$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2.cer File: 35711766-ec67-4522-8b80-6b8ef16d9bc2.cer (raw, json) Hash identifier: 70iF6ET/vkOUuwaPGtC5phh+duMaBlPTDoxJZ25VusY= Subject key identifier: 5F:2E:0E:AC:30:C2:4B:A2:1B:3D:80:7A:28:AD:B2:07:CD:03:DE:98 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584F71E5FF22404A8936413E7EF8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/35711766-ec67-4522-8b80-6b8ef16d9bc2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Oct 2026 12:45:12 +0000 Certificate not after: Thu 11 Jan 2029 13:45:12 +0000 Subordinate resources: IP: 165.140.171.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:e5:ff:22:40:4a:89:36:41:3e:7e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 9 12:45:12 2026 GMT Not After : Jan 11 13:45:12 2029 GMT Subject: CN=35711766-ec67-4522-8b80-6b8ef16d9bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:13:60:b0:5b:1a:31:9c:6d:f9:44:2b:9b: 4f:24:94:29:88:dc:d0:d5:f1:7c:aa:c2:c9:cd:f5: 8b:f9:94:10:58:68:3b:2f:21:ef:d6:87:cf:b7:05: 9e:77:12:65:5a:04:72:9f:24:bc:18:49:59:d0:5a: d6:7e:c2:13:b2:37:b9:2d:15:ba:73:ab:c3:75:35: 5f:b9:51:95:03:cc:54:a6:de:9b:6a:1b:b9:6c:bf: 4a:74:bd:37:77:4d:51:56:fb:19:9f:98:8e:d7:ae: be:69:dd:5a:ee:3c:f7:74:f4:a0:c4:4f:1c:87:f1: c5:71:06:f1:87:e3:a0:04:ea:c7:86:02:ce:fb:99: ea:c1:66:2f:d0:59:52:27:38:f6:8f:8c:5b:02:04: e2:ef:c7:29:ae:a7:4d:1c:70:e4:79:96:a9:82:8e: c0:56:b4:37:1a:4a:d5:be:c1:d7:6d:ef:eb:e3:6d: fc:c0:14:66:2b:e1:67:3a:42:47:d2:4a:81:33:1e: 40:3d:12:f7:4c:32:dd:9e:d8:e0:1b:53:5b:79:07: 37:11:69:5c:75:2e:41:1a:c1:31:e9:1e:69:7a:d3: 70:6e:54:b5:be:82:70:36:7d:95:00:ae:ce:5d:02: 85:70:a4:d2:5f:71:a3:57:2e:a5:2c:12:98:d8:75: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2E:0E:AC:30:C2:4B:A2:1B:3D:80:7A:28:AD:B2:07:CD:03:DE:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/35711766-ec67-4522-8b80-6b8ef16d9bc2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 165.140.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:72:ce:e4:60:de:9e:0a:f3:0a:1b:d1:51:c7:3d:67:08:ea: 34:a3:eb:d1:88:4d:82:ba:f1:0e:c9:c9:2e:2d:b2:39:d6:6d: cb:d2:32:01:d4:e8:32:22:43:04:6b:a9:88:90:d0:a4:97:68: c7:d4:55:de:ed:7b:06:a2:d8:a9:5a:1c:f3:c7:b1:6a:f8:18: 1c:f6:3d:be:aa:ab:af:7e:5f:5e:77:ea:60:b6:ec:f7:30:7c: 26:a5:dd:29:18:3d:a5:6e:66:bf:c5:b2:45:9b:ae:fc:19:6d: 0d:f6:bb:ce:2d:ef:54:bf:e0:fd:82:af:78:18:6c:e3:ac:de: 5a:81:24:7b:82:9b:4d:47:0b:7e:cd:f7:e8:83:b9:38:02:24: 59:75:6b:36:d4:07:9c:e3:60:5f:8d:08:db:1d:c5:e4:5b:96: e1:85:ed:eb:0c:ca:7c:6d:4e:c4:31:59:b2:e9:0c:bb:92:50: 07:32:76:8b:0c:7a:14:30:60:bc:85:df:aa:b2:14:67:ad:77: c6:36:00:d1:44:cb:8b:a7:1c:b3:6e:05:a2:3f:95:9b:c2:b6: d7:82:b1:51:c9:2f:44:c5:a2:6a:08:46:bb:43:26:fc:b3:b5: 8f:64:c6:09:93:21:af:aa:b8:49:20:09:03:00:7b:ea:7b:46: d1:53:62:3d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE9x5f8iQEqJNkE+fvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MTAwOTEyNDUxMloXDTI5MDExMTEzNDUxMlowLzEtMCsGA1UEAxMk MzU3MTE3NjYtZWM2Ny00NTIyLThiODAtNmI4ZWYxNmQ5YmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXkTYLBbGjGcbflEK5tPJJQpiNzQ1fF8qsLJ zfWL+ZQQWGg7LyHv1ofPtwWedxJlWgRynyS8GElZ0FrWfsITsje5LRW6c6vDdTVf uVGVA8xUpt6bahu5bL9KdL03d01RVvsZn5iO166+ad1a7jz3dPSgxE8ch/HFcQbx h+OgBOrHhgLO+5nqwWYv0FlSJzj2j4xbAgTi78cprqdNHHDkeZapgo7AVrQ3GkrV vsHXbe/r4238wBRmK+FnOkJH0kqBMx5APRL3TDLdntjgG1NbeQc3EWlcdS5BGsEx 6R5petNwblS1voJwNn2VAK7OXQKFcKTSX3GjVy6lLBKY2HVlaQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFF8uDqwwwkuiGz2AeiitsgfNA96YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z NTcxMTc2Ni1lYzY3LTQ1MjItOGI4MC02YjhlZjE2ZDliYzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzM1NzExNzY2LWVjNjctNDUyMi04 YjgwLTZiOGVmMTZkOWJjMi8zNTcxMTc2Ni1lYzY3LTQ1MjItOGI4MC02YjhlZjE2 ZDliYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACljKswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPnLO5GDengrzChvRUcc9 ZwjqNKPr0YhNgrrxDsnJLi2yOdZty9IyAdToMiJDBGupiJDQpJdox9RV3u17BqLY qVoc88exavgYHPY9vqqrr35fXnfqYLbs9zB8JqXdKRg9pW5mv8WyRZuu/BltDfa7 zi3vVL/g/YKveBhs46zeWoEke4KbTUcLfs336IO5OAIkWXVrNtQHnONgX40I2x3F 5FuW4YXt6wzKfG1OxDFZsukMu5JQBzJ2iwx6FDBgvIXfqrIUZ613xjYA0UTLi6cc s24Foj+Vm8K214KxUckvRMWiaghGu0Mm/LO1j2TGCZMhr6q4SSAJAwB76ntG0VNi PQ== -----END CERTIFICATE-----Generated at Sun Oct 11 06:51:49 2026 by rpki-client