$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96.cer File: b81fd917-6002-4314-85ac-1016672b3f96.cer (raw, json) Hash identifier: y7MTHL+2C39FLYjbXjOxMjCTf5US3Qas/xel+vUaBSk= Subject key identifier: E9:D3:A7:B6:75:C6:7E:97:9C:6B:B6:8D:6A:0A:01:74:AC:F6:48:EF Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584DF0A3A441BD91FE21924061A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96/b81fd917-6002-4314-85ac-1016672b3f96.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 24 May 2026 12:45:17 +0000 Certificate not after: Sat 26 Aug 2028 12:45:17 +0000 Subordinate resources: IP: 162.208.17.0/24 IP: 206.130.43.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:a3:a4:41:bd:91:fe:21:92:40:61:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 24 12:45:17 2026 GMT Not After : Aug 26 12:45:17 2028 GMT Subject: CN=b81fd917-6002-4314-85ac-1016672b3f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:94:33:5f:6a:00:75:c0:ce:8a:f3:1e:8a: d8:99:3b:ff:fe:59:0c:e3:f3:c4:61:2b:ee:92:e2: 1c:a2:48:ab:8f:d8:39:9b:91:0b:75:27:e4:32:98: de:37:20:d8:fd:d9:cf:1e:89:d8:bb:ee:06:42:4b: 6c:8e:bd:78:be:4f:05:e2:64:2d:77:a6:37:ff:98: 67:ea:58:90:78:64:67:a8:d4:52:a5:20:d9:df:ef: 9e:62:01:a0:e0:b2:2c:6b:93:7d:24:4c:f1:f6:63: b6:68:2b:0b:0e:a3:08:17:55:7e:23:08:ce:96:48: 01:1b:5e:f0:b6:fd:9e:ff:ea:dc:ef:bc:87:ad:c4: 68:a5:f4:c7:cd:7a:9c:5e:d9:04:da:d9:e5:78:2c: 82:dd:86:a3:22:41:b4:16:6f:68:b8:d2:87:ac:71: fa:52:aa:fb:66:a1:2a:1a:b0:f3:b3:2b:24:79:e3: 3f:d2:82:b5:68:16:98:35:bd:76:e3:f6:67:e4:92: 71:12:60:42:7d:c9:ad:f2:ae:ba:04:8e:d8:c4:f1: 8d:c4:52:15:9f:cf:d0:82:88:17:c4:99:3a:5b:4b: 2d:c7:80:28:6c:a8:8e:e2:dd:33:06:91:08:f8:ca: b1:7a:f7:75:a5:51:3b:e0:b0:14:f8:9d:25:45:ed: 3f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D3:A7:B6:75:C6:7E:97:9C:6B:B6:8D:6A:0A:01:74:AC:F6:48:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96/b81fd917-6002-4314-85ac-1016672b3f96.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 162.208.17.0/24 206.130.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ce:00:a5:40:4c:6e:1f:ed:bb:f8:b2:92:5f:d3:2f:81:ae: e6:92:5c:3c:94:ff:35:3b:b4:0b:89:cc:dd:f4:5e:11:52:05: 2c:c2:a9:f9:ee:10:7d:d3:d7:31:7b:30:e4:35:81:56:0c:75: 95:c2:ad:6b:13:5b:74:86:4f:87:77:76:8a:20:89:f1:b0:7f: 03:b0:43:86:7e:c9:e1:4e:bb:b8:f9:ea:b4:c4:fd:f7:ef:81: 71:65:8f:d8:ec:e8:9c:72:27:26:a2:6b:62:a0:7c:8f:3a:9f: d7:b1:ee:22:16:2b:f0:c5:56:71:23:50:dc:53:f2:b9:e7:1d: 49:a5:74:c3:74:40:3e:78:ec:a2:c7:76:37:0a:1f:ab:18:3e: 37:ca:4d:b5:ac:55:31:d7:f3:e8:df:5d:ea:8a:14:f4:f2:81: 4c:48:6e:c0:f5:13:13:1b:8e:79:45:07:bc:d6:3b:82:cc:07: 2a:1e:6c:7b:d3:68:47:74:7b:1d:88:9f:67:67:89:22:e5:50: 0c:9d:3c:77:bf:5b:24:e5:15:c3:32:a3:82:69:9e:b2:94:bf: ed:39:75:3c:3a:bd:0a:4b:05:a1:05:7c:f6:8d:8e:6d:fd:3a: 55:b1:e8:53:c7:15:44:9e:f5:68:fc:39:9f:ca:25:e0:fa:4d: 05:09:1c:91 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE3wo6RBvZH+IZJAYaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDUyNDEyNDUxN1oXDTI4MDgyNjEyNDUxN1owLzEtMCsGA1UEAxMk YjgxZmQ5MTctNjAwMi00MzE0LTg1YWMtMTAxNjY3MmIzZjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7+UM19qAHXAzorzHorYmTv//lkM4/PEYSvu kuIcokirj9g5m5ELdSfkMpjeNyDY/dnPHonYu+4GQktsjr14vk8F4mQtd6Y3/5hn 6liQeGRnqNRSpSDZ3++eYgGg4LIsa5N9JEzx9mO2aCsLDqMIF1V+IwjOlkgBG17w tv2e/+rc77yHrcRopfTHzXqcXtkE2tnleCyC3YajIkG0Fm9ouNKHrHH6Uqr7ZqEq GrDzsyskeeM/0oK1aBaYNb124/Zn5JJxEmBCfcmt8q66BI7YxPGNxFIVn8/QgogX xJk6W0stx4AobKiO4t0zBpEI+Mqxevd1pVE74LAU+J0lRe0/6wIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFOnTp7Z1xn6XnGu2jWoKAXSs9kjvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i ODFmZDkxNy02MDAyLTQzMTQtODVhYy0xMDE2NjcyYjNmOTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2I4MWZkOTE3LTYwMDItNDMxNC04 NWFjLTEwMTY2NzJiM2Y5Ni9iODFmZDkxNy02MDAyLTQzMTQtODVhYy0xMDE2Njcy YjNmOTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACi0BEDBADOgiswVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAO84ApUBMbh/t u/iykl/TL4Gu5pJcPJT/NTu0C4nM3fReEVIFLMKp+e4QfdPXMXsw5DWBVgx1lcKt axNbdIZPh3d2iiCJ8bB/A7BDhn7J4U67uPnqtMT99++BcWWP2OzonHInJqJrYqB8 jzqf17HuIhYr8MVWcSNQ3FPyuecdSaV0w3RAPnjsosd2Nwofqxg+N8pNtaxVMdfz 6N9d6ooU9PKBTEhuwPUTExuOeUUHvNY7gswHKh5se9NoR3R7HYifZ2eJIuVQDJ08 d79bJOUVwzKjgmmespS/7Tl1PDq9CksFoQV89o2Obf06VbHoU8cVRJ71aPw5n8ol 4PpNBQkckQ== -----END CERTIFICATE-----Generated at Sat Jun 13 08:55:23 2026 by rpki-client