$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer File: a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer (raw, json) Hash identifier: kEi5Z5+VvfcBma/BsKLgUTdFcmkF4Wxzr7qarfNTSIw= Subject key identifier: 1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584D14EF9D59DDEEC9F8641DF6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Mar 2026 20:00:32 +0000 Certificate not after: Thu 11 Nov 2027 19:10:19 +0000 Subordinate resources: AS: 397978 IP: 216.234.134.0/23 IP: 2605:4240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:ef:9d:59:dd:ee:c9:f8:64:1d:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Mar 6 20:00:32 2026 GMT Not After : Nov 11 19:10:19 2027 GMT Subject: CN=a9d7f902-cc00-4175-951a-fe3a50c0ceab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:da:f8:58:15:50:69:4c:dd:eb:6e:bc:0f: 56:66:e9:79:ed:ef:ab:6b:48:b6:37:28:a9:b8:1c: 27:38:3e:65:6b:34:2d:bb:ff:e8:ea:5c:f9:8e:81: ea:70:84:68:b2:8b:f5:3d:46:8e:76:2f:b3:2e:9a: 85:9e:a8:8a:f7:0b:97:0a:87:6d:24:7b:cf:66:1e: 03:32:90:d0:28:1d:92:3c:6f:ba:66:db:73:ca:1d: 82:f7:fb:19:c9:75:32:51:06:04:d1:11:89:5e:a4: 1d:57:81:f9:05:a6:c2:cd:07:8b:6e:e5:f9:0f:06: f3:08:b5:b8:12:f1:cb:cb:23:3c:1b:55:87:c8:26: 0e:13:09:92:60:fb:2b:cf:7b:d3:e2:d0:44:3a:4a: 96:90:05:2e:ce:be:b9:2f:d6:4b:7e:72:fd:07:d2: 4d:4a:3f:71:41:4c:ae:f4:c8:ba:53:78:f0:3f:36: cb:fe:d5:fd:e8:d1:a3:70:c0:96:c9:9f:d0:8f:5e: f0:2e:14:1b:a4:ca:25:77:60:22:04:f9:3b:15:fe: f1:b2:8a:57:7f:2e:0c:0c:5d:43:fe:62:50:0f:e2: 5b:5e:46:cf:06:70:cc:b6:1a:4f:22:d1:85:2a:4a: 15:54:ce:b0:89:d4:34:f8:35:80:91:ca:bb:c0:17: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 216.234.134.0/23 IPv6: 2605:4240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397978 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a1:99:d3:d8:2e:d6:38:bc:35:ee:67:00:af:be:49:af:1d: 6d:5c:8b:5b:89:d7:4d:86:7a:b8:27:8b:25:e3:98:71:1d:cf: 23:18:e3:9d:17:2f:b2:99:68:2d:ba:73:fe:ad:a0:13:9e:0c: 66:10:c0:61:af:6c:d3:0c:29:71:e8:0d:ec:75:c1:d8:9c:48: 51:b0:05:69:5e:94:3e:5d:1d:6d:c9:1e:e7:8b:12:aa:93:2e: de:3b:87:18:ee:c5:77:d1:84:33:02:8d:b8:45:f4:e0:f0:3a: 0c:a1:94:84:d2:e3:1a:36:e9:c2:4d:4e:86:82:79:9d:aa:91: fb:b3:51:7d:b2:03:23:00:12:4f:0a:9d:1d:6e:be:c9:5d:0d: 45:34:2d:42:c8:d2:2d:8f:d7:3e:57:43:21:91:a1:b5:92:5c: 27:52:d5:a3:6a:c3:85:b5:5c:8f:96:ae:f7:f7:3c:30:78:13: 2c:83:47:eb:83:9d:ee:02:ac:ea:72:89:bb:b8:96:a0:e3:07: b7:a9:08:1f:84:21:d6:e1:c1:ef:a8:19:33:f5:7e:a1:40:f6: e9:95:ad:14:06:05:23:15:d7:a9:18:d7:c7:13:30:e5:08:4c: 2e:0e:48:60:64:be:c2:8f:da:7a:da:4e:46:95:4d:ab:6f:a7: ce:1c:4a:ae -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE0U751Z3e7J+GQd9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MDMwNjIwMDAzMloXDTI3MTExMTE5MTAxOVowLzEtMCsGA1UEAxMk YTlkN2Y5MDItY2MwMC00MTc1LTk1MWEtZmUzYTUwYzBjZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubna+FgVUGlM3etuvA9WZul57e+ra0i2Nyip uBwnOD5lazQtu//o6lz5joHqcIRosov1PUaOdi+zLpqFnqiK9wuXCodtJHvPZh4D MpDQKB2SPG+6Zttzyh2C9/sZyXUyUQYE0RGJXqQdV4H5BabCzQeLbuX5DwbzCLW4 EvHLyyM8G1WHyCYOEwmSYPsrz3vT4tBEOkqWkAUuzr65L9ZLfnL9B9JNSj9xQUyu 9Mi6U3jwPzbL/tX96NGjcMCWyZ/Qj17wLhQbpMold2AiBPk7Ff7xsopXfy4MDF1D /mJQD+JbXkbPBnDMthpPItGFKkoVVM6widQ0+DWAkcq7wBePVwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFB1zoTUiBNGuFZk3yMUAynmRrDtdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h OWQ3ZjkwMi1jYzAwLTQxNzUtOTUxYS1mZTNhNTBjMGNlYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2E5ZDdmOTAyLWNjMDAtNDE3NS05 NTFhLWZlM2E1MGMwY2VhYi9hOWQ3ZjkwMi1jYzAwLTQxNzUtOTUxYS1mZTNhNTBj MGNlYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAHY6oYwDQQCAAIwBwMFACYFQkAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhKaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD2hmdPYLtY4vDXuZwCvvkmvHW1c i1uJ102GergniyXjmHEdzyMY450XL7KZaC26c/6toBOeDGYQwGGvbNMMKXHoDex1 wdicSFGwBWlelD5dHW3JHueLEqqTLt47hxjuxXfRhDMCjbhF9ODwOgyhlITS4xo2 6cJNToaCeZ2qkfuzUX2yAyMAEk8KnR1uvsldDUU0LULI0i2P1z5XQyGRobWSXCdS 1aNqw4W1XI+Wrvf3PDB4EyyDR+uDne4CrOpyibu4lqDjB7epCB+EIdbhwe+oGTP1 fqFA9umVrRQGBSMV16kY18cTMOUITC4OSGBkvsKP2nraTkaVTatvp84cSq4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:11 2026 by rpki-client