$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer File: c32e4c57-f588-46c2-a752-708ae6efb1cc.cer (raw, json) Hash identifier: fZlolkmfN8VYYhYuIg3R0CoFszpsuxha+ZM9L4fT1uI= Subject key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584F6125E40D94AE182F18272800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 Oct 2026 12:45:12 +0000 Certificate not after: Fri 05 Jan 2029 13:45:12 +0000 Subordinate resources: IP: 23.233.0.0/17 IP: 24.52.192.0/18 IP: 24.212.128.0/17 IP: 24.246.0.0 -- 24.246.95.255 IP: 45.72.128.0/17 IP: 104.195.128.0/17 IP: 104.246.128.0/17 IP: 107.179.128.0/17 IP: 107.190.0.0/17 IP: 108.162.128.0/18 IP: 135.23.0.0/16 IP: 192.0.128.0/17 IP: 198.48.128.0/17 IP: 198.84.128.0/17 IP: 207.136.64.0/18 IP: 209.161.192.0/18 IP: 216.154.0.0 -- 216.154.191.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:25:e4:0d:94:ae:18:2f:18:27:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 3 12:45:12 2026 GMT Not After : Jan 5 13:45:12 2029 GMT Subject: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:1d:bb:d0:61:b0:8b:31:0c:92:94:80:ce: 1b:ed:99:ba:b1:e1:0f:cc:90:2e:fd:90:b4:fd:0a: ee:61:6a:27:2c:8a:f1:2e:86:8a:1b:67:78:c3:f2: c3:49:e8:22:2a:7e:e3:26:b1:2d:aa:eb:d8:47:11: 3f:90:a5:79:89:68:07:97:bc:23:d7:4d:07:3a:94: 70:c5:1f:6c:a3:91:eb:61:58:16:54:56:2b:cc:fb: aa:fc:85:0f:f3:ea:9b:05:5d:5d:f0:e4:af:76:ce: 71:57:51:55:c6:80:5b:8f:e1:41:82:e8:70:a9:e6: 34:e5:3d:c6:ce:6a:e5:7f:f5:9d:89:4a:db:26:96: 6d:5e:05:17:75:cf:83:0d:e4:a2:52:3c:82:57:42: 14:ff:90:63:97:ff:2e:71:77:26:03:45:6f:79:23: cf:63:1c:d8:ff:89:50:6a:dd:b7:aa:82:73:a2:5b: f6:df:c7:af:c1:56:aa:57:ac:62:8d:68:a6:44:c6: c0:7b:90:8d:62:a6:9f:30:57:97:c6:5b:a3:8c:46: be:90:75:10:0d:a2:e5:f2:87:ef:45:52:2d:35:f1: 0d:87:42:24:80:4b:1f:04:9a:b7:79:05:0c:2c:24: 70:fd:38:da:49:91:a1:57:d5:f3:93:1e:bb:78:2f: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.233.0.0/17 24.52.192.0/18 24.212.128.0/17 24.246.0.0-24.246.95.255 45.72.128.0/17 104.195.128.0/17 104.246.128.0/17 107.179.128.0/17 107.190.0.0/17 108.162.128.0/18 135.23.0.0/16 192.0.128.0/17 198.48.128.0/17 198.84.128.0/17 207.136.64.0/18 209.161.192.0/18 216.154.0.0-216.154.191.