$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer File: 589a433f-d0bb-4ea9-85da-52c4d90317c6.cer (raw, json) Hash identifier: nhhgpG3IEp/Ouy3r+S/mPTOolz8aD+lrPYURKOZUEOg= Subject key identifier: 79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F8140C0ADB200D1DA6E8ACEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 Oct 2026 00:45:12 +0000 Certificate not after: Wed 17 Jan 2029 01:45:12 +0000 Subordinate resources: AS: 401454 IP: 23.147.116.0/24 IP: 2602:f647::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:81:40:c0:ad:b2:00:d1:da:6e:8a:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 15 00:45:12 2026 GMT Not After : Jan 17 01:45:12 2029 GMT Subject: CN=589a433f-d0bb-4ea9-85da-52c4d90317c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9a:e8:68:ad:ca:2a:25:f9:a1:99:31:ac:c6: 4d:e2:82:90:7e:53:b5:c7:2d:1a:a3:a6:d1:a6:33: 94:b8:d0:7b:bb:df:1c:9d:67:39:b6:98:04:f5:da: ea:61:f3:33:f5:81:c6:ca:90:0c:7f:a2:57:82:d5: aa:19:4c:1b:9b:50:a8:d2:44:7b:88:ec:df:5a:7d: d8:67:6e:ef:73:b0:cb:11:f8:68:d4:cb:ad:9e:cb: 6b:bd:bf:7b:83:84:0e:b5:b5:20:44:70:64:65:01: 38:cb:5c:c2:88:56:92:6d:87:17:ab:ee:25:6b:cc: cb:a7:4b:69:90:74:8d:c5:3d:c0:ba:bf:98:80:29: 8e:a7:b2:1f:71:5e:95:8a:62:e6:50:e5:b5:12:a4: 3a:9d:e1:a4:6e:3f:20:55:cc:33:fe:07:9f:b9:fd: 8c:78:36:b9:ac:5f:be:ca:af:40:8d:4b:49:e2:ec: fe:26:b2:3e:f9:5b:df:cf:91:ae:81:92:c1:eb:e3: 77:f0:23:81:20:6f:5e:42:a7:44:59:35:c6:23:d5: b1:f2:5d:fa:33:01:f2:71:96:eb:2e:81:d6:2e:38: 61:44:d0:f9:9c:6e:1a:a0:d0:57:2d:53:30:62:9c: ed:78:21:e8:8d:3c:46:8f:2f:b9:f4:ff:58:43:0e: ec:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.147.116.0/24 IPv6: 2602:f647::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401454 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:af:b5:c6:9e:f0:34:f5:61:02:41:1e:a1:f2:96:87:e4:d0: 0c:50:2d:bd:e8:67:09:17:80:39:ed:1f:31:d6:93:c3:d5:dc: 9d:ac:60:d7:84:dc:3c:5c:42:b4:f0:ef:a9:06:cf:5b:a0:c6: 88:bc:58:8e:8a:2a:35:b4:b8:75:4f:88:f8:44:df:b5:b6:66: ac:3d:a6:24:e6:72:05:57:fa:8d:10:2a:08:9e:6b:75:8f:58: 13:45:d1:ad:dd:5d:19:8a:89:49:0b:b4:92:d3:fe:10:8e:f2: 0e:9c:94:5e:d3:b4:46:a0:fa:a2:b6:b9:3c:e3:80:d3:30:cd: 0e:ed:8e:2b:9a:fc:59:f7:54:a6:ee:03:f0:d5:65:c5:7a:66: d2:1c:61:a3:ce:7f:30:5c:25:2e:5c:e0:5f:cf:53:23:ba:a3: 6f:ee:1a:f8:c6:a1:cc:21:23:68:b4:62:31:01:b8:ec:ca:57: 3f:a4:83:6f:38:d1:c4:b7:43:ad:a5:b3:1b:c4:55:21:41:b5: c6:09:47:4b:e5:18:36:63:ee:37:90:7a:77:a8:ab:cc:22:f4: 4f:2a:a5:42:27:26:5a:0a:fa:20:99:82:15:da:6a:c5:7f:6e: e0:c9:4a:4b:7a:2d:1e:be:a8:22:fc:2c:b3:ba:0e:53:87:3c: 2c:2e:ac:8d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+BQMCtsgDR2m6KzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTAxNTAwNDUxMloXDTI5MDExNzAxNDUxMlowLzEtMCsGA1UEAxMk NTg5YTQzM2YtZDBiYi00ZWE5LTg1ZGEtNTJjNGQ5MDMxN2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5roaK3KKiX5oZkxrMZN4oKQflO1xy0ao6bR pjOUuNB7u98cnWc5tpgE9drqYfMz9YHGypAMf6JXgtWqGUwbm1Co0kR7iOzfWn3Y Z27vc7DLEfho1Mutnstrvb97g4QOtbUgRHBkZQE4y1zCiFaSbYcXq+4la8zLp0tp kHSNxT3Aur+YgCmOp7IfcV6VimLmUOW1EqQ6neGkbj8gVcwz/gefuf2MeDa5rF++ yq9AjUtJ4uz+JrI++Vvfz5GugZLB6+N38COBIG9eQqdEWTXGI9Wx8l36MwHycZbr LoHWLjhhRND5nG4aoNBXLVMwYpzteCHojTxGjy+59P9YQw7stQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHlgIr4zTRps2+ethA9wSrfph2vzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 ODlhNDMzZi1kMGJiLTRlYTktODVkYS01MmM0ZDkwMzE3YzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzU4OWE0MzNmLWQwYmItNGVhOS04 NWRhLTUyYzRkOTAzMTdjNi81ODlhNDMzZi1kMGJiLTRlYTktODVkYS01MmM0ZDkw MzE3YzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXk3QwDgQCAAIwCAMGACYC9kcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgLjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjr7XGnvA09WECQR6h8paH5NAM UC296GcJF4A57R8x1pPD1dydrGDXhNw8XEK08O+pBs9boMaIvFiOiio1tLh1T4j4 RN+1tmasPaYk5nIFV/qNECoInmt1j1gTRdGt3V0ZiolJC7SS0/4QjvIOnJRe07RG oPqitrk844DTMM0O7Y4rmvxZ91Sm7gPw1WXFembSHGGjzn8wXCUuXOBfz1MjuqNv 7hr4xqHMISNotGIxAbjsylc/pINvONHEt0OtpbMbxFUhQbXGCUdL5Rg2Y+43kHp3 qKvMIvRPKqVCJyZaCvogmYIV2mrFf27gyUpLei0evqgi/Cyzug5ThzwsLqyN -----END CERTIFICATE-----Generated at Thu Nov 5 04:35:28 2026 by rpki-client