$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25.cer File: fab1a958-ded9-4a94-97d9-0ff41a67ab25.cer (raw, json) Hash identifier: htBFh3CmnvPRV93CfIlPGsiTFz0eM4UDwOgV76y7+hU= Subject key identifier: F5:8D:66:1A:71:A8:F2:70:03:41:53:6D:90:C9:C3:61:5F:FA:7C:91 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F51CB1E98E1357AF81CBEDAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Sep 2026 00:45:11 +0000 Certificate not after: Sun 31 Dec 2028 01:45:11 +0000 Subordinate resources: IP: 169.199.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:cb:1e:98:e1:35:7a:f8:1c:be:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 28 00:45:11 2026 GMT Not After : Dec 31 01:45:11 2028 GMT Subject: CN=fab1a958-ded9-4a94-97d9-0ff41a67ab25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:f1:54:d3:3f:89:55:a8:c4:b9:55:ce:ba: 4b:2e:49:f8:08:5f:cb:b5:69:38:45:ef:ed:76:58: 5e:e0:19:32:28:14:d4:e0:00:f8:46:00:60:85:bf: 52:f1:4b:76:9e:55:25:f9:f1:82:3a:01:3a:0b:10: 94:69:58:9b:1c:1e:d3:12:4a:4c:37:1a:63:3b:d6: c6:8d:84:9d:44:29:9f:2c:e2:42:b2:4e:72:01:c4: 42:0e:68:f7:4e:1e:2a:bd:17:9d:56:9e:97:bc:7c: e4:67:11:d5:2d:30:15:fd:3e:00:ac:da:5d:fa:08: 40:92:ec:60:d0:93:f0:24:d0:48:86:99:33:10:8f: d9:89:dc:85:3b:48:0e:c7:53:fd:98:61:8e:a1:d7: 4e:83:a9:54:c5:1a:1c:27:97:56:52:86:a5:80:bb: 1b:4a:b3:82:28:6a:9d:df:c8:8f:69:b6:8d:f8:e0: a6:29:6d:98:f3:ef:40:53:b8:dd:e8:83:5b:c9:d1: 4a:6a:7c:42:99:ec:20:23:f9:7d:23:ff:32:2e:ef: 6c:03:92:8d:e4:7d:6b:b4:12:84:a1:fd:7b:10:c2: ef:cb:7d:2b:7a:62:fa:2c:39:63:1d:55:4e:5d:70: ef:8b:54:1e:4f:36:51:22:cd:08:0c:c9:7b:df:7b: a4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8D:66:1A:71:A8:F2:70:03:41:53:6D:90:C9:C3:61:5F:FA:7C:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 169.199.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:57:f0:9f:62:a1:90:cc:48:ca:7c:2f:63:ab:2f:10:0e:ee: 10:cd:f1:42:f8:7c:09:f0:09:ed:78:29:da:fb:31:7f:a8:a6: 6a:7d:ae:93:43:cc:a4:99:32:5f:99:08:8b:ee:5f:8e:cd:15: 22:12:ea:6e:fc:89:f3:8d:01:ae:2a:28:d6:3d:fc:4f:4b:d6: 25:20:dc:57:51:e0:83:03:1a:2b:f8:1c:3e:0f:d7:3a:40:b9: 39:ee:5c:1b:97:05:f2:5e:34:3d:9a:c7:3f:b9:ea:44:2a:ed: 18:ff:8e:2b:88:08:69:e2:da:79:50:c2:bb:84:eb:5e:ce:6e: 60:d4:dc:0c:cc:96:1a:cf:db:5b:5a:f3:85:f8:db:e0:2a:5a: 8f:77:ef:3c:a1:00:30:7c:ff:0a:b1:ab:4c:0d:1d:78:13:47: e2:39:fa:2e:5b:3e:02:2c:31:32:c5:b9:d3:47:04:44:41:0c: 15:dd:9f:3a:62:f6:04:5e:3a:50:f7:c1:06:03:8b:0e:95:86: b4:a7:d5:66:28:93:8a:b7:05:97:36:a8:85:ff:52:e4:3e:16: 21:e5:84:65:84:d6:6a:ea:cc:c1:6f:8c:1e:e3:a9:f9:b9:6f: 8a:0e:4c:92:e3:34:d2:4e:47:f3:e3:46:80:ad:b9:9e:8a:b0: 1c:27:d6:ca -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE9Ryx6Y4TV6+By+2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkyODAwNDUxMVoXDTI4MTIzMTAxNDUxMVowLzEtMCsGA1UEAxMk ZmFiMWE5NTgtZGVkOS00YTk0LTk3ZDktMGZmNDFhNjdhYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk/xVNM/iVWoxLlVzrpLLkn4CF/LtWk4Re/t dlhe4BkyKBTU4AD4RgBghb9S8Ut2nlUl+fGCOgE6CxCUaVibHB7TEkpMNxpjO9bG jYSdRCmfLOJCsk5yAcRCDmj3Th4qvRedVp6XvHzkZxHVLTAV/T4ArNpd+ghAkuxg 0JPwJNBIhpkzEI/ZidyFO0gOx1P9mGGOoddOg6lUxRocJ5dWUoalgLsbSrOCKGqd 38iPabaN+OCmKW2Y8+9AU7jd6INbydFKanxCmewgI/l9I/8yLu9sA5KN5H1rtBKE of17EMLvy30remL6LDljHVVOXXDvi1QeTzZRIs0IDMl733uknQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFPWNZhpxqPJwA0FTbZDJw2Ff+nyRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m YWIxYTk1OC1kZWQ5LTRhOTQtOTdkOS0wZmY0MWE2N2FiMjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ZhYjFhOTU4LWRlZDktNGE5NC05 N2Q5LTBmZjQxYTY3YWIyNS9mYWIxYTk1OC1kZWQ5LTRhOTQtOTdkOS0wZmY0MWE2 N2FiMjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCpxzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBuV/CfYqGQzEjKfC9jqy8Q Du4QzfFC+HwJ8AnteCna+zF/qKZqfa6TQ8ykmTJfmQiL7l+OzRUiEupu/InzjQGu KijWPfxPS9YlINxXUeCDAxor+Bw+D9c6QLk57lwblwXyXjQ9msc/uepEKu0Y/44r iAhp4tp5UMK7hOtezm5g1NwMzJYaz9tbWvOF+NvgKlqPd+88oQAwfP8KsatMDR14 E0fiOfouWz4CLDEyxbnTRwREQQwV3Z86YvYEXjpQ98EGA4sOlYa0p9VmKJOKtwWX NqiF/1LkPhYh5YRlhNZq6szBb4we46n5uW+KDkyS4zTSTkfz40aArbmeirAcJ9bK -----END CERTIFICATE-----Generated at Sat Oct 3 15:41:20 2026 by rpki-client