$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer File: e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer (raw, json) Hash identifier: nTYhqAGmlRDVCrFacosJu/QDu0yzTr9+I48BrOANwGc= Subject key identifier: 2B:01:3A:6A:59:99:92:D2:4B:EF:36:05:2F:65:6B:EC:D2:D7:1E:FC Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F8F362C7792F22CCC5AB72980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Oct 2026 00:45:12 +0000 Certificate not after: Mon 22 Jan 2029 01:45:12 +0000 Subordinate resources: IP: 23.140.204.0/24 IP: 2602:f607::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:36:2c:77:92:f2:2c:cc:5a:b7:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 20 00:45:12 2026 GMT Not After : Jan 22 01:45:12 2029 GMT Subject: CN=e1c66f08-5c7f-40e3-8548-bff01ed700d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dc:e4:b3:85:a6:c1:6e:50:1d:04:fc:b7:03: 44:2f:db:8c:9f:de:53:7e:c4:c0:b9:a4:b9:9c:a1: 29:c3:00:8a:8d:77:a4:b5:9b:95:d4:31:d8:a5:a1: d4:c0:41:0c:13:bd:12:80:5d:e4:7e:33:64:b4:6f: 00:bb:f5:2a:0e:cd:70:d0:2b:4b:8b:d2:c4:6d:91: 3f:86:2e:92:33:37:10:bc:cb:6f:f6:6f:e7:4f:93: c5:a1:4a:81:a0:d7:fa:97:fc:ec:e0:00:87:98:c9: 0c:b0:0e:e6:6f:4f:19:75:aa:69:98:ea:21:65:bc: c4:9a:19:57:fe:0f:91:fa:00:50:5a:2c:cd:8a:59: fc:af:bc:b0:fa:74:06:7d:5e:fb:64:87:b5:eb:d6: fc:43:ea:bc:56:7b:92:ae:ec:d9:a6:1e:06:cc:72: 92:00:03:af:1b:a3:c0:32:6c:72:bd:99:be:a8:1b: 99:28:30:95:99:dc:8e:d9:b8:0a:79:8d:b9:26:39: b1:67:97:b9:6f:5c:81:42:8e:90:1f:37:e3:85:ba: 61:af:22:ad:b0:1d:5b:2a:1a:a9:95:d3:01:ce:73: 42:10:b2:53:41:0d:67:ea:9f:18:f9:1c:98:d8:e3: af:34:46:0b:bd:77:fb:f0:73:2f:8e:c2:e3:bb:e7: 8a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:01:3A:6A:59:99:92:D2:4B:EF:36:05:2F:65:6B:EC:D2:D7:1E:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.140.204.0/24 IPv6: 2602:f607::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bf:3a:b4:34:3c:a1:62:a4:de:df:48:26:71:a5:3f:ea:44: 11:d5:9b:fa:d1:7b:5b:22:16:ae:05:fa:71:14:f0:51:c7:ae: 48:ed:ed:9e:85:9b:20:d0:4d:af:98:9b:94:b5:ec:f7:16:6c: 7a:51:78:b6:e2:d5:43:e0:b1:fa:15:5f:de:3e:8e:d6:15:78: 07:f2:a0:69:80:5e:7d:e7:9a:df:f0:12:3b:41:b3:58:60:93: 3a:ab:15:6d:08:ff:16:52:91:ff:22:6a:ea:79:b9:51:a8:7a: 7c:c3:33:82:ab:6f:d9:ca:3f:c8:8f:67:c1:a0:d4:56:91:f4: a8:8f:4b:a6:ac:14:80:d4:e8:af:96:c0:fb:35:bb:a0:9b:b8: 6a:43:21:0a:15:03:86:b7:ee:a9:ea:3a:85:25:d7:17:34:25: 56:98:c4:02:60:7e:79:8f:cf:5b:bd:a0:e1:78:77:49:14:32: 49:83:05:6a:65:58:3d:3f:76:cd:ad:4c:7d:3b:9d:3a:1d:59: 74:9e:df:d0:c3:5f:be:c3:b5:04:84:b3:ab:4f:d5:74:1b:82: 32:b2:ed:47:55:9d:94:07:79:b3:82:85:69:63:5b:fb:94:f0: 12:9e:55:11:3e:64:14:01:0b:d4:03:d8:05:4c:95:61:bb:cd: ff:17:e7:5f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+PNix3kvIszFq3KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTAyMDAwNDUxMloXDTI5MDEyMjAxNDUxMlowLzEtMCsGA1UEAxMk ZTFjNjZmMDgtNWM3Zi00MGUzLTg1NDgtYmZmMDFlZDcwMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNzks4WmwW5QHQT8twNEL9uMn95TfsTAuaS5 nKEpwwCKjXektZuV1DHYpaHUwEEME70SgF3kfjNktG8Au/UqDs1w0CtLi9LEbZE/ hi6SMzcQvMtv9m/nT5PFoUqBoNf6l/zs4ACHmMkMsA7mb08ZdappmOohZbzEmhlX /g+R+gBQWizNiln8r7yw+nQGfV77ZIe169b8Q+q8VnuSruzZph4GzHKSAAOvG6PA MmxyvZm+qBuZKDCVmdyO2bgKeY25JjmxZ5e5b1yBQo6QHzfjhbphryKtsB1bKhqp ldMBznNCELJTQQ1n6p8Y+RyY2OOvNEYLvXf78HMvjsLju+eKKwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFCsBOmpZmZLSS+82BS9la+zS1x78MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9l MWM2NmYwOC01YzdmLTQwZTMtODU0OC1iZmYwMWVkNzAwZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2UxYzY2ZjA4LTVjN2YtNDBlMy04 NTQ4LWJmZjAxZWQ3MDBkNS9lMWM2NmYwOC01YzdmLTQwZTMtODU0OC1iZmYwMWVk NzAwZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjMwwDgQCAAIwCAMGACYC9gcAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEy/OrQ0PKFipN7fSCZxpT/qRBHVm/rRe1siFq4F+nEU8FHHrkjt7Z6FmyDQTa+Y m5S17PcWbHpReLbi1UPgsfoVX94+jtYVeAfyoGmAXn3nmt/wEjtBs1hgkzqrFW0I /xZSkf8iaup5uVGoenzDM4Krb9nKP8iPZ8Gg1FaR9KiPS6asFIDU6K+WwPs1u6Cb uGpDIQoVA4a37qnqOoUl1xc0JVaYxAJgfnmPz1u9oOF4d0kUMkmDBWplWD0/ds2t TH07nTodWXSe39DDX77DtQSEs6tP1XQbgjKy7UdVnZQHebOChWljW/uU8BKeVRE+ ZBQBC9QD2AVMlWG7zf8X518= -----END CERTIFICATE-----Generated at Wed Nov 4 07:32:57 2026 by rpki-client