$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34285642-e4d7-4f7f-9184-0dd9bad48efa.cer File: 34285642-e4d7-4f7f-9184-0dd9bad48efa.cer (raw, json) Hash identifier: CJVrcmlSjfZV5mHSxUXGi+Ncporg1oCTVoEiEeRyr2E= Subject key identifier: 02:19:AA:05:DC:19:83:DA:9A:9B:79:BB:01:7B:E3:70:5A:AF:E1:86 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584FA2C0F896DA104F7688E12C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34285642-e4d7-4f7f-9184-0dd9bad48efa/34285642-e4d7-4f7f-9184-0dd9bad48efa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34285642-e4d7-4f7f-9184-0dd9bad48efa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 Oct 2026 00:45:13 +0000 Certificate not after: Mon 29 Jan 2029 01:45:13 +0000 Subordinate resources: AS: 11333 IP: 162.42.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c0:f8:96:da:10:4f:76:88:e1:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 27 00:45:13 2026 GMT Not After : Jan 29 01:45:13 2029 GMT Subject: CN=34285642-e4d7-4f7f-9184-0dd9bad48efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:fb:aa:39:8f:5f:1e:b8:e0:d0:16:f5:aa: ab:b8:46:ea:ed:9c:cb:25:cd:53:17:72:bc:ea:a0: 1a:d0:0b:fe:6d:65:44:2c:90:26:2a:88:2f:0c:d2: 07:be:4e:e5:0f:fd:25:19:1b:76:32:71:95:5c:8a: 47:ae:b4:36:97:00:26:e7:ec:f3:07:5d:e9:ce:ea: 14:36:5a:b0:3e:b1:47:3e:88:e6:61:8f:d5:e6:ef: 49:0d:c7:7e:44:60:ab:44:65:02:3c:ee:38:3e:d5: 7f:86:a5:28:40:07:cc:eb:f2:bc:b1:3e:ad:d7:aa: 24:ef:60:bc:52:d3:2b:43:06:5e:98:d7:68:9b:4a: 99:20:1a:5c:29:db:72:b1:59:3e:0d:37:35:85:4a: ed:31:a8:18:65:ad:f6:15:db:87:66:7b:ed:4e:95: f3:24:d7:39:b7:82:d8:c5:3b:3c:1b:5f:8b:cd:cd: ff:8c:c2:a1:96:13:91:96:02:f3:ae:5a:6a:5a:17: 0a:95:0b:1b:48:31:22:1f:ad:60:91:36:f3:44:18: 13:b8:8a:c5:99:33:38:d1:6c:aa:c3:73:9d:96:0c: 33:fb:cb:8f:b8:a3:0d:2d:26:12:ed:c3:47:e6:f5: 93:50:ac:82:9c:5c:15:33:c7:f3:35:d9:d7:74:0c: 22:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:19:AA:05:DC:19:83:DA:9A:9B:79:BB:01:7B:E3:70:5A:AF:E1:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34285642-e4d7-4f7f-9184-0dd9bad48efa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34285642-e4d7-4f7f-9184-0dd9bad48efa/34285642-e4d7-4f7f-9184-0dd9bad48efa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 162.42.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11333 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:24:72:5e:22:fe:06:83:e5:1f:ff:ca:3f:84:a1:7f:f3:b0: e0:db:a7:50:c3:05:c5:3c:2a:e7:22:28:7e:f7:c4:e5:d9:fd: c3:64:09:e2:0d:01:1f:77:ca:b5:b7:2f:09:24:8a:f2:de:1a: e8:c8:b5:9e:85:ea:14:9f:a1:8d:1f:d4:37:4c:d1:86:cc:16: 1f:14:81:9d:1c:50:45:57:bd:dd:37:b8:12:42:45:60:2a:ce: f8:f3:08:88:77:87:a4:51:cc:9b:f9:ed:d0:31:e0:69:41:1f: 9a:9a:3e:32:69:53:7c:05:43:69:99:ef:54:2a:11:8a:6a:dc: 63:d6:f7:d4:8d:30:8d:7c:04:0f:e0:0e:d5:b9:a4:a8:7d:ba: 2d:c5:dd:a3:21:27:18:f2:09:f2:db:b5:41:6b:cc:b5:ff:9a: 86:75:6e:8e:da:fb:7e:f7:83:68:08:07:f5:01:23:63:63:03: 9c:78:7f:7f:49:e6:dd:fe:3b:42:7b:f0:20:9c:70:37:29:d3: ba:c4:99:4d:d4:f7:6c:21:ee:ee:b1:a1:0e:a6:cb:24:c6:20: f1:9b:5a:f8:f1:51:2f:d6:59:ba:3f:3c:c4:d7:ae:a0:5f:fe: 50:51:e8:15:8a:96:16:22:2b:b2:81:86:b6:fa:7a:ff:51:5d: 0e:f5:bb:41 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWE+iwPiW2hBPdojhLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTAyNzAwNDUxM1oXDTI5MDEyOTAxNDUxM1owLzEtMCsGA1UEAxMk MzQyODU2NDItZTRkNy00ZjdmLTkxODQtMGRkOWJhZDQ4ZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFf7qjmPXx644NAW9aqruEbq7ZzLJc1TF3K8 6qAa0Av+bWVELJAmKogvDNIHvk7lD/0lGRt2MnGVXIpHrrQ2lwAm5+zzB13pzuoU NlqwPrFHPojmYY/V5u9JDcd+RGCrRGUCPO44PtV/hqUoQAfM6/K8sT6t16ok72C8 UtMrQwZemNdom0qZIBpcKdtysVk+DTc1hUrtMagYZa32FduHZnvtTpXzJNc5t4LY xTs8G1+Lzc3/jMKhlhORlgLzrlpqWhcKlQsbSDEiH61gkTbzRBgTuIrFmTM40Wyq w3Odlgwz+8uPuKMNLSYS7cNH5vWTUKyCnFwVM8fzNdnXdAwiIwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFAIZqgXcGYPampt5uwF743Bar+GGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z NDI4NTY0Mi1lNGQ3LTRmN2YtOTE4NC0wZGQ5YmFkNDhlZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzM0Mjg1NjQyLWU0ZDctNGY3Zi05 MTg0LTBkZDliYWQ0OGVmYS8zNDI4NTY0Mi1lNGQ3LTRmN2YtOTE4NC0wZGQ5YmFk NDhlZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCiKjAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIs RTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCKJHJeIv4Gg+Uf/8o/hKF/87Dg26dQwwXFPCrnIih+98Tl2f3D ZAniDQEfd8q1ty8JJIry3hroyLWeheoUn6GNH9Q3TNGGzBYfFIGdHFBFV73dN7gS QkVgKs748wiId4ekUcyb+e3QMeBpQR+amj4yaVN8BUNpme9UKhGKatxj1vfUjTCN fAQP4A7VuaSofbotxd2jIScY8gny27VBa8y1/5qGdW6O2vt+94NoCAf1ASNjYwOc eH9/Sebd/jtCe/AgnHA3KdO6xJlN1PdsIe7usaEOpsskxiDxm1r48VEv1lm6PzzE 166gX/5QUegVipYWIiuygYa2+nr/UV0O9btB -----END CERTIFICATE-----Generated at Thu Nov 5 04:35:14 2026 by rpki-client