$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587.cer File: 02d642b9-8f67-4883-b980-ce36229bb587.cer (raw, json) Hash identifier: k878f6OFIHeCH0QdcWq4DKUi7h5q8q+pXAnU9q/HU4U= Subject key identifier: 83:CC:82:AA:12:F9:ED:D3:9D:48:89:FC:1B:8D:F2:AC:3B:51:FB:B2 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584D5FCB6A7C38202D170E88A100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/02d642b9-8f67-4883-b980-ce36229bb587.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Apr 2026 15:33:14 +0000 Certificate not after: Sat 04 Dec 2027 15:45:26 +0000 Subordinate resources: AS: 402176 IP: 140.235.16.0/22 IP: 155.103.40.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:cb:6a:7c:38:20:2d:17:0e:88:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Apr 2 15:33:14 2026 GMT Not After : Dec 4 15:45:26 2027 GMT Subject: CN=02d642b9-8f67-4883-b980-ce36229bb587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f9:21:b0:6c:b3:fa:f2:8c:65:de:6a:82:85: ed:de:1c:d9:8e:1f:8f:18:34:e0:f3:50:1e:42:2f: 73:ca:d5:75:30:eb:e4:90:15:74:73:ac:fe:26:7d: 93:1c:f1:ba:ce:6f:dd:b3:ed:7f:7b:80:c9:78:67: 4c:18:2d:37:17:7f:25:2f:e3:26:3c:0b:f3:65:78: 10:75:d1:52:a8:cf:e9:9a:d7:d6:fc:b6:55:73:68: f9:52:c6:4d:9b:54:64:1e:1f:b3:e3:f6:cf:89:dd: d6:88:70:b0:2c:95:b6:82:b9:ec:26:26:7b:7e:e2: b8:3e:8d:1a:62:9b:5d:57:93:5f:a5:c9:4b:68:0d: d4:56:98:42:1a:82:ec:dc:02:eb:43:88:ed:f6:55: 06:2b:2d:03:2a:48:20:bf:cc:fa:44:2c:bd:69:41: e5:95:34:90:2c:cc:c8:bf:d9:0c:e8:df:3e:be:ab: 3e:cf:e5:74:a4:e4:2e:d3:c0:4d:14:81:63:8f:3f: ba:4e:ff:d9:ca:35:dc:52:88:48:09:9f:6f:ed:78: a8:c2:ba:58:02:5e:3e:7e:bf:85:95:8a:a9:82:14: d5:c6:8e:91:b3:aa:88:c3:f0:1c:f5:ff:42:f3:c5: 65:4a:7f:78:a5:1a:9c:85:69:a2:cf:64:a9:77:02: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CC:82:AA:12:F9:ED:D3:9D:48:89:FC:1B:8D:F2:AC:3B:51:FB:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/02d642b9-8f67-4883-b980-ce36229bb587.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 140.235.16.0/22 155.103.40.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402176 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:40:52:01:89:c8:3c:6b:36:82:d3:a9:b1:99:c9:b3:94:d4: 1d:1a:0a:b3:31:51:e6:ac:e1:44:80:48:8c:b1:52:61:09:ab: cc:b6:65:6f:89:b5:ed:80:b9:7e:2e:28:68:ae:14:14:67:ed: 2f:2d:59:69:ea:dd:cb:45:4c:44:c7:65:b5:ba:67:60:8e:36: 0a:68:ad:1a:12:19:40:7c:75:24:ba:29:41:4a:1f:30:5f:7a: 69:a5:f2:b7:8e:00:b4:d4:72:7b:9a:50:76:dd:2b:3f:d3:04: ab:dd:c4:3d:c6:32:4e:85:2d:53:58:3a:e1:c3:ce:54:ad:6d: ad:dc:df:c7:14:e6:ea:f8:9c:c4:2f:02:54:66:9e:22:bd:87: ec:e2:80:03:a9:78:82:e3:98:c8:87:19:09:11:6d:87:06:30: 59:86:9c:b3:29:54:90:d9:ee:8a:7f:f8:ce:05:e2:f1:ea:06: 35:77:da:5f:c7:64:8b:a2:01:44:ec:80:5a:a0:5a:4e:60:9c: aa:c9:53:61:3c:83:b8:f6:f2:4f:7a:2e:57:aa:3d:85:0b:f8: 34:64:5e:6a:00:53:8e:3c:6d:b1:0e:e2:5f:71:9b:cc:fc:aa: 4e:0a:1e:4a:1d:86:7d:dd:c6:b9:82:56:0e:5d:6f:7f:13:76: 0b:f9:1f:03 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE1fy2p8OCAtFw6IoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MDQwMjE1MzMxNFoXDTI3MTIwNDE1NDUyNlowLzEtMCsGA1UEAxMk MDJkNjQyYjktOGY2Ny00ODgzLWI5ODAtY2UzNjIyOWJiNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivkhsGyz+vKMZd5qgoXt3hzZjh+PGDTg81Ae Qi9zytV1MOvkkBV0c6z+Jn2THPG6zm/ds+1/e4DJeGdMGC03F38lL+MmPAvzZXgQ ddFSqM/pmtfW/LZVc2j5UsZNm1RkHh+z4/bPid3WiHCwLJW2grnsJiZ7fuK4Po0a YptdV5NfpclLaA3UVphCGoLs3ALrQ4jt9lUGKy0DKkggv8z6RCy9aUHllTSQLMzI v9kM6N8+vqs+z+V0pOQu08BNFIFjjz+6Tv/ZyjXcUohICZ9v7XiowrpYAl4+fr+F lYqpghTVxo6Rs6qIw/Ac9f9C88VlSn94pRqchWmiz2SpdwJYhQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFIPMgqoS+e3TnUiJ/BuN8qw7UfuyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8w MmQ2NDJiOS04ZjY3LTQ4ODMtYjk4MC1jZTM2MjI5YmI1ODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzAyZDY0MmI5LThmNjctNDg4My1i OTgwLWNlMzYyMjliYjU4Ny8wMmQ2NDJiOS04ZjY3LTQ4ODMtYjk4MC1jZTM2MjI5 YmI1ODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAKM6xADBAKbZygwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBiMAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAH5AUgGJyDxrNoLTqbGZybOU1B0aCrMxUeas4USA SIyxUmEJq8y2ZW+Jte2AuX4uKGiuFBRn7S8tWWnq3ctFTETHZbW6Z2CONgporRoS GUB8dSS6KUFKHzBfemml8reOALTUcnuaUHbdKz/TBKvdxD3GMk6FLVNYOuHDzlSt ba3c38cU5ur4nMQvAlRmniK9h+zigAOpeILjmMiHGQkRbYcGMFmGnLMpVJDZ7op/ +M4F4vHqBjV32l/HZIuiAUTsgFqgWk5gnKrJU2E8g7j28k96LleqPYUL+DRkXmoA U448bbEO4l9xm8z8qk4KHkodhn3dxrmCVg5db38Tdgv5HwM= -----END CERTIFICATE-----Generated at Fri Apr 17 13:14:30 2026 by rpki-client