$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer File: 084cdd3f-c178-4428-8992-9e1b2922de98.cer (raw, json) Hash identifier: o1nkjK5W4pHFny3YCOzpoHP8yxn5bWYsImM/4MSecRE= Subject key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584EEBE526A22BFBA14F34A2EE20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 22 Aug 2026 12:45:11 +0000 Certificate not after: Fri 24 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 72.1.32.0 -- 72.1.45.255 IP: 209.240.128.0/19 IP: 216.104.160.0/19 IP: 2606:1400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:e5:26:a2:2b:fb:a1:4f:34:a2:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 22 12:45:11 2026 GMT Not After : Nov 24 13:45:11 2028 GMT Subject: CN=084cdd3f-c178-4428-8992-9e1b2922de98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:11:f6:04:81:9f:ac:a1:81:1d:38:ce:20: a5:bd:04:c3:e8:47:03:c9:3c:00:a0:a6:7f:27:e8: a3:39:d5:e7:ad:12:f2:aa:78:70:87:a9:eb:ce:60: dc:d4:ad:45:c3:bf:ee:bd:ea:42:99:9e:7c:59:f9: cc:fa:4a:97:00:b6:84:68:77:95:d0:36:a5:d5:24: ea:41:4a:3b:ad:aa:9e:10:63:39:2e:8b:79:d0:cb: 93:c6:54:81:b4:7b:17:1a:57:60:f6:99:dd:34:3d: e9:cc:dd:87:dd:b3:34:1a:83:a4:3e:48:26:78:23: 54:25:6e:13:46:86:86:8f:1b:98:50:f6:f9:83:dc: b8:7e:41:3b:e5:35:5d:53:68:0c:4d:7b:d8:49:fe: 80:93:c4:d8:14:99:5e:32:ea:84:22:63:fd:24:d1: 5f:2b:0c:13:06:38:57:7c:23:78:3a:35:63:87:2b: d3:73:3d:fc:04:da:f7:c4:49:04:69:fc:ca:a1:e9: bf:f3:86:93:0a:44:ef:1e:b5:3b:c6:50:23:11:81: 6e:b4:cf:cc:6b:da:e0:89:af:2c:5d:96:f4:18:e6: a3:15:94:15:2b:f9:73:fc:c0:19:83:56:4a:84:e1: 6e:7b:43:17:d5:a0:dc:63:31:e1:67:43:2e:11:41: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 72.1.32.0-72.1.45.255 209.240.128.0/19 216.104.160.0/19 IPv6: 2606:1400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ca:f4:44:ed:b5:2d:92:f7:c5:ae:a2:34:80:c6:0b:93:12: 5b:da:e0:75:f5:e1:27:2d:a8:6a:6d:5e:83:b3:92:0b:6a:da: bf:91:e4:fa:bc:4e:73:e2:43:0d:25:06:49:52:a6:8e:13:1a: 09:2d:ca:c2:9f:c2:ec:c8:a6:43:a5:0b:11:01:d2:95:77:a4: 5f:bc:8a:fa:bd:72:a6:08:3e:6a:9d:b5:ab:87:ff:72:ba:20: 4a:80:a7:32:b2:1d:ca:fa:94:04:d3:9b:3f:eb:5b:79:85:3f: d1:c8:4d:d5:78:69:a7:82:a6:b4:8a:7d:e9:c2:fb:db:b8:9f: 25:98:4e:04:37:c5:66:7e:5b:cb:e1:6c:29:8b:58:44:9b:fe: 39:ab:87:e2:27:77:a7:b1:21:05:b0:a7:03:1c:53:52:3f:81: 92:5b:51:70:20:86:42:e7:6d:be:0b:89:b1:b9:52:09:94:97: f4:41:6d:ba:54:d0:bf:da:86:d1:bd:af:21:70:88:a2:9d:da: 06:31:1a:aa:66:f1:69:d5:75:c7:f5:38:3d:c2:3a:f8:fa:52: be:2b:52:20:dd:0c:81:7b:19:e5:3f:68:70:cd:e9:c3:dd:fc: ca:60:f5:99:14:0b:26:c1:52:63:24:19:d0:a3:4c:ad:57:9d: a2:88:38:7e -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWE7r5SaiK/uhTzSi7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDgyMjEyNDUxMVoXDTI4MTEyNDEzNDUxMVowLzEtMCsGA1UEAxMk MDg0Y2RkM2YtYzE3OC00NDI4LTg5OTItOWUxYjI5MjJkZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYMR9gSBn6yhgR04ziClvQTD6EcDyTwAoKZ/ J+ijOdXnrRLyqnhwh6nrzmDc1K1Fw7/uvepCmZ58WfnM+kqXALaEaHeV0Dal1STq QUo7raqeEGM5Lot50MuTxlSBtHsXGldg9pndND3pzN2H3bM0GoOkPkgmeCNUJW4T RoaGjxuYUPb5g9y4fkE75TVdU2gMTXvYSf6Ak8TYFJleMuqEImP9JNFfKwwTBjhX fCN4OjVjhyvTcz38BNr3xEkEafzKoem/84aTCkTvHrU7xlAjEYFutM/Ma9rgia8s XZb0GOajFZQVK/lz/MAZg1ZKhOFue0MX1aDcYzHhZ0MuEUEsqwIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFGu6kmlqHbmMC/Hi2AHJt6GF7H5lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w ODRjZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFiMjkyMmRlOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzA4NGNkZDNmLWMxNzgtNDQyOC04 OTkyLTllMWIyOTIyZGU5OC8wODRjZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFiMjky MmRlOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMCAEAgABMBowDAMEBUgBIAMEAUgBLAMEBdHwgAMEBdhooDANBAIA AjAHAwUAJgYUADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBlyvRE7bUtkvfFrqI0gMYLkxJb2uB19eEnLahq bV6Ds5ILatq/keT6vE5z4kMNJQZJUqaOExoJLcrCn8LsyKZDpQsRAdKVd6RfvIr6 vXKmCD5qnbWrh/9yuiBKgKcysh3K+pQE05s/61t5hT/RyE3VeGmngqa0in3pwvvb uJ8lmE4EN8VmflvL4Wwpi1hEm/45q4fiJ3ensSEFsKcDHFNSP4GSW1FwIIZC522+ C4mxuVIJlJf0QW26VNC/2obRva8hcIiindoGMRqqZvFp1XXH9Tg9wjr4+lK+K1Ig 3QyBexnlP2hwzenD3fzKYPWZFAsmwVJjJBnQo0ytV52iiDh+ -----END CERTIFICATE-----Generated at Fri Sep 25 20:17:59 2026 by rpki-client