$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4ef4f10-91ae-4f09-a3a2-6b25420230e6.cer File: a4ef4f10-91ae-4f09-a3a2-6b25420230e6.cer (raw, json) Hash identifier: OnkiPtuBOm1fUIIiWrZ4fZgFqq84kCdMEz5eeAdMb7E= Subject key identifier: 56:76:22:19:0E:B1:54:6F:4D:57:E8:73:9D:91:48:2D:21:58:FD:55 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584EF1A43F8D9AE1D1B856A3AE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4ef4f10-91ae-4f09-a3a2-6b25420230e6/a4ef4f10-91ae-4f09-a3a2-6b25420230e6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4ef4f10-91ae-4f09-a3a2-6b25420230e6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Aug 2026 14:09:16 +0000 Certificate not after: Mon 13 Nov 2028 13:25:37 +0000 Subordinate resources: IP: 136.176.0.0/18 IP: 136.176.128.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:a4:3f:8d:9a:e1:d1:b8:56:a3:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 24 14:09:16 2026 GMT Not After : Nov 13 13:25:37 2028 GMT Subject: CN=a4ef4f10-91ae-4f09-a3a2-6b25420230e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a4:b6:3e:7d:49:7a:0a:21:54:a3:4a:aa:1c: 70:a9:c4:bf:b3:d6:2c:1b:ba:4b:72:1c:a2:a1:d7: 4f:86:18:64:0f:32:7b:ae:37:fb:2e:7b:1f:78:74: ba:86:75:5a:be:d0:cb:2f:62:48:03:92:6d:94:05: b7:33:79:f4:d6:14:e3:55:04:be:b5:c7:c7:5e:56: ad:ac:14:64:00:d2:00:3d:f8:30:e1:7d:c6:24:76: d7:b7:bd:d5:74:7b:ce:87:50:ad:48:c9:f9:4b:a5: a8:3e:18:10:ca:b4:e2:94:28:de:dd:c2:92:ea:6b: 73:9c:7b:94:34:e0:b9:c9:96:0c:ce:d6:d7:fb:a8: 1a:04:1b:3d:f1:03:b9:4a:6b:11:a2:da:10:bf:b5: 7c:30:3b:19:8a:53:90:18:3a:3b:97:18:7c:74:29: ef:fb:e3:c9:18:40:c9:7e:ab:9d:70:a0:ec:20:1b: 98:84:53:62:a4:4f:1e:e7:e7:cb:f6:0f:dc:f1:60: 1f:b5:86:90:e7:02:6e:c6:9f:3e:8d:77:74:e4:7d: 5d:bd:20:f8:34:34:9e:46:ce:d1:db:16:c5:a2:ec: 99:90:a1:f4:df:67:30:1d:50:1d:af:34:40:bb:24: 23:83:08:8a:5a:a0:05:58:6c:47:06:a0:1c:d1:76: c2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:76:22:19:0E:B1:54:6F:4D:57:E8:73:9D:91:48:2D:21:58:FD:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4ef4f10-91ae-4f09-a3a2-6b25420230e6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4ef4f10-91ae-4f09-a3a2-6b25420230e6/a4ef4f10-91ae-4f09-a3a2-6b25420230e6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 136.176.0.0/18 136.176.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:35:bd:0e:68:7d:bd:c9:aa:8a:a7:8f:6f:0c:2d:8e:c3:9e: db:78:5d:68:fb:34:5f:4a:96:81:83:46:b1:e6:d3:3b:d3:8b: e5:95:00:5e:8b:a8:49:3b:c8:67:4a:50:d0:6c:c3:94:26:30: 9c:84:a1:f9:37:c9:ab:9b:8f:2e:b1:1b:21:b1:2f:ba:14:a6: 4d:ae:95:74:8b:c7:fa:a1:23:ec:69:19:11:bb:f0:98:d4:b7: bb:5a:68:fe:63:35:45:90:28:75:0b:a2:a6:31:20:22:4d:d6: 1f:f6:57:13:34:9a:6b:47:82:d9:b1:46:33:c5:5b:e1:69:b4: cf:5f:3e:87:be:d6:c0:26:cd:b9:62:81:0b:e2:fb:e5:13:da: b8:82:51:64:03:e3:13:79:f8:11:30:ff:c1:0c:4c:7b:39:f3: 6d:40:d8:b8:51:fc:fd:73:79:fc:d8:cd:3f:6c:26:b7:54:4b: 48:3b:bc:3a:ec:4e:38:d3:6b:12:ac:cd:92:6e:48:a7:01:d0: eb:03:b2:f7:07:c5:b0:fa:65:e2:ad:bb:e4:b7:96:4c:c6:86: 3c:95:7c:1a:d0:c1:c2:ec:6f:51:f1:67:d7:ab:21:9e:e2:b3: b1:dc:70:df:be:cc:f0:2d:05:96:79:50:78:b0:7f:06:12:83: 5d:7f:5f:a0 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE7xpD+NmuHRuFajrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MDgyNDE0MDkxNloXDTI4MTExMzEzMjUzN1owLzEtMCsGA1UEAxMk YTRlZjRmMTAtOTFhZS00ZjA5LWEzYTItNmIyNTQyMDIzMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6S2Pn1JegohVKNKqhxwqcS/s9YsG7pLchyi oddPhhhkDzJ7rjf7LnsfeHS6hnVavtDLL2JIA5JtlAW3M3n01hTjVQS+tcfHXlat rBRkANIAPfgw4X3GJHbXt73VdHvOh1CtSMn5S6WoPhgQyrTilCje3cKS6mtznHuU NOC5yZYMztbX+6gaBBs98QO5SmsRotoQv7V8MDsZilOQGDo7lxh8dCnv++PJGEDJ fqudcKDsIBuYhFNipE8e5+fL9g/c8WAftYaQ5wJuxp8+jXd05H1dvSD4NDSeRs7R 2xbFouyZkKH032cwHVAdrzRAuyQjgwiKWqAFWGxHBqAc0XbCaQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFFZ2IhkOsVRvTVfoc52RSC0hWP1VMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h NGVmNGYxMC05MWFlLTRmMDktYTNhMi02YjI1NDIwMjMwZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2E0ZWY0ZjEwLTkxYWUtNGYwOS1h M2EyLTZiMjU0MjAyMzBlNi9hNGVmNGYxMC05MWFlLTRmMDktYTNhMi02YjI1NDIw MjMwZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAaIsAADBAWIsIAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWDW9Dmh9vcmq iqePbwwtjsOe23hdaPs0X0qWgYNGsebTO9OL5ZUAXouoSTvIZ0pQ0GzDlCYwnISh +TfJq5uPLrEbIbEvuhSmTa6VdIvH+qEj7GkZEbvwmNS3u1po/mM1RZAodQuipjEg Ik3WH/ZXEzSaa0eC2bFGM8Vb4Wm0z18+h77WwCbNuWKBC+L75RPauIJRZAPjE3n4 ETD/wQxMeznzbUDYuFH8/XN5/NjNP2wmt1RLSDu8OuxOONNrEqzNkm5IpwHQ6wOy 9wfFsPpl4q275LeWTMaGPJV8GtDBwuxvUfFn16shnuKzsdxw377M8C0FlnlQeLB/ BhKDXX9foA== -----END CERTIFICATE-----Generated at Sun Sep 20 19:50:15 2026 by rpki-client