$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.cer File: c8bca10d-6445-4407-bd16-6d0c90e9bfd5.cer (raw, json) Hash identifier: NpgnKyN2wuKaO+JvhvdqS8fWVJqL4wM6gSG0ECaiDGU= Subject key identifier: E9:6F:EF:D0:13:5C:EE:7D:99:FC:6E:21:46:72:23:EF:BA:A0:75:8F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F5E47DE9BEE680D4DE7BABB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 12:06:15 +0000 Certificate not after: Thu 13 Jan 2028 17:44:39 +0000 Subordinate resources: IP: 130.12.159.0/24 IP: 204.52.4.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:47:de:9b:ee:68:0d:4d:e7:ba:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 2 12:06:15 2026 GMT Not After : Jan 13 17:44:39 2028 GMT Subject: CN=c8bca10d-6445-4407-bd16-6d0c90e9bfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:09:76:a6:59:92:4c:9e:f1:6e:23:9c:34:59: ac:ea:bb:47:de:de:d7:03:b1:af:31:89:d6:15:44: ab:24:54:46:fb:8e:b4:4b:ad:73:18:e9:99:b0:b5: 1c:5e:cb:f8:d3:e0:a3:a0:bd:8f:1e:74:fd:59:3d: fc:3d:57:18:b6:c5:48:00:fa:62:68:31:fd:a7:1f: 91:84:d2:8f:27:bf:ca:fd:9e:1d:d7:3b:a9:37:4b: 88:95:7b:28:7f:f4:e0:64:1c:53:a9:4d:9a:bb:bd: 9f:63:88:69:a5:4e:77:a6:6c:59:5d:ac:87:f3:9f: 5e:00:90:90:45:bf:52:38:0a:74:8b:09:0c:3c:e9: 2f:bc:d2:3f:7e:52:45:78:33:74:ce:81:1d:0f:3e: c4:79:d8:12:db:1e:8e:08:96:86:08:5f:f3:59:30: 7e:a3:b1:b1:73:a9:12:05:ff:ed:e8:a6:f9:db:ac: 39:ff:1c:08:7d:16:4e:b4:5b:2e:5d:d0:8e:e0:05: 3c:a0:44:de:33:46:d3:14:22:8a:f0:87:29:0d:7e: 86:15:26:3f:f0:78:75:b0:da:bb:c0:34:77:83:2b: 9d:36:fa:fe:91:b1:20:e7:5c:5d:91:75:6c:d2:a7: 44:c8:a7:1f:01:a9:9f:8f:71:36:d7:25:cb:e7:f8: 36:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6F:EF:D0:13:5C:EE:7D:99:FC:6E:21:46:72:23:EF:BA:A0:75:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 130.12.159.0/24 204.52.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:df:51:52:75:66:d0:e1:ba:77:2e:21:c1:a5:15:9a:aa:24: 1c:8f:b6:47:c4:c9:f6:21:f8:83:9c:0e:dc:fc:7d:2b:0c:a4: a6:83:c2:8d:4d:5e:49:31:77:06:2f:fb:43:23:21:4b:1b:01: 34:f6:2e:54:23:29:df:06:57:98:86:38:35:de:c8:83:55:08: ac:1c:be:95:95:7a:d3:e3:32:56:a8:fe:05:34:f2:1c:57:9a: 13:e0:5e:e2:86:6a:59:2b:ad:4c:3d:3d:46:72:3e:b4:80:0f: ac:2b:27:50:fe:89:70:7d:20:a4:96:21:d5:67:5a:5b:f9:29: 86:36:01:de:2c:b5:52:21:0b:63:ad:2e:d7:aa:aa:18:fe:60: e7:20:15:9a:35:71:5a:0f:0e:41:9b:74:e5:18:ad:5e:c0:c4: 95:83:90:13:a5:a2:cd:9c:f7:3b:c1:a7:fd:49:35:86:59:24: 54:af:e9:b4:17:ef:a9:e2:23:75:63:21:d8:9f:83:ae:29:3d: 4d:dd:64:89:af:ae:26:49:d5:34:9e:d9:b5:02:f0:dc:1b:29: 86:92:03:96:ba:0e:c2:2e:a5:6e:6d:a6:c4:24:4e:98:5a:9b: 97:8d:8d:5e:78:29:cc:84:f3:d2:8f:f2:b2:35:34:14:9f:62: 9b:53:c0:cb -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE9eR96b7mgNTee6uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTAwMjEyMDYxNVoXDTI4MDExMzE3NDQzOVowLzEtMCsGA1UEAxMk YzhiY2ExMGQtNjQ0NS00NDA3LWJkMTYtNmQwYzkwZTliZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggl2plmSTJ7xbiOcNFms6rtH3t7XA7GvMYnW FUSrJFRG+460S61zGOmZsLUcXsv40+CjoL2PHnT9WT38PVcYtsVIAPpiaDH9px+R hNKPJ7/K/Z4d1zupN0uIlXsof/TgZBxTqU2au72fY4hppU53pmxZXayH859eAJCQ Rb9SOAp0iwkMPOkvvNI/flJFeDN0zoEdDz7EedgS2x6OCJaGCF/zWTB+o7Gxc6kS Bf/t6Kb526w5/xwIfRZOtFsuXdCO4AU8oETeM0bTFCKK8IcpDX6GFSY/8Hh1sNq7 wDR3gyudNvr+kbEg51xdkXVs0qdEyKcfAamfj3E21yXL5/g2SwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFOlv79ATXO59mfxuIUZyI++6oHWPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j OGJjYTEwZC02NDQ1LTQ0MDctYmQxNi02ZDBjOTBlOWJmZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2M4YmNhMTBkLTY0NDUtNDQwNy1i ZDE2LTZkMGM5MGU5YmZkNS9jOGJjYTEwZC02NDQ1LTQ0MDctYmQxNi02ZDBjOTBl OWJmZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACCDJ8DBALMNAQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEN9RUnVm0OG6 dy4hwaUVmqokHI+2R8TJ9iH4g5wO3Px9KwykpoPCjU1eSTF3Bi/7QyMhSxsBNPYu VCMp3wZXmIY4Nd7Ig1UIrBy+lZV60+MyVqj+BTTyHFeaE+Be4oZqWSutTD09RnI+ tIAPrCsnUP6JcH0gpJYh1WdaW/kphjYB3iy1UiELY60u16qqGP5g5yAVmjVxWg8O QZt05RitXsDElYOQE6WizZz3O8Gn/Uk1hlkkVK/ptBfvqeIjdWMh2J+Drik9Td1k ia+uJknVNJ7ZtQLw3BsphpIDlroOwi6lbm2mxCROmFqbl42NXngpzITz0o/ysjU0 FJ9im1PAyw== -----END CERTIFICATE-----Generated at Wed Oct 7 12:24:52 2026 by rpki-client