$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer File: 498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer (raw, json) Hash identifier: XHrNucZYN3m0kgqB1Bucs/BaG+SqpOxZRTrLWvKC6t8= Subject key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584F0D655CA9639549CC39CB1FD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Sep 2026 12:45:11 +0000 Certificate not after: Wed 06 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 63233 AS: 393641 AS: 393655 IP: 192.152.132.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:65:5c:a9:63:95:49:cc:39:cb:1f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 3 12:45:11 2026 GMT Not After : Dec 6 13:45:11 2028 GMT Subject: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:d9:3d:19:ad:74:98:fa:c7:51:32:7c:d6: a7:88:fd:ea:08:23:ae:58:a3:b6:ae:cc:53:c5:7b: 2d:2e:f9:89:2b:3b:2e:cc:39:90:2f:72:7b:87:ac: 26:f3:6d:a5:a0:eb:79:3f:71:5b:91:28:77:10:12: c0:57:a2:57:81:ef:cf:8d:bb:58:1c:50:1f:16:df: 0a:4d:49:b5:60:55:f7:66:c7:f8:24:6a:63:bf:8d: 1b:35:df:1a:22:d6:b9:47:17:7b:ac:49:d0:4f:11: a7:bc:6e:f5:60:6f:48:53:9c:31:c4:8e:1a:66:62: dd:4f:b8:d2:a9:4e:fc:8d:4b:7d:7e:6b:14:1b:cc: 52:e0:f1:1f:17:3c:5f:a9:f4:a7:c3:dc:23:72:22: 8b:05:cb:0f:e4:db:74:91:50:2e:c5:a3:da:b4:cf: 8e:ef:8a:21:fc:e8:01:45:cb:3a:75:0f:be:a7:15: bb:cd:e5:4a:1b:32:ce:9b:e5:e9:51:50:00:88:2a: 9e:44:2b:af:c0:04:f2:89:81:af:8b:09:19:ce:83: 4a:c5:21:97:f8:e4:c9:18:d3:52:1f:ca:d2:f8:51: ed:a9:5b:ff:ff:0e:97:6a:72:0e:ae:c6:9f:8e:6f: b9:82:f6:1a:45:aa:ad:f0:ec:e1:3c:81:67:2a:9f: 62:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.152.132.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63233 393641 393655 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:39:f0:d1:c6:fb:f1:29:86:88:71:a3:3f:33:bb:c8:cb:2a: ea:a2:d5:08:72:07:e7:fd:2e:8d:9b:4d:c0:12:c7:68:f2:4d: 76:f6:aa:b1:c5:16:84:a2:e3:9c:93:19:dd:03:c6:2e:71:88: 34:7b:46:94:54:33:ef:31:7e:42:b2:f7:c0:50:29:27:01:94: a2:3b:fa:70:29:9a:84:88:6b:91:05:00:88:42:d1:a9:01:8b: 35:aa:cb:42:43:f0:f9:a1:61:3d:07:c9:e8:08:7c:1b:9a:e4: c7:07:89:99:18:1c:e1:64:0a:49:75:73:b6:a5:39:bb:d6:be: 7e:57:dd:2e:43:83:f3:44:f2:ff:36:07:d8:58:63:0b:1d:4b: fc:ec:5a:ce:b1:88:cd:0c:84:27:b9:89:85:7d:7d:6d:ee:a5: a5:3e:6d:19:8d:d0:03:32:0b:ce:0c:ba:11:87:00:fd:57:7d: 73:20:74:e4:b6:b5:8e:4c:25:a3:b5:44:e6:cf:d5:a4:4e:72: 0f:a3:5a:dd:f7:94:cd:33:ed:c6:fa:55:05:cd:bc:df:ec:b1: f3:32:a8:38:14:ea:1e:5f:9c:e1:fd:8a:4e:e3:ee:c9:93:97: 3b:d4:f2:11:45:cd:24:04:0c:fe:a9:6e:77:d2:45:e2:7e:96: f6:aa:49:e0 -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWE8NZVypY5VJzDnLH9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDkwMzEyNDUxMVoXDTI4MTIwNjEzNDUxMVowLzEtMCsGA1UEAxMk NDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJlYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rPZPRmtdJj6x1EyfNaniP3qCCOuWKO2rsxT xXstLvmJKzsuzDmQL3J7h6wm822loOt5P3FbkSh3EBLAV6JXge/PjbtYHFAfFt8K TUm1YFX3Zsf4JGpjv40bNd8aIta5Rxd7rEnQTxGnvG71YG9IU5wxxI4aZmLdT7jS qU78jUt9fmsUG8xS4PEfFzxfqfSnw9wjciKLBcsP5Nt0kVAuxaPatM+O74oh/OgB Rcs6dQ++pxW7zeVKGzLOm+XpUVAAiCqeRCuvwATyiYGviwkZzoNKxSGX+OTJGNNS H8rS+FHtqVv//w6XanIOrsafjm+5gvYaRaqt8OzhPIFnKp9i0QIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFFlzchcHr8HuwcCxMKkoB+w5nBRbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQ5OGMzZjA3LTliOGUtNDRhMC05 MmY0LTUzOGMwZDcyZWE0ZS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3 MmVhNGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHAmIQwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwID APcBAgMGAakCAwYBtzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjOfDRxvvxKYaIcaM/M7vIyyrqotUIcgfn /S6Nm03AEsdo8k129qqxxRaEouOckxndA8YucYg0e0aUVDPvMX5CsvfAUCknAZSi O/pwKZqEiGuRBQCIQtGpAYs1qstCQ/D5oWE9B8noCHwbmuTHB4mZGBzhZApJdXO2 pTm71r5+V90uQ4PzRPL/NgfYWGMLHUv87FrOsYjNDIQnuYmFfX1t7qWlPm0ZjdAD MgvODLoRhwD9V31zIHTktrWOTCWjtUTmz9WkTnIPo1rd95TNM+3G+lUFzbzf7LHz Mqg4FOoeX5zh/YpO4+7Jk5c71PIRRc0kBAz+qW530kXifpb2qkng -----END CERTIFICATE-----Generated at Mon Sep 21 03:29:06 2026 by rpki-client