$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer File: ce029dcb-bb98-4569-a98c-6f77af488b38.cer (raw, json) Hash identifier: 8LUkv1kgxdTeXY5knPVFAesdsCCLwucPyST6OrI6vks= Subject key identifier: C3:59:13:02:13:BC:6B:94:3D:09:71:76:E1:DB:8E:A7:37:96:DF:20 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584D4922A355FF8DBDA7199C3180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 12:45:22 +0000 Certificate not after: Tue 27 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 63271 IP: 192.149.210.0/24 IP: 2607:6580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:22:a3:55:ff:8d:bd:a7:19:9c:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 25 12:45:22 2026 GMT Not After : Jun 27 12:45:22 2028 GMT Subject: CN=ce029dcb-bb98-4569-a98c-6f77af488b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:0d:1e:80:64:8a:9b:98:0b:db:78:78:06: fb:73:8e:cb:dc:6a:f4:53:d5:7e:cd:a4:39:d2:56: e7:fd:df:6c:da:e3:ca:20:af:de:28:12:67:48:17: 4f:62:c2:c4:cd:6a:b2:3f:a1:ed:d9:a7:9e:5f:6e: 2f:4d:b2:ac:b5:49:f8:51:d9:48:06:38:30:b9:ef: 62:00:c2:be:f3:98:0d:ec:21:a8:14:27:6d:4b:9b: 9a:5f:e4:12:cd:83:ab:e0:36:ad:20:38:4d:56:27: 10:35:f4:2c:f5:1e:5f:7d:61:72:8b:58:95:87:13: da:e3:54:b6:fd:3b:18:be:fc:64:ad:55:a7:41:d8: d1:34:25:c2:b2:8c:93:a8:34:a4:92:17:49:3f:e2: 91:16:22:47:13:fc:15:c1:42:af:81:b7:74:c9:b1: 00:3d:bc:02:a3:85:f4:7b:5a:3c:80:58:2e:0c:9d: fd:c4:de:41:1b:d6:76:a1:58:22:31:94:b6:49:17: ed:39:cb:22:4c:d0:d9:d0:5a:96:48:b0:34:5a:0a: f5:56:17:86:07:70:e5:dd:ea:ae:6b:10:f0:61:2f: d5:30:85:d7:17:87:dc:ce:3d:65:57:81:75:d7:aa: 96:ef:4d:06:f6:e3:43:2f:9e:0d:82:f1:96:e9:7b: ed:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:59:13:02:13:BC:6B:94:3D:09:71:76:E1:DB:8E:A7:37:96:DF:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.149.210.0/24 IPv6: 2607:6580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63271 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:68:6e:9a:39:34:e2:16:1f:5c:91:cf:4c:53:06:d4:af:30: 52:1a:f8:85:24:05:c6:57:8b:0f:00:32:b7:6d:ba:94:39:1a: 8f:d7:3e:eb:80:43:cb:62:04:f9:f0:62:f8:2d:03:1f:8f:ad: 66:aa:5d:49:e4:4c:cc:9b:60:fa:91:b2:20:8b:df:91:8e:ab: 33:5e:b0:58:82:9a:1a:cb:e0:9c:cd:c7:be:a4:47:76:c8:db: d0:45:18:a3:55:3e:65:e8:81:e8:b2:08:a8:86:d1:72:3e:81: 44:37:b1:a3:bb:d1:27:54:d9:66:e1:d2:e0:4d:6b:4d:34:87: 1e:dc:10:a7:f2:5b:c3:c5:0b:1f:e3:f7:0b:fb:cf:fe:fa:44: db:27:eb:41:16:f1:19:d7:08:64:58:94:b3:7f:1b:b1:3c:b0: 7b:28:2e:7c:24:01:ba:d2:d6:6a:2a:3e:a1:c3:3f:7b:ab:49: e9:4a:92:30:a9:68:68:56:3e:5a:9e:1d:14:94:b9:18:6d:d0: 35:10:a8:de:67:24:05:e6:6e:64:f1:7c:bf:e5:a2:ef:94:f5: 2d:3b:1a:fe:33:a6:89:01:d9:a8:b4:50:df:e2:b1:36:71:4b: a3:c1:d9:ed:18:3a:05:cf:39:0d:c5:85:73:ac:f9:d0:c5:f4: 02:75:78:f2 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE1JIqNV/429pxmcMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDMyNTEyNDUyMloXDTI4MDYyNzEyNDUyMlowLzEtMCsGA1UEAxMk Y2UwMjlkY2ItYmI5OC00NTY5LWE5OGMtNmY3N2FmNDg4YjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqANHoBkipuYC9t4eAb7c47L3Gr0U9V+zaQ5 0lbn/d9s2uPKIK/eKBJnSBdPYsLEzWqyP6Ht2aeeX24vTbKstUn4UdlIBjgwue9i AMK+85gN7CGoFCdtS5uaX+QSzYOr4DatIDhNVicQNfQs9R5ffWFyi1iVhxPa41S2 /TsYvvxkrVWnQdjRNCXCsoyTqDSkkhdJP+KRFiJHE/wVwUKvgbd0ybEAPbwCo4X0 e1o8gFguDJ39xN5BG9Z2oVgiMZS2SRftOcsiTNDZ0FqWSLA0Wgr1VheGB3Dl3equ axDwYS/VMIXXF4fczj1lV4F116qW700G9uNDL54NgvGW6XvtYwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFMNZEwITvGuUPQlxduHbjqc3lt8gMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j ZTAyOWRjYi1iYjk4LTQ1NjktYTk4Yy02Zjc3YWY0ODhiMzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2NlMDI5ZGNiLWJiOTgtNDU2OS1h OThjLTZmNzdhZjQ4OGIzOC9jZTAyOWRjYi1iYjk4LTQ1NjktYTk4Yy02Zjc3YWY0 ODhiMzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADAldIwDQQCAAIwBwMFACYHZYAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPcnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGFobpo5NOIWH1yRz0xTBtSvMFIa +IUkBcZXiw8AMrdtupQ5Go/XPuuAQ8tiBPnwYvgtAx+PrWaqXUnkTMybYPqRsiCL 35GOqzNesFiCmhrL4JzNx76kR3bI29BFGKNVPmXogeiyCKiG0XI+gUQ3saO70SdU 2Wbh0uBNa000hx7cEKfyW8PFCx/j9wv7z/76RNsn60EW8RnXCGRYlLN/G7E8sHso LnwkAbrS1moqPqHDP3urSelKkjCpaGhWPlqeHRSUuRht0DUQqN5nJAXmbmTxfL/l ou+U9S07Gv4zpokB2ai0UN/isTZxS6PB2e0YOgXPOQ3FhXOs+dDF9AJ1ePI= -----END CERTIFICATE-----Generated at Wed Mar 25 22:40:44 2026 by rpki-client