$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer File: 252aff2f-9807-45d4-ba31-1a3198784cae.cer (raw, json) Hash identifier: 5oPrh1tuam6shH4KYGDiVPwcM62WsHnZv5RYPREYhi0= Subject key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584FB39ED961689F1947E56C2AE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Nov 2026 01:45:12 +0000 Certificate not after: Sun 04 Feb 2029 01:45:12 +0000 Subordinate resources: IP: 199.185.120.0 -- 199.185.122.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:9e:d9:61:68:9f:19:47:e5:6c:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Nov 2 01:45:12 2026 GMT Not After : Feb 4 01:45:12 2029 GMT Subject: CN=252aff2f-9807-45d4-ba31-1a3198784cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1f:e8:0e:42:37:0e:34:69:86:9b:8f:43:30: 2f:2d:29:d1:66:8c:25:19:0a:77:90:df:b7:e7:cb: 2a:38:57:9a:98:9b:fd:7e:3e:51:56:0a:66:89:09: 5a:98:c5:f6:87:35:3c:69:4b:a7:a4:02:76:b8:ae: c7:d3:4d:3b:f7:09:4f:24:b2:cd:5e:1b:bb:2c:83: e0:72:c6:97:4d:0e:43:a9:f8:7f:a0:ce:76:1d:77: 85:31:94:32:3e:8c:34:a6:e6:0f:5e:55:35:ba:06: 66:cb:a2:91:26:63:39:33:0d:ed:31:15:96:30:a5: 51:25:db:d9:a3:01:17:aa:11:b2:7f:9d:e4:7e:09: 6f:b3:bb:96:3f:e9:b3:8d:3c:19:2d:2f:c9:ef:46: 97:bc:c1:fc:54:3b:c2:f1:65:e6:08:55:47:de:3f: fd:5d:c3:7e:d6:73:19:14:cf:94:69:d8:42:7a:0f: 10:51:dc:cb:7a:57:e0:f2:cc:e5:bf:3f:cb:f3:92: 14:d0:7c:25:80:12:fc:fc:c3:1c:13:17:8c:2a:a5: f9:29:d0:0b:c1:a6:3d:f1:81:cd:c1:8e:b9:89:41: b7:52:5d:33:c8:4f:44:a5:85:df:07:5d:a9:1c:45: e0:c5:24:28:d6:39:90:be:d7:60:32:85:6b:11:93: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 199.185.120.0-199.185.122.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:7b:45:51:81:ab:84:bd:f8:ee:3f:90:af:f6:92:95:05:09: b6:00:6d:8c:e9:29:77:ce:8c:07:10:57:75:76:fe:32:91:db: 93:99:e3:a0:45:80:6c:29:d3:c1:45:c8:e5:1e:de:f0:66:c4: f6:be:b0:71:f6:63:1e:85:a0:36:3b:a2:2e:20:70:b5:c1:00: 6a:3d:15:b7:bd:47:59:97:72:d3:50:81:46:c5:48:6e:b6:ad: 9b:e4:65:7f:49:ae:93:e8:ec:75:3b:aa:b5:9e:11:13:ae:84: 55:84:65:28:e3:3e:aa:c0:d6:45:0a:2d:8f:0a:ea:f4:0a:af: dd:1d:47:9f:c5:7f:6a:fb:1f:3a:90:ee:b7:9f:36:b3:7b:1f: b5:64:a0:fc:d9:db:38:25:da:1f:01:c7:c6:1b:4c:36:e5:be: d8:dc:d0:ed:fe:a4:22:38:98:82:b9:ff:aa:f6:0a:7d:32:12: 0d:33:1a:85:19:3b:29:d2:97:a6:07:77:09:3a:94:e8:0c:32: b7:c0:fe:4f:4a:25:a4:1a:a4:59:11:21:62:fc:84:46:f6:67: c0:cd:af:4e:50:50:95:61:29:b7:59:53:95:48:76:1e:d2:48: 1f:dc:66:fd:ff:22:01:30:c6:80:a6:43:29:11:0a:aa:20:43: ce:ac:b0:f0 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWE+zntlhaJ8ZR+VsKuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTEwMjAxNDUxMloXDTI5MDIwNDAxNDUxMlowLzEtMCsGA1UEAxMk MjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0Y2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR/oDkI3DjRphpuPQzAvLSnRZowlGQp3kN+3 58sqOFeamJv9fj5RVgpmiQlamMX2hzU8aUunpAJ2uK7H00079wlPJLLNXhu7LIPg csaXTQ5Dqfh/oM52HXeFMZQyPow0puYPXlU1ugZmy6KRJmM5Mw3tMRWWMKVRJdvZ owEXqhGyf53kfglvs7uWP+mzjTwZLS/J70aXvMH8VDvC8WXmCFVH3j/9XcN+1nMZ FM+UadhCeg8QUdzLelfg8szlvz/L85IU0HwlgBL8/MMcExeMKqX5KdALwaY98YHN wY65iUG3Ul0zyE9EpYXfB12pHEXgxSQo1jmQvtdgMoVrEZNNuQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFGUhOjtFLfMzkl3XFoMMMTB6+JjAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y NTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzI1MmFmZjJmLTk4MDctNDVkNC1i YTMxLTFhMzE5ODc4NGNhZS8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3 ODRjYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEA8e5eAMEAMe5ejBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0e0VRgauE vfjuP5Cv9pKVBQm2AG2M6Sl3zowHEFd1dv4ykduTmeOgRYBsKdPBRcjlHt7wZsT2 vrBx9mMehaA2O6IuIHC1wQBqPRW3vUdZl3LTUIFGxUhutq2b5GV/Sa6T6Ox1O6q1 nhETroRVhGUo4z6qwNZFCi2PCur0Cq/dHUefxX9q+x86kO63nzazex+1ZKD82ds4 JdofAcfGG0w25b7Y3NDt/qQiOJiCuf+q9gp9MhINMxqFGTsp0pemB3cJOpToDDK3 wP5PSiWkGqRZESFi/IRG9mfAza9OUFCVYSm3WVOVSHYe0kgf3Gb9/yIBMMaApkMp EQqqIEPOrLDw -----END CERTIFICATE-----Generated at Thu Nov 5 04:55:00 2026 by rpki-client