$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12b92218-52d8-4bb2-b0a7-4532fe8b5913.cer File: 12b92218-52d8-4bb2-b0a7-4532fe8b5913.cer (raw, json) Hash identifier: lggVnFbbBG66ytzbH8zgn3HROOivKtOPYhCOK1+6nX4= Subject key identifier: 20:DE:0E:4D:BF:16:03:58:86:A0:EF:BF:90:7A:D0:30:5B:F3:45:36 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584E3E57A0F242DE56736D69DF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12b92218-52d8-4bb2-b0a7-4532fe8b5913/12b92218-52d8-4bb2-b0a7-4532fe8b5913.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12b92218-52d8-4bb2-b0a7-4532fe8b5913/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 21 Jun 2026 08:45:11 +0000 Certificate not after: Sat 23 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 396448 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:57:a0:f2:42:de:56:73:6d:69:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 21 08:45:11 2026 GMT Not After : Sep 23 08:45:11 2028 GMT Subject: CN=12b92218-52d8-4bb2-b0a7-4532fe8b5913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:e0:14:2d:a4:ae:0e:6a:6a:f0:b3:99:20: d5:2d:69:60:1b:2a:7b:73:7e:f0:e8:fe:3b:e8:8a: f2:a5:6d:07:b6:aa:05:13:1a:3b:9a:f7:f4:6e:4a: f0:06:f9:0b:c5:ba:1d:7c:5c:99:1b:2e:4c:d5:7f: 1e:64:a7:9b:f0:c9:14:74:b5:bb:6f:6f:98:63:91: ab:f7:24:62:20:0d:cf:a6:0f:cf:9e:d7:84:dd:02: 53:d7:86:69:27:d6:a5:b2:a6:d3:b7:a2:fa:c2:ff: 9f:4b:2f:b3:d4:6d:2d:af:5a:5b:7d:dc:2d:ba:a0: a1:82:20:45:ee:19:29:c8:cb:9d:15:f9:3e:4f:76: 22:2a:d3:fb:c5:26:c6:e8:90:b6:4c:d6:aa:7f:a0: 70:bc:9d:13:12:94:3d:9b:89:6f:93:e3:56:78:a2: 98:a0:1b:09:1b:7d:6a:ca:c2:70:90:61:70:b1:37: a1:cb:4e:5f:39:f3:8a:27:50:83:34:99:d7:fe:12: 79:35:5e:f1:30:e7:93:28:f2:99:da:82:6e:59:49: 07:d7:85:13:da:99:b4:c6:3c:c3:7e:f6:77:e3:c9: 4c:15:46:c7:56:a9:58:ab:a1:38:d1:a4:58:0d:c6: ad:9c:99:98:b1:ab:5d:0e:75:03:3d:1e:ab:ba:89: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DE:0E:4D:BF:16:03:58:86:A0:EF:BF:90:7A:D0:30:5B:F3:45:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12b92218-52d8-4bb2-b0a7-4532fe8b5913/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12b92218-52d8-4bb2-b0a7-4532fe8b5913/12b92218-52d8-4bb2-b0a7-4532fe8b5913.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 396448 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0c:f6:87:80:b8:21:12:08:6a:a5:8f:84:12:2b:52:b7:a9: 28:46:fa:42:a1:91:d7:08:8e:3f:6e:1c:be:43:0a:97:be:b0: 29:40:32:f7:ac:73:d2:9d:c5:b0:8d:73:f4:a8:d1:d1:e6:12: 4a:42:f8:6a:08:9c:42:f2:4e:64:ba:a1:78:de:6f:8f:d2:dd: 5b:73:e9:b9:65:59:83:ff:0c:b2:1d:85:e1:91:5d:e4:13:0d: 3d:54:e0:63:80:97:e0:49:1c:a3:8f:6e:41:15:eb:f5:30:b0: 83:ed:19:c1:fb:45:12:2d:9a:94:cb:bb:f3:90:37:49:04:63: 58:d5:e4:a4:58:b5:18:4c:76:d0:06:0b:f2:a5:84:1b:28:d2: 10:53:af:c2:d3:21:85:d8:d1:aa:37:65:af:82:e4:a9:92:5a: 4a:02:c5:3a:b5:d7:c4:bb:37:31:0e:fb:14:7a:ec:e7:ea:f8: 67:1e:3d:f0:07:4a:66:7b:4c:6e:d0:2b:d8:a9:ad:96:d6:ba: d5:7e:b6:30:6e:d4:f2:f0:3c:2e:5c:5a:95:af:a6:0b:7f:e1: 03:fd:a6:22:9b:e1:34:97:0b:0f:33:ac:78:35:89:25:71:17: 68:0c:b4:2a:1c:b9:02:3f:ca:25:15:c6:ba:b1:b6:8c:a0:46: 84:38:02:38 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE4+V6DyQt5Wc21p34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDYyMTA4NDUxMVoXDTI4MDkyMzA4NDUxMVowLzEtMCsGA1UEAxMk MTJiOTIyMTgtNTJkOC00YmIyLWIwYTctNDUzMmZlOGI1OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLrgFC2krg5qavCzmSDVLWlgGyp7c37w6P47 6IrypW0HtqoFExo7mvf0bkrwBvkLxbodfFyZGy5M1X8eZKeb8MkUdLW7b2+YY5Gr 9yRiIA3Ppg/PnteE3QJT14ZpJ9alsqbTt6L6wv+fSy+z1G0tr1pbfdwtuqChgiBF 7hkpyMudFfk+T3YiKtP7xSbG6JC2TNaqf6BwvJ0TEpQ9m4lvk+NWeKKYoBsJG31q ysJwkGFwsTehy05fOfOKJ1CDNJnX/hJ5NV7xMOeTKPKZ2oJuWUkH14UT2pm0xjzD fvZ348lMFUbHVqlYq6E40aRYDcatnJmYsatdDnUDPR6ruom2pwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFCDeDk2/FgNYhqDvv5B60DBb80U2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x MmI5MjIxOC01MmQ4LTRiYjItYjBhNy00NTMyZmU4YjU5MTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzEyYjkyMjE4LTUyZDgtNGJiMi1i MGE3LTQ1MzJmZThiNTkxMy8xMmI5MjIxOC01MmQ4LTRiYjItYjBhNy00NTMyZmU4 YjU5MTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgygMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABEM9oeAuCESCGqlj4QSK1K3qShG +kKhkdcIjj9uHL5DCpe+sClAMvesc9KdxbCNc/So0dHmEkpC+GoInELyTmS6oXje b4/S3Vtz6bllWYP/DLIdheGRXeQTDT1U4GOAl+BJHKOPbkEV6/UwsIPtGcH7RRIt mpTLu/OQN0kEY1jV5KRYtRhMdtAGC/KlhBso0hBTr8LTIYXY0ao3Za+C5KmSWkoC xTq118S7NzEO+xR67Ofq+GcePfAHSmZ7TG7QK9iprZbWutV+tjBu1PLwPC5cWpWv pgt/4QP9piKb4TSXCw8zrHg1iSVxF2gMtCocuQI/yiUVxrqxtoygRoQ4Ajg= -----END CERTIFICATE-----Generated at Thu Jul 23 20:17:55 2026 by rpki-client