$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer File: 603ec9c3-6a7f-4455-baee-5999e253e735.cer (raw, json) Hash identifier: uyg4Kc76v7T+yil0uRaK+1Zdp6mys3zXVAm8m10IZZg= Subject key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584CA754BD61CEEC9165BF82FB21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Jan 2026 13:45:22 +0000 Certificate not after: Sun 30 Apr 2028 12:45:22 +0000 Subordinate resources: AS: 3676 -- 3677 AS: 397607 IP: 128.255.0.0/16 IP: 129.255.0.0/16 IP: 198.49.182.0/24 IP: 198.62.108.0/24 IP: 198.97.39.0 -- 198.97.40.255 IP: 199.201.205.0/24 IP: 199.201.217.0 -- 199.201.218.255 IP: 2620:0:e50::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:54:bd:61:ce:ec:91:65:bf:82:fb:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 26 13:45:22 2026 GMT Not After : Apr 30 12:45:22 2028 GMT Subject: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f6:8a:6e:ba:46:0a:15:75:f3:7c:cd:fb:0c: 1a:3f:c1:9a:c2:ab:17:87:45:8e:a4:12:38:b6:55: 41:33:50:9f:68:c1:08:ac:33:4c:7f:53:35:44:60: 7a:6e:7f:ae:b4:c2:d7:39:a8:15:2c:62:3c:34:cc: d2:b4:65:b9:6e:a8:32:37:2c:fd:69:e6:ad:ff:9b: 5f:ba:9f:23:c3:b7:e1:67:70:7a:f4:ab:1c:a6:c3: 4a:51:84:81:23:16:7d:36:e5:32:d3:7d:a0:a6:0d: e4:8c:79:06:da:7f:dd:99:4c:17:79:12:25:f2:af: 29:ff:25:ad:ec:26:25:fd:e2:e0:e6:d0:db:00:5b: 1a:9b:3b:f1:db:0c:16:f0:53:26:f8:33:09:fc:3a: a9:50:ad:4b:2f:90:6a:47:89:58:0a:42:46:ec:5b: e2:1b:bf:9f:48:99:22:10:fa:4a:b1:91:08:3f:ad: 86:16:9a:4d:18:7b:76:e5:34:50:01:54:69:1c:23: 18:55:c2:45:11:78:05:0f:b9:8d:52:e0:07:8f:35: 3a:76:86:e7:01:60:2e:96:d4:f9:77:e0:a6:f5:b7: a8:49:92:d0:7a:26:49:1f:a3:77:fe:ca:af:7e:2b: bf:a8:1e:69:5d:87:67:a4:9e:4b:1e:fd:13:85:85: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 128.255.0.0/16 129.255.0.0/16 198.49.182.0/24 198.62.108.0/24 198.97.39.0-198.97.40.255 199.201.205.0/24 199.201.217.0-199.201.218.255 IPv6: 2620:0:e50::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3676-3677 397607 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:44:fd:6f:21:61:a6:a6:93:48:6b:f6:a5:e2:91:00:90:35: d9:57:4d:6f:30:61:5b:2b:f8:0f:c5:4b:f2:c8:13:cb:5f:2d: 35:47:3a:ec:c7:ea:4e:81:e6:1e:fc:23:6e:33:a5:eb:32:a7: 73:19:30:c1:38:0d:d2:93:3a:3a:d7:8b:25:2f:ce:b8:78:6a: 3b:08:5b:82:99:f6:77:49:12:09:93:52:b7:4f:2e:3f:25:51: a2:07:55:b5:ba:06:5f:65:ab:8f:f5:df:c1:10:d0:83:a7:49: cd:0a:12:fa:e4:44:36:fe:29:cc:15:c4:14:2a:71:2e:73:a4: 21:14:d3:50:f8:f9:3f:df:8c:7d:1d:38:b0:b2:3d:80:63:89: d0:57:d0:cf:97:72:e2:60:b4:ff:34:fc:df:e3:7e:0c:86:27: 3e:47:e8:2d:12:db:f2:3c:18:61:87:84:24:60:7e:0b:61:65: dc:f8:77:ed:38:50:33:5e:9f:3f:6f:51:9c:92:55:5f:98:76: 1e:71:53:06:26:20:a7:88:8d:28:5f:e5:7d:bc:5d:6e:67:c2: 95:f5:8c:76:cd:80:da:f4:f6:c3:35:20:fc:4f:88:dd:ad:7b: 41:83:93:a4:1a:c0:b8:95:5a:96:cc:fe:33:89:88:57:7e:d6: a4:e3:ce:7c -----BEGIN CERTIFICATE----- MIIHVjCCBj6gAwIBAgIUAQ0Mn0MoWEynVL1hzuyRZb+C+yEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDEyNjEzNDUyMloXDTI4MDQzMDEyNDUyMlowLzEtMCsGA1UEAxMk NjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNlNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0faKbrpGChV183zN+wwaP8GawqsXh0WOpBI4 tlVBM1CfaMEIrDNMf1M1RGB6bn+utMLXOagVLGI8NMzStGW5bqgyNyz9aeat/5tf up8jw7fhZ3B69KscpsNKUYSBIxZ9NuUy032gpg3kjHkG2n/dmUwXeRIl8q8p/yWt 7CYl/eLg5tDbAFsamzvx2wwW8FMm+DMJ/DqpUK1LL5BqR4lYCkJG7FviG7+fSJki EPpKsZEIP62GFppNGHt25TRQAVRpHCMYVcJFEXgFD7mNUuAHjzU6dobnAWAultT5 d+Cm9beoSZLQeiZJH6N3/sqvfiu/qB5pXYdnpJ5LHv0ThYVVlQIDAQABo4IEaDCC BGQwHQYDVR0OBBYEFI4swOADOd/5MhOqYSH4qy1n+LrxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYwM2VjOWMzLTZhN2YtNDQ1NS1i YWVlLTU5OTllMjUzZTczNS82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1 M2U3MzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwYgYIKwYBBQUH AQcBAf8EUzBRMD4EAgABMDgDAwCA/wMDAIH/AwQAxjG2AwQAxj5sMAwDBADGYScD BADGYSgDBADHyc0wDAMEAMfJ2QMEAMfJ2jAPBAIAAjAJAwcEJiAAAA5QMCQGCCsG AQUFBwEIAQH/BBUwE6ARMA8wCAICDlwCAg5dAgMGEScwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASkT9byFh pqaTSGv2peKRAJA12VdNbzBhWyv4D8VL8sgTy18tNUc67MfqToHmHvwjbjOl6zKn cxkwwTgN0pM6OteLJS/OuHhqOwhbgpn2d0kSCZNSt08uPyVRogdVtboGX2Wrj/Xf wRDQg6dJzQoS+uRENv4pzBXEFCpxLnOkIRTTUPj5P9+MfR04sLI9gGOJ0FfQz5dy 4mC0/zT83+N+DIYnPkfoLRLb8jwYYYeEJGB+C2Fl3Ph37ThQM16fP29RnJJVX5h2 HnFTBiYgp4iNKF/lfbxdbmfClfWMds2A2vT2wzUg/E+I3a17QYOTpBrAuJValsz+ M4mIV37WpOPOfA== -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:35 2026 by rpki-client