$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd4dfbfe-c5a7-40af-ab74-e35fb6b4f245.cer File: fd4dfbfe-c5a7-40af-ab74-e35fb6b4f245.cer (raw, json) Hash identifier: AqhJu3z4svRDTyuarz52hMy7Lf8W/0l/RGPYLMr5duw= Subject key identifier: B0:02:50:2C:EF:C3:50:82:92:F6:F9:A1:4D:04:A0:71:BD:FB:8E:18 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584F3CDAFD9BA6728572B61C3420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd4dfbfe-c5a7-40af-ab74-e35fb6b4f245/fd4dfbfe-c5a7-40af-ab74-e35fb6b4f245.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd4dfbfe-c5a7-40af-ab74-e35fb6b4f245/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Sep 2026 12:45:11 +0000 Certificate not after: Sat 23 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 11189 IP: 199.204.112.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:da:fd:9b:a6:72:85:72:b6:1c:34:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 20 12:45:11 2026 GMT Not After : Dec 23 13:45:11 2028 GMT Subject: CN=fd4dfbfe-c5a7-40af-ab74-e35fb6b4f245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:61:b1:82:c2:b7:13:f8:bf:31:ac:a2:32: 5c:d3:16:97:43:8e:2d:8d:55:36:30:c4:66:69:06: b3:9b:7a:c7:c3:63:03:7c:9b:18:9b:fc:a1:e5:45: 45:22:f2:c1:00:c1:fd:38:d7:26:09:22:1a:f1:46: af:36:70:75:9f:19:ac:e8:6d:9f:01:93:6a:8f:dc: e4:bf:bb:e0:3b:b6:13:d8:7d:3b:18:85:fa:f9:3e: 0a:0b:9a:af:7b:ee:ed:ac:b5:7a:7c:e6:c1:56:37: ac:d1:36:cf:f6:77:05:1b:11:6a:47:c2:90:a5:6d: 31:60:01:1e:98:c1:9f:7d:75:f4:18:ea:00:64:a1: 16:a7:24:5c:a6:b1:d8:0d:5d:7d:c6:71:b8:c9:66: 76:8f:67:ac:33:29:4f:07:47:36:ed:12:7b:24:98: cd:a1:35:8f:45:a9:13:d6:29:52:03:f7:ea:28:41: 32:b7:bd:9b:e0:ec:fb:2e:bc:dc:54:ca:c4:d9:d5: 4c:ea:75:76:ca:a2:65:e2:ad:ce:76:93:17:79:be: 3e:59:7a:81:cf:97:22:57:d9:aa:d5:74:6b:8c:ae: ce:07:2e:16:03:e7:41:35:57:84:b4:61:78:aa:25: 29:2d:d8:03:64:15:3c:de:90:bb:a7:2f:5e:00:a8: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:02:50:2C:EF:C3:50:82:92:F6:F9:A1:4D:04:A0:71:BD:FB:8E:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd4dfbfe-c5a7-40af-ab74-e35fb6b4f245/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd4dfbfe-c5a7-40af-ab74-e35fb6b4f245/fd4dfbfe-c5a7-40af-ab74-e35fb6b4f245.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 199.204.112.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11189 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:25:be:00:ad:46:cb:dd:ce:16:1d:67:52:0b:cf:a1:85:19: 21:d1:0c:53:4d:13:fb:96:9a:e7:01:23:b8:02:f7:a0:5e:78: 01:45:dd:a1:e5:8a:4f:ce:9d:e4:96:3b:63:35:78:dd:95:bd: c7:bf:de:e1:79:e1:4b:5a:ff:9a:55:f8:04:b4:a4:14:6a:ee: 13:d2:66:68:bd:2e:d2:2a:6e:6d:ff:7e:81:c1:60:06:b6:6c: 47:ea:07:a0:3d:db:9e:01:84:78:f8:9e:f2:d1:7b:d5:21:d2: 07:25:c7:72:da:79:66:52:d2:9f:3c:5b:fe:b8:8d:c1:5d:2d: ba:b3:cc:4d:8f:6c:6b:2a:a0:15:4e:b6:fc:40:e2:88:a5:c6: 8f:fd:b7:93:e4:8f:e4:b3:89:c4:04:5e:1b:d5:af:cc:0a:4c: 2a:31:7d:b8:9d:4b:15:9e:0e:1f:8e:b9:84:06:98:40:b8:9d: 82:50:ab:41:e7:cd:63:5b:68:8e:79:af:09:6e:93:3c:69:3a: f4:13:14:ed:7d:c9:2d:78:1e:e3:f2:55:2a:8e:4f:00:5d:19: db:51:56:16:5f:d4:62:45:72:06:a5:7b:99:5b:5f:79:f1:82: cc:10:03:db:ee:20:aa:aa:b3:48:3a:80:a6:59:ee:3b:36:62: a3:63:95:ab -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE882v2bpnKFcrYcNCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDkyMDEyNDUxMVoXDTI4MTIyMzEzNDUxMVowLzEtMCsGA1UEAxMk ZmQ0ZGZiZmUtYzVhNy00MGFmLWFiNzQtZTM1ZmI2YjRmMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw1hsYLCtxP4vzGsojJc0xaXQ44tjVU2MMRm aQazm3rHw2MDfJsYm/yh5UVFIvLBAMH9ONcmCSIa8UavNnB1nxms6G2fAZNqj9zk v7vgO7YT2H07GIX6+T4KC5qve+7trLV6fObBVjes0TbP9ncFGxFqR8KQpW0xYAEe mMGffXX0GOoAZKEWpyRcprHYDV19xnG4yWZ2j2esMylPB0c27RJ7JJjNoTWPRakT 1ilSA/fqKEEyt72b4Oz7LrzcVMrE2dVM6nV2yqJl4q3OdpMXeb4+WXqBz5ciV9mq 1XRrjK7OBy4WA+dBNVeEtGF4qiUpLdgDZBU83pC7py9eAKjkhwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFLACUCzvw1CCkvb5oU0EoHG9+44YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m ZDRkZmJmZS1jNWE3LTQwYWYtYWI3NC1lMzVmYjZiNGYyNDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2ZkNGRmYmZlLWM1YTctNDBhZi1h Yjc0LWUzNWZiNmI0ZjI0NS9mZDRkZmJmZS1jNWE3LTQwYWYtYWI3NC1lMzVmYjZi NGYyNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPHzHAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC K7UwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAhiW+AK1Gy93OFh1nUgvPoYUZIdEMU00T+5aa5wEjuAL3oF54 AUXdoeWKT86d5JY7YzV43ZW9x7/e4XnhS1r/mlX4BLSkFGruE9JmaL0u0ipubf9+ gcFgBrZsR+oHoD3bngGEePie8tF71SHSByXHctp5ZlLSnzxb/riNwV0turPMTY9s ayqgFU62/EDiiKXGj/23k+SP5LOJxAReG9WvzApMKjF9uJ1LFZ4OH465hAaYQLid glCrQefNY1tojnmvCW6TPGk69BMU7X3JLXge4/JVKo5PAF0Z21FWFl/UYkVyBqV7 mVtfefGCzBAD2+4gqqqzSDqAplnuOzZio2OVqw== -----END CERTIFICATE-----Generated at Mon Sep 21 21:55:23 2026 by rpki-client