$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer File: 43ac5ede-1d27-41a5-932c-21832f3ef95c.cer (raw, json) Hash identifier: onarD+wvFReqhxj0cdlxzKLEukZgkH/v8Qbh5U2B7zY= Subject key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584F23BAD5E7EC64772B0D5AED80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 11 Sep 2026 12:45:11 +0000 Certificate not after: Thu 14 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 11186 AS: 11734 AS: 54622 IP: 104.151.136.0/21 IP: 104.153.192.0/22 IP: 199.19.208.0/22 IP: 199.189.64.0/22 IP: 208.74.28.0/22 IP: 208.74.48.0/22 IP: 208.82.204.0/22 IP: 208.91.48.0/22 IP: 209.134.48.0/20 IP: 2607:f148::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:ba:d5:e7:ec:64:77:2b:0d:5a:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 11 12:45:11 2026 GMT Not After : Dec 14 13:45:11 2028 GMT Subject: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ed:f3:35:38:ed:13:37:29:cb:6b:4f:45:35: f4:cd:21:19:8e:44:b7:9e:cb:7f:c7:8d:0c:1c:83: 38:14:4e:59:b6:cb:15:cd:55:83:8e:af:b7:fc:16: b4:fe:f1:23:ea:a4:e5:c9:6e:57:22:4f:69:77:ea: fa:06:fa:32:8b:cd:6b:44:96:53:a9:54:b5:39:a4: 83:98:d4:bc:95:8b:c5:d6:85:43:58:f5:d9:17:ba: 25:9a:df:09:45:88:97:8c:e8:f0:18:22:ab:e8:7a: 4b:4d:e8:98:a1:bd:b9:1c:6e:42:89:03:11:50:ed: 34:2b:d5:6e:c7:9b:67:1e:bf:cc:f0:ca:69:5d:cf: c0:ec:56:91:f2:ac:f3:e1:01:a4:43:36:d9:47:bb: 47:a9:19:b9:29:c0:b5:c9:90:c4:31:1f:5f:53:3b: 06:27:89:e7:17:9a:55:f2:0c:1c:02:f8:84:fb:83: 97:00:79:78:9e:fe:81:90:26:70:f4:40:f7:28:a3: 38:10:45:f4:68:03:7e:31:7e:b8:48:4d:e2:c8:a3: 36:61:34:cc:81:c7:5f:14:b7:4f:00:3c:61:06:23: 95:54:13:4e:7a:9f:6f:7c:1e:a5:ce:6b:b0:74:10: 49:20:23:b5:02:68:14:98:de:02:ba:51:48:fd:f6: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 104.151.136.0/21 104.153.192.0/22 199.19.208.0/22 199.189.64.0/22 208.74.28.0/22 208.74.48.0/22 208.82.204.0/22 208.91.48.0/22 209.134.48.0/20 IPv6: 2607:f148::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11186 11734 54622 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:98:cf:18:fc:03:10:2b:2c:1d:72:4a:94:7e:86:73:09:73: 33:52:d4:07:94:e6:49:60:14:e7:e6:00:13:c8:c3:85:a1:84: d1:9b:2b:0f:66:2a:33:29:70:d2:f8:27:89:6a:c5:79:c0:31: 4b:df:06:82:e2:f8:83:76:b6:0c:cd:da:13:83:fb:1b:b2:e9: fe:00:2c:a6:96:b8:54:09:08:13:3b:0f:5f:01:9b:38:04:87: f9:f9:ba:ce:51:d7:1a:1a:07:59:d1:fa:ea:93:48:e2:2f:92: 95:04:db:a1:0c:31:e7:b2:17:b2:6f:c6:ff:f1:9d:24:6a:18: 40:43:96:0f:6c:28:f1:69:89:38:3a:00:46:3c:5d:e6:6a:2d: 0a:27:e5:fa:8e:3e:0f:ba:31:51:4a:b7:e0:53:7b:d1:27:95: 00:78:b4:08:90:65:fd:4a:9b:f1:9c:8b:1e:7e:db:eb:12:ab: c2:eb:bb:af:85:63:33:9c:5e:24:d6:60:be:57:b3:b8:6b:d5: 9e:36:69:19:f1:69:17:2f:c4:56:50:d4:ce:20:59:9e:66:8a: 49:d6:54:49:9f:85:ae:36:4b:31:50:6b:5b:cd:92:d8:7a:46: e5:31:03:61:cd:a6:23:c2:a1:de:d2:99:00:23:2e:d6:19:c7: e3:0c:40:80 -----BEGIN CERTIFICATE----- MIIHUDCCBjigAwIBAgIUAQ0Mn0MoWE8jutXn7GR3Kw1a7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDkxMTEyNDUxMVoXDTI4MTIxNDEzNDUxMVowLzEtMCsGA1UEAxMk NDNhYzVlZGUtMWQyNy00MWE1LTkzMmMtMjE4MzJmM2VmOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe3zNTjtEzcpy2tPRTX0zSEZjkS3nst/x40M HIM4FE5ZtssVzVWDjq+3/Ba0/vEj6qTlyW5XIk9pd+r6Bvoyi81rRJZTqVS1OaSD mNS8lYvF1oVDWPXZF7olmt8JRYiXjOjwGCKr6HpLTeiYob25HG5CiQMRUO00K9Vu x5tnHr/M8MppXc/A7FaR8qzz4QGkQzbZR7tHqRm5KcC1yZDEMR9fUzsGJ4nnF5pV 8gwcAviE+4OXAHl4nv6BkCZw9ED3KKM4EEX0aAN+MX64SE3iyKM2YTTMgcdfFLdP ADxhBiOVVBNOep9vfB6lzmuwdBBJICO1AmgUmN4CulFI/fYYywIDAQABo4IEYjCC BF4wHQYDVR0OBBYEFAk+SCh3rslmXefxPznjt36En5rNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYzZWY5NWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQzYWM1ZWRlLTFkMjctNDFhNS05 MzJjLTIxODMyZjNlZjk1Yy80M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYz ZWY5NWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwXgYIKwYBBQUH AQcBAf8ETzBNMDwEAgABMDYDBANol4gDBAJomcADBALHE9ADBALHvUADBALQShwD BALQSjADBALQUswDBALQWzADBATRhjAwDQQCAAIwBwMFACYH8UgwIgYIKwYBBQUH AQgBAf8EEzARoA8wDQICK7ICAi3WAgMA1V4wVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAO5jPGPwDECssHXJK lH6GcwlzM1LUB5TmSWAU5+YAE8jDhaGE0ZsrD2YqMylw0vgniWrFecAxS98GguL4 g3a2DM3aE4P7G7Lp/gAsppa4VAkIEzsPXwGbOASH+fm6zlHXGhoHWdH66pNI4i+S lQTboQwx57IXsm/G//GdJGoYQEOWD2wo8WmJODoARjxd5motCifl+o4+D7oxUUq3 4FN70SeVAHi0CJBl/Uqb8ZyLHn7b6xKrwuu7r4VjM5xeJNZgvlezuGvVnjZpGfFp Fy/EVlDUziBZnmaKSdZUSZ+FrjZLMVBrW82S2HpG5TEDYc2mI8Kh3tKZACMu1hnH 4wxAgA== -----END CERTIFICATE-----Generated at Wed Sep 23 05:23:49 2026 by rpki-client