$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer File: 945a7f76-bce3-4d85-a81e-c84df8d5197a.cer (raw, json) Hash identifier: HX+nzjwwCod5umgv1LBdm4iPqnL9SaApkAeSpMiKuQ4= Subject key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584EB144CA3CBD0934B2C474DB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 01 Aug 2026 12:45:11 +0000 Certificate not after: Fri 03 Nov 2028 12:45:11 +0000 Subordinate resources: AS: 21803 IP: 67.223.160.0/20 IP: 69.39.0.0/19 IP: 209.140.0.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b1:44:ca:3c:bd:09:34:b2:c4:74:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 1 12:45:11 2026 GMT Not After : Nov 3 12:45:11 2028 GMT Subject: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:58:dd:a4:2e:f9:43:1c:d7:b8:28:25:f2: 75:8a:45:fa:eb:e2:66:1c:d4:c0:f4:42:f0:01:2a: 85:5b:b8:4f:18:99:0f:3f:c5:df:c2:6c:f5:06:21: af:b3:65:c9:74:98:05:33:74:f7:25:28:b0:68:5c: 04:b1:7e:2d:65:85:38:17:89:cd:5d:4a:ac:50:ba: 68:f9:61:9e:3a:e2:13:2f:b2:e5:21:26:1c:9d:c6: 20:27:47:ff:d2:da:f8:d0:92:21:03:ca:06:07:35: c6:e2:dc:88:02:3b:a3:82:2c:4f:2c:c4:ab:0e:52: 23:a2:13:8d:d6:ef:d0:0a:43:fa:a5:62:82:34:f9: cc:ac:b3:93:47:e1:ef:f6:54:08:50:73:1d:46:09: 82:a1:b5:ac:ce:71:da:86:a3:34:00:22:57:72:78: 38:cd:0f:f9:43:92:d3:9b:84:d4:39:d3:87:4e:b3: 5b:29:4a:13:33:40:45:da:25:eb:38:15:74:41:26: c2:a3:47:93:55:ce:57:58:39:90:92:d6:30:63:ee: 9e:bd:01:5f:54:84:b4:c8:43:96:ca:60:dc:19:7d: 14:8e:c5:1c:3d:9e:ce:47:bd:cc:5e:02:5c:e6:90: 1c:e7:f1:4d:df:48:d7:c3:84:32:37:2a:79:16:9d: 6e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 67.223.160.0/20 69.39.0.0/19 209.140.0.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21803 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:28:8f:1a:a5:2f:e4:66:26:23:b3:af:d2:de:3e:88:a6:3e: a1:4a:53:55:90:5f:a0:da:e5:2a:f1:04:e6:0e:b9:30:c2:12: 68:34:7f:2e:0a:c5:7c:c8:bc:ef:8e:0c:3f:af:46:91:c4:80: 9a:d2:e6:7a:68:05:f6:9d:df:8f:a0:66:ac:27:70:f9:d9:c1: 27:de:23:ef:fe:f5:76:93:cf:42:d5:06:88:5e:a9:fe:1f:69: 46:47:0b:9c:5b:0b:46:98:cc:58:0c:b6:91:9b:43:c4:91:21: c7:81:77:a0:9e:16:bf:cc:12:19:7c:d6:3c:42:21:72:7d:f0: 30:5f:3d:a1:f9:a6:6e:e0:d9:61:90:87:fe:e9:f5:1e:fa:04: 97:1e:e2:3b:bf:f8:a9:83:cd:b3:eb:16:f1:63:2f:5a:71:c5: a8:bf:33:27:0e:63:32:ce:00:b5:3e:70:0e:51:86:3e:a0:b3: b8:c9:2e:73:3c:0d:58:31:46:49:ba:1f:e6:b3:66:ea:85:8a: 45:df:08:c1:20:25:5d:a7:09:e2:5d:5b:89:4b:ed:bc:7d:b0: 32:d4:33:57:9b:14:03:62:d0:ea:cb:1e:72:28:9d:89:fa:08: ff:26:27:59:e6:27:4d:af:92:0b:56:30:b7:ca:db:4b:c7:22: 42:72:bb:71 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE6xRMo8vQk0ssR024AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDgwMTEyNDUxMVoXDTI4MTEwMzEyNDUxMVowLzEtMCsGA1UEAxMk OTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUxOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshlY3aQu+UMc17goJfJ1ikX66+JmHNTA9ELw ASqFW7hPGJkPP8Xfwmz1BiGvs2XJdJgFM3T3JSiwaFwEsX4tZYU4F4nNXUqsULpo +WGeOuITL7LlISYcncYgJ0f/0tr40JIhA8oGBzXG4tyIAjujgixPLMSrDlIjohON 1u/QCkP6pWKCNPnMrLOTR+Hv9lQIUHMdRgmCobWsznHahqM0ACJXcng4zQ/5Q5LT m4TUOdOHTrNbKUoTM0BF2iXrOBV0QSbCo0eTVc5XWDmQktYwY+6evQFfVIS0yEOW ymDcGX0UjsUcPZ7OR73MXgJc5pAc5/FN30jXw4QyNyp5Fp1ucwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFMnG3pB/tzIxwZpnpU1pHBUgfXXwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk0NWE3Zjc2LWJjZTMtNGQ4NS1h ODFlLWM4NGRmOGQ1MTk3YS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhk NTE5N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBARD36ADBAVFJwADBATRjAAwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICVSswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFiiPGqUv5GYmI7Ov0t4+iKY+oUpTVZBf oNrlKvEE5g65MMISaDR/LgrFfMi8744MP69GkcSAmtLmemgF9p3fj6BmrCdw+dnB J94j7/71dpPPQtUGiF6p/h9pRkcLnFsLRpjMWAy2kZtDxJEhx4F3oJ4Wv8wSGXzW PEIhcn3wMF89ofmmbuDZYZCH/un1HvoElx7iO7/4qYPNs+sW8WMvWnHFqL8zJw5j Ms4AtT5wDlGGPqCzuMkuczwNWDFGSbof5rNm6oWKRd8IwSAlXacJ4l1biUvtvH2w MtQzV5sUA2LQ6sseciidifoI/yYnWeYnTa+SC1Ywt8rbS8ciQnK7cQ== -----END CERTIFICATE-----Generated at Thu Aug 13 09:00:58 2026 by rpki-client