$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer File: fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer (raw, json) Hash identifier: gqyOpQeBSKLs/dNSXPAzeUIx+Qfy4iQfEWFSm8bfuuw= Subject key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584F12FABB202F497C9CFBEE7880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 05 Sep 2026 12:45:11 +0000 Certificate not after: Fri 08 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 131.253.1.0/24 IP: 131.253.3.0/24 IP: 131.253.5.0 -- 131.253.6.255 IP: 131.253.8.0/24 IP: 131.253.12.0 -- 131.253.18.255 IP: 131.253.21.0 -- 131.253.47.255 IP: 131.253.61.0 -- 131.253.255.255 IP: 132.245.0.0/16 IP: 134.170.0.0/16 IP: 134.177.0.0/16 IP: 137.116.0.0/15 IP: 137.135.0.0/16 IP: 138.91.0.0/16 IP: 141.251.0.0/16 IP: 168.61.0.0 -- 168.63.255.255 IP: 192.32.0.0/16 IP: 192.48.225.0/24 IP: 192.84.159.0 -- 192.84.161.255 IP: 198.49.8.0/24 IP: 198.200.130.0/24 IP: 198.206.164.0/24 IP: 199.30.16.0/20 IP: 199.74.210.0/24 IP: 199.242.32.0 -- 199.242.55.255 IP: 204.152.140.0/23 IP: 205.174.224.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:12:fa:bb:20:2f:49:7c:9c:fb:ee:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 5 12:45:11 2026 GMT Not After : Dec 8 13:45:11 2028 GMT Subject: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:20:da:e2:91:3d:c9:8a:13:ee:fd:f0:14: c0:25:3e:2c:93:87:2c:04:31:c1:cf:88:39:90:d4: 31:2e:e8:cf:81:af:06:53:c8:70:6b:cf:3c:ed:a0: 89:13:85:2d:51:51:13:b9:26:46:7b:3c:bd:2c:98: 5c:ae:c3:6e:e9:26:14:25:3f:e5:c6:6d:00:ec:6e: 0b:8b:3b:17:a7:f1:a8:a5:80:c8:a3:7c:52:d1:30: 5e:8f:aa:2e:67:64:2c:b5:fa:83:36:f0:9b:8b:f0: fa:9c:0d:ee:f9:35:e4:fa:5d:e4:9c:cc:44:31:1e: 92:9b:92:0f:74:4a:7f:40:8e:14:c4:e4:d9:64:06: e5:51:db:c7:ce:33:b7:99:ce:f1:66:f9:1e:e2:67: 6b:9a:0e:b8:b6:c6:dc:bc:93:d5:35:1e:81:c4:90: 5e:d2:52:ef:6d:e4:66:df:93:d2:5f:37:eb:69:b2: 06:1a:0a:ca:3a:c3:26:42:2c:59:9c:8a:fa:ba:4d: 75:64:89:78:69:26:ce:18:e9:3f:36:9a:32:47:66: 69:13:1b:87:62:dc:a7:d7:5e:98:83:17:aa:4e:b2: 33:b9:05:a3:67:70:d4:81:75:4a:f2:07:61:d1:ae: ce:15:01:49:43:a9:c8:33:bb:7f:87:9a:0f:9d:bd: c4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 131.253.1.0/24 131.253.3.0/24 131.253.5.0-131.253.6.255 131.253.8.0/24 131.253.12.0-131.253.18.255 131.253.21.0-131.253.47.255 131.253.61.0-131.253.255.255 132.245.0.0/16 134.170.0.0/16 134.177.0.0/16 137.116.0.0/15 137.135.0.0/16 138.91.0.0/16 141.251.0.0/16 168.61.0.0-168.63.255.255 192.32.0.0/16 192.48.225.0/24 192.84.159.0-192.84.161.255 198.49.8.0/24 198.200.130.0/24 198.206.164.0/24 199.30.16.0/20 199.74.210.0/24 199.242.32.0-199.242.55.255 204.152.140.0/23 205.174.