$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer File: 0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer (raw, json) Hash identifier: AIIOHg5BtmHNR9Q7rCX9Jlu794KBbZTX4RKRLFVclQQ= Subject key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584D83C2F5FFEDC0B5F5F4E9E080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Apr 2026 12:45:17 +0000 Certificate not after: Tue 18 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 2906 AS: 40027 IP: 23.246.0.0/18 IP: 45.57.0.0/17 IP: 64.120.128.0/17 IP: 66.197.128.0/17 IP: 108.175.32.0/20 IP: 192.173.64.0/18 IP: 198.38.96.0/19 IP: 198.45.48.0/20 IP: 2620:10c:7000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:c2:f5:ff:ed:c0:b5:f5:f4:e9:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 15 12:45:17 2026 GMT Not After : Jul 18 12:45:17 2028 GMT Subject: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:d3:fe:b3:19:f9:c5:49:31:8d:53:fa:b1: 60:90:f0:c9:26:95:8f:3a:81:27:70:74:d4:c6:69: 06:d3:d7:b1:ac:d4:22:ac:16:1a:3c:26:08:33:4e: 5e:1d:da:05:09:63:51:ed:a3:d4:9e:f1:cb:99:c7: 8b:02:26:fd:63:fd:d7:fd:9d:45:b4:06:30:ec:f0: b4:d7:e7:8f:55:6f:f7:45:40:b6:85:2f:d9:53:67: 12:82:69:51:cb:83:6b:83:33:d4:83:d5:2e:4f:a9: 7c:f3:07:42:8f:78:ea:af:cf:92:c6:d7:5c:a1:c5: f6:4d:d4:cd:00:3e:5f:da:76:17:81:8f:c3:0a:b9: ae:43:fa:df:4a:3c:11:6b:6a:57:03:a1:4b:d8:a3: 7b:35:20:40:e4:d7:11:32:18:4c:62:a8:05:23:8f: ab:7a:d3:ed:3a:3c:17:13:6a:4a:a0:f0:c0:c5:ed: 25:7b:08:7e:3b:b5:04:31:85:e4:a6:0b:99:a5:fc: 17:00:dc:09:27:5a:e3:d5:2f:3b:0d:c4:b2:72:38: c2:fe:cd:9d:92:aa:9d:be:32:6b:76:8a:e8:ef:41: c9:2a:f2:fb:02:e9:62:58:52:36:eb:2d:50:a6:76: 77:60:5b:27:67:77:b3:f8:f5:3e:33:32:69:56:bd: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.246.0.0/18 45.57.0.0/17 64.120.128.0/17 66.197.128.0/17 108.175.32.0/20 192.173.64.0/18 198.38.96.0/19 198.45.48.0/20 IPv6: 2620:10c:7000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2906 40027 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:02:48:20:be:4a:a9:19:de:32:d4:20:6f:7e:68:53:1a:3c: ef:55:bc:20:36:fd:2d:e1:12:40:74:50:a8:d1:7d:b8:7e:1f: 64:c8:85:d4:8e:e7:95:e0:24:c1:e0:7b:6e:f1:b4:2e:e7:60: 57:31:59:de:aa:85:e3:8f:87:60:c9:c6:39:35:d5:7e:a6:00: b5:0f:f9:01:3a:d7:d8:19:56:e8:ec:4a:e8:1a:01:fd:0b:b2: 42:bd:47:5e:0e:34:31:13:ae:8b:02:7c:6b:61:28:a4:65:9a: 28:75:ed:03:87:59:eb:fc:47:22:e4:b8:cf:86:98:13:c2:e4: 45:75:bd:d0:3b:f9:39:f7:1f:9a:fe:72:9a:e4:36:5a:fb:1a: d4:0d:0f:f0:42:57:4a:31:9e:b5:fa:31:40:84:2b:c3:cf:45: e1:6f:b4:4a:bb:85:86:61:40:0c:d6:51:1d:dc:d2:8b:ab:8d: 06:0b:03:6a:91:86:51:8c:75:ba:d5:22:c6:81:3f:d5:ef:57: 2d:14:a3:6f:fc:7a:e7:a7:49:16:2d:dd:3a:19:4a:ea:da:01: d1:f4:19:41:9c:2d:f5:a0:8b:e9:2e:1e:14:92:e6:68:31:35: 8d:dd:c6:07:b0:a9:48:c1:1b:30:14:4d:84:1c:44:e9:68:1f: 47:30:80:32 -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUAQ0Mn0MoWE2DwvX/7cC19fTp4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDQxNTEyNDUxN1oXDTI4MDcxODEyNDUxN1owLzEtMCsGA1UEAxMk MGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZlNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8rT/rMZ+cVJMY1T+rFgkPDJJpWPOoEncHTU xmkG09exrNQirBYaPCYIM05eHdoFCWNR7aPUnvHLmceLAib9Y/3X/Z1FtAYw7PC0 1+ePVW/3RUC2hS/ZU2cSgmlRy4NrgzPUg9UuT6l88wdCj3jqr8+SxtdcocX2TdTN AD5f2nYXgY/DCrmuQ/rfSjwRa2pXA6FL2KN7NSBA5NcRMhhMYqgFI4+retPtOjwX E2pKoPDAxe0lewh+O7UEMYXkpguZpfwXANwJJ1rj1S87DcSycjjC/s2dkqqdvjJr doro70HJKvL7AuliWFI26y1QpnZ3YFsnZ3ez+PU+MzJpVr2/PQIDAQABo4IEWjCC BFYwHQYDVR0OBBYEFFhGcbTrm45jBnikcsFoJUCzPxPXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w ZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzBkODY2MzhhLTJlMTItNGFhNC1i ZGNkLTIyNjY1YjI2ZTU3Yy8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIy NmU1N2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwWgYIKwYBBQUH AQcBAf8ESzBJMDYEAgABMDADBAYX9gADBActOQADBAdAeIADBAdCxYADBARsryAD BAbArUADBAXGJmADBATGLTAwDwQCAAIwCQMHBCYgAQxwADAeBggrBgEFBQcBCAEB /wQPMA2gCzAJAgILWgIDAJxbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIMCSCC+SqkZ3jLUIG9+aFMaPO9V vCA2/S3hEkB0UKjRfbh+H2TIhdSO55XgJMHge27xtC7nYFcxWd6qheOPh2DJxjk1 1X6mALUP+QE619gZVujsSugaAf0LskK9R14ONDETrosCfGthKKRlmih17QOHWev8 RyLkuM+GmBPC5EV1vdA7+Tn3H5r+cprkNlr7GtQND/BCV0oxnrX6MUCEK8PPReFv tEq7hYZhQAzWUR3c0ourjQYLA2qRhlGMdbrVIsaBP9XvVy0Uo2/8euenSRYt3ToZ SuraAdH0GUGcLfWgi+kuHhSS5mgxNY3dxgewqUjBGzAUTYQcROloH0cwgDI= -----END CERTIFICATE-----Generated at Sun Apr 19 08:54:34 2026 by rpki-client