$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer File: d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer (raw, json) Hash identifier: UYYQuMnfH1CkKYJAfzoHrXwcADSH56ZZ9v5/8np6u/g= Subject key identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584DCF236E0F275C77935AABCC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 May 2026 12:45:17 +0000 Certificate not after: Mon 14 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 13917 IP: 66.206.160.0/20 IP: 2606:f000::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:23:6e:0f:27:5c:77:93:5a:ab:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 12 12:45:17 2026 GMT Not After : Aug 14 12:45:17 2028 GMT Subject: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:84:19:9a:95:dc:0e:70:6e:7d:bc:33:5f: e8:b8:e5:63:0c:7a:19:fd:36:76:17:c0:84:b1:98: 1f:64:e6:86:ff:9c:f2:4f:53:63:bd:d2:98:d9:3d: 13:ee:f2:9c:f6:62:4c:11:30:9d:7d:4c:46:18:2c: 70:b8:31:87:bc:81:a5:b4:47:fd:56:27:49:ed:dc: 9e:67:6f:7f:5f:7e:5a:1b:3e:37:e4:57:6e:02:d7: 8b:d1:41:17:41:9a:0a:1f:ee:6e:08:9a:f7:5b:4d: 16:73:e4:fe:a2:9e:77:54:54:c8:e7:e7:ca:d4:4c: ef:e1:12:7b:d9:e8:b7:6f:37:11:66:57:51:8a:34: 07:d2:bb:2b:8b:54:c1:f9:a6:c9:e0:32:de:4a:7c: c8:cf:51:49:39:a7:d2:d0:52:24:07:5a:8c:1b:fd: 1b:ec:77:cc:d1:7d:7c:54:ca:f4:98:b9:e9:91:d2: 2a:b4:4d:d3:f2:c9:66:8a:b5:8f:60:6c:07:7e:b1: fa:6d:f1:b0:1f:04:3b:ba:60:fc:6e:06:b6:bf:1b: fb:59:50:79:23:4e:49:25:98:15:4a:fd:ff:50:d8: 39:c6:e2:50:cd:0a:61:7f:1f:9a:08:ea:16:2f:73: 69:8a:2f:d0:d2:52:4f:44:1b:35:b6:f2:a2:f4:57: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 66.206.160.0/20 IPv6: 2606:f000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13917 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e4:4e:60:b3:b3:ee:ac:81:f6:b5:2c:a0:a7:af:03:ec:e8: 80:6a:31:1f:70:f3:99:ff:cb:58:a5:ce:c2:27:c5:dd:93:c3: 07:86:92:f4:89:f9:05:1e:01:4e:f2:be:4d:44:16:61:33:24: 59:0e:97:8f:d7:04:8c:5b:23:04:c4:f6:cd:a6:44:53:98:1f: 89:01:d6:4c:3d:52:4d:20:e0:58:e2:21:8f:aa:16:e4:f8:f4: e5:73:d7:79:0b:c9:4e:5f:4d:0d:52:06:9b:fe:7b:1a:d5:ba: 23:c7:3b:7c:04:54:88:03:6b:9c:2c:8f:fb:8b:08:8a:4d:59: 19:8d:37:af:12:df:5f:c2:9b:df:4e:01:68:b7:50:73:35:43: a6:df:34:69:d8:f8:b9:79:0f:11:5a:f7:1b:7f:32:56:c3:97: 4b:66:4c:c1:27:cb:c1:81:9e:31:13:fa:3c:ea:ba:88:c5:bb: d3:e0:a7:20:19:b6:e8:8e:e5:e7:f1:2c:e2:b0:3b:fe:29:f5: 55:fd:49:41:69:45:83:86:12:33:f2:d3:63:05:c2:4f:54:19: a8:5d:cf:d9:00:ee:e5:a5:46:7f:74:99:a9:c9:3c:e7:08:ab: 3e:80:b7:57:17:bd:d3:7f:ca:1c:da:a1:af:93:7d:79:d7:a7: c4:c0:26:59 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE3PI24PJ1x3k1qrzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDUxMjEyNDUxN1oXDTI4MDgxNDEyNDUxN1owLzEtMCsGA1UEAxMk ZDEzMWZmYWEtODVmMi00YmQ1LTg5NjEtOWRjOGFkZjE1YjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjmEGZqV3A5wbn28M1/ouOVjDHoZ/TZ2F8CE sZgfZOaG/5zyT1NjvdKY2T0T7vKc9mJMETCdfUxGGCxwuDGHvIGltEf9VidJ7dye Z29/X35aGz435FduAteL0UEXQZoKH+5uCJr3W00Wc+T+op53VFTI5+fK1Ezv4RJ7 2ei3bzcRZldRijQH0rsri1TB+abJ4DLeSnzIz1FJOafS0FIkB1qMG/0b7HfM0X18 VMr0mLnpkdIqtE3T8slmirWPYGwHfrH6bfGwHwQ7umD8bga2vxv7WVB5I05JJZgV Sv3/UNg5xuJQzQphfx+aCOoWL3Npii/Q0lJPRBs1tvKi9FdFKwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFJ8XPsT0W8VnIKbNgRUNwktjKU71MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k MTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRmMTViOGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2QxMzFmZmFhLTg1ZjItNGJkNS04 OTYxLTlkYzhhZGYxNWI4Yi9kMTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRm MTViOGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARCzqAwDQQCAAIwBwMFACYG8AAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICNl0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbuROYLOz7qyB9rUsoKevA+zogGox H3Dzmf/LWKXOwifF3ZPDB4aS9In5BR4BTvK+TUQWYTMkWQ6Xj9cEjFsjBMT2zaZE U5gfiQHWTD1STSDgWOIhj6oW5Pj05XPXeQvJTl9NDVIGm/57GtW6I8c7fARUiANr nCyP+4sIik1ZGY03rxLfX8Kb304BaLdQczVDpt80adj4uXkPEVr3G38yVsOXS2ZM wSfLwYGeMRP6POq6iMW70+CnIBm26I7l5/Es4rA7/in1Vf1JQWlFg4YSM/LTYwXC T1QZqF3P2QDu5aVGf3SZqck85wirPoC3Vxe903/KHNqhr5N9edenxMAmWQ== -----END CERTIFICATE-----Generated at Wed May 13 06:33:14 2026 by rpki-client