$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer File: 45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer (raw, json) Hash identifier: 18N1VieLCBh5DzELFw5Y972R8yiURcY/lEYBDLyyPh8= Subject key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584ED85A5E03845242895C8CBFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 15 Aug 2026 12:45:11 +0000 Certificate not after: Fri 17 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 3737 IP: 204.186.0.0/16 IP: 209.50.128.0/19 IP: 209.173.0.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:5a:5e:03:84:52:42:89:5c:8c:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 15 12:45:11 2026 GMT Not After : Nov 17 13:45:11 2028 GMT Subject: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:a2:03:91:ed:9e:3d:ee:04:1e:c0:4a:88: e5:7e:a4:20:3a:a0:dc:14:af:3e:25:94:84:65:c5: f4:1a:11:31:60:f1:19:9c:4c:a9:16:a9:7a:12:60: 3e:4f:d5:d7:58:54:1b:65:c6:90:a4:73:c4:da:10: 2d:05:cd:53:56:fc:72:5a:82:1b:eb:17:2a:77:f7: b5:b0:7e:32:48:a3:bd:a7:1e:83:00:0d:7d:c1:0b: 2d:59:5d:1a:b2:db:98:be:75:18:77:94:d5:e4:d9: a8:ff:44:5a:b7:b4:82:32:8b:4c:28:d2:94:cd:02: 91:46:fb:78:89:3f:80:1d:f5:ef:92:17:30:89:cb: b8:1d:3f:e0:e9:a8:91:7d:a5:51:bc:3a:08:11:ac: 92:71:2d:d7:89:48:ad:12:2d:28:df:fc:eb:ce:80: 31:33:a4:15:00:e2:38:1a:c1:d0:18:3c:1e:86:23: 42:63:e9:00:3a:e7:90:3e:8a:01:94:78:46:84:d9: c8:9a:73:85:c8:3c:82:35:c1:ef:6b:85:1f:23:8e: 21:f2:41:85:21:65:ec:16:3e:6b:2f:96:ad:74:15: d2:ac:ac:a8:69:a0:dc:5d:8b:42:16:37:be:35:21: f0:4f:82:77:73:ea:c9:be:be:67:72:cf:85:f1:d5: 88:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 204.186.0.0/16 209.50.128.0/19 209.173.0.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3737 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9c:67:95:ef:60:b4:92:cf:8c:60:8e:ed:4d:cf:43:ec:4b: 95:f8:56:12:93:8a:ec:87:3f:1d:47:81:15:68:cd:b5:75:e1: ac:ae:9d:21:ba:64:c2:bb:9d:41:73:cd:62:3b:e3:60:43:29: f9:fa:65:32:18:f7:3c:65:04:d0:8a:c9:44:cd:4b:77:f4:b1: f3:78:90:f8:bb:4f:6e:78:ce:39:44:18:48:d5:c5:5b:e5:73: 5a:5e:4f:7e:bb:db:8d:fd:f7:e9:3f:9c:17:44:7a:54:c1:92: 66:0f:3f:99:28:8d:bf:e8:93:08:dd:72:44:97:b4:4a:67:2f: 56:b7:bf:54:a9:71:80:99:68:d2:30:d0:72:6b:f3:53:ae:f2: 4d:aa:7a:37:b7:eb:92:22:31:62:21:69:9d:96:44:1a:2e:db: 63:88:48:fa:05:b7:7a:28:3e:76:ea:52:c4:6b:97:47:84:5f: d6:fe:34:22:5f:31:a0:c5:31:6f:d9:69:0f:81:50:9e:f2:df: ae:19:bb:2a:8b:7f:dd:eb:85:64:ce:86:4a:f2:10:f7:a2:4e: 4a:7e:97:50:54:45:4a:80:29:29:d6:56:4e:5f:f9:7c:6d:39: 4d:49:ef:fc:08:e4:a5:04:aa:5f:03:6a:e8:71:14:00:79:77: 52:32:5e:4a -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWE7YWl4DhFJCiVyMv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDgxNTEyNDUxMVoXDTI4MTExNzEzNDUxMVowLzEtMCsGA1UEAxMk NDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTViYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCOiA5Htnj3uBB7ASojlfqQgOqDcFK8+JZSE ZcX0GhExYPEZnEypFql6EmA+T9XXWFQbZcaQpHPE2hAtBc1TVvxyWoIb6xcqd/e1 sH4ySKO9px6DAA19wQstWV0astuYvnUYd5TV5Nmo/0Rat7SCMotMKNKUzQKRRvt4 iT+AHfXvkhcwicu4HT/g6aiRfaVRvDoIEayScS3XiUitEi0o3/zrzoAxM6QVAOI4 GsHQGDwehiNCY+kAOueQPooBlHhGhNnImnOFyDyCNcHva4UfI44h8kGFIWXsFj5r L5atdBXSrKyoaaDcXYtCFje+NSHwT4J3c+rJvr5ncs+F8dWISwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFNiGp+RB4lrtXPoL+hkih3voYWL+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1i NGY1LWJiZWNjNjk1YmFmZi80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5 NWJhZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwDMugMEBdEygAMEBdGtADAZBggrBgEFBQcBCAEB /wQKMAigBjAEAgIOmTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLnGeV72C0ks+MYI7tTc9D7EuV+FYSk4rs hz8dR4EVaM21deGsrp0humTCu51Bc81iO+NgQyn5+mUyGPc8ZQTQislEzUt39LHz eJD4u09ueM45RBhI1cVb5XNaXk9+u9uN/ffpP5wXRHpUwZJmDz+ZKI2/6JMI3XJE l7RKZy9Wt79UqXGAmWjSMNBya/NTrvJNqno3t+uSIjFiIWmdlkQaLttjiEj6Bbd6 KD526lLEa5dHhF/W/jQiXzGgxTFv2WkPgVCe8t+uGbsqi3/d64VkzoZK8hD3ok5K fpdQVEVKgCkp1lZOX/l8bTlNSe/8COSlBKpfA2rocRQAeXdSMl5K -----END CERTIFICATE-----Generated at Sat Sep 12 12:40:55 2026 by rpki-client