$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer File: cb00fdf5-e28b-4e9d-9620-9504972438e2.cer (raw, json) Hash identifier: 4zMi3B6Sx+Ltkj5XTqp7z11Hl0r/f076Z7QTFAm45Zk= Subject key identifier: 49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F8F362C5E9FF8C7EBE2E04B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Oct 2026 00:45:12 +0000 Certificate not after: Mon 22 Jan 2029 01:45:12 +0000 Subordinate resources: IP: 23.141.132.0/24 IP: 2602:f5e6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:36:2c:5e:9f:f8:c7:eb:e2:e0:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 20 00:45:12 2026 GMT Not After : Jan 22 01:45:12 2029 GMT Subject: CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:61:be:40:14:aa:5a:e4:37:dd:aa:e1:9e:1f: ea:fe:0d:df:d6:33:89:cd:79:d5:aa:62:4c:90:77: c0:a2:24:7d:5e:55:57:5a:ac:92:95:9b:50:93:ee: bf:66:82:75:91:7e:a7:8a:59:35:f8:ff:90:b8:cf: 06:e2:58:51:90:85:8d:55:82:b0:2f:3d:84:21:79: 06:3c:b6:eb:97:94:b5:df:47:9b:cc:5d:85:d7:d7: 0c:1b:6a:6a:d2:e4:ec:c2:17:3a:9a:9e:a9:ff:0c: c5:45:0a:6e:09:89:c9:35:c0:ab:99:96:d4:02:eb: 8f:bb:70:64:c3:92:d6:95:e3:9f:36:2e:81:8c:80: d7:10:dd:9a:02:07:df:33:43:60:93:ae:76:85:ff: 68:05:61:f7:7e:ec:cc:b8:92:5d:09:73:73:bb:95: b5:b9:cd:6e:56:45:14:cf:d7:a0:d3:e1:9e:9a:0d: b6:f0:c7:6a:79:50:b2:41:bf:80:fa:2f:12:0e:5c: 20:91:d3:ba:26:6f:ea:6a:81:cf:48:93:95:af:df: a3:7f:14:01:1a:d5:13:ee:be:d5:67:4a:2d:22:e5: 3b:2f:e5:c9:ab:58:29:d8:4e:e5:6e:24:05:50:d0: 47:4c:dc:4d:f9:47:3b:19:d7:16:35:8f:6f:b1:e1: 0b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.141.132.0/24 IPv6: 2602:f5e6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a6:e2:15:03:c0:d1:5f:96:0d:ed:65:b7:38:53:3a:3f:24: 72:d9:e0:ef:32:cf:d8:64:2e:80:33:72:0a:36:d0:d7:d3:4a: 5a:52:54:13:8a:f8:64:dd:3c:ac:60:1d:38:04:e0:a1:11:52: 49:70:78:b8:5c:15:1f:04:b0:16:dc:2f:b4:20:7c:92:28:ec: 97:c9:33:82:44:d6:71:fa:cc:d5:e7:5f:17:a5:57:4b:e7:d2: db:95:a2:d4:87:e0:63:53:f7:2a:ae:42:56:be:fa:fb:4a:27: 54:f0:2e:85:58:d2:5f:5c:e2:01:e5:d6:c0:a3:42:34:a9:18: b1:35:f2:1a:56:dc:df:f7:84:8d:d8:1d:43:af:ac:d4:c1:1e: 53:26:3b:b2:85:d3:3c:25:ef:d3:c2:ed:3c:72:4c:74:fc:2e: db:0e:05:6a:54:63:93:ec:73:79:87:25:8d:5d:cd:3b:93:67: 7e:07:cb:81:57:aa:fd:b3:f8:4b:94:50:bc:f5:77:49:00:b2: 33:97:30:87:60:5a:96:9d:f3:08:04:a8:46:5f:94:1d:62:1a: 9c:1e:81:f7:63:c0:bc:42:88:15:0d:50:61:1a:6b:04:60:e1: 1a:e9:94:6c:a0:33:ff:3f:8a:94:6c:3b:0e:08:3a:9b:8c:b7: aa:b7:b4:9b -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+PNixen/jH6+LgS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTAyMDAwNDUxMloXDTI5MDEyMjAxNDUxMlowLzEtMCsGA1UEAxMk Y2IwMGZkZjUtZTI4Yi00ZTlkLTk2MjAtOTUwNDk3MjQzOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWG+QBSqWuQ33arhnh/q/g3f1jOJzXnVqmJM kHfAoiR9XlVXWqySlZtQk+6/ZoJ1kX6nilk1+P+QuM8G4lhRkIWNVYKwLz2EIXkG PLbrl5S130ebzF2F19cMG2pq0uTswhc6mp6p/wzFRQpuCYnJNcCrmZbUAuuPu3Bk w5LWleOfNi6BjIDXEN2aAgffM0Ngk652hf9oBWH3fuzMuJJdCXNzu5W1uc1uVkUU z9eg0+Gemg228MdqeVCyQb+A+i8SDlwgkdO6Jm/qaoHPSJOVr9+jfxQBGtUT7r7V Z0otIuU7L+XJq1gp2E7lbiQFUNBHTNxN+Uc7GdcWNY9vseELbQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFEkIOMSts2TQow3U97ZAL8koULiMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j YjAwZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0OTcyNDM4ZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NiMDBmZGY1LWUyOGItNGU5ZC05 NjIwLTk1MDQ5NzI0MzhlMi9jYjAwZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0OTcy NDM4ZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjYQwDgQCAAIwCAMGACYC9eYAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AH+m4hUDwNFflg3tZbc4Uzo/JHLZ4O8yz9hkLoAzcgo20NfTSlpSVBOK+GTdPKxg HTgE4KERUklweLhcFR8EsBbcL7QgfJIo7JfJM4JE1nH6zNXnXxelV0vn0tuVotSH 4GNT9yquQla++vtKJ1TwLoVY0l9c4gHl1sCjQjSpGLE18hpW3N/3hI3YHUOvrNTB HlMmO7KF0zwl79PC7TxyTHT8LtsOBWpUY5Psc3mHJY1dzTuTZ34Hy4FXqv2z+EuU ULz1d0kAsjOXMIdgWpad8wgEqEZflB1iGpwegfdjwLxCiBUNUGEaawRg4RrplGyg M/8/ipRsOw4IOpuMt6q3tJs= -----END CERTIFICATE-----Generated at Wed Oct 28 15:11:05 2026 by rpki-client