$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer File: cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer (raw, json) Hash identifier: tEsOVSWCDODXu7RA5xGBoFlva4ABmbJhpjGeFCH465U= Subject key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584EF730AE3A49CB6A5A963F0860 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Aug 2026 13:51:16 +0000 Certificate not after: Sat 11 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 26279 IP: 208.71.16.0/21 IP: 2620:50:4080::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:30:ae:3a:49:cb:6a:5a:96:3f:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 26 13:51:16 2026 GMT Not After : Nov 11 13:45:11 2028 GMT Subject: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:76:88:b0:62:d4:ee:76:73:9e:05:cb:d7: ab:f5:c1:f0:dd:04:1f:82:7d:16:2e:83:02:5a:3e: ea:2e:2f:d7:18:55:82:2e:61:5b:f5:ce:48:4a:4f: 32:fb:02:26:b1:73:98:d1:ea:12:a3:23:73:9f:98: e2:20:62:3e:d8:bd:01:34:f2:53:2b:1e:08:c6:a5: b4:4b:5e:f8:6f:a2:4a:59:3c:3a:27:e6:0a:18:62: fc:82:15:92:5e:33:72:40:ea:22:a2:9a:5f:02:ff: e6:7e:4a:b4:3f:f6:f9:68:df:d7:8d:c3:fc:9e:75: 81:e9:38:46:93:cb:f9:a6:e4:94:ac:c8:73:90:38: f1:c9:da:48:11:24:0f:32:0b:5d:0b:f8:6d:d2:ab: 1f:48:1d:1e:77:fa:d7:87:c7:5a:54:11:9b:b9:74: ee:eb:b6:1d:dc:30:ea:55:fe:26:d4:7c:e1:9e:0a: 4c:18:8e:b9:ab:e8:63:58:b7:f8:00:d6:42:f1:56: ab:5b:de:30:60:6b:d3:d1:63:a1:5d:0a:5f:6b:0c: 4d:89:e4:a1:ec:a8:82:02:a3:f5:c4:88:15:fa:3a: f1:f0:ad:85:c3:fc:42:8c:46:98:f1:b2:69:e6:6d: 53:cb:7d:62:0a:8e:a8:d6:af:15:5d:37:2c:6b:73: 88:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 208.71.16.0/21 IPv6: 2620:50:4080::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26279 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:cc:6f:54:73:cd:5a:c5:0a:03:0e:8e:f1:89:68:f3:64:94: a4:5a:ad:11:61:73:c2:7f:c7:1a:4e:a9:8a:77:f9:fb:91:2e: 40:4d:fa:b2:ff:49:b8:f6:2c:c6:99:b7:64:60:a8:98:09:76: c5:f0:4f:5d:05:bc:e0:70:5c:67:83:b7:03:59:07:ea:a9:28: f5:a2:61:11:8e:f6:cc:c0:49:f4:18:af:fe:0d:48:de:e3:df: 83:be:be:b9:12:6a:b9:ce:42:fd:07:8a:6d:ce:82:de:65:05: 44:5c:8b:37:15:d6:fe:b4:95:1f:69:77:08:58:a5:91:07:74: cd:fb:a2:38:e3:9e:bf:34:16:12:41:6e:d6:27:d4:e8:f7:ee: b0:8a:13:59:0a:fd:d7:7b:0a:fa:72:04:f9:6a:5c:13:b2:06: ce:c6:de:42:84:97:6c:49:81:19:c7:ad:53:85:52:a6:cd:48: c8:00:a0:d6:f9:d8:da:eb:99:7a:aa:1e:b2:8c:6e:22:28:e0: 0e:b0:70:be:9b:62:83:87:de:bd:eb:4a:db:2c:d6:48:02:17: 81:89:d4:dd:97:54:40:b7:9a:da:bb:78:ff:c7:a2:17:45:26: 62:3a:cb:3a:d2:8d:d9:18:cc:26:2a:5a:74:fd:69:36:98:67: 5f:d8:d4:0d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE73MK46SctqWpY/CGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDgyNjEzNTExNloXDTI4MTExMTEzNDUxMVowLzEtMCsGA1UEAxMk Y2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYwNTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nJ2iLBi1O52c54Fy9er9cHw3QQfgn0WLoMC Wj7qLi/XGFWCLmFb9c5ISk8y+wImsXOY0eoSoyNzn5jiIGI+2L0BNPJTKx4IxqW0 S174b6JKWTw6J+YKGGL8ghWSXjNyQOoioppfAv/mfkq0P/b5aN/XjcP8nnWB6ThG k8v5puSUrMhzkDjxydpIESQPMgtdC/ht0qsfSB0ed/rXh8daVBGbuXTu67Yd3DDq Vf4m1HzhngpMGI65q+hjWLf4ANZC8VarW94wYGvT0WOhXQpfawxNieSh7KiCAqP1 xIgV+jrx8K2Fw/xCjEaY8bJp5m1Ty31iCo6o1q8VXTcsa3OIGQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAY/+o+zYL8OggsyF6fL029aRBOqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j YmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2NiZmUzM2E4LTYxYjgtNGUzZC1h Yzc1LTZhM2NkZTJmMDU3YS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUy ZjA1N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAPQRxAwDwQCAAIwCQMHACYgAFBAgDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJmpzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkzG9Uc81axQoDDo7xiWjzZJSk Wq0RYXPCf8caTqmKd/n7kS5ATfqy/0m49izGmbdkYKiYCXbF8E9dBbzgcFxng7cD WQfqqSj1omERjvbMwEn0GK/+DUje49+Dvr65Emq5zkL9B4ptzoLeZQVEXIs3Fdb+ tJUfaXcIWKWRB3TN+6I4456/NBYSQW7WJ9To9+6wihNZCv3Xewr6cgT5alwTsgbO xt5ChJdsSYEZx61ThVKmzUjIAKDW+dja65l6qh6yjG4iKOAOsHC+m2KDh96960rb LNZIAheBidTdl1RAt5rau3j/x6IXRSZiOss60o3ZGMwmKlp0/Wk2mGdf2NQN -----END CERTIFICATE-----Generated at Sun Sep 13 00:54:37 2026 by rpki-client