$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer File: 35be4068-f7e5-404b-9693-dcff4b2e8f95.cer (raw, json) Hash identifier: yLYeAakHxoW6yJcNZonPJPTk3pk7JIy20svf9QbLbPA= Subject key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584D544D53E6382E8423C54B9218 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 29 Mar 2026 12:45:17 +0000 Certificate not after: Sat 01 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 17019 IP: 104.254.24.0/21 IP: 199.91.172.0/22 IP: 199.193.152.0/22 IP: 2604:2d00::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:54:4d:53:e6:38:2e:84:23:c5:4b:92:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 29 12:45:17 2026 GMT Not After : Jul 1 12:45:17 2028 GMT Subject: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:6a:c0:32:6e:e0:21:83:4e:e8:74:da:9a: 0f:87:00:c9:53:1b:e3:77:61:cb:fd:5a:84:ab:e4: ae:7a:6e:58:b2:93:93:56:1d:14:0c:b9:13:9b:11: 19:27:c2:77:9d:4a:e6:a1:4b:26:48:3d:6d:06:9d: 68:fc:e1:36:9e:7a:61:08:9c:69:cf:64:4b:a9:67: e9:0c:b0:84:fe:6e:d3:29:91:6a:1c:bc:be:5f:f0: b5:0e:ed:64:ef:3e:ba:52:88:bc:23:f8:dc:d0:cf: f4:77:85:b1:67:42:52:9e:e3:c0:9d:aa:a8:66:21: 04:0b:91:12:15:d5:ce:e5:fe:a5:3b:48:9d:03:56: 14:4a:8d:ba:56:68:d1:47:ac:b9:43:72:73:00:74: b1:ee:4b:96:ab:6b:93:57:9c:94:ac:4f:3f:70:10: de:db:03:a0:4a:2d:1a:b3:69:f0:29:bd:85:ed:ec: 1a:53:33:98:bf:9e:96:ff:dd:e7:bd:8a:11:39:56: 78:50:f0:ba:5d:95:9e:e0:1c:47:f0:e8:ab:bf:e9: 56:0d:61:29:66:1f:f5:dc:cc:5e:bc:c2:61:76:a2: 3a:44:b7:f1:e8:73:96:a8:5d:9c:79:47:2a:02:94: f5:50:f3:45:2b:9c:fe:e2:9e:d6:e7:f1:1e:05:bd: b1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 104.254.24.0/21 199.91.172.0/22 199.193.152.0/22 IPv6: 2604:2d00::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17019 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d0:b2:04:2d:78:69:e4:82:5c:9f:b3:29:1e:3c:eb:e0:08: ed:b8:ad:d1:b2:aa:41:4e:cc:5f:de:ca:5d:f0:d7:01:2c:3c: 77:34:71:4d:aa:da:a6:4f:f9:ee:02:8c:a6:03:20:d5:12:65: 96:7d:19:1a:02:13:af:97:a3:d6:8c:9d:1a:2d:53:a0:da:28: c0:0b:83:ce:a6:24:34:b9:9a:f3:1f:bc:0e:7c:d1:6f:eb:2d: 68:6b:31:83:b8:a7:e3:8c:ff:56:4e:30:66:cc:e3:b4:78:91: 87:ed:fb:f6:0f:f8:9f:fa:b8:94:b1:b8:c8:7b:9d:6e:44:3f: 1e:69:3f:9e:7b:12:4b:f9:3b:e8:e0:ff:79:df:2e:4c:42:49: fd:f1:e0:70:05:83:3e:99:46:91:af:32:43:9d:02:d5:5a:71: 7e:74:1e:36:2f:6c:10:94:ae:b8:73:43:8c:f8:19:e6:9d:03: a0:2d:bf:58:dc:f7:d9:bd:0c:2d:43:0d:2c:ee:35:1c:43:af: be:89:f5:e7:4a:c3:f8:b8:1c:f0:36:f0:6e:f7:24:30:2b:47: f4:4f:4a:59:cb:0c:b8:c9:15:da:f5:6a:48:ce:bb:dc:0c:17: b5:29:ee:97:9c:b1:4b:25:4b:a4:02:54:1a:bd:fe:bb:cd:4d: 3a:3a:c9:1e -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE1UTVPmOC6EI8VLkhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDMyOTEyNDUxN1oXDTI4MDcwMTEyNDUxN1owLzEtMCsGA1UEAxMk MzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4Zjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxABqwDJu4CGDTuh02poPhwDJUxvjd2HL/VqE q+Suem5YspOTVh0UDLkTmxEZJ8J3nUrmoUsmSD1tBp1o/OE2nnphCJxpz2RLqWfp DLCE/m7TKZFqHLy+X/C1Du1k7z66Uoi8I/jc0M/0d4WxZ0JSnuPAnaqoZiEEC5ES FdXO5f6lO0idA1YUSo26VmjRR6y5Q3JzAHSx7kuWq2uTV5yUrE8/cBDe2wOgSi0a s2nwKb2F7ewaUzOYv56W/93nvYoROVZ4UPC6XZWe4BxH8Oirv+lWDWEpZh/13Mxe vMJhdqI6RLfx6HOWqF2ceUcqApT1UPNFK5z+4p7W5/EeBb2xnQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFMebTSVKi/tSTztultLYAmLRqQfPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z NWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzM1YmU0MDY4LWY3ZTUtNDA0Yi05 NjkzLWRjZmY0YjJlOGY5NS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIy ZThmOTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBANo/hgDBALHW6wDBALHwZgwDgQCAAIwCAMGBCYE LQAAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAkJ7MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAALQsgQteGnk glyfsykePOvgCO24rdGyqkFOzF/eyl3w1wEsPHc0cU2q2qZP+e4CjKYDINUSZZZ9 GRoCE6+Xo9aMnRotU6DaKMALg86mJDS5mvMfvA580W/rLWhrMYO4p+OM/1ZOMGbM 47R4kYft+/YP+J/6uJSxuMh7nW5EPx5pP557Ekv5O+jg/3nfLkxCSf3x4HAFgz6Z RpGvMkOdAtVacX50HjYvbBCUrrhzQ4z4GeadA6Atv1jc99m9DC1DDSzuNRxDr76J 9edKw/i4HPA28G73JDArR/RPSlnLDLjJFdr1akjOu9wMF7Up7pecsUslS6QCVBq9 /rvNTTo6yR4= -----END CERTIFICATE-----Generated at Fri Apr 17 17:08:18 2026 by rpki-client