$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.cer File: 9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.cer (raw, json) Hash identifier: pWDNjrklvqcfjzn6Zqd7Vc3AyVR4ljJ/qwwt+31gZAA= Subject key identifier: 36:42:41:2A:62:07:B8:AF:5D:59:E1:95:B2:7C:05:A2:A2:5A:E2:96 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584D08E56F8C8C4572F9928B0B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Mar 2026 12:30:20 +0000 Certificate not after: Wed 01 Dec 2027 17:30:11 +0000 Subordinate resources: AS: 401822 IP: 192.104.11.0/24 IP: 2602:f43e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:e5:6f:8c:8c:45:72:f9:92:8b:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Mar 2 12:30:20 2026 GMT Not After : Dec 1 17:30:11 2027 GMT Subject: CN=9f3a9b3e-7348-40a4-9468-47a3d1edd5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:8c:68:9e:0c:bb:88:ea:96:17:a1:2c:45: 6e:0d:de:65:cc:ad:be:7b:4f:d4:0c:1d:13:ec:44: bc:4e:ba:44:f3:cc:6c:de:f3:8c:f8:d4:d1:86:50: 57:87:c8:6e:6e:c1:09:1c:64:7a:8e:5d:90:2c:d3: 9b:a9:35:3c:a1:73:5b:87:e9:a8:6d:f5:3e:84:ee: 3a:4a:71:f9:4e:25:32:59:10:ef:41:03:df:09:fa: c1:af:43:0f:85:95:4e:a9:83:1f:78:4c:f3:af:c7: 12:f0:54:cf:03:e3:2c:fd:9a:f7:36:14:31:9c:09: 3b:96:18:50:92:b7:b9:35:34:ec:fe:39:d1:26:1e: 66:f9:57:28:b2:77:52:12:74:f6:7c:18:0f:c2:ce: be:67:4d:4c:ec:13:ed:2a:9c:1c:e1:56:9a:91:c0: 35:a2:9e:4c:71:3a:af:0a:18:9e:af:46:cf:ac:31: 3c:3f:c7:5c:ef:ba:87:82:8f:e7:57:06:9d:d9:af: b3:55:a6:49:23:12:4b:db:2d:f1:df:d0:58:28:1b: ee:77:16:1e:15:29:ad:47:92:85:4e:b8:f1:f9:fa: fb:e2:4e:94:ee:f6:b0:0c:6d:fb:87:f9:33:f7:b0: 29:94:81:95:05:b6:fc:0f:6a:1a:bf:6e:62:89:9a: 96:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:42:41:2A:62:07:B8:AF:5D:59:E1:95:B2:7C:05:A2:A2:5A:E2:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 192.104.11.0/24 IPv6: 2602:f43e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401822 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:9d:29:ce:e5:91:01:df:8a:23:48:3f:05:57:80:dc:87:31: c9:43:f3:7b:51:c4:33:49:0d:76:50:93:eb:fa:43:59:d1:46: 40:f7:cb:1a:33:75:59:b4:43:f1:5c:dd:70:44:f2:1c:93:3b: 87:64:03:6a:99:95:10:66:40:72:72:6a:54:95:3a:7f:d9:4e: f0:17:eb:43:98:32:43:84:f8:d8:98:6a:18:ce:ef:ae:1b:71: 3b:cb:6e:25:f5:e7:c5:5f:56:fb:fb:ee:c8:03:13:56:43:6e: 3f:b1:3c:a4:57:3c:3d:89:37:4d:9b:4d:38:ce:20:65:ff:bb: ef:ec:73:bb:01:d1:2b:37:1e:da:7a:3a:77:3d:f3:98:51:cf: 3e:f6:24:d1:b5:2a:d4:53:bd:72:27:c3:9f:0e:f0:a3:a4:56: b2:2d:55:12:7c:df:ac:04:52:92:71:2c:e1:bb:70:39:85:38: 1d:b8:0c:c6:0e:d9:75:8d:f8:bc:65:9e:7c:c1:5a:f4:c0:08: c2:24:d1:ba:c6:16:bf:8f:7d:da:01:6c:d5:3f:7c:6b:e1:64: 06:54:91:e6:90:a6:e6:26:cb:32:38:21:9e:76:e1:5a:8e:8f: ea:a3:be:dd:f6:06:7b:32:b9:43:f8:a0:66:91:c8:5a:f0:4d: e2:c5:21:21 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0I5W+MjEVy+ZKLCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MDMwMjEyMzAyMFoXDTI3MTIwMTE3MzAxMVowLzEtMCsGA1UEAxMk OWYzYTliM2UtNzM0OC00MGE0LTk0NjgtNDdhM2QxZWRkNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhKMaJ4Mu4jqlhehLEVuDd5lzK2+e0/UDB0T 7ES8TrpE88xs3vOM+NTRhlBXh8hubsEJHGR6jl2QLNObqTU8oXNbh+mobfU+hO46 SnH5TiUyWRDvQQPfCfrBr0MPhZVOqYMfeEzzr8cS8FTPA+Ms/Zr3NhQxnAk7lhhQ kre5NTTs/jnRJh5m+VcosndSEnT2fBgPws6+Z01M7BPtKpwc4VaakcA1op5McTqv Chier0bPrDE8P8dc77qHgo/nVwad2a+zVaZJIxJL2y3x39BYKBvudxYeFSmtR5KF Trjx+fr74k6U7vawDG37h/kz97AplIGVBbb8D2oav25iiZqWLQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDZCQSpiB7ivXVnhlbJ8BaKiWuKWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 ZjNhOWIzZS03MzQ4LTQwYTQtOTQ2OC00N2EzZDFlZGQ1Y2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzlmM2E5YjNlLTczNDgtNDBhNC05 NDY4LTQ3YTNkMWVkZDVjZS85ZjNhOWIzZS03MzQ4LTQwYTQtOTQ2OC00N2EzZDFl ZGQ1Y2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADAaAswDgQCAAIwCAMGACYC9D4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYhnjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC7nSnO5ZEB34ojSD8FV4DchzHJ Q/N7UcQzSQ12UJPr+kNZ0UZA98saM3VZtEPxXN1wRPIckzuHZANqmZUQZkBycmpU lTp/2U7wF+tDmDJDhPjYmGoYzu+uG3E7y24l9efFX1b7++7IAxNWQ24/sTykVzw9 iTdNm004ziBl/7vv7HO7AdErNx7aejp3PfOYUc8+9iTRtSrUU71yJ8OfDvCjpFay LVUSfN+sBFKScSzhu3A5hTgduAzGDtl1jfi8ZZ58wVr0wAjCJNG6xha/j33aAWzV P3xr4WQGVJHmkKbmJssyOCGeduFajo/qo77d9gZ7MrlD+KBmkcha8E3ixSEh -----END CERTIFICATE-----Generated at Sat Mar 28 10:40:55 2026 by rpki-client