$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer File: f35be5f0-d452-4cd8-859e-27da5839ddb4.cer (raw, json) Hash identifier: aE+GmGNtXrYmV3bcxgAYF7Ov9v+Ln8ChttkLInsTtz4= Subject key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584DB603468A09F0A13C7486E900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 May 2026 12:45:17 +0000 Certificate not after: Sat 05 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 21659 AS: 63334 IP: 23.143.216.0/24 IP: 130.51.76.0/24 IP: 142.202.128.0/24 IP: 2602:fdd2::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b6:03:46:8a:09:f0:a1:3c:74:86:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 3 12:45:17 2026 GMT Not After : Aug 5 12:45:17 2028 GMT Subject: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dd:9d:a4:21:4d:fe:92:96:4e:04:9b:08:ed: 1b:78:ac:c9:68:66:60:1e:60:c9:93:5f:a2:ce:2b: b9:b4:25:22:fb:d8:7d:29:08:9f:97:14:10:9d:d2: f5:79:d2:f7:06:f9:21:68:e7:d8:c7:cc:e5:9c:58: b6:f8:79:7f:8e:da:00:c9:57:2d:c5:db:18:10:ca: ae:5e:8b:5f:7f:73:59:8c:2b:bc:a3:24:6f:25:e1: b7:08:46:30:c3:d2:65:2a:60:c7:d3:4e:28:c3:c4: 58:f9:a8:41:15:83:59:b1:e3:d0:8a:34:b8:8d:d0: 55:0e:ac:81:1e:c6:c8:d3:ea:4a:8a:f6:cf:1c:65: ca:a9:19:3f:69:14:2a:51:96:bb:d8:b8:b7:f0:02: 87:2b:51:cc:87:1d:ba:0e:8f:70:33:4f:8c:7d:65: c1:a8:34:20:12:5c:76:ef:44:df:d0:ca:55:2b:40: ed:ad:ab:0e:d0:1f:9f:67:61:aa:c7:bf:61:87:e4: fd:3f:d4:50:e0:f5:3e:a5:95:e5:40:59:2e:99:13: ba:af:da:94:74:99:6e:ed:ce:ce:1e:18:88:e9:73: ee:c5:a4:f0:1c:f7:01:45:ad:f2:ef:d8:42:d2:32: 93:d1:80:70:1f:16:d1:42:5f:48:f5:77:7a:4f:9a: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.143.216.0/24 130.51.76.0/24 142.202.128.0/24 IPv6: 2602:fdd2::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21659 63334 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f2:0f:a9:c4:f9:e7:a9:40:16:b2:f5:2a:ae:9f:d8:dd:90: 8c:38:0a:f9:c0:be:3b:d5:97:7e:79:63:91:5b:ff:e7:c3:33: c9:a6:d9:95:8b:01:96:b5:d8:3a:ec:32:49:4c:58:b5:24:37: fd:12:92:80:52:3e:62:48:44:fe:b7:55:e0:1b:a9:82:e3:9d: 1c:02:5e:54:65:c6:4b:6d:ca:d7:ef:ef:6d:d7:cb:f1:09:a6: fb:d2:fa:6f:53:32:d5:4d:08:c5:3d:85:a0:8a:5c:c9:80:70: 31:04:1d:29:41:d7:75:f7:27:cd:28:af:01:53:1d:ad:37:1e: b6:95:a1:e1:25:df:70:24:ba:a2:b6:01:02:96:67:9b:35:6f: cf:61:d4:a9:a0:13:c0:f7:b6:f7:a2:df:6e:3e:87:29:ac:7a: 6d:11:d6:15:b4:c3:52:f8:04:66:7b:50:3f:53:16:7c:61:7a: a3:d4:11:df:33:51:29:4f:d2:c2:91:6e:68:8c:cc:f6:cf:98: 47:27:5f:8a:67:97:c8:3c:d0:f1:52:cb:07:5d:a2:99:40:42: de:5b:9a:e2:77:27:b1:e5:1b:be:87:c7:21:81:3b:8a:05:05: a2:b8:75:a8:c2:d7:ca:53:f8:64:71:59:a2:1b:b9:f5:88:e4: f6:c6:44:55 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWE22A0aKCfChPHSG6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDUwMzEyNDUxN1oXDTI4MDgwNTEyNDUxN1owLzEtMCsGA1UEAxMk ZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1OWUtMjdkYTU4MzlkZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N2dpCFN/pKWTgSbCO0beKzJaGZgHmDJk1+i ziu5tCUi+9h9KQiflxQQndL1edL3BvkhaOfYx8zlnFi2+Hl/jtoAyVctxdsYEMqu Xotff3NZjCu8oyRvJeG3CEYww9JlKmDH004ow8RY+ahBFYNZsePQijS4jdBVDqyB HsbI0+pKivbPHGXKqRk/aRQqUZa72Li38AKHK1HMhx26Do9wM0+MfWXBqDQgElx2 70Tf0MpVK0DtrasO0B+fZ2Gqx79hh+T9P9RQ4PU+pZXlQFkumRO6r9qUdJlu7c7O HhiI6XPuxaTwHPcBRa3y79hC0jKT0YBwHxbRQl9I9Xd6T5pijwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFBbThvl5O10NnP0P87VvBG2Nd1jXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m MzViZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2RhNTgzOWRkYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2YzNWJlNWYwLWQ0NTItNGNkOC04 NTllLTI3ZGE1ODM5ZGRiNC9mMzViZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2RhNTgz OWRkYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXj9gDBACCM0wDBACOyoAwDgQCAAIwCAMGBCYC /dIAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAlSbAgMA92YwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI/IP qcT556lAFrL1Kq6f2N2QjDgK+cC+O9WXfnljkVv/58MzyabZlYsBlrXYOuwySUxY tSQ3/RKSgFI+YkhE/rdV4BupguOdHAJeVGXGS23K1+/vbdfL8Qmm+9L6b1My1U0I xT2FoIpcyYBwMQQdKUHXdfcnzSivAVMdrTcetpWh4SXfcCS6orYBApZnmzVvz2HU qaATwPe296Lfbj6HKax6bRHWFbTDUvgEZntQP1MWfGF6o9QR3zNRKU/SwpFuaIzM 9s+YRydfimeXyDzQ8VLLB12imUBC3lua4ncnseUbvofHIYE7igUForh1qMLXylP4 ZHFZohu59Yjk9sZEVQ== -----END CERTIFICATE-----Generated at Wed May 13 03:01:16 2026 by rpki-client