$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer File: 2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer (raw, json) Hash identifier: r6Kim55dcvBRgbRVI+qnIUZsK1qjwconHmyo3eQ3WIo= Subject key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584FC9F45141BE689E2896758280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Nov 2026 01:45:12 +0000 Certificate not after: Mon 12 Feb 2029 01:45:12 +0000 Subordinate resources: AS: 12037 IP: 151.174.0.0/16 IP: 167.176.0.0/16 IP: 192.147.69.0/24 IP: 2602:80c:b000::/40 IP: 2620:0:670::/47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c9:f4:51:41:be:68:9e:28:96:75:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Nov 10 01:45:12 2026 GMT Not After : Feb 12 01:45:12 2029 GMT Subject: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:75:15:f0:71:6a:d7:28:0b:aa:7b:0a:15:d0: d0:56:ce:ad:e4:af:90:8a:dd:08:73:10:55:4c:e3: bc:64:85:99:03:84:5a:47:02:b8:19:94:b0:fb:be: 32:51:74:d9:c1:b9:49:5d:62:5d:92:2f:0a:4b:0f: c0:3f:0e:00:db:34:cc:aa:9a:e4:95:be:79:1f:80: bf:cb:42:a2:5e:c8:cd:13:64:4b:b1:ee:70:04:b5: b8:45:9d:df:6a:9a:a5:38:46:5f:a3:6d:47:83:cd: 74:29:a0:f4:7b:28:b5:85:99:7a:eb:25:27:77:95: f7:8a:d6:62:55:81:40:87:13:5b:39:6c:be:d2:62: 1c:97:1e:c6:15:2c:06:55:ef:32:a5:8b:fa:cf:7b: b2:09:7b:d2:d0:89:42:33:7a:b5:73:6d:e8:67:0b: 74:9c:9c:00:98:10:0f:d9:6b:e7:22:14:e7:17:f0: ec:83:21:74:2c:20:2c:fe:19:16:58:66:cc:5e:bc: 52:c2:6d:97:e8:22:4f:ca:df:0a:9b:79:8e:1e:d3: 2a:15:62:bd:e3:38:90:a3:a8:7d:05:6e:ba:1c:a3: 19:b3:4c:a7:05:70:8e:04:b7:a6:24:6f:29:2b:c5: 0c:89:49:35:c4:0f:33:66:ba:1a:b3:0a:9e:79:f4: 40:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 151.174.0.0/16 167.176.0.0/16 192.147.69.0/24 IPv6: 2602:80c:b000::/40 2620:0:670::/47 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12037 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:80:64:3d:26:23:4a:0f:1b:9f:cb:31:43:b3:00:79:86:35: 5a:b0:66:d1:8d:f9:d1:f9:09:db:eb:dc:5a:d3:69:58:7d:85: 43:06:fe:2a:97:33:c3:47:5b:50:34:26:14:06:2d:ef:fa:eb: 14:06:4d:bf:7e:f2:d2:aa:5f:c6:78:aa:e0:34:97:87:e7:3a: 74:d9:b7:81:a3:30:74:a8:d5:74:5f:86:ff:48:fb:94:5b:93: 8a:d4:3b:6b:07:32:4e:9e:ba:6e:11:15:ba:4c:9e:72:2a:ca: 54:d6:a9:fd:06:55:0f:99:1e:99:2a:e3:fd:79:c7:a4:be:84: a2:ae:64:e1:df:05:90:d7:a6:53:cf:9b:0c:a1:fd:a2:17:cb: cf:ae:d0:3c:62:37:31:90:ab:0c:1c:24:e2:6e:b0:93:d3:05: 34:6e:c0:a1:17:5e:94:9f:3f:d2:ad:f9:cc:fc:97:ac:7f:70: ac:de:78:11:e6:0f:65:e5:44:61:95:b9:96:28:bc:12:75:7c: fb:60:ba:7a:a7:a0:7b:5a:11:23:a9:2d:67:f8:d1:68:2a:1d: bb:97:13:c5:79:ea:61:c7:d3:fa:d0:ba:c5:42:73:ff:cc:7b: 9f:19:2b:2d:75:d9:14:85:d9:f9:2b:cb:11:bd:08:d5:27:42: ae:8f:02:d1 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWE/J9FFBvmieKJZ1goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTExMDAxNDUxMloXDTI5MDIxMjAxNDUxMlowLzEtMCsGA1UEAxMk MmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBmODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3UV8HFq1ygLqnsKFdDQVs6t5K+Qit0IcxBV TOO8ZIWZA4RaRwK4GZSw+74yUXTZwblJXWJdki8KSw/APw4A2zTMqprklb55H4C/ y0KiXsjNE2RLse5wBLW4RZ3fapqlOEZfo21Hg810KaD0eyi1hZl66yUnd5X3itZi VYFAhxNbOWy+0mIclx7GFSwGVe8ypYv6z3uyCXvS0IlCM3q1c23oZwt0nJwAmBAP 2WvnIhTnF/DsgyF0LCAs/hkWWGbMXrxSwm2X6CJPyt8Km3mOHtMqFWK94ziQo6h9 BW66HKMZs0ynBXCOBLemJG8pK8UMiUk1xA8zZroaswqeefRAqwIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFNtIi8CekoKRNvmahJ2MBO/4wGg7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y ZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzJkMmNiOWVmLTVmYjctNDNmZS1i Y2M1LTBhMTBiNzUwZjg4YS8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1 MGY4OGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMBYEAgABMBADAwCXrgMDAKewAwQAwJNFMBcEAgACMBEDBgAmAggM sAMHASYgAAAGcDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIvBTBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAW gGQ9JiNKDxufyzFDswB5hjVasGbRjfnR+Qnb69xa02lYfYVDBv4qlzPDR1tQNCYU Bi3v+usUBk2/fvLSql/GeKrgNJeH5zp02beBozB0qNV0X4b/SPuUW5OK1DtrBzJO nrpuERW6TJ5yKspU1qn9BlUPmR6ZKuP9ecekvoSirmTh3wWQ16ZTz5sMof2iF8vP rtA8YjcxkKsMHCTibrCT0wU0bsChF16Unz/SrfnM/Jesf3Cs3ngR5g9l5URhlbmW KLwSdXz7YLp6p6B7WhEjqS1n+NFoKh27lxPFeephx9P60LrFQnP/zHufGSstddkU hdn5K8sRvQjVJ0KujwLR -----END CERTIFICATE-----Generated at Sat Nov 14 20:46:31 2026 by rpki-client