$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer File: afc9c4c7-de4a-4066-870e-383d770d6d47.cer (raw, json) Hash identifier: oUtuXPfQZbccbuK2zolM8ESayHmtuFLxes7Ep1Oir4M= Subject key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584F4D9B1887ACD6DFE50AC83F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 26 Sep 2026 12:45:11 +0000 Certificate not after: Fri 29 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 14500 IP: 68.70.144.0/20 IP: 173.244.80.0/20 IP: 192.151.132.0/22 IP: 199.182.116.0/22 IP: 2607:72c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:9b:18:87:ac:d6:df:e5:0a:c8:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 26 12:45:11 2026 GMT Not After : Dec 29 13:45:11 2028 GMT Subject: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:c0:f5:4a:c3:38:0c:e3:0a:84:33:17:37: 0a:ca:dd:ab:39:dc:17:09:f2:7a:fd:e3:a4:17:56: 97:73:63:18:45:6c:b4:c5:d4:78:4f:2e:ff:50:44: 2e:fc:fb:f8:da:06:28:d3:1d:63:13:17:37:d8:bc: d5:f6:07:d1:90:d9:ca:fc:76:00:7e:f4:2d:ea:84: d7:1a:84:76:ff:b1:9f:69:9b:7c:cf:5b:47:87:aa: 53:e5:b7:8a:97:8f:df:7e:90:7b:89:21:40:01:ea: c3:09:89:03:26:22:f7:40:53:89:3d:cf:0b:b5:6c: ef:93:bc:83:7e:97:52:bc:b5:98:24:08:a4:c2:c8: 66:27:cf:0d:ee:29:25:94:86:9c:43:58:e6:27:ca: 80:e3:f7:59:f8:a0:6d:14:75:0a:da:cb:1d:20:be: 03:b6:00:bc:c9:3e:6b:5a:d1:db:a4:42:26:1c:83: c7:40:54:3d:89:1a:85:22:79:52:84:8e:b5:2b:9a: bd:4b:43:90:15:6c:97:14:5b:ad:b3:1b:e8:7e:3f: 70:c9:30:39:95:24:67:52:dd:8e:25:07:f8:ed:cb: 9c:a6:fb:0f:12:c3:38:b8:8b:59:09:5b:63:fc:b6: 6a:45:20:20:9f:4c:02:d9:be:5d:10:d1:03:19:04: a8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 68.70.144.0/20 173.244.80.0/20 192.151.132.0/22 199.182.116.0/22 IPv6: 2607:72c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14500 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:9e:2c:49:e2:5b:80:5a:d3:88:08:0e:0f:87:be:2c:69:56: 56:c6:6e:34:a4:a2:b6:e5:62:16:96:b8:e1:69:13:bc:fd:42: eb:31:56:04:51:94:38:ff:da:92:73:19:e5:97:b3:23:45:16: be:5a:7e:41:90:a5:9e:0c:f6:a4:09:7d:82:fa:52:3d:31:a1: 19:44:9a:77:d8:fc:1b:9f:71:96:f8:fa:f6:b1:aa:cb:5a:a5: 54:ed:1e:7f:4a:7a:fa:e5:41:a5:d8:e9:52:07:2e:36:23:29: 3d:88:a8:eb:2d:10:0d:19:8e:24:6c:dd:a3:7e:3f:db:34:36: 97:db:c2:21:9c:22:c9:48:c9:54:c5:b4:1d:75:d0:d4:04:d3: d4:fb:c4:c8:96:b7:12:5f:c1:64:ad:d3:6d:bf:3e:2e:85:d1: 23:ae:80:a1:f5:04:28:a3:80:4c:50:5d:e2:a8:3f:3b:8c:fe: 37:f2:22:39:29:01:fe:df:09:fc:dd:8d:cd:6f:2b:ff:14:20: 35:9d:a2:86:62:08:c1:26:37:83:c4:51:95:66:d8:69:51:93: 45:7a:26:70:e0:30:99:33:ee:9f:5c:86:e3:e2:cc:b6:b9:7e: b8:28:48:6a:42:af:c4:46:13:08:29:95:94:be:e6:0b:42:c0: cb:4b:c4:db -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWE9NmxiHrNbf5QrIP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDkyNjEyNDUxMVoXDTI4MTIyOTEzNDUxMVowLzEtMCsGA1UEAxMk YWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2ZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9PA9UrDOAzjCoQzFzcKyt2rOdwXCfJ6/eOk F1aXc2MYRWy0xdR4Ty7/UEQu/Pv42gYo0x1jExc32LzV9gfRkNnK/HYAfvQt6oTX GoR2/7GfaZt8z1tHh6pT5beKl4/ffpB7iSFAAerDCYkDJiL3QFOJPc8LtWzvk7yD fpdSvLWYJAikwshmJ88N7ikllIacQ1jmJ8qA4/dZ+KBtFHUK2ssdIL4DtgC8yT5r WtHbpEImHIPHQFQ9iRqFInlShI61K5q9S0OQFWyXFFutsxvofj9wyTA5lSRnUt2O JQf47cucpvsPEsM4uItZCVtj/LZqRSAgn0wC2b5dENEDGQSoewIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFF19wb7Zv6R+j1ywC9T4glAwzNnyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h ZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2FmYzljNGM3LWRlNGEtNDA2Ni04 NzBlLTM4M2Q3NzBkNmQ0Ny9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcw ZDZkNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBARERpADBASt9FADBALAl4QDBALHtnQwDQQCAAIw BwMFACYHcsAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICOKQwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkZ4s SeJbgFrTiAgOD4e+LGlWVsZuNKSituViFpa44WkTvP1C6zFWBFGUOP/aknMZ5Zez I0UWvlp+QZClngz2pAl9gvpSPTGhGUSad9j8G59xlvj69rGqy1qlVO0ef0p6+uVB pdjpUgcuNiMpPYio6y0QDRmOJGzdo34/2zQ2l9vCIZwiyUjJVMW0HXXQ1ATT1PvE yJa3El/BZK3Tbb8+LoXRI66AofUEKKOATFBd4qg/O4z+N/IiOSkB/t8J/N2NzW8r /xQgNZ2ihmIIwSY3g8RRlWbYaVGTRXomcOAwmTPun1yG4+LMtrl+uChIakKvxEYT CCmVlL7mC0LAy0vE2w== -----END CERTIFICATE-----Generated at Sat Sep 26 18:32:43 2026 by rpki-client