$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cec80058-df3a-4cbd-8b53-cc4a99d96d07.cer File: cec80058-df3a-4cbd-8b53-cc4a99d96d07.cer (raw, json) Hash identifier: isIA6crYrjqPbxskcL3IgTvhd7uvGNBiZg8yyb4/8wE= Subject key identifier: 97:96:E0:94:4B:2C:0A:7F:C6:2F:29:F0:A8:58:91:10:EF:DF:22:6E Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584F1BBCA52FA5BCC76161C7CB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cec80058-df3a-4cbd-8b53-cc4a99d96d07/cec80058-df3a-4cbd-8b53-cc4a99d96d07.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cec80058-df3a-4cbd-8b53-cc4a99d96d07/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Sep 2026 16:02:22 +0000 Certificate not after: Mon 11 Dec 2028 17:02:22 +0000 Subordinate resources: AS: 398996 AS: 402304 IP: 198.99.211.0/24 IP: 198.153.16.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:bc:a5:2f:a5:bc:c7:61:61:c7:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 8 16:02:22 2026 GMT Not After : Dec 11 17:02:22 2028 GMT Subject: CN=cec80058-df3a-4cbd-8b53-cc4a99d96d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:ad:50:01:75:e4:cd:7f:d2:dc:ce:fc:0b: 65:1f:0a:82:a8:87:2a:e3:57:5a:7d:00:67:6b:b0: a8:31:0a:bc:c3:72:85:24:4a:4f:dd:da:fc:2f:3d: 08:d5:32:6b:41:a2:4b:ec:91:8d:e0:64:87:cd:96: 67:cf:ce:f3:59:a3:5c:26:db:6f:fb:b9:9c:5f:19: ed:63:ab:92:8f:48:95:9b:b6:eb:2c:4c:8c:31:b5: 45:a6:78:b2:a5:aa:47:fa:8b:e6:05:fb:65:15:fe: 50:32:4b:1d:35:4d:c8:0b:c4:4d:80:57:b4:6b:4d: a0:5a:c6:ec:a4:70:f9:f3:05:41:a5:fb:27:a8:e5: da:82:31:8c:c2:21:80:fc:1e:a2:96:b2:cf:3e:98: 58:c2:03:19:54:98:9b:67:fe:54:15:9f:ec:18:4a: 25:da:21:50:d2:28:da:c8:e5:12:62:55:45:c8:10: 9e:40:ab:8c:90:5a:05:f5:c3:93:6c:6f:61:8e:01: 80:32:a5:df:6e:4e:67:92:5f:61:ac:9f:9e:28:0e: ba:0f:5b:5f:c2:0d:56:14:75:97:e8:04:4a:f7:32: ca:04:c3:95:73:6b:0a:98:2a:2a:28:88:77:ea:74: d6:95:1c:49:1c:ca:43:c4:0c:9e:d5:04:21:33:0c: 72:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:96:E0:94:4B:2C:0A:7F:C6:2F:29:F0:A8:58:91:10:EF:DF:22:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cec80058-df3a-4cbd-8b53-cc4a99d96d07/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cec80058-df3a-4cbd-8b53-cc4a99d96d07/cec80058-df3a-4cbd-8b53-cc4a99d96d07.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 198.99.211.0/24 198.153.16.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398996 402304 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:67:f7:fc:4c:09:ad:8e:54:5c:f3:7a:f8:25:b4:79:30:07: 79:bf:c2:74:d3:8a:e2:5c:6f:ec:0a:d8:ea:6a:4b:8d:a3:ec: 5f:c9:2d:cd:1e:47:36:f9:e7:38:5e:f8:3d:26:49:ff:c6:d3: db:06:b2:b6:9b:16:32:25:ef:ee:14:64:2f:40:43:86:f8:bf: cb:15:21:f3:fc:af:f0:82:4f:b5:72:31:62:26:83:43:74:08: 06:8f:c3:b3:0c:d9:6d:7b:d6:f7:3c:8a:9c:39:b8:3e:ba:9a: f7:59:af:86:99:c1:54:f9:62:15:20:6e:f4:de:40:c0:5f:ee: 4b:79:67:df:3e:1a:f8:d9:00:07:34:3b:11:8b:94:07:cd:25: 73:7b:58:b4:b0:72:de:06:01:92:04:08:d4:65:76:e3:2b:df: 47:cf:77:b1:0b:d9:57:28:96:d1:69:1c:b9:77:8c:eb:b9:82: 8b:fc:54:36:bf:86:ea:50:33:ef:96:5b:0a:ef:90:af:fa:83: 4f:28:f4:0a:e6:31:c2:de:32:73:43:7a:12:16:bb:64:e5:f3: 82:a2:d8:29:c3:e0:ec:bb:a7:bb:d2:ae:e3:f2:99:1d:7b:6d: dc:e1:7e:3f:07:c9:bf:d8:80:19:95:33:e2:f7:8c:ee:bc:cd: 53:54:86:67 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE8bvKUvpbzHYWHHy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDkwODE2MDIyMloXDTI4MTIxMTE3MDIyMlowLzEtMCsGA1UEAxMk Y2VjODAwNTgtZGYzYS00Y2JkLThiNTMtY2M0YTk5ZDk2ZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsatUAF15M1/0tzO/AtlHwqCqIcq41dafQBn a7CoMQq8w3KFJEpP3dr8Lz0I1TJrQaJL7JGN4GSHzZZnz87zWaNcJttv+7mcXxnt Y6uSj0iVm7brLEyMMbVFpniypapH+ovmBftlFf5QMksdNU3IC8RNgFe0a02gWsbs pHD58wVBpfsnqOXagjGMwiGA/B6ilrLPPphYwgMZVJibZ/5UFZ/sGEol2iFQ0ija yOUSYlVFyBCeQKuMkFoF9cOTbG9hjgGAMqXfbk5nkl9hrJ+eKA66D1tfwg1WFHWX 6ARK9zLKBMOVc2sKmCoqKIh36nTWlRxJHMpDxAye1QQhMwxyiQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFJeW4JRLLAp/xi8p8KhYkRDv3yJuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j ZWM4MDA1OC1kZjNhLTRjYmQtOGI1My1jYzRhOTlkOTZkMDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2NlYzgwMDU4LWRmM2EtNGNiZC04 YjUzLWNjNGE5OWQ5NmQwNy9jZWM4MDA1OC1kZjNhLTRjYmQtOGI1My1jYzRhOTlk OTZkMDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGY9MDBATGmRAwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDBhaUAgMGI4AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeGf3/EwJrY5UXPN6+CW0eTAHeb/CdNOK 4lxv7ArY6mpLjaPsX8ktzR5HNvnnOF74PSZJ/8bT2waytpsWMiXv7hRkL0BDhvi/ yxUh8/yv8IJPtXIxYiaDQ3QIBo/DswzZbXvW9zyKnDm4Prqa91mvhpnBVPliFSBu 9N5AwF/uS3ln3z4a+NkABzQ7EYuUB80lc3tYtLBy3gYBkgQI1GV24yvfR893sQvZ VyiW0WkcuXeM67mCi/xUNr+G6lAz75ZbCu+Qr/qDTyj0CuYxwt4yc0N6Eha7ZOXz gqLYKcPg7Lunu9Ku4/KZHXtt3OF+PwfJv9iAGZUz4veM7rzNU1SGZw== -----END CERTIFICATE-----Generated at Sat Sep 12 12:40:25 2026 by rpki-client