$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer File: 0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer (raw, json) Hash identifier: 9hwy5XKHflXzh4bPCqSHER1iSsSdUxesdfYJEyuvZlE= Subject key identifier: 11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F909B870AF3688265F1DBDAE8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Oct 2026 12:45:13 +0000 Certificate not after: Mon 22 Jan 2029 13:45:13 +0000 Subordinate resources: IP: 23.141.204.0/24 IP: 2602:f5de::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:9b:87:0a:f3:68:82:65:f1:db:da:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 20 12:45:13 2026 GMT Not After : Jan 22 13:45:13 2029 GMT Subject: CN=0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:87:14:77:1a:bf:2f:1b:c3:81:cf:e4:64: 88:03:25:a3:aa:ff:5b:d4:5f:c9:c2:e2:9d:23:dc: 7d:5a:23:f4:7c:fb:da:20:c4:a2:99:fc:13:42:55: 49:9d:b8:ee:44:8e:30:e4:4a:12:e5:09:7b:93:be: 80:3f:2f:bd:b4:3f:22:93:88:c2:dc:53:01:3f:70: 46:6a:86:9e:8e:39:50:b9:9c:de:75:02:fc:da:8b: c7:65:dc:6d:3c:38:69:00:d5:56:76:86:fb:f6:27: 5d:fe:39:7c:7f:2b:99:e1:c7:69:d3:a0:03:c4:ff: 82:1b:3a:00:b8:a9:2d:e7:fd:99:fb:14:a8:cb:d6: bb:ba:f4:c6:5f:1d:36:28:be:a9:0c:76:ce:19:48: 6e:73:a4:d6:b5:c7:48:59:25:10:c7:77:fa:db:34: 9b:06:52:a4:12:ed:ee:fc:4f:ac:b0:e9:95:3e:0a: 7c:b5:37:bc:d0:c9:a0:24:30:32:8a:47:ac:c3:2c: cb:f7:a3:25:d0:21:2d:4b:09:76:e8:43:85:df:67: 1a:0b:57:e3:5b:b5:b9:f7:7a:ca:89:63:76:af:04: ef:5d:b0:d9:e0:12:e4:55:68:78:6c:f1:9d:7f:10: 3a:c7:1a:63:6a:55:5b:1c:79:69:00:1d:60:4b:37: 8c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.141.204.0/24 IPv6: 2602:f5de::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d5:38:6e:75:37:4d:45:33:34:3a:41:6a:d5:ba:2c:ca:a0: 0c:7d:d8:6c:36:2b:5e:ed:40:ce:8d:d4:00:a0:21:37:32:2d: d2:bc:ce:15:ba:3b:5e:d6:d1:d4:95:ba:66:5a:6a:61:26:db: b4:40:36:2b:4a:c0:dc:44:ff:27:23:8f:26:0f:96:59:0c:d2: 14:29:f5:8f:02:12:ee:45:80:9d:ec:89:6c:99:5b:93:6e:a5: d7:79:08:7d:48:47:34:3d:b9:de:ca:e0:4c:be:96:6e:1f:48: d8:f9:2f:d3:89:08:f0:b7:ff:24:d3:ff:31:e3:54:04:82:cc: d8:c8:f5:5f:c6:2e:3b:07:36:8c:2f:fa:89:0d:59:d2:80:29: a9:8f:43:e6:0c:1f:e9:7e:74:53:2a:4b:b6:35:59:f8:60:8f: 8b:15:38:49:46:a2:87:d2:f4:2b:f1:d9:57:35:eb:5e:27:15: fc:9f:b4:60:6e:46:36:38:0c:49:4c:2b:0f:5f:03:1e:ae:2e: 7f:4b:69:24:4b:42:d7:71:ea:67:81:7e:e0:fa:ad:ce:71:26: 27:bc:6a:bc:92:49:90:9f:eb:ca:75:4c:44:24:dd:94:e4:f0: 00:8c:be:08:e0:09:16:e8:c2:32:1b:c1:45:4a:e9:79:d3:92: 7b:c8:ae:4f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+Qm4cK82iCZfHb2ugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTAyMDEyNDUxM1oXDTI5MDEyMjEzNDUxM1owLzEtMCsGA1UEAxMk MGFkYjRkOWEtOWZjNC00M2Y3LThjZmItOTUxMTljMWRkZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbWHFHcavy8bw4HP5GSIAyWjqv9b1F/JwuKd I9x9WiP0fPvaIMSimfwTQlVJnbjuRI4w5EoS5Ql7k76APy+9tD8ik4jC3FMBP3BG aoaejjlQuZzedQL82ovHZdxtPDhpANVWdob79idd/jl8fyuZ4cdp06ADxP+CGzoA uKkt5/2Z+xSoy9a7uvTGXx02KL6pDHbOGUhuc6TWtcdIWSUQx3f62zSbBlKkEu3u /E+ssOmVPgp8tTe80MmgJDAyikeswyzL96Ml0CEtSwl26EOF32caC1fjW7W593rK iWN2rwTvXbDZ4BLkVWh4bPGdfxA6xxpjalVbHHlpAB1gSzeMEQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFBF51KamMUhWXWHnjQYfeaJtCv+JMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8w YWRiNGQ5YS05ZmM0LTQzZjctOGNmYi05NTExOWMxZGRkZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzBhZGI0ZDlhLTlmYzQtNDNmNy04 Y2ZiLTk1MTE5YzFkZGRmMC8wYWRiNGQ5YS05ZmM0LTQzZjctOGNmYi05NTExOWMx ZGRkZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjcwwDgQCAAIwCAMGACYC9d4AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AC7VOG51N01FMzQ6QWrVuizKoAx92Gw2K17tQM6N1ACgITcyLdK8zhW6O17W0dSV umZaamEm27RANitKwNxE/ycjjyYPllkM0hQp9Y8CEu5FgJ3siWyZW5Nupdd5CH1I RzQ9ud7K4Ey+lm4fSNj5L9OJCPC3/yTT/zHjVASCzNjI9V/GLjsHNowv+okNWdKA KamPQ+YMH+l+dFMqS7Y1Wfhgj4sVOElGoofS9Cvx2Vc1614nFfyftGBuRjY4DElM Kw9fAx6uLn9LaSRLQtdx6meBfuD6rc5xJie8arySSZCf68p1TEQk3ZTk8ACMvgjg CRbowjIbwUVK6XnTknvIrk8= -----END CERTIFICATE-----Generated at Thu Nov 5 11:39:56 2026 by rpki-client