$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer File: 29cf59bb-49d4-46dc-a312-da9c10dc336e.cer (raw, json) Hash identifier: BLXNVLBIyZ1rQK9ZsZiTMTZTYLQyms3MSJ7yPkM+SJM= Subject key identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584D0EA00D794326F5A2FEE0E788 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Mar 2026 13:45:22 +0000 Certificate not after: Tue 06 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 11131 IP: 2620:0:5300::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a0:0d:79:43:26:f5:a2:fe:e0:e7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 4 13:45:22 2026 GMT Not After : Jun 6 12:45:22 2028 GMT Subject: CN=29cf59bb-49d4-46dc-a312-da9c10dc336e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:19:ad:d9:36:5f:79:63:8a:aa:a9:9a:21: 67:8b:89:89:06:71:45:42:b6:1f:b5:f3:7d:42:f2: 10:47:05:28:29:e2:2f:e4:3b:b3:d5:b7:35:6f:36: 86:5c:30:c0:94:86:f2:8d:7d:e4:ec:e5:78:33:3d: 7b:1c:c4:50:d4:8f:fc:bd:22:2c:2b:40:b0:f4:01: c3:fd:bf:60:3d:2e:13:09:e2:a0:7d:61:ed:5b:f5: dd:60:53:52:b1:64:ad:7f:51:d8:fb:ec:03:de:20: ec:80:cb:95:6b:af:79:8f:83:ba:8f:cf:ea:e2:a0: 0e:d2:0e:00:20:40:e8:d7:b2:21:ed:37:9f:da:ba: 7a:ae:76:98:19:2d:db:91:41:9f:a9:1a:71:cc:b3: 6f:3c:23:40:eb:73:29:bd:19:8a:87:84:cc:46:2b: 33:a1:53:d2:4d:ca:1c:30:03:82:6f:4e:a7:63:38: b3:c0:92:b7:d8:ae:7c:c5:4b:3f:3f:fd:2d:93:c2: 5c:40:4f:18:d9:73:f1:96:11:3e:d0:32:b2:49:bf: 7e:9f:8d:1a:e2:8f:38:aa:ba:33:e2:46:c7:b8:ac: 31:cb:5f:b6:d2:14:1c:33:1d:85:4c:6d:7e:18:5f: a5:52:04:85:ca:4c:27:4c:39:51:c4:f5:fe:08:15: 17:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5300::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11131 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:7d:15:1a:42:56:ef:69:c0:de:a2:9e:cb:6f:16:3e:08:70: c4:63:41:48:fa:d3:e6:27:ea:a6:07:7a:9d:3b:68:6a:d4:d5: c2:7f:c5:f8:24:a3:d1:5d:d5:c1:0d:72:bf:ff:c3:f8:d8:a5: df:d3:f0:29:5b:76:94:bf:58:6a:08:85:30:c6:bf:85:8f:91: 79:58:64:d2:b4:cd:7c:0d:3a:2e:5c:80:ba:66:4a:c1:7e:14: 06:9d:56:e8:46:09:07:70:ee:a4:fd:aa:c2:b0:66:1c:87:67: bf:61:87:d0:fc:4e:01:d5:a0:0c:74:7e:25:08:c9:d9:4c:62: 39:9c:2f:48:e7:e6:fd:af:0a:56:74:69:d1:98:fa:39:6b:52: 1e:a2:83:84:d8:88:8b:73:9e:19:54:70:73:57:79:01:48:14: d9:28:15:33:1c:f9:d1:4c:80:ad:8a:b4:11:15:bd:f1:24:ff: 6b:3c:30:41:8e:97:2d:d8:32:ca:46:cc:bc:88:33:6e:2f:0a: db:c0:43:08:ee:fe:2a:1b:64:5d:db:c3:5b:cc:0a:b0:13:08: 72:8f:5d:e7:a6:62:9f:c4:f4:71:fb:bb:c0:2d:8f:71:a2:16: df:ea:4c:6c:8c:06:13:93:79:3d:69:df:54:b8:10:43:67:76: 28:b1:12:8a -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE0OoA15Qyb1ov7g54gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDMwNDEzNDUyMloXDTI4MDYwNjEyNDUyMlowLzEtMCsGA1UEAxMk MjljZjU5YmItNDlkNC00NmRjLWEzMTItZGE5YzEwZGMzMzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv0Zrdk2X3ljiqqpmiFni4mJBnFFQrYftfN9 QvIQRwUoKeIv5Duz1bc1bzaGXDDAlIbyjX3k7OV4Mz17HMRQ1I/8vSIsK0Cw9AHD /b9gPS4TCeKgfWHtW/XdYFNSsWStf1HY++wD3iDsgMuVa695j4O6j8/q4qAO0g4A IEDo17Ih7Tef2rp6rnaYGS3bkUGfqRpxzLNvPCNA63MpvRmKh4TMRiszoVPSTcoc MAOCb06nYzizwJK32K58xUs/P/0tk8JcQE8Y2XPxlhE+0DKySb9+n40a4o84qroz 4kbHuKwxy1+20hQcMx2FTG1+GF+lUgSFykwnTDlRxPX+CBUXWwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFHVtOe9VcUpxNyyTvEdvHai8NCOQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y OWNmNTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTljMTBkYzMzNmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzI5Y2Y1OWJiLTQ5ZDQtNDZkYy1h MzEyLWRhOWMxMGRjMzM2ZS8yOWNmNTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTljMTBk YzMzNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIAAAUwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICK3swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEABX0VGkJW72nA3qKey28WPghwxGNBSPrT5ifqpgd6nTto atTVwn/F+CSj0V3VwQ1yv//D+Nil39PwKVt2lL9YagiFMMa/hY+ReVhk0rTNfA06 LlyAumZKwX4UBp1W6EYJB3DupP2qwrBmHIdnv2GH0PxOAdWgDHR+JQjJ2UxiOZwv SOfm/a8KVnRp0Zj6OWtSHqKDhNiIi3OeGVRwc1d5AUgU2SgVMxz50UyArYq0ERW9 8ST/azwwQY6XLdgyykbMvIgzbi8K28BDCO7+KhtkXdvDW8wKsBMIco9d56Zin8T0 cfu7wC2PcaIW3+pMbIwGE5N5PWnfVLgQQ2d2KLESig== -----END CERTIFICATE-----Generated at Wed Mar 25 22:39:24 2026 by rpki-client