$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer File: dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer (raw, json) Hash identifier: MIZSN5bl2tkXBwdaoQ8nefmUUbINqBePNWrXGT/f9Wc= Subject key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority key identifier: 26:A6:B8:75:A8:31:6E:CA:C6:CC:42:0B:9A:C7:BA:D0:B7:BE:A0:42 Certificate issuer: /CN=3dd67fc2-5423-4bf8-a727-d7838049cda2 Certificate serial: 010D0C9F4328584F2F89FC1A2C6C9FD707376600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/notification.xml Certificate not before: Tue 15 Sep 2026 18:16:28 +0000 Certificate not after: Mon 18 Dec 2028 19:16:28 +0000 Subordinate resources: AS: 26121 IP: 169.143.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2f:89:fc:1a:2c:6c:9f:d7:07:37:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dd67fc2-5423-4bf8-a727-d7838049cda2 Validity Not Before: Sep 15 18:16:28 2026 GMT Not After : Dec 18 19:16:28 2028 GMT Subject: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:06:c1:27:bc:16:6e:7e:ab:5e:76:f9:92: 2d:2c:bd:c0:fd:54:9a:64:2c:63:0f:a9:fe:04:c5: 6e:43:d7:5e:bd:f7:32:27:04:6b:12:cf:bf:47:a8: 6e:93:1f:3b:82:96:3e:a7:04:cc:c3:85:2f:35:cc: b2:c1:b5:7d:0b:70:79:3d:d9:c4:70:ed:e6:f8:96: b5:ef:7d:78:44:a5:34:c0:83:d8:de:4d:fd:99:b4: 1b:97:28:d3:dc:83:9b:4c:c7:2c:45:63:ac:33:e1: 8e:c0:fb:01:73:ce:5e:f6:e7:12:55:01:b8:73:14: 05:07:13:cf:b5:8b:8d:ea:86:fe:79:ee:19:e2:5b: 16:d3:ad:43:f5:ae:1b:17:26:da:b2:d6:b1:a4:b0: 9b:0a:88:ca:3a:a6:6b:65:37:06:11:bc:02:7e:e6: 6c:af:4c:6e:5d:d5:50:87:1c:06:be:f6:5b:be:3f: 8b:48:5f:9f:ea:e7:dc:50:86:e0:4d:4c:a9:06:67: 84:94:fe:f9:cb:ff:68:75:07:2d:d2:32:af:42:f3: 80:9c:b3:bc:80:20:82:50:b9:f7:f0:44:e7:8f:0b: a5:64:29:0a:71:1e:88:ea:48:51:63:45:41:ac:71: 60:33:b4:40:97:2f:ff:64:8b:c5:25:60:8c:99:ac: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl X509v3 Authority Key Identifier: keyid:26:A6:B8:75:A8:31:6E:CA:C6:CC:42:0B:9A:C7:BA:D0:B7:BE:A0:42 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer sbgp-ipAddrBlock: critical IPv4: 169.143.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26121 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:06:e8:bd:44:64:82:38:d4:47:05:2c:22:14:98:ef:39:9a: 25:8b:4b:1a:35:91:93:c5:11:0b:1d:98:fd:47:2b:f8:5e:87: d5:ea:48:b5:fd:47:a3:1b:da:90:98:dc:de:0d:a8:2f:68:0b: 49:aa:6a:72:8b:c9:48:a2:59:44:ba:72:0a:4c:0e:97:91:ac: 30:e2:08:08:d8:f0:60:b6:83:6f:5b:0e:53:14:46:d5:33:76: 75:6b:ac:40:b7:d7:79:04:0f:02:29:24:ae:07:49:7b:2b:d3: e3:4b:0a:67:63:22:45:a8:b3:96:9d:f7:6a:6d:cd:12:8a:0d: 