$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6.cer File: 825ee845-e910-434b-9fb6-239bbc2774f6.cer (raw, json) Hash identifier: 1p53OlDNCqu9gdlFkHqof9wazLRWDKilOAKwMsOZwS0= Subject key identifier: 1B:4E:F9:6F:A3:67:CD:DA:19:D7:FE:34:2A:24:AF:1F:5A:FE:6E:6C Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584F4AD068FAB2266FF1285AC960 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Sep 2026 12:45:11 +0000 Certificate not after: Thu 28 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 140.192.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d0:68:fa:b2:26:6f:f1:28:5a:c9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 25 12:45:11 2026 GMT Not After : Dec 28 13:45:11 2028 GMT Subject: CN=825ee845-e910-434b-9fb6-239bbc2774f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:ad:45:a0:bd:9e:4d:f3:2a:89:10:fb:6f: 78:cf:36:cf:16:b8:26:1c:6a:9d:a0:72:9a:5a:46: 59:cf:ab:9d:b6:4a:a3:c2:3c:ce:3c:eb:f5:dc:0b: 7e:d4:8c:65:cc:86:f5:d7:37:13:b0:da:cb:e9:57: db:6c:ee:e2:df:8c:cf:cc:35:b3:51:b8:82:f4:a0: e3:6b:c0:46:d2:f7:e8:bc:42:7b:b7:31:a2:1f:8d: 3c:c2:b8:e2:92:3b:ed:61:48:a2:db:a3:d9:71:67: 1c:10:4d:29:37:a0:16:02:25:06:6a:f0:f1:7f:28: e0:4c:b2:db:97:c1:44:75:26:83:df:62:1a:36:2b: 11:de:da:c3:ce:a7:53:1c:3f:9a:3e:d8:87:d6:e3: ce:7c:48:6b:f3:bf:3d:56:5f:37:a0:2c:0c:71:e4: ab:ca:8d:07:56:21:be:fd:5f:d2:2b:32:81:b0:0f: 4b:40:a0:69:96:2a:61:97:a8:03:72:eb:74:62:82: 7d:f3:6a:72:70:ef:58:b4:ff:93:0a:30:c3:d3:18: 5d:32:36:71:cb:f9:eb:03:7b:b9:12:7d:d3:79:da: 95:fb:0b:db:c6:eb:69:41:f4:b2:a5:b8:7c:85:d3: 0a:7f:39:34:be:93:a2:e1:9e:8c:b0:23:f1:fe:31: 17:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4E:F9:6F:A3:67:CD:DA:19:D7:FE:34:2A:24:AF:1F:5A:FE:6E:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 140.192.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:9c:bd:06:bd:3f:47:9d:2c:ee:62:ea:03:96:75:01:50:b3: 32:ba:c2:fa:ba:a0:9e:8d:db:18:84:50:98:1b:3f:7f:f2:44: 34:88:5f:d3:7c:11:0c:de:1d:38:71:99:b0:49:c6:00:a5:0f: f3:89:1d:44:4b:b7:e2:53:a3:a4:b1:19:a6:18:10:74:93:98: f6:ee:f5:2b:c3:fa:8a:1d:0e:ca:60:13:3e:d4:b2:5e:e3:22: 9a:ff:06:fc:eb:c8:30:50:32:2f:4b:06:09:1f:a7:3b:fa:1d: ee:8f:a0:65:b3:66:44:91:f0:6d:23:ae:f6:4d:e3:05:df:a5: 8e:35:f3:54:33:a1:46:7c:5c:06:e9:58:59:8f:ea:7c:5c:de: 69:7f:f6:63:58:5d:31:15:b6:2c:a5:11:64:c8:82:c9:e9:67: 83:1f:58:10:05:bb:8b:ea:2a:88:78:68:86:7a:09:47:44:d0: e7:5a:c1:85:17:2a:a6:59:66:d8:87:f4:d1:2f:4b:86:fb:6c: e2:b8:40:5d:9d:59:99:3b:f3:52:46:cc:13:f3:46:e3:5e:d7: 7c:75:11:df:14:cb:d8:ae:58:19:5f:a4:bb:0a:ff:a8:b3:13: 32:de:ed:5b:04:cc:89:aa:5b:e9:69:f2:70:92:83:c4:0a:c6: 90:8e:a4:b0 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE9K0Gj6siZv8ShayWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDkyNTEyNDUxMVoXDTI4MTIyODEzNDUxMVowLzEtMCsGA1UEAxMk ODI1ZWU4NDUtZTkxMC00MzRiLTlmYjYtMjM5YmJjMjc3NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszmtRaC9nk3zKokQ+294zzbPFrgmHGqdoHKa WkZZz6udtkqjwjzOPOv13At+1IxlzIb11zcTsNrL6VfbbO7i34zPzDWzUbiC9KDj a8BG0vfovEJ7tzGiH408wrjikjvtYUii26PZcWccEE0pN6AWAiUGavDxfyjgTLLb l8FEdSaD32IaNisR3trDzqdTHD+aPtiH1uPOfEhr8789Vl83oCwMceSryo0HViG+ /V/SKzKBsA9LQKBpliphl6gDcut0YoJ982pycO9YtP+TCjDD0xhdMjZxy/nrA3u5 En3TedqV+wvbxutpQfSypbh8hdMKfzk0vpOi4Z6MsCPx/jEXpQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFBtO+W+jZ83aGdf+NCokrx9a/m5sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 MjVlZTg0NS1lOTEwLTQzNGItOWZiNi0yMzliYmMyNzc0ZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzgyNWVlODQ1LWU5MTAtNDM0Yi05 ZmI2LTIzOWJiYzI3NzRmNi84MjVlZTg0NS1lOTEwLTQzNGItOWZiNi0yMzliYmMy Nzc0ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCMwDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZnL0GvT9HnSzuYuoDlnUB ULMyusL6uqCejdsYhFCYGz9/8kQ0iF/TfBEM3h04cZmwScYApQ/ziR1ES7fiU6Ok sRmmGBB0k5j27vUrw/qKHQ7KYBM+1LJe4yKa/wb868gwUDIvSwYJH6c7+h3uj6Bl s2ZEkfBtI672TeMF36WONfNUM6FGfFwG6VhZj+p8XN5pf/ZjWF0xFbYspRFkyILJ 6WeDH1gQBbuL6iqIeGiGeglHRNDnWsGFFyqmWWbYh/TRL0uG+2ziuEBdnVmZO/NS RswT80bjXtd8dRHfFMvYrlgZX6S7Cv+osxMy3u1bBMyJqlvpafJwkoPECsaQjqSw -----END CERTIFICATE-----Generated at Wed Oct 7 04:26:24 2026 by rpki-client