$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/be801a76-17f5-4096-843c-c6728fe01188.cer File: be801a76-17f5-4096-843c-c6728fe01188.cer (raw, json) Hash identifier: 8cQeLkyfvhCugdYUCWGyr7qkhmhfq9CkOmF+0Lg+iyE= Subject key identifier: E1:D4:EF:5C:27:04:BE:B9:BE:A6:F9:B5:66:F6:A1:95:28:BE:C1:C0 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F9D2B98A49B9C4D86B19EC900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/be801a76-17f5-4096-843c-c6728fe01188/be801a76-17f5-4096-843c-c6728fe01188.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/be801a76-17f5-4096-843c-c6728fe01188/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 25 Oct 2026 00:45:12 +0000 Certificate not after: Sat 27 Jan 2029 01:45:12 +0000 Subordinate resources: IP: 23.142.60.0/24 IP: 2602:f5cd::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9d:2b:98:a4:9b:9c:4d:86:b1:9e:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 25 00:45:12 2026 GMT Not After : Jan 27 01:45:12 2029 GMT Subject: CN=be801a76-17f5-4096-843c-c6728fe01188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:41:49:3f:ab:35:eb:ac:9b:ce:46:95:cb:f5: 4b:83:28:81:b7:80:41:b6:30:c4:c9:8b:9f:a2:dd: 16:55:c9:b3:48:6d:81:35:fa:8c:4e:d5:cd:b2:24: ef:a7:4c:a7:d0:14:ca:0f:35:38:a3:f6:ca:33:7f: 13:96:e4:6a:9e:25:ad:94:51:3e:9b:7d:aa:f3:ae: c7:91:66:67:44:55:d8:f0:fe:82:1b:6c:75:eb:53: 4e:1d:12:c7:95:32:23:e6:65:c4:40:bd:5e:6d:ba: 58:97:7e:5e:59:cc:e9:18:af:19:36:23:cf:0d:a2: 09:ac:cd:c9:86:44:84:7b:8c:b6:94:85:f5:8f:66: 29:c9:0b:ec:e1:29:f3:b5:44:71:74:87:89:a3:9a: 52:37:ec:4c:e9:be:67:1e:fb:40:b4:fa:ce:b0:2c: c4:59:8f:f5:43:d3:5e:c5:fb:66:52:e1:09:bd:97: 8c:b9:00:03:4e:2f:2a:e5:b7:cb:dd:89:51:10:30: e2:b5:6d:f3:8f:cc:82:1b:5b:cb:49:54:1e:1a:c4: 88:76:86:ef:f6:71:63:4e:47:3f:d3:a8:8c:fa:57: f0:2e:e3:ee:8e:98:b1:9f:d9:db:54:df:9d:ea:ab: 7f:0d:8b:cf:38:cf:f1:ce:da:d4:69:f6:09:89:15: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D4:EF:5C:27:04:BE:B9:BE:A6:F9:B5:66:F6:A1:95:28:BE:C1:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/be801a76-17f5-4096-843c-c6728fe01188/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/be801a76-17f5-4096-843c-c6728fe01188/be801a76-17f5-4096-843c-c6728fe01188.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.142.60.0/24 IPv6: 2602:f5cd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:af:74:d1:7d:80:2c:b7:b3:69:8f:03:e5:14:8b:1b:84:b9: 47:73:9d:6f:1c:d7:f0:25:59:72:41:09:b5:d0:37:0d:a3:0d: 99:e6:b9:c0:7a:be:86:b5:20:10:ab:a0:0c:e1:d4:77:d2:33: 69:02:35:08:d7:42:ff:0f:ca:5a:47:53:da:f5:95:e4:47:f6: 4a:61:3a:e8:ab:f2:c4:51:d9:50:a1:60:0b:d9:16:24:60:62: f4:7f:8d:e4:87:ca:aa:de:11:4d:a0:75:b7:2d:c0:93:36:60: f7:30:51:9e:1c:d1:ed:4a:b6:21:b9:7e:46:81:fd:4b:e5:17: 44:17:d7:63:a7:7d:1e:f5:29:8f:d1:06:bf:98:1a:be:49:2f: 3a:9b:c7:7b:d6:e7:87:f7:de:75:38:c4:dc:9b:95:0a:d2:ea: 73:67:4f:18:5e:3c:7b:99:bd:5d:48:49:78:d0:d4:fa:09:bc: 37:6e:2b:2b:32:32:bf:9e:ea:d4:65:86:a2:11:88:90:96:fa: db:80:f9:f0:34:b3:41:de:62:38:9e:41:48:fa:07:a3:06:1d: 72:da:47:70:28:1a:4f:84:32:a5:c1:b2:63:e5:84:86:ab:85: 76:1d:01:14:d1:7c:1d:bf:40:db:ee:61:5d:d6:d5:86:de:90: f0:74:85:c3 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+dK5ikm5xNhrGeyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTAyNTAwNDUxMloXDTI5MDEyNzAxNDUxMlowLzEtMCsGA1UEAxMk YmU4MDFhNzYtMTdmNS00MDk2LTg0M2MtYzY3MjhmZTAxMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0FJP6s166ybzkaVy/VLgyiBt4BBtjDEyYuf ot0WVcmzSG2BNfqMTtXNsiTvp0yn0BTKDzU4o/bKM38TluRqniWtlFE+m32q867H kWZnRFXY8P6CG2x161NOHRLHlTIj5mXEQL1ebbpYl35eWczpGK8ZNiPPDaIJrM3J hkSEe4y2lIX1j2YpyQvs4SnztURxdIeJo5pSN+xM6b5nHvtAtPrOsCzEWY/1Q9Ne xftmUuEJvZeMuQADTi8q5bfL3YlREDDitW3zj8yCG1vLSVQeGsSIdobv9nFjTkc/ 06iM+lfwLuPujpixn9nbVN+d6qt/DYvPOM/xztrUafYJiRXMdQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFOHU71wnBL65vqb5tWb2oZUovsHAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i ZTgwMWE3Ni0xN2Y1LTQwOTYtODQzYy1jNjcyOGZlMDExODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2JlODAxYTc2LTE3ZjUtNDA5Ni04 NDNjLWM2NzI4ZmUwMTE4OC9iZTgwMWE3Ni0xN2Y1LTQwOTYtODQzYy1jNjcyOGZl MDExODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjjwwDgQCAAIwCAMGACYC9c0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AD6vdNF9gCy3s2mPA+UUixuEuUdznW8c1/AlWXJBCbXQNw2jDZnmucB6voa1IBCr oAzh1HfSM2kCNQjXQv8PylpHU9r1leRH9kphOuir8sRR2VChYAvZFiRgYvR/jeSH yqreEU2gdbctwJM2YPcwUZ4c0e1KtiG5fkaB/UvlF0QX12OnfR71KY/RBr+YGr5J Lzqbx3vW54f33nU4xNyblQrS6nNnTxhePHuZvV1ISXjQ1PoJvDduKysyMr+e6tRl hqIRiJCW+tuA+fA0s0HeYjieQUj6B6MGHXLaR3AoGk+EMqXBsmPlhIarhXYdARTR fB2/QNvuYV3W1YbekPB0hcM= -----END CERTIFICATE-----Generated at Wed Oct 28 11:51:43 2026 by rpki-client