$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac1c5fba-7311-49a6-9838-cf9a234a8320.cer File: ac1c5fba-7311-49a6-9838-cf9a234a8320.cer (raw, json) Hash identifier: pnkA19LiI2bWTDnPy6jPB7ieyyMOuHlE3XqTvprJK1Y= Subject key identifier: AF:08:F6:00:99:CF:C2:7B:B1:EA:A4:DF:74:7C:BE:CD:37:9B:6B:E7 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F1B30B5E3FCE25FF993A04A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac1c5fba-7311-49a6-9838-cf9a234a8320/ac1c5fba-7311-49a6-9838-cf9a234a8320.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac1c5fba-7311-49a6-9838-cf9a234a8320/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Sep 2026 11:20:25 +0000 Certificate not after: Mon 11 Dec 2028 12:20:25 +0000 Subordinate resources: AS: 53699 IP: 198.22.98.0/24 IP: 204.15.169.0/24 IP: 216.245.81.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:30:b5:e3:fc:e2:5f:f9:93:a0:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 8 11:20:25 2026 GMT Not After : Dec 11 12:20:25 2028 GMT Subject: CN=ac1c5fba-7311-49a6-9838-cf9a234a8320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bf:c1:03:30:1b:ff:d2:54:80:1c:67:86:dc: d9:6c:37:a5:f9:2c:4f:25:35:e4:98:9b:ce:75:ac: 86:8a:2b:58:8d:63:31:67:41:c8:72:bd:8b:66:0c: 62:d0:86:90:da:8c:e3:b9:b9:e7:bf:f7:a9:60:67: b1:2d:32:99:40:ea:5d:ba:e6:57:96:1f:00:60:b2: ef:62:da:15:54:e6:03:ca:1a:ab:4c:95:65:23:cf: 28:b0:ad:3e:55:68:a5:96:96:a8:9d:08:5a:6e:a2: 01:59:d6:a6:85:e5:63:41:a6:5f:1e:2c:07:d8:50: de:ce:e2:31:a7:a6:43:2e:cf:52:55:09:07:80:88: 7e:5a:1d:53:4b:53:7a:b0:40:d5:4b:0a:2b:31:3d: 52:c6:0c:e3:0a:1d:cf:45:8a:c5:bb:8f:87:9b:9e: fb:21:2d:24:67:fb:59:b9:15:78:ff:0b:1c:8b:5b: ed:69:2a:8a:85:a6:ea:80:5f:7e:9c:a2:78:03:6e: 2c:ab:c5:32:fa:48:e7:e6:07:18:ca:10:c5:81:24: ce:0e:9a:3f:d6:35:f4:e8:42:f6:2e:12:3f:ac:e4: 26:bc:bc:e4:3b:26:f8:bd:88:28:d1:fa:9f:76:fd: cc:dd:d0:36:56:96:95:3e:b0:f7:10:8c:d8:bf:e9: e3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:08:F6:00:99:CF:C2:7B:B1:EA:A4:DF:74:7C:BE:CD:37:9B:6B:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac1c5fba-7311-49a6-9838-cf9a234a8320/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac1c5fba-7311-49a6-9838-cf9a234a8320/ac1c5fba-7311-49a6-9838-cf9a234a8320.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 198.22.98.0/24 204.15.169.0/24 216.245.81.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53699 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:b7:20:db:bc:6d:39:aa:bd:78:bb:d9:5a:b2:9b:7b:a5:77: ef:5e:eb:83:2a:be:31:44:87:6c:ef:44:94:47:7d:bf:28:30: 33:a8:cb:a1:25:44:14:2d:ee:b1:0a:37:d0:c5:52:a2:8f:05: 1c:ec:4b:67:46:de:65:79:25:95:84:9d:84:d9:5d:ad:29:97: 2a:bb:33:66:1f:2a:b8:21:b7:81:87:ed:8b:68:b9:1b:85:e2: 28:53:4a:2e:61:35:bf:20:35:63:b9:9f:82:d0:43:42:6d:2c: 6f:11:cb:2c:54:70:88:b6:78:a7:7d:98:ad:4b:11:8f:5e:f2: f2:78:c4:2c:ba:f8:89:c2:95:fc:89:70:79:78:9a:07:fb:2a: c2:88:ed:78:8e:5a:21:60:d9:6b:c4:0a:0b:fd:b7:db:93:5d: 6b:dd:0c:43:18:f2:6c:c6:8a:57:77:be:34:aa:9d:a2:af:a9: cd:55:b8:03:f0:bd:36:81:28:d4:36:2f:36:8c:91:a1:f6:db: b8:ed:53:3b:b9:07:10:2d:e8:c9:a1:d7:47:b2:9e:5f:af:87: 4f:30:a9:85:77:a1:a2:96:d0:90:55:14:35:1a:70:92:97:ca: 98:4e:23:ee:f9:8b:f0:e6:34:58:02:8f:8e:d8:1f:7d:46:4e: ff:01:df:a9 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWE8bMLXj/OJf+ZOgSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MDkwODExMjAyNVoXDTI4MTIxMTEyMjAyNVowLzEtMCsGA1UEAxMk YWMxYzVmYmEtNzMxMS00OWE2LTk4MzgtY2Y5YTIzNGE4MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob/BAzAb/9JUgBxnhtzZbDel+SxPJTXkmJvO dayGiitYjWMxZ0HIcr2LZgxi0IaQ2ozjubnnv/epYGexLTKZQOpduuZXlh8AYLLv YtoVVOYDyhqrTJVlI88osK0+VWillpaonQhabqIBWdamheVjQaZfHiwH2FDezuIx p6ZDLs9SVQkHgIh+Wh1TS1N6sEDVSworMT1SxgzjCh3PRYrFu4+Hm577IS0kZ/tZ uRV4/wsci1vtaSqKhabqgF9+nKJ4A24sq8Uy+kjn5gcYyhDFgSTODpo/1jX06EL2 LhI/rOQmvLzkOyb4vYgo0fqfdv3M3dA2VpaVPrD3EIzYv+njYwIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFK8I9gCZz8J7seqk33R8vs03m2vnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h YzFjNWZiYS03MzExLTQ5YTYtOTgzOC1jZjlhMjM0YTgzMjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2FjMWM1ZmJhLTczMTEtNDlhNi05 ODM4LWNmOWEyMzRhODMyMC9hYzFjNWZiYS03MzExLTQ5YTYtOTgzOC1jZjlhMjM0 YTgzMjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADGFmIDBADMD6kDBADY9VEwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDANHDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBALC3INu8bTmqvXi72Vqym3uld+9e64Mq vjFEh2zvRJRHfb8oMDOoy6ElRBQt7rEKN9DFUqKPBRzsS2dG3mV5JZWEnYTZXa0p lyq7M2YfKrght4GH7YtouRuF4ihTSi5hNb8gNWO5n4LQQ0JtLG8RyyxUcIi2eKd9 mK1LEY9e8vJ4xCy6+InClfyJcHl4mgf7KsKI7XiOWiFg2WvECgv9t9uTXWvdDEMY 8mzGild3vjSqnaKvqc1VuAPwvTaBKNQ2LzaMkaH227jtUzu5BxAt6Mmh10eynl+v h08wqYV3oaKW0JBVFDUacJKXyphOI+75i/DmNFgCj47YH31GTv8B36k= -----END CERTIFICATE-----Generated at Sat Sep 12 09:37:22 2026 by rpki-client