$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer File: e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer (raw, json) Hash identifier: 25SRnAvZJv7mhdv/Ydp4L8YVVsntFz9q6B6qDoyzYbo= Subject key identifier: 16:5A:7A:F1:03:49:83:EA:4A:D5:9E:7D:02:EE:F7:1D:27:D4:0C:5C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584F8140C0A47E476D6F5A8FDE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 Oct 2026 00:45:12 +0000 Certificate not after: Wed 17 Jan 2029 01:45:12 +0000 Subordinate resources: AS: 32772 IP: 64.255.52.0/23 IP: 74.209.178.0/23 IP: 2604:16e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:81:40:c0:a4:7e:47:6d:6f:5a:8f:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 15 00:45:12 2026 GMT Not After : Jan 17 01:45:12 2029 GMT Subject: CN=e1ec92c2-2a27-47bb-a115-e1db2cee0fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:7f:24:49:29:49:82:44:99:c8:ff:98:f1: 84:bc:1c:af:bf:ff:e4:f9:9c:28:3c:8e:70:3a:a9: 41:60:6b:53:1a:b1:b2:3f:b9:ff:19:ea:9b:28:6b: ea:3e:2f:10:a6:97:d5:b3:15:94:e4:e1:97:ae:52: ec:f4:eb:bf:ff:da:d5:28:73:63:9f:89:27:96:f6: b5:9d:5f:ef:d5:d7:d2:41:00:26:93:65:5a:a6:97: 98:26:8f:2a:92:05:cb:34:1b:4b:41:62:ce:3d:82: 35:ea:87:39:4c:8b:9c:ba:ea:65:c6:20:95:44:93: 9b:7d:12:f5:5f:5b:7e:ba:b9:d2:77:e2:ce:e7:b2: 46:b2:b4:36:cd:73:cd:fa:01:12:86:a0:9a:1d:71: 2e:61:81:7a:cb:b7:57:73:09:0b:6e:fd:5c:bf:f0: 51:77:33:e0:e4:f3:14:73:de:b9:07:e3:ee:b8:47: 14:81:cd:cd:83:7d:cc:8a:23:8e:61:fa:13:8e:f4: 17:36:c6:80:f3:0d:ed:1e:0b:2c:42:15:c2:35:35: bc:50:00:26:e1:5f:71:ae:5b:26:d0:3e:73:29:87: 74:7b:3b:91:92:aa:34:b6:15:ab:1a:5d:64:af:b9: 2a:6e:1b:69:33:01:5d:42:cb:ee:96:2a:db:9b:d8: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5A:7A:F1:03:49:83:EA:4A:D5:9E:7D:02:EE:F7:1D:27:D4:0C:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 64.255.52.0/23 74.209.178.0/23 IPv6: 2604:16e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32772 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3a:33:72:46:19:da:77:f0:99:99:c0:27:ce:c5:ec:8b:4b: b3:51:fa:25:72:a6:e6:58:79:71:38:44:0f:f2:d6:19:83:8f: 6c:bc:84:5c:60:8d:4c:1e:cf:56:26:8c:26:39:a0:da:45:b0: e0:84:b0:96:bb:8a:46:b1:ae:78:ba:90:ee:5a:9c:39:bc:fc: de:46:e7:e9:96:1f:78:6d:ba:63:2b:df:de:c0:06:39:e2:85: 91:0b:bd:5a:2b:ea:33:4b:c7:46:a3:4a:8d:04:e2:10:4d:f0: 7c:ca:a8:ae:73:54:46:4a:6e:81:e5:86:0d:61:8e:38:63:d5: 57:91:9d:8b:30:10:c8:00:11:b7:4d:46:04:a3:ec:e1:24:d8: d3:ee:b5:57:49:f2:0c:b9:61:96:2f:a7:82:ef:69:27:9b:81: 88:53:86:d9:9e:fc:d4:63:95:f3:6e:a2:1c:51:c9:c8:2f:25: fc:51:3a:b2:20:1b:48:f9:ab:e3:f9:6d:91:59:0a:b8:44:bb: 28:9b:69:f0:0e:91:67:66:72:a7:d4:aa:5e:1a:dd:72:53:e6: b2:0b:e0:5d:3a:d4:ee:db:ad:e9:ee:bc:7a:a5:68:50:bb:d4: 0d:06:47:b9:3c:86:79:15:e5:91:ea:75:50:94:8b:7c:f3:4b: 5d:df:8c:5d -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE+BQMCkfkdtb1qP3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI2MTAxNTAwNDUxMloXDTI5MDExNzAxNDUxMlowLzEtMCsGA1UEAxMk ZTFlYzkyYzItMmEyNy00N2JiLWExMTUtZTFkYjJjZWUwZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9l/JEkpSYJEmcj/mPGEvByvv//k+ZwoPI5w OqlBYGtTGrGyP7n/GeqbKGvqPi8QppfVsxWU5OGXrlLs9Ou//9rVKHNjn4knlva1 nV/v1dfSQQAmk2VappeYJo8qkgXLNBtLQWLOPYI16oc5TIucuuplxiCVRJObfRL1 X1t+urnSd+LO57JGsrQ2zXPN+gEShqCaHXEuYYF6y7dXcwkLbv1cv/BRdzPg5PMU c965B+PuuEcUgc3Ng33MiiOOYfoTjvQXNsaA8w3tHgssQhXCNTW8UAAm4V9xrlsm 0D5zKYd0ezuRkqo0thWrGl1kr7kqbhtpMwFdQsvulirbm9gaQQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFBZaevEDSYPqStWefQLu9x0n1AxcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9l MWVjOTJjMi0yYTI3LTQ3YmItYTExNS1lMWRiMmNlZTBmZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2UxZWM5MmMyLTJhMjctNDdiYi1h MTE1LWUxZGIyY2VlMGZlZi9lMWVjOTJjMi0yYTI3LTQ3YmItYTExNS1lMWRiMmNl ZTBmZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAFA/zQDBAFK0bIwDQQCAAIwBwMFACYEFuAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAIAEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIk6M3JGGdp38JmZwCfO xeyLS7NR+iVypuZYeXE4RA/y1hmDj2y8hFxgjUwez1YmjCY5oNpFsOCEsJa7ikax rni6kO5anDm8/N5G5+mWH3htumMr397ABjnihZELvVor6jNLx0ajSo0E4hBN8HzK qK5zVEZKboHlhg1hjjhj1VeRnYswEMgAEbdNRgSj7OEk2NPutVdJ8gy5YZYvp4Lv aSebgYhThtme/NRjlfNuohxRycgvJfxROrIgG0j5q+P5bZFZCrhEuyibafAOkWdm cqfUql4a3XJT5rIL4F061O7brenuvHqlaFC71A0GR7k8hnkV5ZHqdVCUi3zzS13f jF0= -----END CERTIFICATE-----Generated at Tue Nov 10 06:45:38 2026 by rpki-client