$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer File: cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer (raw, json) Hash identifier: XIju73+B8g+yqr8ZYmW5kXasB7jUCzHlJHs6SroaRXk= Subject key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584FC9F4515994F0AA378A8E0200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Nov 2026 01:45:12 +0000 Certificate not after: Mon 12 Feb 2029 01:45:12 +0000 Subordinate resources: AS: 15334 AS: 16474 AS: 21621 IP: 162.223.232.0/21 IP: 199.7.200.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c9:f4:51:59:94:f0:aa:37:8a:8e:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Nov 10 01:45:12 2026 GMT Not After : Feb 12 01:45:12 2029 GMT Subject: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:36:91:6a:88:8f:a9:63:e1:c9:04:bb:f9:42: f0:05:a8:ba:d2:bd:7f:2a:b1:fb:16:42:ba:ec:aa: ea:a9:7d:3b:f1:da:84:42:56:41:48:a4:55:66:14: 39:69:29:ef:18:f7:9a:86:6d:0d:08:aa:e1:c1:d0: 63:99:7a:b1:91:45:19:bc:13:46:48:fa:00:d7:fd: 9a:7b:1a:d8:01:1f:e5:5b:1c:bb:50:cd:50:7e:e9: ec:35:66:fe:42:eb:25:cd:20:14:b1:3b:3f:ed:8c: be:ff:74:74:e5:8b:04:cd:16:32:ae:31:7f:99:3d: f9:9b:82:d3:bd:85:aa:12:c0:a6:4e:5f:b8:86:b8: ce:2d:89:44:8e:1a:4b:d2:57:e4:97:c9:87:e1:1f: 28:4f:8e:fe:ef:ac:f7:e6:a9:fc:ed:e8:9a:40:d6: 18:a9:fb:ec:86:9b:06:ad:95:df:f4:ae:c3:fd:03: 43:d4:a5:01:bc:21:d5:6d:f6:99:f1:d1:b7:b6:53: 8a:e3:21:5c:17:87:6b:ae:8c:e5:3b:8e:46:5f:3c: 85:3c:21:b9:1b:2f:b0:31:4b:19:85:7f:47:7e:7a: 6e:e2:98:8b:20:13:ea:be:2e:78:cb:64:89:3d:a8: f7:d8:7f:4f:a8:9c:eb:7f:8f:ae:21:0e:09:8c:80: 7c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 162.223.232.0/21 199.7.200.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15334 16474 21621 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b5:fb:f5:36:eb:eb:f0:88:62:2d:1b:e6:97:29:c9:b7:a2: cb:c7:3a:b1:63:2b:27:18:74:69:f3:52:b0:80:1e:e6:d7:07: 89:da:36:33:37:af:23:a9:54:f1:d1:a8:d0:22:cd:b3:ac:2b: eb:90:03:70:4b:ec:61:87:df:bc:4d:49:ef:92:22:41:4e:1b: 7d:79:d2:66:94:70:9e:1e:bb:93:5b:e7:77:00:49:7d:74:90: fc:e0:30:78:ad:24:44:d5:36:fa:df:5f:1d:df:14:65:32:1f: 6f:86:00:22:82:8b:4d:9d:66:0a:15:75:16:bc:20:60:dd:bf: 14:1e:e4:5e:df:11:91:5d:3d:64:32:49:18:e8:ec:7b:b4:2f: b1:55:d1:e8:61:56:6d:fa:6b:1f:b9:86:b6:2c:aa:99:e7:1d: 3e:de:ef:98:e0:7f:f5:74:04:f9:82:96:aa:fb:d0:f2:a8:6f: 80:bb:71:d8:72:47:24:a3:56:6d:8f:45:e5:c0:90:9d:be:eb: 5e:b5:e1:7f:6f:0d:c7:fd:33:04:98:f5:9f:3f:58:c8:a1:dc: f2:24:25:89:e7:e8:8b:a8:bf:be:40:69:72:50:6e:0a:ed:6b: dc:13:c0:9d:91:3a:35:f1:bd:3c:7c:df:5c:b0:6c:8d:15:c7: c2:8f:41:86 -----BEGIN CERTIFICATE----- MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWE/J9FFZlPCqN4qOAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTExMDAxNDUxMloXDTI5MDIxMjAxNDUxMlowLzEtMCsGA1UEAxMk Y2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZkNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTaRaoiPqWPhyQS7+ULwBai60r1/KrH7FkK6 7KrqqX078dqEQlZBSKRVZhQ5aSnvGPeahm0NCKrhwdBjmXqxkUUZvBNGSPoA1/2a exrYAR/lWxy7UM1QfunsNWb+QuslzSAUsTs/7Yy+/3R05YsEzRYyrjF/mT35m4LT vYWqEsCmTl+4hrjOLYlEjhpL0lfkl8mH4R8oT47+76z35qn87eiaQNYYqfvshpsG rZXf9K7D/QND1KUBvCHVbfaZ8dG3tlOK4yFcF4drrozlO45GXzyFPCG5Gy+wMUsZ hX9Hfnpu4piLIBPqvi54y2SJPaj32H9PqJzrf4+uIQ4JjIB8MQIDAQABo4IEKDCC BCQwHQYDVR0OBBYEFBKPg/O2UNLlH11CAqBV1rIUz6zHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j YjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NiMGU0ZTdlLTJjNzUtNDU0MS04 ZDY3LWVkMjU0M2FmZDVmMy9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNh ZmQ1ZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAOi3+gDBAPHB8gwIQYIKwYBBQUHAQgBAf8EEjAQ oA4wDAICO+YCAkBaAgJUdTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBetfv1Nuvr8IhiLRvmlynJt6LLxzqx YysnGHRp81KwgB7m1weJ2jYzN68jqVTx0ajQIs2zrCvrkANwS+xhh9+8TUnvkiJB Tht9edJmlHCeHruTW+d3AEl9dJD84DB4rSRE1Tb6318d3xRlMh9vhgAigotNnWYK FXUWvCBg3b8UHuRe3xGRXT1kMkkY6Ox7tC+xVdHoYVZt+msfuYa2LKqZ5x0+3u+Y 4H/1dAT5gpaq+9DyqG+Au3HYckcko1Ztj0XlwJCdvuteteF/bw3H/TMEmPWfP1jI odzyJCWJ5+iLqL++QGlyUG4K7WvcE8CdkTo18b08fN9csGyNFcfCj0GG -----END CERTIFICATE-----Generated at Sat Nov 14 20:46:22 2026 by rpki-client