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:16:2e:b4:d9:7f:7c:aa:99:4b:0a:d5:fa:06:dd:b2:b4:8c: 62:7f:7e:9d:ea:c1:d0:5e:d5:55:b4:97:6b:4c:27:fb:87:20: 44:51:cc:de:56:a6:e7:6d:c8:82:96:38:13:ac:f9:ae:c1:03: 40:49:92:9d:aa:94:5e:d3:33:5f:6a:30:fb:22:f9:39:0a:ef: 36:73:ef:03:2c:57:56:c7:92:a8:76:03:b4:ea:60:e9:83:a7: 6d:eb:b7:bb:d6:29:b5:0b:05:01:c1:38:3e:da:38:85:41:37: d6:42:e1:d5:71:8f:ad:07:0d:de:e5:cd:d0:5e:de:d3:67:88: ec:9a:83:39:fc:c0:b3:ec:60:b9:31:11:10:2d:47:61:bf:d8: c2:07:8f:ef:3a:b1:a6:3c:53:a1:0f:b6:16:61:c0:aa:70:6d: a8:49:36:0a:26:46:0b:12:86:20:05:70:3c:e7:c7:6a:fd:d9: bc:be:3f:d2:99:82:ea:1f:7f:34:38:48:ce:27:b8:0a:34:85: 1c:55:4b:31:87:80:ac:de:05:1e:89:57:f1:20:c2:dd:0a:08: 7d:35:71:96:64:91:4e:75:a0:ef:2d:17:41:70:ff:bd:35:0a: 95:3b:f1:c1:4d:ab:28:45:18:a6:0c:2b:c5:6a:2c:0b:4d:15: 0f:5d:65:34 -----BEGIN CERTIFICATE----- MIIHtTCCBp2gAwIBAgIUAQ0Mn0MoWE8S+rsgL0l8nPvueIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDkwNTEyNDUxMVoXDTI4MTIwODEzNDUxMVowLzEtMCsGA1UEAxMk ZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3NDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS0g2uKRPcmKE+798BTAJT4sk4csBDHBz4g5 kNQxLujPga8GU8hwa8887aCJE4UtUVETuSZGezy9LJhcrsNu6SYUJT/lxm0A7G4L izsXp/GopYDIo3xS0TBej6ouZ2QstfqDNvCbi/D6nA3u+TXk+l3knMxEMR6Sm5IP dEp/QI4UxOTZZAblUdvHzjO3mc7xZvke4mdrmg64tsbcvJPVNR6BxJBe0lLvbeRm 35PSXzfrabIGGgrKOsMmQixZnIr6uk11ZIl4aSbOGOk/NpoyR2ZpExuHYtyn116Y gxeqTrIzuQWjZ3DUgXVK8gdh0a7OFQFJQ6nIM7t/h5oPnb3EDwIDAQABo4IExzCC BMMwHQYDVR0OBBYEFLmj0JFWAovB8vJ3QS2CG87Sv9tDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m ZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0M2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ZkZTFlM2QxLWQ4ZGEtNGZhOS04 MDY4LTFiNjQxY2FiNzQzZC9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNh Yjc0M2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgeYGCCsGAQUF BwEHAQH/BIHWMIHTMIHQBAIAATCByQMEAIP9AQMEAIP9AzAMAwQAg/0FAwQAg/0G AwQAg/0IMAwDBAKD/QwDBACD/RIwDAMEAIP9FQMEBIP9IDALAwQAg/09AwMBg/wD AwCE9QMDAIaqAwMAhrEDAwGJdAMDAImHAwMAilsDAwCN+zAKAwMAqD0DAwaoAAMD AMAgAwQAwDDhMAwDBADAVJ8DBAHAVKADBADGMQgDBADGyIIDBADGzqQDBATHHhAD BADHStIwDAMEBcfyIAMEA8fyMAMEAcyYjAMEBM2u4DBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6Fi602X98 qplLCtX6Bt2ytIxif36d6sHQXtVVtJdrTCf7hyBEUczeVqbnbciCljgTrPmuwQNA SZKdqpRe0zNfajD7Ivk5Cu82c+8DLFdWx5KodgO06mDpg6dt67e71im1CwUBwTg+ 2jiFQTfWQuHVcY+tBw3e5c3QXt7TZ4jsmoM5/MCz7GC5MREQLUdhv9jCB4/vOrGm PFOhD7YWYcCqcG2oSTYKJkYLEoYgBXA858dq/dm8vj/SmYLqH380OEjOJ7gKNIUc VUsxh4Cs3gUeiVfxIMLdCgh9NXGWZJFOdaDvLRdBcP+9NQqVO/HBTasoRRimDCvF aiwLTRUPXWU0 -----END CERTIFICATE-----Generated at Mon Sep 21 10:09:32 2026 by rpki-client