$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer File: cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer (raw, json) Hash identifier: ZI3mO8KcYzFFt/cC5mpffb4Y4qg9Ykfm5qASSorycxM= Subject key identifier: 8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F8F362C87D6355C8D85D0F280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Oct 2026 00:45:12 +0000 Certificate not after: Mon 22 Jan 2029 01:45:12 +0000 Subordinate resources: IP: 23.140.148.0/24 IP: 2602:f60a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:36:2c:87:d6:35:5c:8d:85:d0:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 20 00:45:12 2026 GMT Not After : Jan 22 01:45:12 2029 GMT Subject: CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:58:93:e2:8e:c7:eb:af:d5:f1:53:3b:f8: a3:a0:ee:d6:cb:f6:bb:4a:c4:83:d3:61:f8:7e:7d: 41:f6:bc:d9:17:cb:a9:72:c5:70:ac:2d:73:39:27: 37:88:fe:90:c2:e5:44:b9:39:b6:48:d6:92:e6:b0: 7a:1b:aa:5f:fc:e6:99:c6:25:03:1b:d4:3d:94:86: 96:c2:70:be:4b:f7:48:98:86:1a:ee:05:8d:62:ed: fa:63:d5:58:e3:d2:b6:05:00:12:61:c2:bb:59:81: 9b:b8:a7:c3:49:f3:67:63:db:21:77:e8:48:80:cb: 4c:fd:cc:69:9e:ba:48:6f:b7:33:e3:44:48:7a:67: 5f:02:27:c0:17:a8:d5:56:2f:e0:15:d6:ab:19:50: 6f:49:1b:83:ec:66:51:45:66:4e:6b:51:ab:dc:34: 53:b9:84:cc:04:be:e0:ff:01:32:26:28:21:6e:41: ad:02:3a:40:bd:cd:dd:ba:03:8c:54:20:fc:32:a0: a3:5b:a1:6e:af:6a:a3:c5:0e:a3:ae:08:30:47:c2: 39:b1:2a:47:90:8f:6c:84:c2:78:13:a7:72:83:35: a8:4d:bf:78:af:19:b5:a8:7d:42:b7:04:4d:70:09: c8:c5:22:1f:50:50:e7:36:2e:cf:80:63:20:f4:fd: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.140.148.0/24 IPv6: 2602:f60a::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:25:d8:60:e7:30:9a:8f:ba:0a:71:ac:52:b3:a9:e0:08:35: 45:00:16:ad:89:6a:5c:e8:4c:84:c2:87:81:64:57:30:60:65: af:b1:f8:b9:8e:eb:28:19:36:3d:19:e7:2e:67:e3:66:67:04: 6c:c5:5c:01:72:7a:aa:e5:64:2e:a0:2c:1b:ae:58:4b:4f:6c: 97:db:f1:30:5f:47:e9:62:77:51:45:1f:41:6c:f3:b2:10:ed: 56:c7:56:05:1c:dd:0b:bb:f3:8c:fe:16:de:b4:b2:87:75:70: 3e:1c:80:27:7f:b8:a2:a1:5b:72:bf:61:77:08:73:5a:56:93: 6e:59:43:38:c4:09:1f:47:e0:8b:42:5e:88:ca:a9:dd:3c:f7: b8:19:18:89:ec:55:de:e2:73:1d:63:46:1a:c2:3d:b7:a9:c5: 9f:19:5e:50:8a:5e:c3:ab:35:ed:d0:b1:33:1d:c1:b9:7f:ef: 0a:86:7a:02:5b:cc:73:32:3a:fc:02:62:54:4a:39:7b:6c:bf: b3:1d:1c:92:73:6d:d8:da:e7:be:f6:36:45:22:d5:4d:d6:22: 0f:ca:fe:b0:4f:fa:2a:d3:07:f3:e5:bd:ff:ba:15:42:3f:f2: 39:ce:99:5c:b7:08:ae:e2:7e:99:e5:12:d7:d3:79:69:ca:76: fc:fa:47:f2 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+PNiyH1jVcjYXQ8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTAyMDAwNDUxMloXDTI5MDEyMjAxNDUxMlowLzEtMCsGA1UEAxMk Y2RiZTVkZDQtYjlmYS00MDIxLTg3YTEtMzAwMmY4MGNjNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6BYk+KOx+uv1fFTO/ijoO7Wy/a7SsSD02H4 fn1B9rzZF8upcsVwrC1zOSc3iP6QwuVEuTm2SNaS5rB6G6pf/OaZxiUDG9Q9lIaW wnC+S/dImIYa7gWNYu36Y9VY49K2BQASYcK7WYGbuKfDSfNnY9shd+hIgMtM/cxp nrpIb7cz40RIemdfAifAF6jVVi/gFdarGVBvSRuD7GZRRWZOa1Gr3DRTuYTMBL7g /wEyJighbkGtAjpAvc3dugOMVCD8MqCjW6Fur2qjxQ6jrggwR8I5sSpHkI9shMJ4 E6dygzWoTb94rxm1qH1CtwRNcAnIxSIfUFDnNi7PgGMg9P3+HQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFI/ghg+L+1qtad4U8bdJDZBqYcMrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j ZGJlNWRkNC1iOWZhLTQwMjEtODdhMS0zMDAyZjgwY2M0NDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NkYmU1ZGQ0LWI5ZmEtNDAyMS04 N2ExLTMwMDJmODBjYzQ0OS9jZGJlNWRkNC1iOWZhLTQwMjEtODdhMS0zMDAyZjgw Y2M0NDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjJQwDgQCAAIwCAMGACYC9goAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ALwl2GDnMJqPugpxrFKzqeAINUUAFq2JalzoTITCh4FkVzBgZa+x+LmO6ygZNj0Z 5y5n42ZnBGzFXAFyeqrlZC6gLBuuWEtPbJfb8TBfR+lid1FFH0Fs87IQ7VbHVgUc 3Qu784z+Ft60sod1cD4cgCd/uKKhW3K/YXcIc1pWk25ZQzjECR9H4ItCXojKqd08 97gZGInsVd7icx1jRhrCPbepxZ8ZXlCKXsOrNe3QsTMdwbl/7wqGegJbzHMyOvwC YlRKOXtsv7MdHJJzbdja5772NkUi1U3WIg/K/rBP+irTB/Plvf+6FUI/8jnOmVy3 CK7ifpnlEtfTeWnKdvz6R/I= -----END CERTIFICATE-----Generated at Thu Nov 5 18:54:48 2026 by rpki-client