$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4ef4f10-91ae-4f09-a3a2-6b25420230e6.cer File: a4ef4f10-91ae-4f09-a3a2-6b25420230e6.cer (raw, json) Hash identifier: cLBaqppKNRoJ/Nut+NUq/ciXWU59sRO4i41qN+6j8HU= Subject key identifier: 56:76:22:19:0E:B1:54:6F:4D:57:E8:73:9D:91:48:2D:21:58:FD:55 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F491AB474C04740459A6BC7E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4ef4f10-91ae-4f09-a3a2-6b25420230e6/a4ef4f10-91ae-4f09-a3a2-6b25420230e6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4ef4f10-91ae-4f09-a3a2-6b25420230e6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Sep 2026 22:03:16 +0000 Certificate not after: Mon 13 Nov 2028 13:25:37 +0000 Subordinate resources: IP: 136.176.0.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:1a:b4:74:c0:47:40:45:9a:6b:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 24 22:03:16 2026 GMT Not After : Nov 13 13:25:37 2028 GMT Subject: CN=a4ef4f10-91ae-4f09-a3a2-6b25420230e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a4:b6:3e:7d:49:7a:0a:21:54:a3:4a:aa:1c: 70:a9:c4:bf:b3:d6:2c:1b:ba:4b:72:1c:a2:a1:d7: 4f:86:18:64:0f:32:7b:ae:37:fb:2e:7b:1f:78:74: ba:86:75:5a:be:d0:cb:2f:62:48:03:92:6d:94:05: b7:33:79:f4:d6:14:e3:55:04:be:b5:c7:c7:5e:56: ad:ac:14:64:00:d2:00:3d:f8:30:e1:7d:c6:24:76: d7:b7:bd:d5:74:7b:ce:87:50:ad:48:c9:f9:4b:a5: a8:3e:18:10:ca:b4:e2:94:28:de:dd:c2:92:ea:6b: 73:9c:7b:94:34:e0:b9:c9:96:0c:ce:d6:d7:fb:a8: 1a:04:1b:3d:f1:03:b9:4a:6b:11:a2:da:10:bf:b5: 7c:30:3b:19:8a:53:90:18:3a:3b:97:18:7c:74:29: ef:fb:e3:c9:18:40:c9:7e:ab:9d:70:a0:ec:20:1b: 98:84:53:62:a4:4f:1e:e7:e7:cb:f6:0f:dc:f1:60: 1f:b5:86:90:e7:02:6e:c6:9f:3e:8d:77:74:e4:7d: 5d:bd:20:f8:34:34:9e:46:ce:d1:db:16:c5:a2:ec: 99:90:a1:f4:df:67:30:1d:50:1d:af:34:40:bb:24: 23:83:08:8a:5a:a0:05:58:6c:47:06:a0:1c:d1:76: c2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:76:22:19:0E:B1:54:6F:4D:57:E8:73:9D:91:48:2D:21:58:FD:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4ef4f10-91ae-4f09-a3a2-6b25420230e6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4ef4f10-91ae-4f09-a3a2-6b25420230e6/a4ef4f10-91ae-4f09-a3a2-6b25420230e6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 136.176.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:79:32:66:a5:b4:06:24:27:bc:f5:dd:70:29:fb:6a:b9:47: 3f:6c:ca:c3:ed:f0:c3:10:a9:1b:96:35:c4:5f:92:11:48:2f: 5b:f2:ad:21:40:4f:f7:11:c7:d1:f0:5f:99:78:0b:ff:53:a8: cc:2c:77:ff:f1:0b:cd:f3:00:fe:22:5d:cd:2c:d0:41:df:91: 88:c4:6b:7e:31:32:a0:1c:b0:62:f1:70:6c:5f:06:48:f4:90: b5:2b:fb:25:a3:79:1b:08:6e:4c:0d:e8:45:fa:c8:2d:ba:19: 94:31:e1:b9:0c:19:15:8e:f6:b2:24:4c:a5:0c:18:71:b6:1d: f4:c7:96:1b:f2:55:52:ce:f1:c8:bb:2c:30:06:03:45:e4:de: c9:fa:ee:65:aa:ff:4b:00:11:c6:3a:8a:3c:ef:f1:0e:23:5c: af:4f:d3:cf:9a:69:cc:36:08:5c:a7:c3:ae:57:38:e3:e8:fc: 19:de:31:e0:17:d5:5e:1e:fc:68:4a:fa:d2:71:dc:9a:eb:5b: b6:ec:81:ca:af:c8:6e:7d:d7:cc:3e:61:08:64:90:0f:c6:a5: 96:a2:d9:5a:1a:b9:fe:25:ad:94:03:e7:e4:a5:2c:d9:c9:56: e5:a4:7f:3d:ef:44:be:41:48:d5:c1:13:c3:d8:ce:a1:4f:0c: 7d:5a:13:53 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE9JGrR0wEdARZprx+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MDkyNDIyMDMxNloXDTI4MTExMzEzMjUzN1owLzEtMCsGA1UEAxMk YTRlZjRmMTAtOTFhZS00ZjA5LWEzYTItNmIyNTQyMDIzMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6S2Pn1JegohVKNKqhxwqcS/s9YsG7pLchyi oddPhhhkDzJ7rjf7LnsfeHS6hnVavtDLL2JIA5JtlAW3M3n01hTjVQS+tcfHXlat rBRkANIAPfgw4X3GJHbXt73VdHvOh1CtSMn5S6WoPhgQyrTilCje3cKS6mtznHuU NOC5yZYMztbX+6gaBBs98QO5SmsRotoQv7V8MDsZilOQGDo7lxh8dCnv++PJGEDJ fqudcKDsIBuYhFNipE8e5+fL9g/c8WAftYaQ5wJuxp8+jXd05H1dvSD4NDSeRs7R 2xbFouyZkKH032cwHVAdrzRAuyQjgwiKWqAFWGxHBqAc0XbCaQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFZ2IhkOsVRvTVfoc52RSC0hWP1VMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h NGVmNGYxMC05MWFlLTRmMDktYTNhMi02YjI1NDIwMjMwZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2E0ZWY0ZjEwLTkxYWUtNGYwOS1h M2EyLTZiMjU0MjAyMzBlNi9hNGVmNGYxMC05MWFlLTRmMDktYTNhMi02YjI1NDIw MjMwZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAaIsAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAY3kyZqW0BiQnvPXdcCn7 arlHP2zKw+3wwxCpG5Y1xF+SEUgvW/KtIUBP9xHH0fBfmXgL/1OozCx3//ELzfMA /iJdzSzQQd+RiMRrfjEyoBywYvFwbF8GSPSQtSv7JaN5GwhuTA3oRfrILboZlDHh uQwZFY72siRMpQwYcbYd9MeWG/JVUs7xyLssMAYDReTeyfruZar/SwARxjqKPO/x DiNcr0/Tz5ppzDYIXKfDrlc44+j8Gd4x4BfVXh78aEr60nHcmutbtuyByq/Ibn3X zD5hCGSQD8allqLZWhq5/iWtlAPn5KUs2clW5aR/Pe9EvkFI1cETw9jOoU8MfVoT Uw== -----END CERTIFICATE-----Generated at Wed Oct 7 11:17:53 2026 by rpki-client