$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer File: a3049800-ff17-49a6-b029-ec908e1c7cb3.cer (raw, json) Hash identifier: jv85bnAMRVXAmLy13ngniZ8x7iQwcuXzeUdBWhJ6Nig= Subject key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584DC98E10A39D13B58069C60640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 May 2026 12:45:17 +0000 Certificate not after: Sat 12 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 20150 IP: 45.59.112.0/20 IP: 66.23.192.0/21 IP: 104.36.80.0/21 IP: 130.51.40.0/22 IP: 216.126.224.0/20 IP: 2604:4ac0::/32 IP: 2604:4cc0::/32 IP: 2604:4d40::/32 IP: 2604:4fc0::/32 IP: 2604:5040::/32 IP: 2604:50c0::/32 IP: 2604:6a40::/32 IP: 2605:7980::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c9:8e:10:a3:9d:13:b5:80:69:c6:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 10 12:45:17 2026 GMT Not After : Aug 12 12:45:17 2028 GMT Subject: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:44:0e:b5:8d:9c:c7:1e:cb:7a:27:9d:31: 73:2b:bf:8e:98:26:dd:23:ca:ce:98:00:12:07:c9: 67:7e:88:a2:76:96:c6:66:a9:8e:09:e3:91:69:4e: 76:88:74:01:0f:3b:49:a4:f4:e4:87:5a:6a:52:da: fd:79:04:89:67:1c:19:30:81:ac:20:da:88:64:9c: 0c:86:d5:2f:d7:d2:d0:0d:24:02:03:35:55:08:b3: 57:d5:51:d7:26:ea:eb:12:72:00:23:af:26:99:9a: b0:7a:26:3e:ab:e6:c0:1b:26:b8:b8:76:00:68:40: 47:0f:e1:5b:ae:28:9f:0e:e4:fe:04:38:62:af:1e: d2:a9:02:f5:32:9e:99:51:21:34:e6:73:cb:52:13: fe:ea:61:7f:80:ac:6c:cf:c5:30:7a:ea:27:e4:cd: 13:e0:58:3d:80:5c:26:c2:65:6b:e2:6b:2d:71:05: b3:00:d3:d8:c3:09:90:79:2e:e5:a3:77:c8:f1:14: 45:79:dc:7d:ce:52:69:c0:a9:2a:e0:d6:56:13:6e: f2:be:02:93:f5:97:f0:5b:74:32:d7:ae:54:77:2d: 47:e2:ca:f5:ba:14:71:df:8c:8e:6d:50:bd:11:17: 41:dc:a8:7f:71:eb:9a:e4:f4:23:25:a5:c5:f0:d7: df:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 45.59.112.0/20 66.23.192.0/21 104.36.80.0/21 130.51.40.0/22 216.126.224.0/20 IPv6: 2604:4ac0::/32 2604:4cc0::/32 2604:4d40::/32 2604:4fc0::/32 2604:5040::/32 2604:50c0::/32 2604:6a40::/32 2605:7980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20150 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:93:08:44:1e:91:f5:11:36:25:2b:e6:f1:79:c5:48:ab:5f: d2:60:d4:80:f4:c3:68:1f:df:72:b7:be:e6:35:c5:0d:6a:ef: fe:36:41:2f:f6:bb:6f:b2:e5:35:81:ad:7c:87:36:70:83:a6: 19:09:61:7a:9d:4a:46:29:71:be:fa:8f:ba:32:b1:5d:80:db: 50:2f:d1:89:2a:9b:4d:87:94:23:ef:51:a6:de:60:c8:15:19: 9b:b9:31:62:f7:97:80:82:4e:94:65:64:57:37:df:a9:94:24: 6c:9b:80:37:26:bd:70:8d:bd:38:8d:f8:c3:1f:95:d6:79:c2: 16:8f:c9:75:02:ef:e1:02:06:3b:36:e4:25:d0:a7:bb:78:7e: c6:55:ad:84:9f:6a:a4:1c:a4:70:26:a3:f9:09:9e:f3:b1:4d: e3:67:1a:64:4b:6a:98:cb:15:25:69:7a:b5:75:f2:ad:1a:01: 4d:b2:6c:c4:7a:31:9e:56:9e:e8:96:94:de:09:ff:8d:fc:a5: a0:67:6f:35:d9:4d:ae:9f:18:1b:8b:d0:6a:cb:93:f5:85:32: 8e:30:fa:eb:41:c9:07:12:a7:87:5a:93:65:f4:aa:05:b1:c8: e6:e5:e3:d2:e5:ef:ea:14:33:c6:15:03:a7:a8:e8:3e:c5:70: 9b:d8:bc:a5 -----BEGIN CERTIFICATE----- MIIHYDCCBkigAwIBAgIUAQ0Mn0MoWE3JjhCjnRO1gGnGBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDUxMDEyNDUxN1oXDTI4MDgxMjEyNDUxN1owLzEtMCsGA1UEAxMk YTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eFEDrWNnMcey3onnTFzK7+OmCbdI8rOmAAS B8lnfoiidpbGZqmOCeORaU52iHQBDztJpPTkh1pqUtr9eQSJZxwZMIGsINqIZJwM htUv19LQDSQCAzVVCLNX1VHXJurrEnIAI68mmZqweiY+q+bAGya4uHYAaEBHD+Fb riifDuT+BDhirx7SqQL1Mp6ZUSE05nPLUhP+6mF/gKxsz8Uweuon5M0T4Fg9gFwm wmVr4mstcQWzANPYwwmQeS7lo3fI8RRFedx9zlJpwKkq4NZWE27yvgKT9ZfwW3Qy 165Udy1H4sr1uhRx34yObVC9ERdB3Kh/ceua5PQjJaXF8NffRwIDAQABo4IEcjCC BG4wHQYDVR0OBBYEFGgjyim9kaFJzpXmWrEPZrOFZ2zwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h MzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2EzMDQ5ODAwLWZmMTctNDlhNi1i MDI5LWVjOTA4ZTFjN2NiMy9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUx YzdjYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwdwYIKwYBBQUH AQcBAf8EaDBmMCQEAgABMB4DBAQtO3ADBANCF8ADBANoJFADBAKCMygDBATYfuAw PgQCAAIwOAMFACYESsADBQAmBEzAAwUAJgRNQAMFACYET8ADBQAmBFBAAwUAJgRQ wAMFACYEakADBQAmBXmAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAk62MFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBADyTCEQekfURNiUr5vF5xUirX9Jg1ID0w2gf33K3vuY1xQ1q7/42QS/2u2+y 5TWBrXyHNnCDphkJYXqdSkYpcb76j7oysV2A21Av0Ykqm02HlCPvUabeYMgVGZu5 MWL3l4CCTpRlZFc336mUJGybgDcmvXCNvTiN+MMfldZ5whaPyXUC7+ECBjs25CXQ p7t4fsZVrYSfaqQcpHAmo/kJnvOxTeNnGmRLapjLFSVperV18q0aAU2ybMR6MZ5W nuiWlN4J/438paBnbzXZTa6fGBuL0GrLk/WFMo4w+utByQcSp4dak2X0qgWxyObl 49Ll7+oUM8YVA6eo6D7FcJvYvKU= -----END CERTIFICATE-----Generated at Wed May 13 05:19:35 2026 by rpki-client