$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d153feac-fcc1-4a30-b9b3-f6bd6a6ba397.cer File: d153feac-fcc1-4a30-b9b3-f6bd6a6ba397.cer (raw, json) Hash identifier: oF/U6SMJnvCeTimCXScSVJogJPlWLj04vWTlEwc76Sc= Subject key identifier: C8:D0:44:F8:B0:27:9F:14:F2:46:AC:56:BE:41:A8:18:43:6B:0B:0C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F35456FFF835F80211EF24200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d153feac-fcc1-4a30-b9b3-f6bd6a6ba397/d153feac-fcc1-4a30-b9b3-f6bd6a6ba397.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d153feac-fcc1-4a30-b9b3-f6bd6a6ba397/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Sep 2026 19:33:12 +0000 Certificate not after: Wed 20 Dec 2028 20:33:12 +0000 Subordinate resources: AS: 397677 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:45:6f:ff:83:5f:80:21:1e:f2:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 17 19:33:12 2026 GMT Not After : Dec 20 20:33:12 2028 GMT Subject: CN=d153feac-fcc1-4a30-b9b3-f6bd6a6ba397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bf:2d:f3:9b:cc:99:ed:88:56:78:93:c4:cd: 27:e8:10:92:58:bc:08:b8:f1:bb:25:9b:7b:80:e5: 24:66:66:1b:58:49:08:33:e4:d2:46:b5:c4:19:82: 89:35:23:ff:f8:00:66:ee:0d:0b:bc:82:2f:ac:e1: fb:cd:11:32:6a:f4:ea:de:a7:fb:49:d4:78:39:b6: c7:d4:ea:06:8f:9f:51:27:fc:df:bd:41:82:0e:39: fd:1b:40:56:0d:d7:55:7f:81:67:40:b4:d9:d9:90: c9:f2:01:62:45:74:fa:fd:6c:7e:35:d0:98:82:1d: 06:8d:de:8c:ba:07:86:eb:b9:10:6a:85:78:ec:4e: 60:c3:a0:48:0e:9a:5a:64:b5:b7:32:2d:cc:95:ab: 2c:46:74:86:6a:99:72:02:f1:9d:b8:98:68:3e:08: aa:46:ea:c0:95:3d:5a:25:2e:da:47:50:f9:29:12: 0c:64:fe:2d:f0:a6:d2:2e:9c:e6:be:00:b5:63:af: 41:35:7c:0e:c3:fc:5d:0d:fa:e2:6b:98:cb:78:d3: 4b:4b:ce:8a:bc:39:1f:64:49:93:d3:8d:44:fb:c1: 7c:f8:50:47:44:b5:cf:03:2b:5d:ae:c1:e3:85:76: 2b:ea:ce:82:82:66:d0:94:af:e7:6c:0c:a1:69:79: 1d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D0:44:F8:B0:27:9F:14:F2:46:AC:56:BE:41:A8:18:43:6B:0B:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d153feac-fcc1-4a30-b9b3-f6bd6a6ba397/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d153feac-fcc1-4a30-b9b3-f6bd6a6ba397/d153feac-fcc1-4a30-b9b3-f6bd6a6ba397.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 397677 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:75:06:c8:f6:01:b4:c6:17:cd:2f:c7:5b:26:24:80:7f:ce: 11:9b:e0:1c:2d:c2:0e:49:cb:f8:f2:1c:b1:4f:10:55:0a:a5: a8:e9:aa:95:ec:b4:0b:67:18:7b:1f:9f:d9:82:79:d7:c8:1d: f3:5b:cb:90:57:d4:21:7a:93:f9:de:0c:18:a1:96:e2:70:26: 02:02:17:55:3c:3c:54:da:31:0c:56:18:7e:42:9b:62:17:47: 60:3b:93:76:c3:58:17:bc:a9:8e:bf:98:db:8b:a8:7f:9b:c6: 98:ae:5a:41:97:fa:da:87:0e:68:1a:3b:5d:cf:c6:a5:d9:0d: 1a:33:64:d4:43:a5:16:4d:bd:3d:b7:5d:5c:8e:1a:9d:bd:3b: 59:ab:15:ea:65:f2:7e:5d:62:ee:44:4a:9f:79:e4:75:bd:24: 56:99:63:9a:63:df:22:c9:81:97:f2:b8:58:e8:14:c9:22:f9: b1:04:17:9e:3f:b9:37:da:2f:d5:a9:49:5b:40:3b:d1:74:e0: 8d:8a:76:99:91:14:5d:eb:37:96:63:69:b8:36:b9:d2:50:e6: bc:78:85:cf:f4:06:9a:94:62:4f:b0:3d:6c:a3:19:a0:59:c7: c8:fe:fe:9d:82:04:33:8b:96:34:27:3f:ab:24:92:3e:50:cf: a2:4d:91:40 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE81RW//g1+AIR7yQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MDkxNzE5MzMxMloXDTI4MTIyMDIwMzMxMlowLzEtMCsGA1UEAxMk ZDE1M2ZlYWMtZmNjMS00YTMwLWI5YjMtZjZiZDZhNmJhMzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL8t85vMme2IVniTxM0n6BCSWLwIuPG7JZt7 gOUkZmYbWEkIM+TSRrXEGYKJNSP/+ABm7g0LvIIvrOH7zREyavTq3qf7SdR4ObbH 1OoGj59RJ/zfvUGCDjn9G0BWDddVf4FnQLTZ2ZDJ8gFiRXT6/Wx+NdCYgh0Gjd6M ugeG67kQaoV47E5gw6BIDppaZLW3Mi3MlassRnSGaplyAvGduJhoPgiqRurAlT1a JS7aR1D5KRIMZP4t8KbSLpzmvgC1Y69BNXwOw/xdDfria5jLeNNLS86KvDkfZEmT 041E+8F8+FBHRLXPAytdrsHjhXYr6s6CgmbQlK/nbAyhaXkdxwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFMjQRPiwJ58U8kasVr5BqBhDawsMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k MTUzZmVhYy1mY2MxLTRhMzAtYjliMy1mNmJkNmE2YmEzOTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2QxNTNmZWFjLWZjYzEtNGEzMC1i OWIzLWY2YmQ2YTZiYTM5Ny9kMTUzZmVhYy1mY2MxLTRhMzAtYjliMy1mNmJkNmE2 YmEzOTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhFtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALN1Bsj2AbTGF80vx1smJIB/zhGb 4Bwtwg5Jy/jyHLFPEFUKpajpqpXstAtnGHsfn9mCedfIHfNby5BX1CF6k/neDBih luJwJgICF1U8PFTaMQxWGH5Cm2IXR2A7k3bDWBe8qY6/mNuLqH+bxpiuWkGX+tqH DmgaO13PxqXZDRozZNRDpRZNvT23XVyOGp29O1mrFepl8n5dYu5ESp955HW9JFaZ Y5pj3yLJgZfyuFjoFMki+bEEF54/uTfaL9WpSVtAO9F04I2KdpmRFF3rN5Zjabg2 udJQ5rx4hc/0BpqUYk+wPWyjGaBZx8j+/p2CBDOLljQnP6skkj5Qz6JNkUA= -----END CERTIFICATE-----Generated at Sat Sep 19 14:12:57 2026 by rpki-client