$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer File: df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer (raw, json) Hash identifier: 5vhBGLPh79ukMtCgFn7kOhYRsG7TbEpfYiFeOOnJmfY= Subject key identifier: E4:88:B0:54:11:17:1B:42:76:0A:5C:9B:13:1C:19:5B:92:67:D3:26 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F89A0CF3B324133DF18843600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 18 Oct 2026 00:45:12 +0000 Certificate not after: Sat 20 Jan 2029 01:45:12 +0000 Subordinate resources: IP: 192.132.27.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a0:cf:3b:32:41:33:df:18:84:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 18 00:45:12 2026 GMT Not After : Jan 20 01:45:12 2029 GMT Subject: CN=df6ef967-ca04-4afb-96ba-6e674a35f4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1d:a5:a6:23:52:56:66:5a:fe:f9:bf:bf:6a: 25:78:62:8b:e1:61:33:59:ba:45:75:e0:a4:b1:5b: ba:fc:92:a7:e5:f3:38:42:ab:04:b0:f7:2f:6f:91: 17:e4:f4:ce:06:ab:1f:6c:d0:9e:b4:fe:df:78:3b: 0c:af:30:94:9f:f4:98:91:a0:c9:6e:b3:1e:eb:91: 21:70:c4:46:21:ac:e7:18:8c:90:eb:ce:1d:b4:90: 61:33:28:8f:f0:1e:56:59:53:00:79:87:d3:fe:be: 56:1b:50:36:82:2f:2a:f4:33:8a:13:51:ed:13:a0: 54:09:e6:8b:69:c8:5b:d1:27:c2:ac:b1:dc:2d:e1: 67:e2:23:01:ba:a6:a1:b8:0e:24:4d:54:ce:c2:76: 07:cd:78:7d:1f:82:02:ab:53:35:46:63:e5:fc:78: e0:d5:f8:98:b8:ef:db:60:8d:9c:83:97:a0:19:8b: d9:bc:3c:80:62:96:7c:cd:af:55:fa:ca:be:4e:bc: ba:68:5a:51:60:83:61:5a:4e:d5:cd:18:f6:14:7d: 23:aa:70:e0:91:39:70:44:78:8e:65:4c:e3:3c:8e: d6:94:9c:75:c5:32:d2:eb:b1:f4:47:c1:3a:1b:f4: a7:7a:fd:b9:ea:6b:6b:04:9e:5a:ba:31:fd:0d:ae: 0a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:88:B0:54:11:17:1B:42:76:0A:5C:9B:13:1C:19:5B:92:67:D3:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 192.132.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:27:8f:95:d9:e0:d8:b5:b9:5a:65:75:34:3d:d5:c7:1a:0e: 58:83:b6:ef:34:36:7c:c0:7c:bb:6a:a2:7f:03:55:2f:be:75: 10:c0:02:ca:b5:e6:6e:3c:1d:83:ba:07:8c:45:5c:61:1b:3b: d9:44:7a:7e:de:da:fd:1f:61:7d:be:af:05:b9:17:23:59:56: 11:c3:8f:c5:ba:77:8f:6b:13:fe:aa:35:38:92:03:07:06:e5: 78:5d:05:e1:cf:ee:b7:55:21:6f:dc:9d:1b:80:e6:42:a4:03: 09:d7:10:c4:f4:87:53:b3:25:ae:71:9a:9d:de:79:2c:8c:8b: 66:be:03:91:73:d8:a5:38:0d:f9:17:32:86:5d:02:c3:1a:eb: 16:ab:49:e9:55:95:14:82:f5:9e:50:55:37:c5:88:3d:b0:76: 94:97:61:20:74:ea:50:e6:ca:fa:c2:4a:32:21:61:c8:db:17: bf:5c:a5:4c:42:e7:d6:a8:09:f8:66:8f:f4:bd:fe:bc:11:63: a4:e1:30:75:bf:a6:eb:4d:48:60:66:d8:be:67:d0:40:b8:b0: 20:6a:7e:3b:00:20:a6:96:07:07:87:62:92:46:fc:91:df:60: 21:f4:b9:8a:22:fe:89:ba:b3:d6:07:28:d2:ca:e2:a2:3a:3e: c2:22:2c:60 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+JoM87MkEz3xiENgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTAxODAwNDUxMloXDTI5MDEyMDAxNDUxMlowLzEtMCsGA1UEAxMk ZGY2ZWY5NjctY2EwNC00YWZiLTk2YmEtNmU2NzRhMzVmNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh2lpiNSVmZa/vm/v2oleGKL4WEzWbpFdeCk sVu6/JKn5fM4QqsEsPcvb5EX5PTOBqsfbNCetP7feDsMrzCUn/SYkaDJbrMe65Eh cMRGIaznGIyQ684dtJBhMyiP8B5WWVMAeYfT/r5WG1A2gi8q9DOKE1HtE6BUCeaL achb0SfCrLHcLeFn4iMBuqahuA4kTVTOwnYHzXh9H4ICq1M1RmPl/Hjg1fiYuO/b YI2cg5egGYvZvDyAYpZ8za9V+sq+Try6aFpRYINhWk7VzRj2FH0jqnDgkTlwRHiO ZUzjPI7WlJx1xTLS67H0R8E6G/Snev256mtrBJ5aujH9Da4KIQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOSIsFQRFxtCdgpcmxMcGVuSZ9MmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k ZjZlZjk2Ny1jYTA0LTRhZmItOTZiYS02ZTY3NGEzNWY0YTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2RmNmVmOTY3LWNhMDQtNGFmYi05 NmJhLTZlNjc0YTM1ZjRhMS9kZjZlZjk2Ny1jYTA0LTRhZmItOTZiYS02ZTY3NGEz NWY0YTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAhBswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASyePldng2LW5WmV1ND3V xxoOWIO27zQ2fMB8u2qifwNVL751EMACyrXmbjwdg7oHjEVcYRs72UR6ft7a/R9h fb6vBbkXI1lWEcOPxbp3j2sT/qo1OJIDBwbleF0F4c/ut1Uhb9ydG4DmQqQDCdcQ xPSHU7MlrnGand55LIyLZr4DkXPYpTgN+Rcyhl0CwxrrFqtJ6VWVFIL1nlBVN8WI PbB2lJdhIHTqUObK+sJKMiFhyNsXv1ylTELn1qgJ+GaP9L3+vBFjpOEwdb+m601I YGbYvmfQQLiwIGp+OwAgppYHB4dikkb8kd9gIfS5iiL+ibqz1gco0sriojo+wiIs YA== -----END CERTIFICATE-----Generated at Sat Oct 24 17:32:25 2026 by rpki-client