$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a.cer File: bbeedb59-5c05-47b5-b92b-2a530df4446a.cer (raw, json) Hash identifier: Q7FdoqeD6lxwts3h956BKcpE5tkui6GlF8Y7GdqCSfA= Subject key identifier: F4:D7:CC:B0:43:8E:09:F0:E1:6E:08:74:3E:40:DB:CB:75:F9:6A:BE Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F8F362C9E9196534F7842E980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a/bbeedb59-5c05-47b5-b92b-2a530df4446a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Oct 2026 00:45:12 +0000 Certificate not after: Mon 22 Jan 2029 01:45:12 +0000 Subordinate resources: IP: 23.140.252.0/24 IP: 2602:f5fc::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:36:2c:9e:91:96:53:4f:78:42:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 20 00:45:12 2026 GMT Not After : Jan 22 01:45:12 2029 GMT Subject: CN=bbeedb59-5c05-47b5-b92b-2a530df4446a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:35:cf:eb:2c:34:e0:60:95:2d:6d:50:d3:3e: c0:ab:fa:ea:5e:a0:4e:5b:35:e4:a3:26:ba:07:ef: 54:61:aa:54:39:10:10:cb:a3:e2:87:18:75:be:8a: fa:29:4c:dd:97:ab:34:34:30:37:fa:37:d9:f1:15: a0:91:4c:89:c6:2a:49:ef:dd:ba:80:3b:e4:15:f4: be:59:35:1b:ec:71:0f:52:67:dd:64:2a:21:8d:52: aa:a6:8d:4a:22:db:bd:5e:5d:28:09:60:b9:75:42: d7:62:62:58:e8:43:ff:15:0f:fe:c0:b3:2f:02:88: ae:23:3b:28:f2:90:ed:d2:54:ca:8a:9f:3b:02:e2: f9:33:e9:42:f8:84:fd:2d:a6:05:4b:95:60:bd:46: 23:9e:06:ad:ef:ef:35:a5:82:8c:dd:5d:c0:39:41: c4:bd:5a:f6:02:a6:01:c5:ad:49:15:00:4d:b9:55: ad:e1:fe:7a:36:fc:15:3f:8f:0d:aa:06:39:45:2a: 1b:59:a1:d1:0a:1c:c5:0e:45:35:1a:53:ed:7f:dd: 22:d3:15:04:39:41:76:41:fe:c8:bd:94:99:00:c8: 40:e4:55:e4:b5:5b:45:47:b2:42:8f:27:1a:e2:98: 9b:8b:8e:f4:bf:2d:5e:78:45:ef:a2:89:06:60:bf: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D7:CC:B0:43:8E:09:F0:E1:6E:08:74:3E:40:DB:CB:75:F9:6A:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a/bbeedb59-5c05-47b5-b92b-2a530df4446a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.140.252.0/24 IPv6: 2602:f5fc::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:91:04:50:87:a0:cf:79:00:cb:02:3d:0c:90:ba:2d:c4:de: 55:b0:ea:4b:9a:a6:d0:20:bc:9f:6a:86:23:5b:6c:1e:07:d0: 0a:2f:c7:bf:d9:85:78:d4:45:ce:23:85:2e:1d:c1:15:2e:30: 8d:36:a3:26:81:c1:ca:3b:fd:29:29:f6:b5:53:2d:af:db:35: 5b:cc:98:97:29:54:4b:ba:70:43:88:29:09:e8:19:d6:d9:3f: 71:dd:2c:81:f7:1a:c4:23:62:b9:0c:71:b4:98:36:96:53:06: 2b:67:c3:0c:55:ce:e0:6b:6d:89:7c:f4:61:27:c8:0a:e3:1b: 8b:cf:bd:46:71:fb:0f:24:90:22:79:22:91:70:c2:de:aa:3c: 45:65:77:73:ff:66:1a:cc:ba:c8:1b:b2:01:3f:c0:d3:29:4c: b8:9f:82:ef:5d:25:37:0f:3c:17:7d:6d:f1:bb:d2:57:c3:df: 87:38:2a:95:ed:44:fc:eb:27:b2:ac:82:a6:7e:6f:e1:66:bd: 84:b1:4f:3b:ab:98:1e:4e:49:3c:b4:6f:58:ba:92:7a:a5:56: 4e:db:9a:bb:87:77:ca:fa:cc:b6:2d:84:81:e6:be:af:ba:fa: b1:88:54:da:d8:0c:02:d0:ea:41:72:14:88:ed:1e:fe:6e:e9: 2d:10:ab:df -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+PNiyekZZTT3hC6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTAyMDAwNDUxMloXDTI5MDEyMjAxNDUxMlowLzEtMCsGA1UEAxMk YmJlZWRiNTktNWMwNS00N2I1LWI5MmItMmE1MzBkZjQ0NDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozXP6yw04GCVLW1Q0z7Aq/rqXqBOWzXkoya6 B+9UYapUORAQy6Pihxh1vor6KUzdl6s0NDA3+jfZ8RWgkUyJxipJ7926gDvkFfS+ WTUb7HEPUmfdZCohjVKqpo1KItu9Xl0oCWC5dULXYmJY6EP/FQ/+wLMvAoiuIzso 8pDt0lTKip87AuL5M+lC+IT9LaYFS5VgvUYjngat7+81pYKM3V3AOUHEvVr2AqYB xa1JFQBNuVWt4f56NvwVP48NqgY5RSobWaHRChzFDkU1GlPtf90i0xUEOUF2Qf7I vZSZAMhA5FXktVtFR7JCjyca4pibi470vy1eeEXvookGYL+xOQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFPTXzLBDjgnw4W4IdD5A28t1+Wq+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i YmVlZGI1OS01YzA1LTQ3YjUtYjkyYi0yYTUzMGRmNDQ0NmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2JiZWVkYjU5LTVjMDUtNDdiNS1i OTJiLTJhNTMwZGY0NDQ2YS9iYmVlZGI1OS01YzA1LTQ3YjUtYjkyYi0yYTUzMGRm NDQ0NmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjPwwDgQCAAIwCAMGACYC9fwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJWRBFCHoM95AMsCPQyQui3E3lWw6kuaptAgvJ9qhiNbbB4H0Aovx7/ZhXjURc4j hS4dwRUuMI02oyaBwco7/Skp9rVTLa/bNVvMmJcpVEu6cEOIKQnoGdbZP3HdLIH3 GsQjYrkMcbSYNpZTBitnwwxVzuBrbYl89GEnyArjG4vPvUZx+w8kkCJ5IpFwwt6q PEVld3P/ZhrMusgbsgE/wNMpTLifgu9dJTcPPBd9bfG70lfD34c4KpXtRPzrJ7Ks gqZ+b+FmvYSxTzurmB5OSTy0b1i6knqlVk7bmruHd8r6zLYthIHmvq+6+rGIVNrY DALQ6kFyFIjtHv5u6S0Qq98= -----END CERTIFICATE-----Generated at Sat Oct 24 06:56:45 2026 by rpki-client