$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d.cer File: c5866eff-c061-4d47-9ecb-06697eb4f13d.cer (raw, json) Hash identifier: YYgTp8B8Yy/fnBFFYW+frnrvY7UNG2hOosLf5Hsyb8Y= Subject key identifier: 3F:51:B2:FE:08:94:AD:35:E3:7C:3D:13:A3:80:5A:29:23:51:B4:ED Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584F7D10BA9C83B50EC51225AEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/c5866eff-c061-4d47-9ecb-06697eb4f13d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Oct 2026 12:45:12 +0000 Certificate not after: Mon 15 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 53591 IP: 208.74.136.0/22 IP: 208.94.32.0/22 IP: 2604:4700::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:10:ba:9c:83:b5:0e:c5:12:25:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 13 12:45:12 2026 GMT Not After : Jan 15 13:45:12 2029 GMT Subject: CN=c5866eff-c061-4d47-9ecb-06697eb4f13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:44:e9:e8:24:3b:04:af:ac:c7:e8:e6:94: 48:d6:ca:95:36:72:48:0d:70:a0:87:d6:bf:58:92: 41:25:00:98:b5:f6:01:1b:cf:f2:53:7e:f7:1a:f2: 80:69:fd:2c:88:33:b6:ae:7d:da:74:31:21:ef:8f: 5d:06:c8:9f:4a:3b:e5:5c:cf:80:38:14:56:a3:3e: 86:d0:96:c4:10:58:c2:05:22:f9:74:62:34:ec:52: da:09:61:d9:fa:df:e0:b9:5d:e1:25:9f:d1:ff:bb: ed:9c:0b:38:8c:00:6b:54:17:e9:73:88:46:83:d9: a1:4d:4d:af:05:fe:29:4e:c5:e2:76:a8:e2:d6:b7: 4d:73:1d:1b:e3:7c:8c:b6:31:8f:00:40:47:0b:f0: 8c:6f:44:9c:9a:86:5e:10:48:f9:f7:2c:e1:d5:e4: 46:cb:68:c3:4e:f2:47:e3:5b:ab:42:32:da:95:d7: 9a:3e:6c:28:91:b6:90:39:d6:d3:68:5a:ac:b2:97: 43:d1:c0:53:68:a4:18:25:55:8e:2a:ac:2e:48:a3: 2f:0c:cd:f2:1a:7e:e4:2f:1e:b9:e3:15:5c:67:d2: 9d:11:d1:de:09:4c:8f:56:29:8f:78:c1:fb:ee:a8: 65:43:f2:00:3c:a4:8d:59:d9:08:3f:c0:43:36:9c: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:51:B2:FE:08:94:AD:35:E3:7C:3D:13:A3:80:5A:29:23:51:B4:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/c5866eff-c061-4d47-9ecb-06697eb4f13d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 208.74.136.0/22 208.94.32.0/22 IPv6: 2604:4700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53591 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:52:5b:b3:75:00:4d:a9:73:37:23:f2:7f:e2:79:30:fd:b9: 9a:8b:11:b4:27:3f:a7:60:ba:21:52:a6:10:ad:c6:e2:50:34: 7d:e0:c2:d7:6d:c7:f7:12:f0:3e:9c:70:fb:50:05:23:18:42: a1:d5:64:50:a0:07:72:c9:9b:64:a0:7f:62:c1:ba:43:92:e2: 7b:f5:4e:33:8d:8a:f0:61:6e:65:a0:b6:75:62:50:f3:a7:ec: 1b:83:04:60:13:44:03:4d:30:d9:81:35:e4:28:8c:08:18:ba: 6b:92:2c:b5:08:54:e7:33:fa:a4:f4:c8:d1:7a:6e:96:58:7e: 4a:45:45:d7:0e:d6:9b:96:cd:db:b7:0b:f6:9a:66:6e:d1:46: cc:a4:9b:a5:09:a1:d5:16:f3:b9:f9:bb:df:06:80:ca:3e:62: c7:64:18:59:d1:96:4b:e7:57:65:24:00:9e:80:78:6b:a8:24: 58:09:cd:9a:5d:a3:ec:42:ab:d8:5a:7d:63:9d:2c:1e:de:a4: e3:97:71:f1:e7:c4:5a:6d:1f:6f:8d:8b:b2:19:f7:84:5a:13: aa:9b:e9:f1:1e:fb:c5:06:08:8d:0d:f6:a9:6f:50:2b:c0:f0: a2:91:cb:c6:c4:4b:61:6c:4e:97:b0:3f:be:37:c4:53:97:2f: ea:1a:42:64 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE99ELqcg7UOxRIlrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MTAxMzEyNDUxMloXDTI5MDExNTEzNDUxMlowLzEtMCsGA1UEAxMk YzU4NjZlZmYtYzA2MS00ZDQ3LTllY2ItMDY2OTdlYjRmMTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzctE6egkOwSvrMfo5pRI1sqVNnJIDXCgh9a/ WJJBJQCYtfYBG8/yU373GvKAaf0siDO2rn3adDEh749dBsifSjvlXM+AOBRWoz6G 0JbEEFjCBSL5dGI07FLaCWHZ+t/guV3hJZ/R/7vtnAs4jABrVBfpc4hGg9mhTU2v Bf4pTsXidqji1rdNcx0b43yMtjGPAEBHC/CMb0ScmoZeEEj59yzh1eRGy2jDTvJH 41urQjLaldeaPmwokbaQOdbTaFqsspdD0cBTaKQYJVWOKqwuSKMvDM3yGn7kLx65 4xVcZ9KdEdHeCUyPVimPeMH77qhlQ/IAPKSNWdkIP8BDNpxTJwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFD9Rsv4IlK0143w9E6OAWikjUbTtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j NTg2NmVmZi1jMDYxLTRkNDctOWVjYi0wNjY5N2ViNGYxM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2M1ODY2ZWZmLWMwNjEtNGQ0Ny05 ZWNiLTA2Njk3ZWI0ZjEzZC9jNTg2NmVmZi1jMDYxLTRkNDctOWVjYi0wNjY5N2Vi NGYxM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALQSogDBALQXiAwDQQCAAIwBwMFACYERwAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANFXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGVSW7N1AE2pczcj8n/i eTD9uZqLEbQnP6dguiFSphCtxuJQNH3gwtdtx/cS8D6ccPtQBSMYQqHVZFCgB3LJ m2Sgf2LBukOS4nv1TjONivBhbmWgtnViUPOn7BuDBGATRANNMNmBNeQojAgYumuS LLUIVOcz+qT0yNF6bpZYfkpFRdcO1puWzdu3C/aaZm7RRsykm6UJodUW87n5u98G gMo+YsdkGFnRlkvnV2UkAJ6AeGuoJFgJzZpdo+xCq9hafWOdLB7epOOXcfHnxFpt H2+Ni7IZ94RaE6qb6fEe+8UGCI0N9qlvUCvA8KKRy8bES2FsTpewP743xFOXL+oa QmQ= -----END CERTIFICATE-----Generated at Thu Nov 5 03:54:26 2026 by rpki-client