$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c60ac5cb-616f-4792-bdac-a37ec083619a.cer File: c60ac5cb-616f-4792-bdac-a37ec083619a.cer (raw, json) Hash identifier: KA4zqlViWXhK40rckn3tJDCTZlUfid9xxhbQ2WF8IJ8= Subject key identifier: 28:7E:17:A9:49:C9:AD:D9:C2:6D:0F:4B:F1:F6:92:0D:F8:CA:80:F8 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F4275BADA68E13C703406E000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c60ac5cb-616f-4792-bdac-a37ec083619a/c60ac5cb-616f-4792-bdac-a37ec083619a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c60ac5cb-616f-4792-bdac-a37ec083619a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Sep 2026 12:56:01 +0000 Certificate not after: Mon 25 Dec 2028 13:56:01 +0000 Subordinate resources: AS: 394675 IP: 216.120.129.0/24 IP: 2607:9ec0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:75:ba:da:68:e1:3c:70:34:06:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 22 12:56:01 2026 GMT Not After : Dec 25 13:56:01 2028 GMT Subject: CN=c60ac5cb-616f-4792-bdac-a37ec083619a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e9:3b:40:e8:a6:4d:0e:5f:4e:95:ce:d8:62: b6:4c:e4:e9:23:df:b1:99:0d:ea:96:83:3c:9a:4b: 6d:8e:65:c8:39:a8:2e:38:fd:ab:4a:82:c7:d6:5a: 63:fe:c1:80:08:d8:37:f5:59:e7:d8:f3:30:25:7a: 12:bc:52:09:d2:28:52:47:ce:d9:b5:8f:f7:60:b0: 22:39:87:d0:f5:ea:0d:1a:e7:bd:9e:f3:34:98:df: 31:b4:70:63:bb:b1:e6:79:17:cc:32:8c:e0:ad:5d: 10:c5:4a:76:da:0d:20:78:32:54:cc:25:db:7e:97: 13:30:89:a8:96:02:00:7a:c4:72:92:1d:5a:8f:5e: dd:91:7c:f2:af:83:c2:05:4e:61:00:31:94:e6:4e: b4:f7:20:d9:0b:37:09:88:ef:df:5b:71:fa:09:6f: 28:c2:b4:98:c4:d8:2b:7a:de:a2:eb:ea:3b:e4:24: eb:25:39:e8:9a:34:bc:6b:6a:29:13:e6:54:cf:2b: e1:22:ae:06:1b:ef:71:c7:35:f4:34:c4:2d:1d:dc: 8c:2c:18:34:e7:5d:5d:a3:49:33:96:5e:8c:7d:65: da:ea:f1:58:4b:ae:7e:37:d7:12:26:27:7d:d2:63: 34:6c:02:b1:90:3f:08:b3:d9:b0:92:a3:33:4b:c9: 1a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7E:17:A9:49:C9:AD:D9:C2:6D:0F:4B:F1:F6:92:0D:F8:CA:80:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c60ac5cb-616f-4792-bdac-a37ec083619a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c60ac5cb-616f-4792-bdac-a37ec083619a/c60ac5cb-616f-4792-bdac-a37ec083619a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 216.120.129.0/24 IPv6: 2607:9ec0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394675 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8c:06:c0:a5:18:b2:97:80:94:44:35:d5:2b:af:5f:b9:d3: 19:35:d6:0d:94:ca:8a:fc:73:30:8f:71:b0:44:b5:f9:62:2f: 0c:72:ea:67:76:96:56:9f:90:5b:a1:ad:45:eb:63:f4:24:10: 00:7c:98:25:e4:d4:a8:d4:07:2c:c4:cd:83:b7:7d:b0:52:23: db:0b:d0:91:e4:cb:6f:06:12:50:ef:57:83:58:8f:56:d7:c4: a0:77:cb:b1:51:2d:95:af:7e:c6:ff:a8:81:68:a4:15:39:7f: 5c:d2:b4:84:15:b7:26:ff:43:06:de:d5:1c:2c:1d:fc:b6:94: 9a:b8:28:ad:db:0c:22:70:4f:d7:9a:9c:a8:bc:20:10:43:44: f8:8d:b9:b0:be:57:8e:af:9c:c4:7a:bb:e5:aa:ae:b7:94:48: 68:20:b6:09:e0:1a:c4:cd:fd:d2:1f:cc:fb:0c:31:f4:11:bc: a0:d1:95:66:09:aa:f1:05:7e:f9:96:25:0e:8a:db:d9:0c:8c: be:50:56:04:e6:43:e0:b6:5b:1a:72:49:5d:1f:f9:4a:d1:15: e8:db:3a:cc:1e:3e:b3:a8:4b:92:0a:d7:ee:40:93:3f:4b:05: 39:a8:69:e4:aa:4a:16:2d:10:95:a7:0b:d4:c9:70:6e:48:ea: 58:9e:99:1b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9CdbraaOE8cDQG4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMjEyNTYwMVoXDTI4MTIyNTEzNTYwMVowLzEtMCsGA1UEAxMk YzYwYWM1Y2ItNjE2Zi00NzkyLWJkYWMtYTM3ZWMwODM2MTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ok7QOimTQ5fTpXO2GK2TOTpI9+xmQ3qloM8 mkttjmXIOaguOP2rSoLH1lpj/sGACNg39Vnn2PMwJXoSvFIJ0ihSR87ZtY/3YLAi OYfQ9eoNGue9nvM0mN8xtHBju7HmeRfMMozgrV0QxUp22g0geDJUzCXbfpcTMImo lgIAesRykh1aj17dkXzyr4PCBU5hADGU5k609yDZCzcJiO/fW3H6CW8owrSYxNgr et6i6+o75CTrJTnomjS8a2opE+ZUzyvhIq4GG+9xxzX0NMQtHdyMLBg0511do0kz ll6MfWXa6vFYS65+N9cSJid90mM0bAKxkD8Is9mwkqMzS8kaqwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCh+F6lJya3Zwm0PS/H2kg34yoD4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9j NjBhYzVjYi02MTZmLTQ3OTItYmRhYy1hMzdlYzA4MzYxOWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2M2MGFjNWNiLTYxNmYtNDc5Mi1i ZGFjLWEzN2VjMDgzNjE5YS9jNjBhYzVjYi02MTZmLTQ3OTItYmRhYy1hMzdlYzA4 MzYxOWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADYeIEwDgQCAAIwCAMGACYHnsAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYFszBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0jAbApRiyl4CURDXVK69fudMZ NdYNlMqK/HMwj3GwRLX5Yi8McupndpZWn5Bboa1F62P0JBAAfJgl5NSo1AcsxM2D t32wUiPbC9CR5MtvBhJQ71eDWI9W18Sgd8uxUS2Vr37G/6iBaKQVOX9c0rSEFbcm /0MG3tUcLB38tpSauCit2wwicE/XmpyovCAQQ0T4jbmwvleOr5zEervlqq63lEho ILYJ4BrEzf3SH8z7DDH0Ebyg0ZVmCarxBX75liUOitvZDIy+UFYE5kPgtlsackld H/lK0RXo2zrMHj6zqEuSCtfuQJM/SwU5qGnkqkoWLRCVpwvUyXBuSOpYnpkb -----END CERTIFICATE-----Generated at Thu Sep 24 03:01:28 2026 by rpki-client