$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer File: 3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer (raw, json) Hash identifier: 2PwDdmPmFuwYyOKNEm1BBg1Q2vhUbHfgoKQaoLCz58o= Subject key identifier: 78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584E81580B2D6A057D739DEE1380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Jul 2026 08:45:11 +0000 Certificate not after: Tue 17 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 395635 IP: 192.101.119.0/24 IP: 2620:ba:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:58:0b:2d:6a:05:7d:73:9d:ee:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 15 08:45:11 2026 GMT Not After : Oct 17 08:45:11 2028 GMT Subject: CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:29:d1:28:bd:05:d7:78:4a:a3:60:e6:80: 0d:d8:a4:54:c6:77:c1:b3:19:b4:b8:23:2e:92:0a: 0a:fe:53:1d:05:15:68:88:5e:ab:43:9c:d3:d1:29: 75:2f:67:2e:f0:4f:46:7a:cf:1a:20:d8:72:ce:43: 0b:13:db:4d:d8:d0:38:77:9c:fb:5f:6f:22:99:bb: bb:e0:4a:5e:95:8e:2f:66:9f:4c:c8:eb:e7:46:6e: ea:eb:cc:c4:52:78:14:85:20:01:cf:3d:b1:26:27: 27:f2:1d:82:46:9f:0d:43:13:fc:d5:12:79:47:a8: 36:7d:a1:f3:bd:af:ba:8b:70:35:a4:b5:58:60:3a: 74:45:2e:ec:53:e2:92:bf:f2:91:d3:ca:bf:ee:30: dc:a8:ed:03:4b:34:60:c6:8c:e0:df:0b:f5:18:da: 23:26:bd:1f:62:d9:77:8c:94:2e:8f:2e:d8:f0:f7: ea:40:14:5e:04:74:14:df:03:8f:71:88:1c:54:a7: 91:66:2c:5b:6b:eb:84:ec:37:96:73:05:60:9e:7a: e6:8e:59:67:66:f2:3e:01:3d:fc:9e:de:40:c2:84: 3b:d7:3c:1f:f8:c9:5b:86:d3:a9:6f:ca:cd:b7:47: 7b:90:b1:6e:bf:12:7c:c4:47:cf:1b:5f:de:42:99: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.101.119.0/24 IPv6: 2620:ba:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395635 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1c:df:34:52:53:6d:85:ea:24:c8:fd:5f:68:df:d8:c0:60: 08:49:8e:2f:c3:47:06:67:a6:d3:ce:7e:e8:a3:ba:b5:c9:00: c6:b5:18:b7:a0:e2:4d:69:c4:9e:0e:77:e5:06:1a:b9:d5:70: a0:93:6f:f7:b7:26:3e:2a:93:5d:3d:32:e4:6e:ec:b6:57:41: 38:32:e4:e5:8e:f1:ce:7c:d0:94:e0:18:98:24:13:5f:40:bc: 6a:21:83:20:28:bd:76:6a:96:74:ba:e2:da:e9:df:97:9b:23: ad:0e:7b:ae:26:bb:b8:cc:66:76:8d:a0:4f:e1:20:79:15:64: 1a:ad:ea:2b:b4:c7:72:8d:a0:d4:b4:2f:a5:ee:59:6f:93:d2: 9d:9e:c6:ec:2c:cd:b1:1c:88:0d:13:47:df:85:52:2d:1e:99: f0:fa:d2:92:ec:26:f2:1e:9f:29:bb:16:41:fe:32:f9:7c:cd: 9e:56:b6:e2:d4:6d:cb:02:d7:47:9d:68:fb:5f:2b:18:59:ec: 22:17:c8:b2:44:73:8c:c8:c5:50:0b:2b:9a:95:35:28:8b:b0: 0f:f3:ef:b3:8c:18:87:d3:e4:14:5c:b3:e4:68:75:fb:9b:5b: 62:27:18:7d:77:f2:c9:7f:69:6f:78:73:7c:32:a3:df:f1:6e: 47:07:d0:53 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE6BWAstagV9c53uE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDcxNTA4NDUxMVoXDTI4MTAxNzA4NDUxMVowLzEtMCsGA1UEAxMk M2ZjY2NkZjgtZTc3MC00YzRjLWFiZDEtYzhiNjMyMzg1OTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUgp0Si9Bdd4SqNg5oAN2KRUxnfBsxm0uCMu kgoK/lMdBRVoiF6rQ5zT0Sl1L2cu8E9Ges8aINhyzkMLE9tN2NA4d5z7X28imbu7 4EpelY4vZp9MyOvnRm7q68zEUngUhSABzz2xJicn8h2CRp8NQxP81RJ5R6g2faHz va+6i3A1pLVYYDp0RS7sU+KSv/KR08q/7jDcqO0DSzRgxozg3wv1GNojJr0fYtl3 jJQujy7Y8PfqQBReBHQU3wOPcYgcVKeRZixba+uE7DeWcwVgnnrmjllnZvI+AT38 nt5AwoQ71zwf+MlbhtOpb8rNt0d7kLFuvxJ8xEfPG1/eQpmHQwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFHiUX0749aNCWLlVw8M5Dhdw0RN1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z ZmNjY2RmOC1lNzcwLTRjNGMtYWJkMS1jOGI2MzIzODU5NGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzNmY2NjZGY4LWU3NzAtNGM0Yy1h YmQxLWM4YjYzMjM4NTk0Yi8zZmNjY2RmOC1lNzcwLTRjNGMtYWJkMS1jOGI2MzIz ODU5NGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADAZXcwDwQCAAIwCQMHACYgALqgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGCXMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJBzfNFJTbYXqJMj9X2jf2MBg CEmOL8NHBmem085+6KO6tckAxrUYt6DiTWnEng535QYaudVwoJNv97cmPiqTXT0y 5G7stldBODLk5Y7xznzQlOAYmCQTX0C8aiGDICi9dmqWdLri2unfl5sjrQ57ria7 uMxmdo2gT+EgeRVkGq3qK7THco2g1LQvpe5Zb5PSnZ7G7CzNsRyIDRNH34VSLR6Z 8PrSkuwm8h6fKbsWQf4y+XzNnla24tRtywLXR51o+18rGFnsIhfIskRzjMjFUAsr mpU1KIuwD/Pvs4wYh9PkFFyz5Gh1+5tbYicYfXfyyX9pb3hzfDKj3/FuRwfQUw== -----END CERTIFICATE-----Generated at Thu Jul 23 20:15:26 2026 by rpki-client