$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer File: affa716b-9631-4506-aee5-dc69f79f9fca.cer (raw, json) Hash identifier: bbhX8DQoLDKuDc2rVwYe5RsijAEadbyOtpIYjlzyZq8= Subject key identifier: 29:19:82:08:B8:76:5D:5B:AE:B9:2E:10:DA:8C:CB:F2:93:7F:A2:C9 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F93663474F786CB25AE15C400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Oct 2026 12:45:12 +0000 Certificate not after: Tue 23 Jan 2029 13:45:12 +0000 Subordinate resources: IP: 23.141.212.0/24 IP: 2602:f5db::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:93:66:34:74:f7:86:cb:25:ae:15:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 21 12:45:12 2026 GMT Not After : Jan 23 13:45:12 2029 GMT Subject: CN=affa716b-9631-4506-aee5-dc69f79f9fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:f4:8b:74:14:5c:bb:a9:ff:ed:6d:d1:11: 26:fb:e1:d6:3e:55:fb:4b:c5:45:a8:68:f3:05:e6: bd:35:d7:80:87:f2:5e:56:be:ee:8c:1e:03:7b:ef: ca:8e:b3:0f:64:06:71:22:7e:ca:2c:54:1c:cf:1a: 28:b0:86:fb:9f:22:49:ff:c4:34:d7:4c:0f:3c:c9: 0f:23:2f:87:4a:09:2f:a1:b2:36:6c:6a:56:d0:34: 95:00:f6:7e:81:db:01:e2:11:fe:21:7c:0d:65:d5: 28:cd:3b:17:58:4d:ee:8e:8c:11:15:7b:74:7e:01: 81:f2:79:bd:74:cd:dc:29:5c:f6:ef:54:96:28:75: 83:e3:a9:26:d3:21:08:02:47:c3:79:44:7b:88:b7: 49:21:81:80:d1:b4:3a:43:dc:93:c1:d9:ed:e2:a4: 6b:ef:dd:d6:2d:bf:67:ba:54:05:30:e6:82:ce:15: 60:60:e9:c5:2a:26:ae:94:a8:6a:86:4a:71:e3:ac: 3a:f4:b5:5c:66:36:e3:60:e0:f1:b7:d5:e6:40:68: 20:44:0b:7c:99:f8:42:78:9c:bc:04:eb:db:9f:8c: fd:7c:2a:58:42:75:e2:e8:d0:5a:4e:ee:db:bf:7a: 2e:eb:cc:ac:69:59:d1:ea:3f:c4:b9:71:53:a8:c8: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:19:82:08:B8:76:5D:5B:AE:B9:2E:10:DA:8C:CB:F2:93:7F:A2:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.141.212.0/24 IPv6: 2602:f5db::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3e:92:87:21:d0:28:57:44:3c:cb:30:e2:0c:33:a0:d0:8e: 38:45:e2:96:7a:fc:c8:ed:3b:38:2d:ce:26:b4:a2:bc:f2:6f: 2f:be:67:c7:38:10:29:74:ce:95:07:b2:3c:9f:7d:02:4f:b0: 6b:a8:eb:55:9c:62:59:32:71:7c:54:3d:c3:ca:bb:d2:cb:84: 81:e1:b2:ad:69:61:6f:fa:0d:8c:00:dc:05:2f:fb:ff:7c:0c: 1f:c9:81:6f:9f:09:32:84:31:b3:2c:5b:2f:e4:e2:03:d2:34: 59:dc:c1:26:64:10:a8:b0:b7:42:46:36:47:1d:64:1c:c1:f2: 85:b5:b0:01:13:c9:8e:1f:59:df:0c:f5:06:31:1b:d8:07:2e: ac:d8:f4:ab:e9:0d:a1:59:c3:7d:d1:ec:e3:90:af:b9:eb:86: 66:59:df:f5:77:22:cd:6f:70:3b:8c:3f:2c:d9:36:67:0f:d8: 53:21:23:3f:10:e2:1d:6e:e2:a6:f5:c6:ce:c3:dd:e6:97:da: f8:d4:a0:8d:c7:0d:37:cf:e4:a9:1c:5e:84:f0:cd:2f:10:06: 43:80:44:d3:a9:c8:12:0e:9b:91:bb:b5:5d:23:ca:d5:0f:fd: 8c:33:a4:43:03:4b:89:76:92:34:82:2b:9c:14:85:22:d3:60: 4d:29:4c:a6 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+TZjR094bLJa4VxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTAyMTEyNDUxMloXDTI5MDEyMzEzNDUxMlowLzEtMCsGA1UEAxMk YWZmYTcxNmItOTYzMS00NTA2LWFlZTUtZGM2OWY3OWY5ZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2f0i3QUXLup/+1t0REm++HWPlX7S8VFqGjz Bea9NdeAh/JeVr7ujB4De+/KjrMPZAZxIn7KLFQczxoosIb7nyJJ/8Q010wPPMkP Iy+HSgkvobI2bGpW0DSVAPZ+gdsB4hH+IXwNZdUozTsXWE3ujowRFXt0fgGB8nm9 dM3cKVz271SWKHWD46km0yEIAkfDeUR7iLdJIYGA0bQ6Q9yTwdnt4qRr793WLb9n ulQFMOaCzhVgYOnFKiaulKhqhkpx46w69LVcZjbjYODxt9XmQGggRAt8mfhCeJy8 BOvbn4z9fCpYQnXi6NBaTu7bv3ou68ysaVnR6j/EuXFTqMi1UQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFCkZggi4dl1brrkuENqMy/KTf6LJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h ZmZhNzE2Yi05NjMxLTQ1MDYtYWVlNS1kYzY5Zjc5ZjlmY2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2FmZmE3MTZiLTk2MzEtNDUwNi1h ZWU1LWRjNjlmNzlmOWZjYS9hZmZhNzE2Yi05NjMxLTQ1MDYtYWVlNS1kYzY5Zjc5 ZjlmY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjdQwDgQCAAIwCAMGACYC9dsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACY+koch0ChXRDzLMOIMM6DQjjhF4pZ6/MjtOzgtzia0orzyby++Z8c4ECl0zpUH sjyffQJPsGuo61WcYlkycXxUPcPKu9LLhIHhsq1pYW/6DYwA3AUv+/98DB/JgW+f CTKEMbMsWy/k4gPSNFncwSZkEKiwt0JGNkcdZBzB8oW1sAETyY4fWd8M9QYxG9gH LqzY9KvpDaFZw33R7OOQr7nrhmZZ3/V3Is1vcDuMPyzZNmcP2FMhIz8Q4h1u4qb1 xs7D3eaX2vjUoI3HDTfP5KkcXoTwzS8QBkOARNOpyBIOm5G7tV0jytUP/YwzpEMD S4l2kjSCK5wUhSLTYE0pTKY= -----END CERTIFICATE-----Generated at Wed Nov 4 10:35:21 2026 by rpki-client