$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8.cer File: 3d89140c-6425-48b5-94d6-472f38ead8f8.cer (raw, json) Hash identifier: 1W3jdV5Nql0h1z5tqBaTQYg0ocA2nRpccrlwF9i8z/A= Subject key identifier: 68:1F:F9:FE:0D:C3:9C:15:38:00:8F:92:4F:AB:39:5C:CE:5A:81:F5 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584F669312455336C98D88FE2E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/3d89140c-6425-48b5-94d6-472f38ead8f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 11:24:14 +0000 Certificate not after: Mon 11 Sep 2028 22:29:23 +0000 Subordinate resources: AS: 402611 IP: 198.51.222.0/24 IP: 2602:f395::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:93:12:45:53:36:c9:8d:88:fe:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 5 11:24:14 2026 GMT Not After : Sep 11 22:29:23 2028 GMT Subject: CN=3d89140c-6425-48b5-94d6-472f38ead8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:bf:71:76:e9:64:0d:2a:b2:08:9d:63:3e: 0f:fd:bb:6d:c9:53:77:f1:57:ae:dd:cb:99:b3:fb: 65:d3:a3:6b:6b:aa:1b:93:06:1e:b4:ce:5a:b9:ac: a2:b9:b0:73:04:7a:0f:4f:09:5f:a3:9e:17:7a:94: 66:8c:a9:72:2d:b4:72:a7:37:33:7d:03:d5:d7:32: 25:66:74:92:e8:fb:26:5b:bf:d1:e6:ba:85:f0:09: ce:38:00:fc:66:55:a5:48:54:00:e2:08:d9:0c:7f: a8:98:5b:9a:af:4d:0e:d9:63:80:f0:cb:17:2d:28: 87:7e:94:1f:8c:14:85:6f:8b:17:46:4a:49:97:0e: 35:a8:53:e6:da:b7:98:4d:17:7d:c1:46:e2:6d:0b: b4:2f:35:1c:5a:09:bb:f1:60:40:5d:da:6f:59:80: 18:99:2a:68:6b:f4:b2:3f:c8:36:80:07:79:ec:5a: f0:ae:e5:3c:47:17:3e:ba:28:3f:0e:8f:f2:d8:e8: 25:df:4a:77:cc:ad:93:3e:c8:fd:9c:d6:5a:96:36: 3b:80:42:f1:6b:07:18:3b:3b:9a:46:4d:f5:ab:24: 71:bf:7f:ec:1e:a4:b4:2c:1b:c5:76:dc:67:a4:54: af:cf:1f:87:44:55:06:1b:82:12:28:c5:68:cc:b4: 35:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1F:F9:FE:0D:C3:9C:15:38:00:8F:92:4F:AB:39:5C:CE:5A:81:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/3d89140c-6425-48b5-94d6-472f38ead8f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 198.51.222.0/24 IPv6: 2602:f395::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402611 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:40:32:9f:7c:43:e5:24:97:52:25:02:cd:9e:d5:0a:a6:49: 9f:e2:e3:47:b4:20:fe:c0:09:37:8a:9b:bc:b1:b3:34:f7:4b: b3:93:9d:62:e3:f5:be:47:db:90:0f:c9:bc:41:86:b7:98:d1: 1e:c2:9b:6e:8e:ab:d6:6d:9b:94:3f:6d:a0:c0:c5:b1:94:e7: 73:34:35:e4:31:b1:90:83:48:ad:4e:94:79:1e:f6:ee:94:e1: 73:da:0a:d4:5e:ea:49:f2:3f:ea:95:0a:18:d6:3b:6d:a6:37: 81:1d:64:cf:7e:52:6b:a6:d6:12:2a:e5:2d:3b:de:ed:bf:dc: 58:e0:6e:33:49:fb:ba:c7:b7:29:5d:11:a2:b1:60:42:d9:84: d7:51:5c:40:35:20:f0:ee:8f:c4:ef:15:cd:ae:a7:3b:38:c9: 3e:a7:12:b7:06:06:39:fc:f9:b6:47:49:fb:c2:7d:41:4c:64: c5:db:ac:61:93:70:4e:b5:db:ed:83:2e:9a:9f:5c:e3:83:7b: 26:bb:bf:3d:8f:3b:ad:7c:13:36:bf:db:c8:ee:77:f8:cc:53: b7:97:e9:24:9a:ea:11:64:36:e4:78:e5:69:3e:4c:96:98:d6: c2:d8:c1:eb:24:7a:7a:cd:9e:c6:c0:ff:fc:b9:3c:bc:4f:c7: 0a:3f:3a:30 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9mkxJFUzbJjYj+LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MTAwNTExMjQxNFoXDTI4MDkxMTIyMjkyM1owLzEtMCsGA1UEAxMk M2Q4OTE0MGMtNjQyNS00OGI1LTk0ZDYtNDcyZjM4ZWFkOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIK/cXbpZA0qsgidYz4P/bttyVN38Veu3cuZ s/tl06Nra6obkwYetM5auayiubBzBHoPTwlfo54XepRmjKlyLbRypzczfQPV1zIl ZnSS6PsmW7/R5rqF8AnOOAD8ZlWlSFQA4gjZDH+omFuar00O2WOA8MsXLSiHfpQf jBSFb4sXRkpJlw41qFPm2reYTRd9wUbibQu0LzUcWgm78WBAXdpvWYAYmSpoa/Sy P8g2gAd57FrwruU8Rxc+uig/Do/y2Ogl30p3zK2TPsj9nNZaljY7gELxawcYOzua Rk31qyRxv3/sHqS0LBvFdtxnpFSvzx+HRFUGG4ISKMVozLQ1MQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGgf+f4Nw5wVOACPkk+rOVzOWoH1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z ZDg5MTQwYy02NDI1LTQ4YjUtOTRkNi00NzJmMzhlYWQ4ZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzNkODkxNDBjLTY0MjUtNDhiNS05 NGQ2LTQ3MmYzOGVhZDhmOC8zZDg5MTQwYy02NDI1LTQ4YjUtOTRkNi00NzJmMzhl YWQ4ZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGM94wDgQCAAIwCAMGACYC85UAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkszBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdQDKffEPlJJdSJQLNntUKpkmf 4uNHtCD+wAk3ipu8sbM090uzk51i4/W+R9uQD8m8QYa3mNEewptujqvWbZuUP22g wMWxlOdzNDXkMbGQg0itTpR5HvbulOFz2grUXupJ8j/qlQoY1jttpjeBHWTPflJr ptYSKuUtO97tv9xY4G4zSfu6x7cpXRGisWBC2YTXUVxANSDw7o/E7xXNrqc7OMk+ pxK3BgY5/Pm2R0n7wn1BTGTF26xhk3BOtdvtgy6an1zjg3smu789jzutfBM2v9vI 7nf4zFO3l+kkmuoRZDbkeOVpPkyWmNbC2MHrJHp6zZ7GwP/8uTy8T8cKPzow -----END CERTIFICATE-----Generated at Thu Oct 15 15:58:17 2026 by rpki-client