$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer File: 88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer (raw, json) Hash identifier: +sRRCuH72OxFkCjQfzSGXcyzxJ0kyk1BQX0/nzVEPOM= Subject key identifier: 64:73:BC:A6:EA:35:23:F8:50:FB:98:8D:F3:07:70:7A:51:41:59:7A Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F4BE3E3E60EFB104979117E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Sep 2026 22:00:15 +0000 Certificate not after: Tue 26 Oct 2027 23:40:28 +0000 Subordinate resources: AS: 395412 AS: 399638 IP: 204.8.234.0/24 IP: 216.52.213.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:e3:e3:e6:0e:fb:10:49:79:11:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 25 22:00:15 2026 GMT Not After : Oct 26 23:40:28 2027 GMT Subject: CN=88bfa348-1db4-4c2b-8cd7-df6655cb7023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:7e:69:3e:29:6f:c8:f7:02:88:ff:a7:5d: 3e:37:d5:28:32:fa:6a:be:8c:9c:34:65:00:32:f4: dc:25:2e:fb:50:9c:3b:73:eb:cc:ad:e3:30:f2:3f: bb:fd:74:8e:ba:cd:7f:d9:19:bb:88:a8:d3:1d:32: d3:82:75:19:a0:cb:20:96:af:3d:15:b9:be:49:79: dd:b1:cc:92:0c:2f:33:94:21:db:a8:37:21:31:9b: 6d:8a:4d:ea:ad:15:cd:6f:ee:58:9c:d8:4b:92:16: 9d:d8:42:92:cb:0f:41:f1:1e:00:9c:8d:36:af:73: 28:28:2e:10:fa:b4:62:63:6f:54:bc:91:97:2c:ea: a1:75:56:e4:11:02:91:cd:e8:9c:d9:70:5f:c5:26: 56:76:cc:fe:96:b2:6c:c1:b0:96:1c:ec:56:bf:10: 8e:6e:be:19:d2:16:96:9d:0e:7f:ca:18:3c:70:ae: 7d:c8:56:0b:c2:ef:57:5d:8e:9c:50:e1:e5:d4:a9: 9e:4d:e5:78:a0:97:1d:75:b3:33:b4:88:18:83:67: 57:6d:20:dd:27:e8:4d:f6:74:90:90:e7:87:0d:3e: 2a:a3:0d:5d:4d:03:70:6f:4d:25:98:d2:c0:c0:35: 82:2b:27:a9:cb:91:b2:c1:70:6b:ae:da:05:26:e4: 2a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:73:BC:A6:EA:35:23:F8:50:FB:98:8D:F3:07:70:7A:51:41:59:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 204.8.234.0/24 216.52.213.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395412 399638 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:75:86:0b:1c:21:b8:26:76:28:ed:85:51:d5:cc:57:20:67: 58:69:e6:9d:c7:a4:3e:c1:55:1f:a2:13:b2:0a:91:a6:30:66: 4a:c6:32:f6:6f:7c:e6:43:cd:d0:93:66:2c:22:47:8c:fb:ba: 37:72:79:1f:ae:d2:9c:00:ce:bf:6b:1b:17:af:c4:30:ed:83: dc:31:23:63:a8:8f:6a:2b:ab:f3:7b:2c:11:89:b3:e7:2a:b8: 4c:28:bf:9f:ae:ec:c9:81:09:e0:76:f5:41:2e:17:c1:3f:56: 81:83:b9:e0:d2:a3:25:5e:c1:74:34:15:7a:bb:cb:f5:60:37: 50:c9:5b:d5:46:ea:0b:36:26:41:14:c9:53:bd:f0:e0:cb:09: 5b:af:4b:a4:ad:31:e1:db:a1:f5:f8:8e:9c:a9:3c:5d:27:2b: 80:04:3d:ce:9f:87:2c:f2:91:1e:11:86:76:4a:12:90:c5:34: fc:db:3c:1e:7f:a4:a1:ed:e1:1e:fb:11:6e:86:58:a7:28:b3: f2:22:39:f2:03:42:65:58:f1:70:1f:00:ed:31:8a:52:54:7f: 16:2c:3d:f3:e7:21:82:ce:c9:07:34:53:fa:4c:92:8e:8f:d0: 5a:fd:67:10:3b:eb:99:e6:cb:70:2d:a7:0b:97:31:dc:d1:06: e9:69:3c:66 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE9L4+PmDvsQSXkRfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MDkyNTIyMDAxNVoXDTI3MTAyNjIzNDAyOFowLzEtMCsGA1UEAxMk ODhiZmEzNDgtMWRiNC00YzJiLThjZDctZGY2NjU1Y2I3MDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx1+aT4pb8j3Aoj/p10+N9UoMvpqvoycNGUA MvTcJS77UJw7c+vMreMw8j+7/XSOus1/2Rm7iKjTHTLTgnUZoMsglq89Fbm+SXnd scySDC8zlCHbqDchMZttik3qrRXNb+5YnNhLkhad2EKSyw9B8R4AnI02r3MoKC4Q +rRiY29UvJGXLOqhdVbkEQKRzeic2XBfxSZWdsz+lrJswbCWHOxWvxCObr4Z0haW nQ5/yhg8cK59yFYLwu9XXY6cUOHl1KmeTeV4oJcddbMztIgYg2dXbSDdJ+hN9nSQ kOeHDT4qow1dTQNwb00lmNLAwDWCKyepy5GywXBrrtoFJuQqvQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFGRzvKbqNSP4UPuYjfMHcHpRQVl6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84 OGJmYTM0OC0xZGI0LTRjMmItOGNkNy1kZjY2NTVjYjcwMjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzg4YmZhMzQ4LTFkYjQtNGMyYi04 Y2Q3LWRmNjY1NWNiNzAyMy84OGJmYTM0OC0xZGI0LTRjMmItOGNkNy1kZjY2NTVj YjcwMjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADMCOoDBADYNNUwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDBgiUAgMGGRYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArnWGCxwhuCZ2KO2FUdXMVyBnWGnmncek PsFVH6ITsgqRpjBmSsYy9m985kPN0JNmLCJHjPu6N3J5H67SnADOv2sbF6/EMO2D 3DEjY6iPaiur83ssEYmz5yq4TCi/n67syYEJ4Hb1QS4XwT9WgYO54NKjJV7BdDQV ervL9WA3UMlb1UbqCzYmQRTJU73w4MsJW69LpK0x4duh9fiOnKk8XScrgAQ9zp+H LPKRHhGGdkoSkMU0/Ns8Hn+koe3hHvsRboZYpyiz8iI58gNCZVjxcB8A7TGKUlR/ Fiw98+chgs7JBzRT+kySjo/QWv1nEDvrmebLcC2nC5cx3NEG6Wk8Zg== -----END CERTIFICATE-----Generated at Tue Oct 6 15:19:33 2026 by rpki-client