$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer File: 3104c204-288d-4f87-83c2-99a30908dea3.cer (raw, json) Hash identifier: rA5E9woMGb3+gzZa8Xbt5v8KLSZukzEpX/aFuLoV6Cw= Subject key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584D4BED527FC11B07BC345F2B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Mar 2026 12:45:22 +0000 Certificate not after: Wed 28 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 394353 IP: 192.228.79.0/24 IP: 199.9.14.0/23 IP: 2001:500:84::/48 IP: 2001:500:200::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:ed:52:7f:c1:1b:07:bc:34:5f:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 26 12:45:22 2026 GMT Not After : Jun 28 12:45:22 2028 GMT Subject: CN=3104c204-288d-4f87-83c2-99a30908dea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:47:13:5e:1a:60:05:e5:99:d1:43:90:bc: b7:73:a7:c1:2f:40:04:28:40:9f:3f:b0:f5:d5:5e: 25:bb:ae:b1:c9:7f:05:c3:f2:50:f7:62:44:69:47: f7:92:f6:03:8f:85:65:22:a7:9b:7c:37:21:eb:e6: 36:4e:e6:3a:a8:aa:42:de:b0:39:b4:71:f0:21:ed: b6:b0:ff:ef:f3:f9:e6:9c:8c:37:37:0c:92:41:22: 68:a9:af:40:e0:a9:cf:62:e4:57:d2:4a:e5:71:71: 20:cd:22:fd:e6:3c:52:82:0b:4e:53:a6:f0:7d:e1: f5:8e:3d:24:40:b1:69:ad:b5:41:33:d4:45:b7:ab: 4d:3c:4d:18:89:5a:32:35:72:f3:84:03:64:12:81: ac:3d:a2:d3:01:30:f5:49:95:39:50:64:62:7c:5b: 59:f0:c5:1a:96:da:bb:70:32:af:7e:c4:b7:fb:f8: 30:51:27:24:da:d8:d7:9e:7b:73:a5:0d:4b:d5:01: c6:bf:d7:56:dd:97:f7:da:b9:04:5b:7f:2d:2a:37: 72:c5:45:29:e2:46:6a:9e:42:72:30:fb:cd:61:bd: 88:f5:d7:cf:f6:65:c4:c3:6e:29:6e:6b:0f:4f:5c: 3f:88:c6:6f:c1:92:44:8d:fe:e4:2b:b2:83:4b:50: 7b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.228.79.0/24 199.9.14.0/23 IPv6: 2001:500:84::/48 2001:500:200::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394353 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b6:96:43:ac:18:8d:fd:12:b3:8c:2a:57:9c:80:8c:7d:73: ce:65:9a:d7:29:52:67:04:1a:93:ca:cc:0f:1c:ca:e8:67:ee: 13:66:a9:f7:d4:d7:af:b9:a1:4a:58:92:4c:0f:4f:3d:ae:34: 5f:66:6c:9e:c7:02:ad:91:13:ab:22:5e:65:52:75:74:f0:81: 0d:78:a5:00:c0:be:af:f4:f6:87:50:a0:57:84:7d:f9:3f:00: 12:f0:b2:f2:7b:cb:0d:ff:51:d2:62:21:b0:cc:93:76:56:d6: f3:69:35:5c:d4:0c:cf:75:25:b3:37:3b:75:5a:bc:a8:a7:ec: 44:24:10:c4:20:51:79:06:49:93:4d:6c:2b:38:33:9e:72:4a: 24:24:87:ce:e5:cd:28:04:a4:b7:fa:4d:67:cb:34:1c:94:f8: 45:a1:4d:37:38:33:9b:be:33:c7:5b:e8:43:db:ec:7a:ab:e5: 2f:24:1c:4f:15:bf:a2:6b:bb:a4:5c:2b:9f:13:10:23:d0:09: 83:00:fe:0a:ef:1a:d0:bf:2b:5a:a1:a4:0c:de:8c:a1:9a:af: d4:d4:6b:b7:87:7a:5d:e5:60:cd:06:eb:f7:ff:fb:8c:b1:43: a8:b0:c7:c2:1a:6d:9c:64:e3:b9:ed:aa:5d:d6:b7:f6:5a:5f: 41:76:b4:d7 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWE1L7VJ/wRsHvDRfKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDMyNjEyNDUyMloXDTI4MDYyODEyNDUyMlowLzEtMCsGA1UEAxMk MzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhkZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNxHE14aYAXlmdFDkLy3c6fBL0AEKECfP7D1 1V4lu66xyX8Fw/JQ92JEaUf3kvYDj4VlIqebfDch6+Y2TuY6qKpC3rA5tHHwIe22 sP/v8/nmnIw3NwySQSJoqa9A4KnPYuRX0krlcXEgzSL95jxSggtOU6bwfeH1jj0k QLFprbVBM9RFt6tNPE0YiVoyNXLzhANkEoGsPaLTATD1SZU5UGRifFtZ8MUaltq7 cDKvfsS3+/gwUSck2tjXnntzpQ1L1QHGv9dW3Zf32rkEW38tKjdyxUUp4kZqnkJy MPvNYb2I9dfP9mXEw24pbmsPT1w/iMZvwZJEjf7kK7KDS1B7fQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFHZd+T1HSs8j8CDmh3CsK5iZLwPiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z MTA0YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzMxMDRjMjA0LTI4OGQtNGY4Ny04 M2MyLTk5YTMwOTA4ZGVhMy8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkw OGRlYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwPwYIKwYBBQUH AQcBAf8EMDAuMBIEAgABMAwDBADA5E8DBAHHCQ4wGAQCAAIwEgMHACABBQAAhAMH BCABBQACADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGBHEwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAi7aW Q6wYjf0Ss4wqV5yAjH1zzmWa1ylSZwQak8rMDxzK6GfuE2ap99TXr7mhSliSTA9P Pa40X2ZsnscCrZETqyJeZVJ1dPCBDXilAMC+r/T2h1CgV4R9+T8AEvCy8nvLDf9R 0mIhsMyTdlbW82k1XNQMz3Ulszc7dVq8qKfsRCQQxCBReQZJk01sKzgznnJKJCSH zuXNKASkt/pNZ8s0HJT4RaFNNzgzm74zx1voQ9vseqvlLyQcTxW/omu7pFwrnxMQ I9AJgwD+Cu8a0L8rWqGkDN6MoZqv1NRrt4d6XeVgzQbr9//7jLFDqLDHwhptnGTj ue2qXda39lpfQXa01w== -----END CERTIFICATE-----Generated at Fri Apr 17 11:19:12 2026 by rpki-client