$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer File: 2aa438c9-0cbb-4364-946d-9714249a8222.cer (raw, json) Hash identifier: 4iFeVGYKsOaHU37qHCR1mOo+N9wogtm2DfOxl46+IcY= Subject key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584DFE21E566EA6CB144833DFF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 May 2026 08:45:11 +0000 Certificate not after: Thu 31 Aug 2028 08:45:11 +0000 Subordinate resources: AS: 32934 AS: 63293 IP: 66.220.144.0/20 IP: 69.63.176.0/20 IP: 69.171.224.0/19 IP: 74.119.76.0/22 IP: 129.134.0.0/16 IP: 157.240.0.0/16 IP: 173.252.64.0/18 IP: 204.15.20.0/22 IP: 2620:0:1c00::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fe:21:e5:66:ea:6c:b1:44:83:3d:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 29 08:45:11 2026 GMT Not After : Aug 31 08:45:11 2028 GMT Subject: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:90:5a:17:1d:50:ac:ae:47:ae:1a:20:bf:7a: 7a:90:d8:26:89:94:a2:ad:6d:15:14:24:33:c5:a8: 80:eb:d8:90:f8:4d:95:d9:6e:50:a6:f9:d7:11:fd: 08:a1:88:97:0f:f2:9c:ca:56:41:ed:2c:cf:51:e0: 92:0f:03:68:49:71:6c:2c:26:9c:62:8e:3f:d0:c1: 75:5d:9c:e3:64:8c:e1:7f:cc:59:2a:8d:92:97:4f: 38:c4:29:30:cc:1b:e7:e7:9b:9c:11:b4:30:f6:3f: 6d:4d:3b:30:1d:7a:c3:82:c1:93:dc:4c:27:ab:e1: f8:4d:72:63:de:4d:f1:91:77:41:84:cc:60:2a:16: 7e:d0:52:2f:6b:83:11:ac:bc:64:cf:67:9d:30:c0: e1:c3:d3:06:9d:45:fe:70:28:31:7b:da:71:f1:47: a8:a5:99:26:6d:4f:7f:46:5a:84:77:eb:1b:09:f5: cb:8c:e6:0d:17:b3:eb:dd:22:8c:83:35:c2:9b:75: b1:9e:09:8b:6a:ab:f6:3c:16:71:13:81:0b:8b:6c: 38:a0:7f:f2:e0:04:02:78:e4:68:e2:ff:cf:b2:3e: fb:e6:c2:49:2e:53:bc:48:f9:7d:b2:4e:9a:e9:ac: 8c:a2:c6:ef:3f:54:12:0d:40:26:4f:58:87:5b:0c: c2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 66.220.144.0/20 69.63.176.0/20 69.171.224.0/19 74.119.76.0/22 129.134.0.0/16 157.240.0.0/16 173.252.64.0/18 204.15.20.0/22 IPv6: 2620:0:1c00::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32934 63293 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:48:7a:76:07:85:db:de:d5:41:0e:cb:6f:06:8f:0a:8b:b8: 33:7b:76:d1:b0:b9:7a:99:bc:d0:7f:12:f5:ef:bb:9b:7a:56: 7e:cb:64:2d:d7:63:ed:fc:87:3c:b6:d2:80:b7:05:f4:10:29: 73:ea:53:b4:3c:74:02:f4:f6:90:a0:20:69:14:17:19:df:5e: 91:32:6f:8e:8e:8f:96:ce:b0:8e:7f:ff:2f:4c:75:bd:61:ee: ed:db:c6:a8:40:5c:f4:25:4a:c9:f8:53:75:07:09:3d:2d:7e: b1:4b:6f:81:f9:57:b1:f5:d4:44:cc:8e:1f:0b:f0:5a:e0:5d: f2:d6:03:2e:a3:2d:14:b2:28:17:26:8b:ab:11:a7:28:27:98: e3:70:09:b9:e5:b6:51:3e:84:29:06:f9:4a:49:6a:e8:60:ce: 58:f2:67:c0:6b:29:d6:8d:ab:9a:10:d3:64:07:f5:fa:59:26: 28:ef:e4:d1:33:16:de:dd:dd:72:1b:3a:2e:40:ff:f4:61:c9: 2c:72:f9:da:fd:2d:e4:69:5d:c1:6c:9d:f0:99:4f:6f:64:be: bb:16:95:c6:ce:e4:7f:ac:36:7a:8b:bd:47:33:ff:28:98:b5: f2:26:ab:5a:12:3d:92:f7:2d:35:9a:37:9b:36:e4:69:0a:1d: b2:d3:a0:8e -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWE3+IeVm6myxRIM9/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDUyOTA4NDUxMVoXDTI4MDgzMTA4NDUxMVowLzEtMCsGA1UEAxMk MmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZBaFx1QrK5Hrhogv3p6kNgmiZSirW0VFCQz xaiA69iQ+E2V2W5QpvnXEf0IoYiXD/KcylZB7SzPUeCSDwNoSXFsLCacYo4/0MF1 XZzjZIzhf8xZKo2Sl084xCkwzBvn55ucEbQw9j9tTTswHXrDgsGT3Ewnq+H4TXJj 3k3xkXdBhMxgKhZ+0FIva4MRrLxkz2edMMDhw9MGnUX+cCgxe9px8UeopZkmbU9/ RlqEd+sbCfXLjOYNF7Pr3SKMgzXCm3WxngmLaqv2PBZxE4ELi2w4oH/y4AQCeORo 4v/Psj775sJJLlO8SPl9sk6a6ayMosbvP1QSDUAmT1iHWwzCTQIDAQABo4IEWDCC BFQwHQYDVR0OBBYEFAUj35Mb/zlCnCr+e/96SzNW6F6wMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y YWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzJhYTQzOGM5LTBjYmItNDM2NC05 NDZkLTk3MTQyNDlhODIyMi8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5 YTgyMjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwVwYIKwYBBQUH AQcBAf8ESDBGMDQEAgABMC4DBARC3JADBARFP7ADBAVFq+ADBAJKd0wDAwCBhgMD AJ3wAwQGrfxAAwQCzA8UMA4EAgACMAgDBgAmIAAAHDAfBggrBgEFBQcBCAEB/wQQ MA6gDDAKAgMAgKYCAwD3PTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZSHp2B4Xb3tVBDstvBo8Ki7gze3bR sLl6mbzQfxL177ubelZ+y2Qt12Pt/Ic8ttKAtwX0EClz6lO0PHQC9PaQoCBpFBcZ 316RMm+Ojo+WzrCOf/8vTHW9Ye7t28aoQFz0JUrJ+FN1Bwk9LX6xS2+B+Vex9dRE zI4fC/Ba4F3y1gMuoy0UsigXJourEacoJ5jjcAm55bZRPoQpBvlKSWroYM5Y8mfA aynWjauaENNkB/X6WSYo7+TRMxbe3d1yGzouQP/0Yckscvna/S3kaV3BbJ3wmU9v ZL67FpXGzuR/rDZ6i71HM/8omLXyJqtaEj2S9y01mjebNuRpCh2y06CO -----END CERTIFICATE-----Generated at Sat Jun 13 14:53:32 2026 by rpki-client