$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer File: cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer (raw, json) Hash identifier: 1KIjyc0qz/vS0FEhQd8Uz3TOmgXz7v+p8ll9FBcAiNk= Subject key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584EC79A42E48D25380E676BB180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 09 Aug 2026 12:45:11 +0000 Certificate not after: Sat 11 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 26279 IP: 208.71.16.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:9a:42:e4:8d:25:38:0e:67:6b:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 9 12:45:11 2026 GMT Not After : Nov 11 13:45:11 2028 GMT Subject: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:76:88:b0:62:d4:ee:76:73:9e:05:cb:d7: ab:f5:c1:f0:dd:04:1f:82:7d:16:2e:83:02:5a:3e: ea:2e:2f:d7:18:55:82:2e:61:5b:f5:ce:48:4a:4f: 32:fb:02:26:b1:73:98:d1:ea:12:a3:23:73:9f:98: e2:20:62:3e:d8:bd:01:34:f2:53:2b:1e:08:c6:a5: b4:4b:5e:f8:6f:a2:4a:59:3c:3a:27:e6:0a:18:62: fc:82:15:92:5e:33:72:40:ea:22:a2:9a:5f:02:ff: e6:7e:4a:b4:3f:f6:f9:68:df:d7:8d:c3:fc:9e:75: 81:e9:38:46:93:cb:f9:a6:e4:94:ac:c8:73:90:38: f1:c9:da:48:11:24:0f:32:0b:5d:0b:f8:6d:d2:ab: 1f:48:1d:1e:77:fa:d7:87:c7:5a:54:11:9b:b9:74: ee:eb:b6:1d:dc:30:ea:55:fe:26:d4:7c:e1:9e:0a: 4c:18:8e:b9:ab:e8:63:58:b7:f8:00:d6:42:f1:56: ab:5b:de:30:60:6b:d3:d1:63:a1:5d:0a:5f:6b:0c: 4d:89:e4:a1:ec:a8:82:02:a3:f5:c4:88:15:fa:3a: f1:f0:ad:85:c3:fc:42:8c:46:98:f1:b2:69:e6:6d: 53:cb:7d:62:0a:8e:a8:d6:af:15:5d:37:2c:6b:73: 88:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 208.71.16.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26279 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:29:50:bc:4e:2c:36:af:c5:8c:c0:f6:5c:df:83:65:e6:88: af:79:a3:b8:8a:bd:29:e0:95:f7:ad:d5:4e:44:5b:84:11:d8: 6c:fd:b4:c5:84:63:29:9d:18:6d:96:36:e7:90:72:b1:b5:4d: b6:54:53:d6:c6:e7:48:05:14:56:a1:55:67:ee:b5:39:78:91: 1d:bf:6d:1b:92:3c:92:1f:86:d3:33:a2:3d:94:e2:be:88:0f: 67:50:95:b6:78:3e:c0:86:cf:2f:54:04:e1:ef:5c:93:31:8f: d8:79:29:64:3d:be:c7:8d:8e:9f:04:fd:bd:57:51:2a:b6:ee: b6:a0:f2:cb:a7:46:69:4b:4f:60:88:95:57:fb:4e:0a:b3:c6: 39:f0:48:00:71:60:e1:7d:03:61:5b:fa:ca:d8:e9:ae:94:c1: 2a:f2:20:b6:fb:65:92:f8:b0:94:dc:6f:aa:83:fa:f1:1f:51: ca:d1:39:f5:58:03:9d:ea:72:97:6c:3d:ba:d0:20:43:c3:46: 80:81:23:5d:e3:95:35:39:94:a8:1e:b5:3a:75:55:65:1c:4d: 1c:08:20:2b:7d:ad:5f:5f:8d:bd:3b:c3:dc:90:53:5d:a5:75: 49:ba:16:f7:7c:b5:04:2d:c9:b7:54:39:cd:b5:86:63:6a:ca: 39:9e:63:87 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE7HmkLkjSU4DmdrsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDgwOTEyNDUxMVoXDTI4MTExMTEzNDUxMVowLzEtMCsGA1UEAxMk Y2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYwNTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nJ2iLBi1O52c54Fy9er9cHw3QQfgn0WLoMC Wj7qLi/XGFWCLmFb9c5ISk8y+wImsXOY0eoSoyNzn5jiIGI+2L0BNPJTKx4IxqW0 S174b6JKWTw6J+YKGGL8ghWSXjNyQOoioppfAv/mfkq0P/b5aN/XjcP8nnWB6ThG k8v5puSUrMhzkDjxydpIESQPMgtdC/ht0qsfSB0ed/rXh8daVBGbuXTu67Yd3DDq Vf4m1HzhngpMGI65q+hjWLf4ANZC8VarW94wYGvT0WOhXQpfawxNieSh7KiCAqP1 xIgV+jrx8K2Fw/xCjEaY8bJp5m1Ty31iCo6o1q8VXTcsa3OIGQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFAY/+o+zYL8OggsyF6fL029aRBOqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j YmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2NiZmUzM2E4LTYxYjgtNGUzZC1h Yzc1LTZhM2NkZTJmMDU3YS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUy ZjA1N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPQRxAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC ZqcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAAClQvE4sNq/FjMD2XN+DZeaIr3mjuIq9KeCV963VTkRbhBHY bP20xYRjKZ0YbZY255BysbVNtlRT1sbnSAUUVqFVZ+61OXiRHb9tG5I8kh+G0zOi PZTivogPZ1CVtng+wIbPL1QE4e9ckzGP2HkpZD2+x42OnwT9vVdRKrbutqDyy6dG aUtPYIiVV/tOCrPGOfBIAHFg4X0DYVv6ytjprpTBKvIgtvtlkviwlNxvqoP68R9R ytE59VgDnepyl2w9utAgQ8NGgIEjXeOVNTmUqB61OnVVZRxNHAggK32tX1+NvTvD 3JBTXaV1SboW93y1BC3Jt1Q5zbWGY2rKOZ5jhw== -----END CERTIFICATE-----Generated at Thu Aug 20 22:54:12 2026 by rpki-client