12:70:61:60:44:50:cb:dd:3d:60:1e:8a:c0:93:b3:9d:b9:e5: 2a:5e:ee:95:0d:2c:d5:ce:ab:1b:57:82:48:67:2f:64:0e:6f: c7:55:4e:a6:4d:88:4b:ed:bb:0c:87:f3:2a:1e:b9:85:d4:4c: 32:51:f4:a5:12:81:73:10:d1:54:a7:e7:ff:a9:12:68:bd:8e: ef:58:4b:a2:00:d2:35:e5:4f:16:7b:9b:4e:81:25:2b:dc:3b: d8:27:98:70:47:9e:25:89:1d:9d:66:bd:51:75:db:01:97:76: 83:bd:f0:14:35:84:b1:4f:44:96:20:67:fc:c1:1e:94:94:f7: c7:54:9e:47 -----BEGIN CERTIFICATE----- MIIHBjCCBe6gAwIBAgIUAQ0Mn0MoWE8vifwaLGyf1wc3ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RkNjdmYzItNTQyMy00YmY4LWE3MjctZDc4MzgwNDlj ZGEyMB4XDTI2MDkxNTE4MTYyOFoXDTI4MTIxODE5MTYyOFowPTE7MDkGA1UEAxMy ZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0 YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5AbBJ7wWbn6rXnb5 ki0svcD9VJpkLGMPqf4ExW5D11699zInBGsSz79HqG6THzuClj6nBMzDhS81zLLB tX0LcHk92cRw7eb4lrXvfXhEpTTAg9jeTf2ZtBuXKNPcg5tMxyxFY6wz4Y7A+wFz zl725xJVAbhzFAUHE8+1i43qhv557hniWxbTrUP1rhsXJtqy1rGksJsKiMo6pmtl NwYRvAJ+5myvTG5d1VCHHAa+9lu+P4tIX5/q59xQhuBNTKkGZ4SU/vnL/2h1By3S Mq9C84Ccs7yAIIJQuffwROePC6VkKQpxHojqSFFjRUGscWAztECXL/9ki8UlYIyZ rHVDAgMBAAGjggQKMIIEBjAdBgNVHQ4EFgQUkoUefU+kTmgN24D4GGjLdQ2tvjcw ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVl MzgtNDQxZS05YmY3LWUxY2ViNmU4NjkyNS8wgYIGCCsGAQUFBzAKhnZyc3luYzov L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZl YTIzLTVlMzgtNDQxZS05YmY3LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVpl ZFFZTWhicFVaS28ubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51 cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2QxZGZlYTIzLTVlMzgtNDQxZS05 YmY3LWUxY2ViNmU4NjkyNS9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4LzNkZDY3ZmMyLTU0MjMtNGJmOC1hNzI3LWQ3ODM4MDQ5Y2RhMi8zZGQ2N2Zj Mi01NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIuY3JsMB8GA1UdIwQYMBaAFCam uHWoMW7KxsxCC5rHutC3vqBCMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy9mZGUxNjllZC1kMGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2Rk NjdmYzItNTQyMy00YmY4LWE3MjctZDc4MzgwNDljZGEyLmNlcjAeBggrBgEFBQcB BwEB/wQPMA0wCwQCAAEwBQMDAKmPMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmYJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJkG6L1EZII41EcFLCIUmO85miWLSxo1kZPFEQsdmP1HK/heh9Xq SLX9R6Mb2pCY3N4NqC9oC0mqanKLyUiiWUS6cgpMDpeRrDDiCAjY8GC2g29bDlMU RtUzdnVrrEC313kEDwIpJK4HSXsr0+NLCmdjIkWos5ad92ptzRKKDRJwYWBEUMvd PWAeisCTs5255Spe7pUNLNXOqxtXgkhnL2QOb8dVTqZNiEvtuwyH8yoeuYXUTDJR 9KUSgXMQ0VSn5/+pEmi9ju9YS6IA0jXlTxZ7m06BJSvcO9gnmHBHniWJHZ1mvVF1 2wGXdoO98BQ1hLFPRJYgZ/zBHpSU98dUnkc= -----END CERTIFICATE-----Generated at Tue Sep 22 20:26:39 2026 by rpki-client