE4sgKtAiRkCH70mxSoNB1TVhlIF0Nhp9U= Subject key identifier: 1F:D0:99:77:B0:57:58:73:FD:22:6D:22:3A:F5:C7:BC:D3:1B:EC:C7 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FD16558FC0CCC10BA667B96C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/f0499f3a-1dc9-4627-bf12-5b3fb44bbb5a/f0499f3a-1dc9-4627-bf12-5b3fb44bbb5a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/f0499f3a-1dc9-4627-bf12-5b3fb44bbb5a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Nov 2026 17:43:36 +0000 Certificate not after: Wed 14 Feb 2029 17:43:36 +0000 Subordinate resources: AS: 54434 AS: 397108 IP: 69.57.176.0/21 IP: 141.224.112.0/20 IP: 192.119.32.0/20 IP: 199.45.224.0/21 IP: 208.72.40.0/21 IP: 2604:9280::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d1:65:58:fc:0c:cc:10:ba:66:7b:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Nov 12 17:43:36 2026 GMT Not After : Feb 14 17:43:36 2029 GMT Subject: CN=f0499f3a-1dc9-4627-bf12-5b3fb44bbb5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:d0:e5:7a:47:1a:1e:73:47:3e:99:9a:88: 3a:74:18:f8:dd:fe:fc:0f:1b:a5:e4:96:9a:ee:91: e9:cf:35:79:2f:dc:ef:b3:b5:c1:47:d3:23:50:10: 82:c0:47:f8:80:2c:7d:2a:c8:90:8c:d6:e5:90:ba: 0f:6c:8c:a0:3e:22:21:ea:9f:e5:63:61:21:58:6e: 89:71:e4:b7:1e:c3:52:0a:8b:46:08:b4:b4:aa:87: 69:ce:6f:8d:f3:cc:38:78:eb:26:00:cf:cc:44:2d: e3:d3:a4:41:e1:33:15:25:9d:1b:20:c8:1a:46:25: 56:a0:e6:b3:40:51:26:ae:9a:0f:2f:7a:6d:7f:88: 1f:fb:34:62:22:cb:dc:fb:f6:b7:d4:68:c5:e3:fa: 7c:55:d5:50:e4:28:33:b0:3d:63:ca:2c:49:fe:00: 09:a9:b0:14:10:ca:fb:51:f7:37:d5:58:78:7f:0c: ad:b9:79:0a:35:d9:81:8e:93:f6:8c:5b:85:e4:bd: e6:f5:30:e1:43:8f:06:f2:28:96:6c:d5:64:c4:33: ed:02:95:8e:5e:b7:70:85:6d:17:bd:88:bd:85:08: a0:28:a0:26:98:b7:a8:a5:7b:5c:68:5e:da:7f:10: 9a:05:31:19:c1:86:88:33:07:aa:94:d3:80:32:5d: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D0:99:77:B0:57:58:73:FD:22:6D:22:3A:F5:C7:BC:D3:1B:EC:C7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/f0499f3a-1dc9-4627-bf12-5b3fb44bbb5a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/f0499f3a-1dc9-4627-bf12-5b3fb44bbb5a/f0499f3a-1dc9-4627-bf12-5b3fb44bbb5a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv4: 69.57.176.0/21 141.224.112.0/20 192.119.32.0/20 199.45.224.0/21 208.72.40.0/21 IPv6: 2604:9280::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54434 397108 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:99:e9:52:5a:62:45:e4:43:fd:86:d2:c7:47:83:93:f0:1e: