$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.cer File: 7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.cer (raw, json) Hash identifier: j7fSO8r9hc2CDAVzDA+lb37MTDD1Z7tHXZNKZfW5pi4= Subject key identifier: B3:70:E7:D0:B9:79:2D:48:B2:DB:8B:90:88:7A:13:54:CD:62:8F:E8 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584FBBFEE6610153F833F496A280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Nov 2026 01:45:12 +0000 Certificate not after: Wed 07 Feb 2029 01:45:12 +0000 Subordinate resources: AS: 401896 IP: 23.143.76.0/24 IP: 2602:f5ad::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bb:fe:e6:61:01:53:f8:33:f4:96:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Nov 5 01:45:12 2026 GMT Not After : Feb 7 01:45:12 2029 GMT Subject: CN=7f4682fd-15a3-4dca-aaa2-1b5c7b71b511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:c6:14:d3:76:ee:2b:7e:0a:68:95:30:60: 18:0d:d1:58:dd:0a:97:ee:47:37:f3:fc:e1:bd:5d: c1:ae:5a:0c:43:f4:4a:1b:7d:1c:5d:45:02:e3:9f: 69:4c:e0:b1:d1:14:bd:8d:4e:30:d7:01:c8:f0:ad: f5:7b:8c:14:f4:38:f3:d1:34:3f:67:44:7d:5b:d4: 80:4a:41:a6:75:e5:48:13:ba:8c:ea:aa:c7:39:c9: 3f:ad:f6:c7:f5:eb:68:11:e8:c1:81:be:4d:81:45: 0e:2b:61:aa:0e:d4:0d:13:1d:24:ec:5a:ea:25:0b: d0:0d:e5:a2:43:50:85:26:3e:ff:2d:82:66:a8:c6: d8:ee:27:3a:d6:a6:b4:f4:9c:29:ef:f2:3d:8c:4a: b3:e0:84:40:8c:8b:dd:2c:79:6d:92:76:1a:84:e4: 1c:ad:97:a3:be:c5:a6:0d:7e:5d:de:45:a7:94:41: 24:6a:73:c0:40:cc:82:63:fb:1b:f5:56:af:24:5d: 8f:6b:a6:70:73:a5:4c:d4:91:b0:18:7f:79:1a:37: e4:98:20:29:01:c5:d7:ff:88:aa:49:4f:6b:7f:8e: 74:7b:78:95:5c:26:dc:44:0c:06:47:4b:1c:b3:1a: 29:6e:8d:02:9b:18:df:8c:44:96:43:ae:41:38:59: ef:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:70:E7:D0:B9:79:2D:48:B2:DB:8B:90:88:7A:13:54:CD:62:8F:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.143.76.0/24 IPv6: 2602:f5ad::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401896 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:24:8f:16:4f:8c:cd:27:6c:c5:76:70:1a:0a:23:47:86:c9: 6e:0f:cf:c6:db:c2:0e:2f:a0:a8:7c:a9:f4:09:1c:3d:b8:58: 7e:22:0f:32:69:17:15:74:50:92:7c:ca:e9:a0:2e:a0:42:bb: 16:51:2c:5a:53:ed:ac:6c:0c:1f:31:52:01:e3:97:32:e4:4f: 18:28:63:b5:56:6b:7c:e7:c1:02:b6:80:84:28:e4:ad:7a:da: bb:df:3f:4e:0a:30:77:7e:87:b3:04:f9:ab:a1:69:78:32:cf: 59:4f:19:1d:39:87:14:58:cd:05:e0:3f:95:0c:e8:60:ba:5b: c1:24:c5:e9:2a:4f:1a:3d:60:5d:08:cc:f4:bf:be:66:cd:62: 3a:38:ff:f8:43:f7:9e:27:39:b0:3f:64:6d:e7:ae:2a:5e:35: 9c:f2:07:ec:41:25:8a:9d:e6:4a:bb:98:dc:f8:fb:71:65:3e: 96:15:f5:f9:7d:ea:f3:1e:f7:61:70:29:f7:ca:d1:27:0f:17: a2:6a:76:c0:fe:57:18:18:3b:e5:c1:c8:1f:3e:53:34:78:ca: 8d:1a:1d:02:92:50:b1:f5:96:f2:02:eb:eb:78:17:00:7b:10: df:19:99:43:9c:af:91:33:ff:99:88:e1:26:18:f1:82:50:37: a4:b1:29:f5 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+7/uZhAVP4M/SWooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTEwNTAxNDUxMloXDTI5MDIwNzAxNDUxMlowLzEtMCsGA1UEAxMk N2Y0NjgyZmQtMTVhMy00ZGNhLWFhYTItMWI1YzdiNzFiNTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnbGFNN27it+CmiVMGAYDdFY3QqX7kc38/zh vV3BrloMQ/RKG30cXUUC459pTOCx0RS9jU4w1wHI8K31e4wU9Djz0TQ/Z0R9W9SA SkGmdeVIE7qM6qrHOck/rfbH9etoEejBgb5NgUUOK2GqDtQNEx0k7FrqJQvQDeWi Q1CFJj7/LYJmqMbY7ic61qa09Jwp7/I9jEqz4IRAjIvdLHltknYahOQcrZejvsWm DX5d3kWnlEEkanPAQMyCY/sb9VavJF2Pa6Zwc6VM1JGwGH95GjfkmCApAcXX/4iq SU9rf450e3iVXCbcRAwGR0scsxopbo0CmxjfjESWQ65BOFnvdwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLNw59C5eS1IstuLkIh6E1TNYo/oMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 ZjQ2ODJmZC0xNWEzLTRkY2EtYWFhMi0xYjVjN2I3MWI1MTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzdmNDY4MmZkLTE1YTMtNGRjYS1h YWEyLTFiNWM3YjcxYjUxMS83ZjQ2ODJmZC0xNWEzLTRkY2EtYWFhMi0xYjVjN2I3 MWI1MTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXj0wwDgQCAAIwCAMGACYC9a0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYh6DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlJI8WT4zNJ2zFdnAaCiNHhslu D8/G28IOL6CofKn0CRw9uFh+Ig8yaRcVdFCSfMrpoC6gQrsWUSxaU+2sbAwfMVIB 45cy5E8YKGO1Vmt858ECtoCEKOStetq73z9OCjB3foezBPmroWl4Ms9ZTxkdOYcU WM0F4D+VDOhgulvBJMXpKk8aPWBdCMz0v75mzWI6OP/4Q/eeJzmwP2Rt564qXjWc 8gfsQSWKneZKu5jc+PtxZT6WFfX5ferzHvdhcCn3ytEnDxeianbA/lcYGDvlwcgf PlM0eMqNGh0CklCx9ZbyAuvreBcAexDfGZlDnK+RM/+ZiOEmGPGCUDeksSn1 -----END CERTIFICATE-----Generated at Sun Nov 15 10:48:44 2026 by rpki-client