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:9d:2a:25:6f:9f:b1:3c:59:d8:a9:eb:7d:c9:2c:b7:e7:ca: 5b:0f:89:0e:91:a1:c2:c6:2b:8d:c9:43:77:51:64:57:e7:4e: 70:9f:6d:eb:90:09:55:3e:88:81:94:a8:d6:3c:7c:ed:36:eb: 80:05:cb:c1:e2:a2:c9:a0:c0:7f:d1:6d:62:b6:20:5c:b5:9b: f2:43:3d:fd:c5:b5:30:5f:e6:bf:7b:bc:0e:8e:c7:bc:87:ad: 73:4f:db:5b:2c:fc:f8:27:e6:95:be:00:bd:96:88:69:b7:69: 7d:b1:ec:a9:d2:e7:69:ca:06:38:d3:fd:64:d0:de:d9:7c:70: 8b:c9:32:d9:2f:cd:45:0d:f1:68:82:0f:2a:32:68:23:3c:fe: 39:5c:da:f1:9b:f0:2d:ea:ac:4e:e3:ef:b5:e3:ea:b5:8b:29: 6a:c3:0d:cf:b8:f6:58:af:b0:ac:09:09:e1:9f:b0:5f:cf:0e: 4b:7c:56:a5:a3:be:73:c1:99:9f:fa:de:9a:95:98:7c:b6:d5: 55:bd:39:13:d2:40:8d:ef:47:62:44:5c:67:7b:c2:41:0f:23: 29:31:7b:c8:34:2b:87:7a:79:83:73:60:7a:45:4b:cb:7e:13: 94:a5:f5:89:a6:7b:d8:44:65:9a:92:84:4b:bd:1f:76:ed:14: e7:2f:da:72 -----BEGIN CERTIFICATE----- MIIHWzCCBkOgAwIBAgIUAQ0Mn0MoWE9hJeQNlK4YLxgnKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MTAwMzEyNDUxMloXDTI5MDEwNTEzNDUxMlowLzEtMCsGA1UEAxMk YzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZiMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t0du9BhsIsxDJKUgM4b7Zm6seEPzJAu/ZC0 /QruYWonLIrxLoaKG2d4w/LDSegiKn7jJrEtquvYRxE/kKV5iWgHl7wj100HOpRw xR9so5HrYVgWVFYrzPuq/IUP8+qbBV1d8OSvds5xV1FVxoBbj+FBguhwqeY05T3G zmrlf/WdiUrbJpZtXgUXdc+DDeSiUjyCV0IU/5Bjl/8ucXcmA0VveSPPYxzY/4lQ at23qoJzolv238evwVaqV6xijWimRMbAe5CNYqafMFeXxlujjEa+kHUQDaLl8ofv RVItNfENh0IkgEsfBJq3eQUMLCRw/TjaSZGhV9Xzkx67eC8mEwIDAQABo4IEbTCC BGkwHQYDVR0OBBYEFFKlhQyFUpl3KRB6pLvrkJh0UPCJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j MzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2MzMmU0YzU3LWY1ODgtNDZjMi1h NzUyLTcwOGFlNmVmYjFjYy9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZl ZmIxY2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgYwGCCsGAQUF BwEHAQH/BH0wezB5BAIAATBzAwQHF+kAAwQGGDTAAwQHGNSAMAsDAwEY9gMEBRj2 QAMEBy1IgAMEB2jDgAMEB2j2gAMEB2uzgAMEB2u+AAMEBmyigAMDAIcXAwQHwACA AwQHxjCAAwQHxlSAAwQGz4hAAwQG0aHAMAsDAwHYmgMEBtiagDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCE nSolb5+xPFnYqet9ySy358pbD4kOkaHCxiuNyUN3UWRX505wn23rkAlVPoiBlKjW PHztNuuABcvB4qLJoMB/0W1itiBctZvyQz39xbUwX+a/e7wOjse8h61zT9tbLPz4 J+aVvgC9lohpt2l9seyp0udpygY40/1k0N7ZfHCLyTLZL81FDfFogg8qMmgjPP45 XNrxm/At6qxO4++14+q1iylqww3PuPZYr7CsCQnhn7Bfzw5LfFalo75zwZmf+t6a lZh8ttVVvTkT0kCN70diRFxne8JBDyMpMXvINCuHenmDc2B6RUvLfhOUpfWJpnvY RGWakoRLvR927RTnL9py -----END CERTIFICATE-----Generated at Tue Nov 3 00:36:35 2026 by rpki-client