$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer File: b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer (raw, json) Hash identifier: cdczammcpa1RCYbtXJZjWP2rJwZQ6O0wqJf2f8CgYVo= Subject key identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584EE64FC8ED7BE3B7D656739780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Aug 2026 12:45:11 +0000 Certificate not after: Wed 22 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 64.45.64.0/18 IP: 65.18.0.0 -- 65.18.111.255 IP: 141.114.0.0/16 IP: 204.197.0.0/17 IP: 207.166.224.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:4f:c8:ed:7b:e3:b7:d6:56:73:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 20 12:45:11 2026 GMT Not After : Nov 22 13:45:11 2028 GMT Subject: CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:07:d1:b3:61:56:9b:39:2f:d1:7e:e3:32: aa:ae:74:37:60:ba:6d:45:5f:f3:22:0c:c6:67:ae: fc:2b:50:97:47:2c:66:95:94:f3:d6:c1:fc:18:90: 90:4b:97:09:b3:b5:ff:e4:36:32:35:f9:2d:a6:f4: 8c:2c:22:f0:09:7d:17:4e:a9:86:9b:d6:78:1d:05: 9f:14:59:b3:4e:ae:13:3c:ab:39:9b:8c:82:5c:ce: 01:a8:fb:2e:6f:c2:51:d9:77:3e:9b:09:11:b3:49: 2c:9b:e7:ba:8e:02:92:eb:f0:d4:7e:cb:5f:f3:2f: 85:4c:67:e3:8c:01:56:38:71:c8:30:18:6c:10:90: fc:6a:e9:11:83:d2:0f:7c:0d:c2:98:40:af:cb:19: 9d:68:93:b0:3f:b0:1e:16:f8:87:7c:10:6b:d4:8f: 1d:51:82:7d:09:55:a0:80:85:49:a0:2f:8e:ee:b3: b0:de:50:1a:ce:c4:d1:3a:76:ff:06:0a:f8:f0:04: e5:cf:62:9a:bf:7b:9f:d3:02:eb:fd:63:8f:e7:3a: 4e:f9:d2:88:0b:b5:3f:ec:8f:b3:43:a7:41:1e:8b: 94:f1:86:66:aa:96:76:c4:3c:91:5d:b8:81:e5:53: a3:a9:66:64:e3:67:eb:5c:18:50:12:f7:09:53:c3: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.45.64.0/18 65.18.0.0-65.18.111.255 141.114.0.0/16 204.197.0.0/17 207.166.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:6a:03:1b:d0:ce:fc:a5:ed:56:61:4d:df:8e:52:ea:c2:17: 5e:84:f8:8b:3c:f7:a6:17:6e:3d:35:6e:cf:b4:f3:18:26:53: 81:7e:53:0a:1c:84:e9:4e:db:75:60:05:9a:cb:af:30:19:36: 70:11:e5:12:b3:fa:2e:2f:52:cd:69:3f:c2:6f:3a:d9:d1:96: ce:54:ea:8e:a5:65:68:b0:4b:7c:0c:78:e3:75:06:7f:7a:5b: 92:0e:51:19:04:17:79:de:0d:79:a6:f4:9c:58:63:e6:29:01: 1f:6c:87:f5:3b:d3:9f:91:26:a7:e9:d8:c7:78:ac:be:c2:22: 63:0e:70:d5:98:c1:55:04:24:88:32:35:e6:f2:4a:98:67:21: 95:61:12:61:c0:f2:6b:ee:78:b6:cc:03:d3:9d:89:ee:9a:2e: d5:bf:2c:8a:36:46:25:51:3e:43:f6:1a:0d:58:6a:3e:75:2b: ee:87:7d:33:68:5e:e3:65:8b:8d:be:71:26:7a:3d:47:6b:ee: c3:98:c6:f2:c1:da:be:7c:a3:01:5d:8e:13:34:1d:ef:74:b1: 72:f9:3e:73:0e:24:04:da:c1:8c:10:15:6e:5a:00:5b:f7:ac: 1f:60:39:1e:c6:a6:0c:f8:e7:1a:f8:3b:43:a1:94:9b:00:9f: 36:0a:8d:ab -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE7mT8jte+O31lZzl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDgyMDEyNDUxMVoXDTI4MTEyMjEzNDUxMVowLzEtMCsGA1UEAxMk YjE3Y2UyMmItNjFhMC00YWU5LTljYzAtZjUwZjNiYjc1MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PEH0bNhVps5L9F+4zKqrnQ3YLptRV/zIgzG Z678K1CXRyxmlZTz1sH8GJCQS5cJs7X/5DYyNfktpvSMLCLwCX0XTqmGm9Z4HQWf FFmzTq4TPKs5m4yCXM4BqPsub8JR2Xc+mwkRs0ksm+e6jgKS6/DUfstf8y+FTGfj jAFWOHHIMBhsEJD8aukRg9IPfA3CmECvyxmdaJOwP7AeFviHfBBr1I8dUYJ9CVWg gIVJoC+O7rOw3lAazsTROnb/Bgr48ATlz2Kav3uf0wLr/WOP5zpO+dKIC7U/7I+z Q6dBHouU8YZmqpZ2xDyRXbiB5VOjqWZk42frXBhQEvcJU8OUswIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFLdrXxiKYVsjgsPyqXUUVaUhsYfhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MTdjZTIyYi02MWEwLTRhZTktOWNjMC1mNTBmM2JiNzUzMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IxN2NlMjJiLTYxYTAtNGFlOS05 Y2MwLWY1MGYzYmI3NTMwZC9iMTdjZTIyYi02MWEwLTRhZTktOWNjMC1mNTBmM2Ji NzUzMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMCoEAgABMCQDBAZALUAwCwMDAUESAwQEQRJgAwMAjXIDBAfMxQAD BAXPpuAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAkWoDG9DO/KXtVmFN345S6sIXXoT4izz3phduPTVuz7Tz GCZTgX5TChyE6U7bdWAFmsuvMBk2cBHlErP6Li9SzWk/wm862dGWzlTqjqVlaLBL fAx443UGf3pbkg5RGQQXed4Neab0nFhj5ikBH2yH9TvTn5Emp+nYx3isvsIiYw5w 1ZjBVQQkiDI15vJKmGchlWESYcDya+54tswD052J7pou1b8sijZGJVE+Q/YaDVhq PnUr7od9M2he42WLjb5xJno9R2vuw5jG8sHavnyjAV2OEzQd73Sxcvk+cw4kBNrB jBAVbloAW/esH2A5HsamDPjnGvg7Q6GUmwCfNgqNqw== -----END CERTIFICATE-----Generated at Mon Aug 31 11:11:33 2026 by rpki-client