$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer File: b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer (raw, json) Hash identifier: 2kQyLj6B/gbBbesF5v+j4nXZG9+4Q3NY1SgPlsBFUFs= Subject key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584F1B5AC8BB5A442E05B0E1DB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Sep 2026 12:45:11 +0000 Certificate not after: Mon 11 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 164.55.224.0/19 IP: 192.234.235.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:5a:c8:bb:5a:44:2e:05:b0:e1:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 8 12:45:11 2026 GMT Not After : Dec 11 13:45:11 2028 GMT Subject: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:12:a9:3c:6e:a3:9c:e7:ed:46:c2:df:ac: 18:ef:ed:7f:14:e3:fd:58:dc:82:e8:fb:3c:36:e6: 20:94:0d:7c:4e:8f:47:2e:f8:18:2a:c1:70:2c:4d: 24:4c:7d:5d:d5:9f:2b:9c:24:c8:cb:60:5b:17:9f: 08:30:ef:9b:ae:4d:1b:69:6d:f0:9d:b5:a9:de:4d: 0f:9f:3a:f8:f2:3c:ed:0f:8e:05:b9:e6:a9:46:b8: 09:19:f2:26:57:31:07:c3:1d:8f:f1:1a:b0:17:5a: df:e1:4c:31:ae:c9:fe:5e:d0:ed:09:46:e9:61:49: a9:03:4f:9b:14:f0:86:6c:bd:e9:cf:c7:1f:ca:ed: 3d:9f:2d:62:71:4c:39:bf:3e:87:21:6d:39:ab:60: e9:7b:80:5d:3d:80:27:2d:e7:70:86:5c:b3:01:4f: e2:d3:76:78:e0:cb:4f:0a:e5:30:b1:70:6e:ed:09: 4b:9a:ec:24:06:48:9e:43:2c:95:df:e9:d9:b6:ec: 1c:82:03:04:c3:e2:ff:97:6d:8b:b0:e8:bc:98:9b: d3:31:5c:ef:64:64:17:a6:16:cf:a3:ff:19:19:51: 90:7a:cd:13:ee:2e:69:44:d3:d9:55:8f:88:f9:44: 63:61:29:33:b6:f3:29:f1:46:a2:ec:73:0c:90:96: 17:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 164.55.224.0/19 192.234.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:19:fb:37:7d:99:06:ce:06:fc:e7:10:7e:ff:d5:90:94:db: 35:3b:3e:91:1b:87:00:ee:66:92:1a:10:76:cf:a6:05:f1:55: c9:13:17:43:09:b6:81:c0:b6:91:ae:f8:a1:fb:f9:d6:f9:5b: 6a:cf:cf:5d:55:0a:a3:32:20:8a:20:54:cb:ce:67:54:b1:96: 10:6d:1b:6a:04:4f:2e:5b:32:5b:24:29:b2:2f:b9:2c:4e:62: 95:87:e2:a9:ba:87:44:5b:bd:fb:75:8d:b7:48:b6:eb:9a:f2: d1:35:61:1e:62:ac:38:66:51:5c:8b:12:c0:30:ea:cd:25:67: 82:29:24:d5:cc:a5:cb:89:83:9e:71:27:87:72:f7:aa:c8:c2: 7c:b7:38:af:65:72:39:3d:e1:5e:62:99:ed:8a:af:84:d6:d2: 1c:07:69:bf:b0:39:60:8c:4b:92:72:c4:34:e1:06:91:6d:73: fc:dd:67:40:4b:64:b9:cb:4b:4d:78:7b:be:f6:3c:f3:c5:ea: d8:42:33:43:b5:aa:ad:5c:f7:7f:42:88:b6:e6:8a:f3:be:f2: 79:fc:bb:f8:2f:f7:63:9c:8c:13:65:be:2d:77:bc:6e:ea:87: b7:f0:31:88:92:cf:30:31:89:73:68:ce:4d:fa:45:88:f4:33: b1:b9:00:eb -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE8bWsi7WkQuBbDh20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDkwODEyNDUxMVoXDTI4MTIxMTEzNDUxMVowLzEtMCsGA1UEAxMk YjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVhMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+wSqTxuo5zn7UbC36wY7+1/FOP9WNyC6Ps8 NuYglA18To9HLvgYKsFwLE0kTH1d1Z8rnCTIy2BbF58IMO+brk0baW3wnbWp3k0P nzr48jztD44FueapRrgJGfImVzEHwx2P8RqwF1rf4Uwxrsn+XtDtCUbpYUmpA0+b FPCGbL3pz8cfyu09ny1icUw5vz6HIW05q2Dpe4BdPYAnLedwhlyzAU/i03Z44MtP CuUwsXBu7QlLmuwkBkieQyyV3+nZtuwcggMEw+L/l22LsOi8mJvTMVzvZGQXphbP o/8ZGVGQes0T7i5pRNPZVY+I+URjYSkztvMp8Uai7HMMkJYXwQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFO/oxZY+PWYVLqdRvpxmDJUyiaRbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IwY2EwMmU3LTdhMTItNGQ5MC04 ZmViLThmMTMwYWFlYTM4MC9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFh ZWEzODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAWkN+ADBADA6uswVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOxn7N32ZBs4G /OcQfv/VkJTbNTs+kRuHAO5mkhoQds+mBfFVyRMXQwm2gcC2ka74ofv51vlbas/P XVUKozIgiiBUy85nVLGWEG0bagRPLlsyWyQpsi+5LE5ilYfiqbqHRFu9+3WNt0i2 65ry0TVhHmKsOGZRXIsSwDDqzSVngikk1cyly4mDnnEnh3L3qsjCfLc4r2VyOT3h XmKZ7YqvhNbSHAdpv7A5YIxLknLENOEGkW1z/N1nQEtkuctLTXh7vvY888Xq2EIz Q7WqrVz3f0KItuaK877yefy7+C/3Y5yME2W+LXe8buqHt/AxiJLPMDGJc2jOTfpF iPQzsbkA6w== -----END CERTIFICATE-----Generated at Wed Sep 16 18:27:12 2026 by rpki-client