$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer File: 0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer (raw, json) Hash identifier: JdWZTHKogdsCtk5LxrhKokSNPLlAd3n9K5jwiDbso7g= Subject key identifier: 75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584E5B18E891CFCF46DABFCA99C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 15:57:16 +0000 Certificate not after: Mon 29 Nov 2027 14:37:51 +0000 Subordinate resources: AS: 21939 AS: 402048 -- 402049 IP: 23.144.148.0/24 IP: 192.172.247.0/24 IP: 2602:f586::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:18:e8:91:cf:cf:46:da:bf:ca:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 1 15:57:16 2026 GMT Not After : Nov 29 14:37:51 2027 GMT Subject: CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:2f:ce:1f:6c:08:12:c9:03:f9:8f:92:70: 30:44:c9:5a:9a:2f:09:ea:77:1c:35:92:ea:b2:b6: 4f:12:7d:de:52:b8:8d:a8:4b:93:bc:56:46:ef:57: 46:13:28:da:b2:aa:62:bf:ad:b7:ed:bb:f8:60:ef: dc:78:6a:f9:40:ae:0d:25:e2:36:6e:a9:48:3f:ce: 45:48:67:7a:bf:16:76:41:ff:17:54:23:f0:8d:1a: 17:67:5d:61:eb:41:70:cc:37:09:d3:cd:37:68:5a: 7d:0a:ea:43:c2:0c:d7:53:e7:7e:63:90:40:26:57: bc:b9:4a:a2:5d:f5:8d:f4:8e:0c:9d:82:1f:68:d6: ef:2c:a1:df:71:e5:4e:13:ec:43:76:1f:4e:9f:aa: e6:6d:d2:ee:f9:96:71:e3:46:9d:77:61:b7:65:c4: be:77:c0:a4:c2:8b:13:44:1e:6b:96:f2:76:19:df: f3:14:76:1d:3c:66:ed:51:13:e4:9f:d9:66:1e:9d: e9:7a:c4:c1:de:da:90:1b:fa:d6:c0:13:f7:61:99: 42:25:3e:ce:f2:9c:31:39:67:2c:00:a8:c3:0a:74: cd:b5:80:74:76:de:d4:3f:cc:79:52:c9:af:28:24: 6d:9d:65:9e:e2:90:3b:9f:39:90:4f:bf:3d:cf:71: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.144.148.0/24 192.172.247.0/24 IPv6: 2602:f586::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21939 402048-402049 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b1:95:2e:34:18:e3:50:12:0a:f3:b3:0e:3e:c9:e9:a8:18: c3:7e:e1:2d:11:aa:10:75:01:89:34:56:12:7c:8a:a3:e6:0d: 19:70:91:63:4c:0a:01:ef:af:81:fb:11:80:74:83:1a:b8:30: 9b:d0:1e:d7:b5:20:fc:44:c3:a0:e4:8f:6f:df:00:f1:25:3e: bc:5b:97:6b:10:bf:30:cf:3a:8f:e5:e8:dc:87:6e:1d:66:49: 4c:6b:03:ba:89:1a:85:83:2f:e2:6a:b8:86:65:17:54:3a:7a: c4:cb:34:ab:01:6e:8c:c8:51:9a:f7:c8:07:52:8e:4b:53:77: 29:a3:9f:68:4b:78:4b:8c:d5:c3:28:39:b5:af:98:60:37:9e: 58:f7:74:73:5a:39:a6:59:d1:9b:54:41:e2:c5:fc:7a:38:f3: 8b:57:f6:8a:d9:87:67:ee:52:d4:52:63:26:8c:6b:cf:45:bf: bc:07:c5:28:c3:22:93:14:68:e8:ab:01:34:69:9d:da:de:80: 4f:a3:56:2e:a3:ba:5e:5e:6a:9f:85:2a:b5:ca:2b:4c:bd:10: da:e4:bc:75:10:37:9e:63:31:87:76:6e:05:bc:a5:ff:27:ad: 0d:69:c5:0b:de:08:ed:99:7d:5b:23:cf:9f:85:26:7a:e9:de: 46:cb:86:82 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWE5bGOiRz89G2r/KmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MDcwMTE1NTcxNloXDTI3MTEyOTE0Mzc1MVowLzEtMCsGA1UEAxMk MGI2MWRiOGItNTFkNi00NjRjLTlkZTktNmUwYTdiNmEzZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOYvzh9sCBLJA/mPknAwRMlami8J6nccNZLq srZPEn3eUriNqEuTvFZG71dGEyjasqpiv6237bv4YO/ceGr5QK4NJeI2bqlIP85F SGd6vxZ2Qf8XVCPwjRoXZ11h60FwzDcJ0803aFp9CupDwgzXU+d+Y5BAJle8uUqi XfWN9I4MnYIfaNbvLKHfceVOE+xDdh9On6rmbdLu+ZZx40add2G3ZcS+d8CkwosT RB5rlvJ2Gd/zFHYdPGbtURPkn9lmHp3pesTB3tqQG/rWwBP3YZlCJT7O8pwxOWcs AKjDCnTNtYB0dt7UP8x5UsmvKCRtnWWe4pA7nzmQT789z3H4ZQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFHUtKqGbWVUFmAtuBYzdNPX6/jJPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8w YjYxZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBhN2I2YTNmNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzBiNjFkYjhiLTUxZDYtNDY0Yy05 ZGU5LTZlMGE3YjZhM2Y1ZS8wYjYxZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBhN2I2 YTNmNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkJQDBADArPcwDgQCAAIwCAMGACYC9YYAMCUG CCsGAQUFBwEIAQH/BBYwFKASMBACAlWzMAoCAwYigAIDBiKBMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIex lS40GONQEgrzsw4+yemoGMN+4S0RqhB1AYk0VhJ8iqPmDRlwkWNMCgHvr4H7EYB0 gxq4MJvQHte1IPxEw6Dkj2/fAPElPrxbl2sQvzDPOo/l6NyHbh1mSUxrA7qJGoWD L+JquIZlF1Q6esTLNKsBbozIUZr3yAdSjktTdymjn2hLeEuM1cMoObWvmGA3nlj3 dHNaOaZZ0ZtUQeLF/Ho484tX9orZh2fuUtRSYyaMa89Fv7wHxSjDIpMUaOirATRp ndregE+jVi6jul5eap+FKrXKK0y9ENrkvHUQN55jMYd2bgW8pf8nrQ1pxQveCO2Z fVsjz5+FJnrp3kbLhoI= -----END CERTIFICATE-----Generated at Fri Jul 24 08:20:30 2026 by rpki-client