$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer File: 260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer (raw, json) Hash identifier: dvvxAFX8afkhtIFOYeGLF1rOJcgBYPzF69pGBpjKgLY= Subject key identifier: 8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D386289B413D20A159762F260 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Mar 2026 12:45:22 +0000 Certificate not after: Wed 21 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 64.64.156.0/22 IP: 104.193.176.0/21 IP: 162.244.164.0/22 IP: 2607:1440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:62:89:b4:13:d2:0a:15:97:62:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 19 12:45:22 2026 GMT Not After : Jun 21 12:45:22 2028 GMT Subject: CN=260078ce-082d-4ff4-9558-d1a0f0d1ecdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:37:02:5a:5b:48:36:c6:61:a7:bd:32:43:72: fa:82:53:b2:95:71:e8:3e:cd:05:64:1b:b2:4f:5f: d9:f8:b4:f8:c9:80:32:aa:29:4e:58:61:a6:3a:a3: 1a:f6:6d:cb:92:ba:c5:31:11:fa:19:e9:6f:95:1f: d2:c4:d5:b9:ba:1c:8b:df:af:cf:e2:36:f9:78:18: 5d:1f:41:bf:0f:d3:04:4d:90:82:9e:08:41:1d:a1: 4f:22:32:7f:ca:dd:16:3c:37:42:44:a8:d9:4b:c8: e7:9d:ad:47:2b:ee:5e:cb:94:de:4e:da:d1:cf:21: a9:c1:bb:e2:22:4c:74:cf:35:50:c3:53:6b:58:6d: e5:9b:e4:71:31:25:a7:d7:37:62:4e:7c:1c:39:c3: b4:ef:a0:ff:48:50:80:09:50:dc:b7:d7:60:50:c7: 95:97:a0:b8:48:9e:43:6a:68:58:ec:57:e6:fe:fc: bf:59:8d:2d:31:05:e0:3b:cc:71:bb:8e:07:0a:b6: b7:a5:26:42:3b:64:bf:ab:70:3e:61:9b:63:14:10: a3:2a:35:61:ad:7c:70:32:96:09:4b:c6:d0:e9:95: 7e:ea:a3:1d:94:7a:4d:2d:05:45:55:0a:fe:d7:b0: aa:7f:a3:16:0a:f1:87:12:4c:d2:9f:44:e6:ea:f8: ed:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.64.156.0/22 104.193.176.0/21 162.244.164.0/22 IPv6: 2607:1440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3a:f3:cc:3a:5a:1c:55:85:8a:6c:d8:6a:42:95:9f:c4:91: 17:80:e4:99:1b:18:1c:66:ce:0c:03:7c:40:23:3a:e6:77:70: 03:3f:40:b7:0a:7d:30:66:a7:05:85:0c:03:e8:3a:1c:bc:56: 08:7c:f6:ac:7f:30:2e:96:2d:ca:55:45:ca:45:46:ee:4c:fd: 55:04:e7:04:6d:c8:43:fd:88:c2:73:58:b6:ef:90:e7:6b:e2: 8e:ae:09:39:f9:6e:f1:91:55:77:65:24:24:ba:14:c2:96:00: 3a:8c:54:f3:ef:91:f8:fb:34:22:8a:df:60:8a:36:2e:f0:e9: e7:c5:e6:d7:25:10:4b:b2:9f:2f:9b:47:45:97:e8:96:28:c0: e4:fa:e5:da:44:11:3e:c3:3a:e9:26:e7:2a:70:43:6a:89:44: 2e:c8:88:c0:e3:a5:f8:d9:39:7e:a7:69:18:2c:81:c9:58:50: ee:29:e9:56:ef:6c:8c:c4:47:d5:ca:62:27:ad:aa:36:38:b6: c6:35:c3:ce:08:1b:cb:3d:0a:15:42:af:e3:7f:29:db:39:8e: 52:2f:1b:bb:05:33:7c:34:20:35:5b:ba:c1:80:1c:33:72:27: 55:92:95:fd:d0:4a:15:fe:ca:d5:54:22:34:81:09:22:5d:94: 6a:12:bb:d9 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE04Yom0E9IKFZdi8mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDMxOTEyNDUyMloXDTI4MDYyMTEyNDUyMlowLzEtMCsGA1UEAxMk MjYwMDc4Y2UtMDgyZC00ZmY0LTk1NTgtZDFhMGYwZDFlY2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjcCWltINsZhp70yQ3L6glOylXHoPs0FZBuy T1/Z+LT4yYAyqilOWGGmOqMa9m3LkrrFMRH6GelvlR/SxNW5uhyL36/P4jb5eBhd H0G/D9METZCCnghBHaFPIjJ/yt0WPDdCRKjZS8jnna1HK+5ey5TeTtrRzyGpwbvi Ikx0zzVQw1NrWG3lm+RxMSWn1zdiTnwcOcO076D/SFCACVDct9dgUMeVl6C4SJ5D amhY7Ffm/vy/WY0tMQXgO8xxu44HCra3pSZCO2S/q3A+YZtjFBCjKjVhrXxwMpYJ S8bQ6ZV+6qMdlHpNLQVFVQr+17Cqf6MWCvGHEkzSn0Tm6vjtxQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFI58VO3x+Kko0kq0q4d52EMYS6nlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y NjAwNzhjZS0wODJkLTRmZjQtOTU1OC1kMWEwZjBkMWVjZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI2MDA3OGNlLTA4MmQtNGZmNC05 NTU4LWQxYTBmMGQxZWNkZC8yNjAwNzhjZS0wODJkLTRmZjQtOTU1OC1kMWEwZjBk MWVjZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAJAQJwDBANowbADBAKi9KQwDQQCAAIwBwMFACYH FEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAaDrzzDpaHFWFimzYakKVn8SRF4DkmRsYHGbODAN8QCM65ndw Az9Atwp9MGanBYUMA+g6HLxWCHz2rH8wLpYtylVFykVG7kz9VQTnBG3IQ/2IwnNY tu+Q52vijq4JOflu8ZFVd2UkJLoUwpYAOoxU8++R+Ps0IorfYIo2LvDp58Xm1yUQ S7KfL5tHRZfolijA5Prl2kQRPsM66SbnKnBDaolELsiIwOOl+Nk5fqdpGCyByVhQ 7inpVu9sjMRH1cpiJ62qNji2xjXDzggbyz0KFUKv438p2zmOUi8buwUzfDQgNVu6 wYAcM3InVZKV/dBKFf7K1VQiNIEJIl2UahK72Q== -----END CERTIFICATE-----Generated at Thu Mar 26 07:18:26 2026 by rpki-client