$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dcde9ece-4528-4865-9bea-93bbd069fd28.cer File: dcde9ece-4528-4865-9bea-93bbd069fd28.cer (raw, json) Hash identifier: VfdNA371Uy0B0oK1sh7MAdqS9jdeDs2jZY9YWMArTRQ= Subject key identifier: D1:BB:A4:3D:34:30:4C:58:4D:16:09:78:2C:EB:0B:04:F0:FD:1D:8B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584F172AC310A122EC508CCA3F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dcde9ece-4528-4865-9bea-93bbd069fd28/dcde9ece-4528-4865-9bea-93bbd069fd28.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dcde9ece-4528-4865-9bea-93bbd069fd28/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Sep 2026 00:45:12 +0000 Certificate not after: Sun 10 Dec 2028 01:45:12 +0000 Subordinate resources: AS: 31763 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:2a:c3:10:a1:22:ec:50:8c:ca:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 7 00:45:12 2026 GMT Not After : Dec 10 01:45:12 2028 GMT Subject: CN=dcde9ece-4528-4865-9bea-93bbd069fd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:c4:5d:16:2d:c4:d5:a8:b3:b2:d6:e2:8b: ef:73:96:e8:b0:44:c6:b2:7b:0b:75:78:9e:d4:9f: e1:fe:47:18:e7:eb:90:c6:a3:47:d4:88:9c:f7:b7: 25:7b:f5:34:81:3f:8a:99:48:55:cf:65:2c:f3:19: b1:77:2a:40:70:b3:0e:81:e5:ea:8a:92:e3:25:98: fe:3d:1a:fb:ca:ed:40:64:4c:bc:26:79:c9:af:6d: 2f:d7:85:52:7e:76:9c:95:f6:99:2a:f7:07:3e:6a: 21:d6:aa:65:a4:eb:76:57:78:3e:25:8b:aa:72:1c: c0:97:22:2d:0c:9c:28:88:2c:e4:47:a4:d8:ac:74: f2:af:c3:a3:9f:14:24:33:c8:3b:44:dc:00:aa:9d: 6a:63:d3:05:18:17:da:65:9e:d2:c1:f5:2a:68:38: 8f:70:47:38:c2:ae:5a:33:57:64:15:18:3e:2e:95: 00:72:f5:4f:e7:83:bb:0e:ef:4b:6c:6a:ad:e5:f9: 6c:1f:d5:3d:e3:52:2e:3a:02:81:0e:c4:39:ff:a7: 8e:21:d7:e7:10:fc:ae:23:03:cb:63:42:6b:32:df: dc:51:4e:7f:cf:81:b0:f0:5f:e2:23:f2:a5:28:42: 02:bb:c0:89:12:19:6f:29:a9:e9:3b:5d:3b:b0:97: cd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BB:A4:3D:34:30:4C:58:4D:16:09:78:2C:EB:0B:04:F0:FD:1D:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dcde9ece-4528-4865-9bea-93bbd069fd28/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dcde9ece-4528-4865-9bea-93bbd069fd28/dcde9ece-4528-4865-9bea-93bbd069fd28.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 31763 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d7:84:a1:cc:f0:4b:bf:74:11:b8:64:4c:0e:2b:37:8e:67: b1:31:94:10:31:5d:84:0d:ab:fb:fc:f3:fe:6b:b7:1b:6a:7c: e7:a1:cf:73:d4:35:08:77:a1:19:b4:a0:02:29:e9:0b:20:53: e9:bb:57:c3:1a:cd:74:ad:d6:dc:6b:90:c1:1e:ec:0a:a0:35: af:42:61:69:b2:ff:16:a8:b0:9c:9f:e0:69:05:c0:0d:c0:c1: 4c:60:3f:f8:ab:04:b8:3c:a1:8b:21:84:e2:a3:75:34:a1:9c: 09:78:96:4b:ab:4f:e1:c7:f9:02:83:e0:1d:de:8d:7a:a6:d7: 66:12:62:ee:2c:01:e1:28:96:05:70:1d:ec:93:c6:6a:c3:30: 89:81:fd:ba:dc:7f:52:c1:0e:44:c9:ba:23:a8:e9:38:18:4c: cb:8b:55:76:09:ae:cb:79:0d:b6:00:47:bc:4c:ef:8f:0e:a7: 99:25:5a:d6:80:55:ad:f6:34:01:a2:be:c9:86:48:4d:4d:18: ea:98:d8:0d:30:30:88:3d:29:79:85:7e:b9:7d:24:b1:b5:e7: f0:d9:71:98:38:c1:3d:b7:64:8d:0e:66:a4:ad:10:a4:05:58: de:5d:2d:31:f4:ac:ff:9a:7e:93:2e:71:38:79:a5:a1:81:89: 74:98:fb:fc -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE8XKsMQoSLsUIzKPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDkwNzAwNDUxMloXDTI4MTIxMDAxNDUxMlowLzEtMCsGA1UEAxMk ZGNkZTllY2UtNDUyOC00ODY1LTliZWEtOTNiYmQwNjlmZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2rEXRYtxNWos7LW4ovvc5bosETGsnsLdXie 1J/h/kcY5+uQxqNH1Iic97cle/U0gT+KmUhVz2Us8xmxdypAcLMOgeXqipLjJZj+ PRr7yu1AZEy8JnnJr20v14VSfnaclfaZKvcHPmoh1qplpOt2V3g+JYuqchzAlyIt DJwoiCzkR6TYrHTyr8OjnxQkM8g7RNwAqp1qY9MFGBfaZZ7SwfUqaDiPcEc4wq5a M1dkFRg+LpUAcvVP54O7Du9LbGqt5flsH9U941IuOgKBDsQ5/6eOIdfnEPyuIwPL Y0JrMt/cUU5/z4Gw8F/iI/KlKEICu8CJEhlvKanpO107sJfNKwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFNG7pD00MExYTRYJeCzrCwTw/R2LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k Y2RlOWVjZS00NTI4LTQ4NjUtOWJlYS05M2JiZDA2OWZkMjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2RjZGU5ZWNlLTQ1MjgtNDg2NS05 YmVhLTkzYmJkMDY5ZmQyOC9kY2RlOWVjZS00NTI4LTQ4NjUtOWJlYS05M2JiZDA2 OWZkMjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICfBMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAW9eEoczwS790EbhkTA4rN45nsTGU EDFdhA2r+/zz/mu3G2p856HPc9Q1CHehGbSgAinpCyBT6btXwxrNdK3W3GuQwR7s CqA1r0JhabL/FqiwnJ/gaQXADcDBTGA/+KsEuDyhiyGE4qN1NKGcCXiWS6tP4cf5 AoPgHd6NeqbXZhJi7iwB4SiWBXAd7JPGasMwiYH9utx/UsEORMm6I6jpOBhMy4tV dgmuy3kNtgBHvEzvjw6nmSVa1oBVrfY0AaK+yYZITU0Y6pjYDTAwiD0peYV+uX0k sbXn8NlxmDjBPbdkjQ5mpK0QpAVY3l0tMfSs/5p+ky5xOHmloYGJdJj7/A== -----END CERTIFICATE-----Generated at Mon Sep 21 11:43:43 2026 by rpki-client