$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017.cer File: d3627be9-2fb3-42f3-bcb2-6a247a2d1017.cer (raw, json) Hash identifier: uRVH6QDZFkv/WIdBqf/kfgIEtmKoO92ZkG0LeC1Dj/I= Subject key identifier: A1:22:53:81:63:B5:4E:E7:2C:64:FF:9B:F6:EA:92:AD:B0:A1:A5:64 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584FA6F0FED3FA132602C3BF7F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017/d3627be9-2fb3-42f3-bcb2-6a247a2d1017.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Oct 2026 12:45:13 +0000 Certificate not after: Tue 30 Jan 2029 13:45:13 +0000 Subordinate resources: AS: 396278 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a6:f0:fe:d3:fa:13:26:02:c3:bf:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 28 12:45:13 2026 GMT Not After : Jan 30 13:45:13 2029 GMT Subject: CN=d3627be9-2fb3-42f3-bcb2-6a247a2d1017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:2b:3d:06:b4:70:df:45:5a:c8:6c:85:02: d3:0d:1e:46:a0:e8:f1:b0:96:d5:28:66:58:90:11: 9a:a1:a4:a1:28:b9:cc:8f:d6:e4:a5:b8:53:9b:4f: af:59:c2:30:12:3b:33:c8:2a:83:fb:12:cf:f9:52: 3e:e5:94:db:87:f8:34:69:19:0b:fc:26:0f:a1:c6: 56:1f:c0:50:02:23:75:d6:eb:90:e9:7c:02:ef:f8: e2:78:75:a1:7d:2c:6c:b1:ed:8e:c4:51:87:d2:a4: 81:57:bd:bb:4a:6d:72:8b:80:a2:e2:a1:fb:42:57: 40:18:68:9e:54:e6:78:ad:ce:cc:d8:27:5a:90:a3: 31:3b:b1:7c:8a:4c:a6:52:2a:21:b5:dd:b5:e3:73: e4:e3:de:88:ed:74:25:24:c1:d6:9e:cd:a2:4a:f0: 66:5d:65:d2:f6:c8:cc:0b:f7:9a:9b:43:6f:3c:8d: a2:d8:57:84:07:97:42:3b:54:48:b0:d0:27:b7:de: c6:0e:45:dd:05:eb:0e:84:7f:da:78:36:ff:f7:85: eb:1e:3c:4a:41:96:7e:86:ca:3f:7e:40:f0:35:0d: 8f:e1:4a:39:4c:80:6b:f0:44:fe:81:e4:0d:ca:39: f9:04:bc:ad:fe:fb:8b:af:53:18:ea:21:db:3b:9e: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:22:53:81:63:B5:4E:E7:2C:64:FF:9B:F6:EA:92:AD:B0:A1:A5:64 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017/d3627be9-2fb3-42f3-bcb2-6a247a2d1017.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 396278 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c6:23:ac:46:b6:63:ac:f2:31:8f:d7:21:fe:7a:ee:7a:69: 46:36:e3:5b:9b:12:b8:75:55:42:8d:ae:c5:18:17:84:f7:4c: 98:f8:dd:a4:29:33:93:b3:51:53:1c:7a:35:eb:e9:2a:19:32: 8c:8d:f3:8c:40:70:9b:c8:12:38:60:ea:21:23:e3:53:d1:02: fc:e3:9f:95:c5:67:1c:1b:50:9b:44:59:57:62:ff:40:92:93: 72:fa:95:5c:d0:36:73:4a:fb:bb:91:c7:d3:9d:7e:d4:b2:7e: 03:3d:1c:b7:90:93:64:c4:53:6a:d5:3f:37:c2:11:2d:2c:93: f9:d4:f9:e5:3e:0a:99:a4:4e:47:f4:3a:6a:d6:ef:d9:b5:07: a5:15:3c:3a:59:85:00:55:77:d5:97:f0:f9:3c:54:b3:e3:a7: 24:0e:20:db:f1:44:89:b4:9d:85:48:53:d9:23:c5:c7:45:db: fe:43:f4:8d:59:f8:e7:d8:3d:f7:06:b0:37:35:a3:90:2e:b4: c4:aa:76:4f:90:12:c3:67:2d:62:7d:8b:c2:e5:8d:83:2a:01: 07:39:03:f4:74:48:39:a8:94:4c:03:57:d3:ae:db:20:db:d5: 13:b1:1d:d7:37:c3:a9:c0:7d:8d:ef:27:35:4f:a6:b5:c9:6a: 35:d7:ba:d3 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE+m8P7T+hMmAsO/f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MTAyODEyNDUxM1oXDTI5MDEzMDEzNDUxM1owLzEtMCsGA1UEAxMk ZDM2MjdiZTktMmZiMy00MmYzLWJjYjItNmEyNDdhMmQxMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOwrPQa0cN9FWshshQLTDR5GoOjxsJbVKGZY kBGaoaShKLnMj9bkpbhTm0+vWcIwEjszyCqD+xLP+VI+5ZTbh/g0aRkL/CYPocZW H8BQAiN11uuQ6XwC7/jieHWhfSxsse2OxFGH0qSBV727Sm1yi4Ci4qH7QldAGGie VOZ4rc7M2CdakKMxO7F8ikymUiohtd2143Pk496I7XQlJMHWns2iSvBmXWXS9sjM C/eam0NvPI2i2FeEB5dCO1RIsNAnt97GDkXdBesOhH/aeDb/94XrHjxKQZZ+hso/ fkDwNQ2P4Uo5TIBr8ET+geQNyjn5BLyt/vuLr1MY6iHbO57F8wIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFKEiU4FjtU7nLGT/m/bqkq2woaVkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k MzYyN2JlOS0yZmIzLTQyZjMtYmNiMi02YTI0N2EyZDEwMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2QzNjI3YmU5LTJmYjMtNDJmMy1i Y2IyLTZhMjQ3YTJkMTAxNy9kMzYyN2JlOS0yZmIzLTQyZjMtYmNiMi02YTI0N2Ey ZDEwMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgv2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAADGI6xGtmOs8jGP1yH+eu56aUY2 41ubErh1VUKNrsUYF4T3TJj43aQpM5OzUVMcejXr6SoZMoyN84xAcJvIEjhg6iEj 41PRAvzjn5XFZxwbUJtEWVdi/0CSk3L6lVzQNnNK+7uRx9OdftSyfgM9HLeQk2TE U2rVPzfCES0sk/nU+eU+CpmkTkf0OmrW79m1B6UVPDpZhQBVd9WX8Pk8VLPjpyQO INvxRIm0nYVIU9kjxcdF2/5D9I1Z+OfYPfcGsDc1o5AutMSqdk+QEsNnLWJ9i8Ll jYMqAQc5A/R0SDmolEwDV9Ou2yDb1ROxHdc3w6nAfY3vJzVPprXJajXXutM= -----END CERTIFICATE-----Generated at Thu Nov 5 04:36:09 2026 by rpki-client