ab:61:cb:77:53:43:0f:bb:09:66:d0:b3:88:5d:99:a8:16:33: b6:62:fb:1a:27:bf:b4:b2:af:64:e5:ed:09:0e:26:03:66:6e: 1f:ef:e5:31:9e:ec:d4:d1:e9:14:6b:b9:bb:4e:2a:34:08:76: c8:73:c6:2a:39:af:c8:da:7a:db:65:5a:e5:87:f3:07:60:94: bf:4e:0b:25:8a:21:f3:e7:6b:fc:5f:7d:2a:18:d8:cb:57:6d: 20:75:2b:b4:9f:14:20:d3:c2:b0:99:67:41:9e:64:3b:34:23: 17:3a:f9:b6:d7:11:e8:78:39:af:62:87:68:21:48:1a:74:a7: 9d:67:18:f2:6e:00:97:7f:fa:d9:7e:d6:9e:cc:57:da:09:22: 96:53:a7:4f:f1:75:88:da:69:a1:4e:0f:03:4f:17:84:a8:b6: 6e:10:4e:1b:f6:91:6f:2c:fe:7e:1e:e4:2d:aa:b8:f8:f6:7f: b4:00:ff:a0:5a:3e:0d:b2:b6:e5:3a:40:07:8e:07:f6:41:27: 8a:27:6b:21:85:32:ef:8a:9f:4c:17:15:86:7d:aa:21:ec:0e: 7b:ab:e7:3d:d4:fa:20:48:33:f4:b0:af:fa:9b:16:20:72:1b: 3a:fd:37:ef -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWE/RZVj8DMwQumZ7lsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTExMjE3NDMzNloXDTI5MDIxNDE3NDMzNlowLzEtMCsGA1UEAxMk ZjA0OTlmM2EtMWRjOS00NjI3LWJmMTItNWIzZmI0NGJiYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlurQ5XpHGh5zRz6Zmog6dBj43f78Dxul5Jaa 7pHpzzV5L9zvs7XBR9MjUBCCwEf4gCx9KsiQjNblkLoPbIygPiIh6p/lY2EhWG6J ceS3HsNSCotGCLS0qodpzm+N88w4eOsmAM/MRC3j06RB4TMVJZ0bIMgaRiVWoOaz QFEmrpoPL3ptf4gf+zRiIsvc+/a31GjF4/p8VdVQ5CgzsD1jyixJ/gAJqbAUEMr7 Ufc31Vh4fwytuXkKNdmBjpP2jFuF5L3m9TDhQ48G8iiWbNVkxDPtApWOXrdwhW0X vYi9hQigKKAmmLeopXtcaF7afxCaBTEZwYaIMweqlNOAMl0CiwIDAQABo4IERzCC BEMwHQYDVR0OBBYEFB/QmXewV1hz/SJtIjr1x7zTG+zHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9m MDQ5OWYzYS0xZGM5LTQ2MjctYmYxMi01YjNmYjQ0YmJiNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2YwNDk5ZjNhLTFkYzktNDYyNy1i ZjEyLTViM2ZiNDRiYmI1YS9mMDQ5OWYzYS0xZGM5LTQ2MjctYmYxMi01YjNmYjQ0 YmJiNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBANFObADBASN4HADBATAdyADBAPHLeADBAPQSCgw DQQCAAIwBwMFACYEkoAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDANSiAgMGDzQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAh5npUlpiReRD/YbSx0eDk/Aeq2HLd1NDD7sJZtCziF2ZqBYztmL7 Gie/tLKvZOXtCQ4mA2ZuH+/lMZ7s1NHpFGu5u04qNAh2yHPGKjmvyNp622Va5Yfz B2CUv04LJYoh8+dr/F99KhjYy1dtIHUrtJ8UINPCsJlnQZ5kOzQjFzr5ttcR6Hg5 r2KHaCFIGnSnnWcY8m4Al3/62X7WnsxX2gkillOnT/F1iNppoU4PA08XhKi2bhBO G/aRbyz+fh7kLaq4+PZ/tAD/oFo+DbK25TpAB44H9kEniidrIYUy74qfTBcVhn2q IewOe6vnPdT6IEgz9LCv+psWIHIbOv037w== -----END CERTIFICATE-----Generated at Sun Nov 15 11:42:34 2026 by rpki-client