$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc.cer File: 02da98c6-6e21-4ea8-be1d-9d78acef1cfc.cer (raw, json) Hash identifier: PxoPy33yxTQ7h1XQRbJ5K0IGbxcxDvsvoQCZx9E13F4= Subject key identifier: 12:6E:12:B4:D9:C8:FC:39:D4:A6:91:F9:8F:36:F6:58:0E:24:D1:76 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584D3DF7E67D8BE69924A5F2B980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc/02da98c6-6e21-4ea8-be1d-9d78acef1cfc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Mar 2026 12:45:22 +0000 Certificate not after: Fri 23 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 205.203.192.0 -- 205.203.215.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:f7:e6:7d:8b:e6:99:24:a5:f2:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 21 12:45:22 2026 GMT Not After : Jun 23 12:45:22 2028 GMT Subject: CN=02da98c6-6e21-4ea8-be1d-9d78acef1cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:df:0b:4e:b1:69:d3:69:2b:9a:af:c8:e0: 3c:c5:7a:9f:b7:29:84:60:b8:db:e9:2b:33:d9:54: 2b:3a:0b:16:a7:2b:81:a4:64:55:32:e3:f4:49:4c: 3b:ed:9d:3e:e3:35:dd:16:8b:0f:63:63:4c:dd:bb: 09:70:dc:59:06:3e:04:45:89:f3:54:64:ac:b4:63: 75:74:53:21:14:f2:2d:41:4e:9b:23:7d:0f:c3:e1: b8:72:26:21:4a:cc:c1:25:ad:92:dd:62:7d:df:d1: 9d:b0:0b:12:2d:58:83:cf:81:77:35:35:f7:57:64: d8:ba:c6:b7:04:8e:11:3c:90:80:14:0f:f4:2f:fe: 6a:6a:90:59:f7:18:64:e0:a7:47:43:09:5c:dc:74: c8:b2:62:36:b6:b8:62:94:6b:de:de:3b:ab:9f:87: b9:62:87:9b:23:e3:99:4f:42:50:5d:f0:d6:82:b1: 26:f6:21:d0:a1:c0:a4:5a:1d:1b:17:92:65:e0:76: ca:ca:ae:cc:86:9f:bc:33:6a:e8:69:c4:8f:42:32: f2:01:45:09:6c:66:d9:78:ec:ad:90:6c:b7:70:ce: 0d:83:09:71:27:de:30:7c:d4:20:6d:81:bc:21:3d: db:5f:96:4f:4d:7c:d1:f4:9d:97:8f:c2:f1:52:76: 35:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6E:12:B4:D9:C8:FC:39:D4:A6:91:F9:8F:36:F6:58:0E:24:D1:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc/02da98c6-6e21-4ea8-be1d-9d78acef1cfc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 205.203.192.0-205.203.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:10:1c:d2:06:b7:d3:50:4f:b1:22:de:54:c7:5e:3f:f0:fd: dd:c0:c4:e1:33:20:0c:fa:fd:5f:dd:ad:ff:4b:48:16:2f:0d: 71:2c:c4:7c:c9:10:92:1e:11:b5:5a:b1:f1:59:24:a8:db:2c: a8:d4:69:0f:da:50:df:db:aa:fa:22:ab:fa:84:c4:4d:ea:29: 57:31:bd:e5:e4:92:d0:47:b3:f8:f9:30:76:ac:b1:5f:63:59: de:dd:cb:6d:6e:cc:10:de:5c:c1:28:e7:42:d9:59:a8:77:8d: 77:e9:36:91:be:35:5e:48:3d:0e:75:09:86:d8:01:e6:cd:f7: 0b:30:73:6e:f5:bd:6f:c7:99:91:c1:e5:a3:7e:74:e1:09:fb: 35:55:3f:89:a1:d8:b6:83:37:ec:3b:2c:ff:39:ff:9c:49:9e: 74:bd:78:25:f3:06:54:11:fc:f1:28:cf:9b:ff:83:4a:45:a1: f0:97:47:c1:b7:bb:61:84:4a:22:aa:fc:72:2d:c7:8b:ab:de: 8d:05:09:1a:7e:dd:41:f9:20:16:28:2b:f6:14:99:80:73:cb: 9a:0d:15:2e:76:bd:b8:20:a7:89:e0:f6:60:9c:6b:e2:d4:4d: aa:db:67:b5:c5:a4:b2:52:f6:d5:aa:45:da:b6:38:0e:d6:e1: bd:b5:4d:37 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWE099+Z9i+aZJKXyuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDMyMTEyNDUyMloXDTI4MDYyMzEyNDUyMlowLzEtMCsGA1UEAxMk MDJkYTk4YzYtNmUyMS00ZWE4LWJlMWQtOWQ3OGFjZWYxY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx53fC06xadNpK5qvyOA8xXqftymEYLjb6Ssz 2VQrOgsWpyuBpGRVMuP0SUw77Z0+4zXdFosPY2NM3bsJcNxZBj4ERYnzVGSstGN1 dFMhFPItQU6bI30Pw+G4ciYhSszBJa2S3WJ939GdsAsSLViDz4F3NTX3V2TYusa3 BI4RPJCAFA/0L/5qapBZ9xhk4KdHQwlc3HTIsmI2trhilGve3jurn4e5YoebI+OZ T0JQXfDWgrEm9iHQocCkWh0bF5Jl4HbKyq7Mhp+8M2roacSPQjLyAUUJbGbZeOyt kGy3cM4NgwlxJ94wfNQgbYG8IT3bX5ZPTXzR9J2Xj8LxUnY1pQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFBJuErTZyPw51KaR+Y829lgOJNF2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w MmRhOThjNi02ZTIxLTRlYTgtYmUxZC05ZDc4YWNlZjFjZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzAyZGE5OGM2LTZlMjEtNGVhOC1i ZTFkLTlkNzhhY2VmMWNmYy8wMmRhOThjNi02ZTIxLTRlYTgtYmUxZC05ZDc4YWNl ZjFjZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEBs3LwAMEA83L0DBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcEBzSBrfT UE+xIt5Ux14/8P3dwMThMyAM+v1f3a3/S0gWLw1xLMR8yRCSHhG1WrHxWSSo2yyo 1GkP2lDf26r6Iqv6hMRN6ilXMb3l5JLQR7P4+TB2rLFfY1ne3cttbswQ3lzBKOdC 2Vmod4136TaRvjVeSD0OdQmG2AHmzfcLMHNu9b1vx5mRweWjfnThCfs1VT+Jodi2 gzfsOyz/Of+cSZ50vXgl8wZUEfzxKM+b/4NKRaHwl0fBt7thhEoiqvxyLceLq96N BQkaft1B+SAWKCv2FJmAc8uaDRUudr24IKeJ4PZgnGvi1E2q22e1xaSyUvbVqkXa tjgO1uG9tU03 -----END CERTIFICATE-----Generated at Wed Mar 25 22:37:07 2026 by rpki-client