$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer File: 209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer (raw, json) Hash identifier: HCvFbewRLwvECEleaNCrwFSaJogGPlujhoxjW/7nFkk= Subject key identifier: 81:15:A2:E7:D6:95:EA:BE:06:B5:02:F1:90:09:98:2F:53:CD:D4:A9 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584D090AAECCCE03C36373610400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Mar 2026 13:45:22 +0000 Certificate not after: Sun 04 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 192.206.0.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:0a:ae:cc:ce:03:c3:63:73:61:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 2 13:45:22 2026 GMT Not After : Jun 4 12:45:22 2028 GMT Subject: CN=209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:05:a3:62:0b:fe:ce:9e:40:f3:26:38:82: da:1b:0d:e2:2a:e0:39:c3:bf:ea:17:11:22:c6:17: f8:f7:8a:3c:e3:b6:16:fb:4b:74:9c:eb:ab:dc:24: 8b:69:58:9f:51:2a:9c:47:5d:c7:6a:e3:6d:d2:86: 69:ef:c2:d2:16:e0:20:bf:7a:2d:ed:93:8a:8b:af: 38:28:d0:ff:dc:3e:44:ec:f6:33:5f:7b:83:cf:cf: 01:60:39:7a:23:57:3e:37:d8:65:2d:6f:21:fa:0b: d0:e6:c0:d9:9f:5e:98:9e:68:6c:9d:d9:c6:90:5f: de:ed:b5:da:ca:0e:38:0b:a4:36:63:d0:f2:3b:77: 6f:18:d8:3e:05:17:bd:b4:01:a8:45:33:a8:72:b2: ad:5f:7b:4a:05:fd:19:45:be:be:bf:37:4d:7f:f9: af:dc:bc:02:cc:f8:4a:12:8c:8a:22:28:4c:0b:6f: 76:30:e5:6f:d0:86:d9:4b:8f:63:20:30:fa:f2:54: fe:bc:23:61:ac:60:62:8f:2c:64:4d:90:ff:79:b9: f6:c9:79:2e:de:73:c4:64:5f:68:c1:fb:62:67:1a: a2:77:f4:6d:5d:ba:c7:58:58:cd:2e:24:02:ea:3c: a1:90:ef:ee:4e:f9:19:7f:67:e0:e5:bc:1f:3c:c3: 98:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:15:A2:E7:D6:95:EA:BE:06:B5:02:F1:90:09:98:2F:53:CD:D4:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.206.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0e:86:07:06:1f:05:15:11:47:b1:38:80:f9:96:8f:cd:e8: 37:09:8e:99:20:37:58:47:26:bd:cc:40:1c:3d:3c:96:86:51: a8:5f:36:78:48:6b:e3:9b:c0:58:be:11:9a:63:35:07:52:19: 99:28:d1:99:b8:96:5a:50:ab:a2:03:87:0a:1c:4c:00:2f:31: a4:64:96:ef:53:eb:5a:08:43:1e:53:63:ba:cf:7a:44:35:95: 17:8c:f2:7a:56:17:29:36:cb:1f:25:a5:d7:bf:8e:be:97:64: 57:da:38:52:a6:32:06:81:3e:61:48:79:4b:17:2b:de:df:73: f8:8c:2e:23:76:7e:a6:ad:8a:33:6b:8d:8c:75:6f:a4:ce:9d: bc:c9:da:82:a1:70:f4:db:8f:4b:cc:d4:cf:00:b0:db:b4:71: 23:c0:64:59:bb:9a:a7:83:7c:1c:ff:6d:f1:b0:e8:81:51:fb: a2:59:01:60:4c:bc:02:99:e9:35:df:73:22:54:ec:d9:60:f8: f7:bc:f8:f4:21:74:45:1d:c6:cf:fb:ce:66:19:8f:b9:d0:80: 29:c5:3b:5e:b8:ae:2a:70:1c:ce:3a:04:42:8c:ad:eb:b6:0a: 30:e1:f2:62:a8:e5:d0:6e:a2:1a:d1:c3:ee:23:45:ff:37:31: ff:6a:85:b3 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0JCq7MzgPDY3NhBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDMwMjEzNDUyMloXDTI4MDYwNDEyNDUyMlowLzEtMCsGA1UEAxMk MjA5ZWQ4MWEtOGMwNC00Y2RlLTlkYmItN2Q4M2EzZDdjNGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL4Fo2IL/s6eQPMmOILaGw3iKuA5w7/qFxEi xhf494o847YW+0t0nOur3CSLaVifUSqcR13HauNt0oZp78LSFuAgv3ot7ZOKi684 KND/3D5E7PYzX3uDz88BYDl6I1c+N9hlLW8h+gvQ5sDZn16YnmhsndnGkF/e7bXa yg44C6Q2Y9DyO3dvGNg+BRe9tAGoRTOocrKtX3tKBf0ZRb6+vzdNf/mv3LwCzPhK EoyKIihMC292MOVv0IbZS49jIDD68lT+vCNhrGBijyxkTZD/ebn2yXku3nPEZF9o wftiZxqid/RtXbrHWFjNLiQC6jyhkO/uTvkZf2fg5bwfPMOYJwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIEVoufWleq+BrUC8ZAJmC9TzdSpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y MDllZDgxYS04YzA0LTRjZGUtOWRiYi03ZDgzYTNkN2M0ZjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzIwOWVkODFhLThjMDQtNGNkZS05 ZGJiLTdkODNhM2Q3YzRmNy8yMDllZDgxYS04YzA0LTRjZGUtOWRiYi03ZDgzYTNk N2M0ZjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAzgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcQ6GBwYfBRURR7E4gPmW j83oNwmOmSA3WEcmvcxAHD08loZRqF82eEhr45vAWL4RmmM1B1IZmSjRmbiWWlCr ogOHChxMAC8xpGSW71PrWghDHlNjus96RDWVF4zyelYXKTbLHyWl17+OvpdkV9o4 UqYyBoE+YUh5Sxcr3t9z+IwuI3Z+pq2KM2uNjHVvpM6dvMnagqFw9NuPS8zUzwCw 27RxI8BkWbuap4N8HP9t8bDogVH7olkBYEy8ApnpNd9zIlTs2WD497z49CF0RR3G z/vOZhmPudCAKcU7XriuKnAczjoEQoyt67YKMOHyYqjl0G6iGtHD7iNF/zcx/2qF sw== -----END CERTIFICATE-----Generated at Wed Mar 25 22:37:11 2026 by rpki-client