$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer File: 35dd34c4-644d-463f-8aba-5a3d509d5560.cer (raw, json) Hash identifier: rmICl1t/QUpPKAr6KiGdrbnlnVaceUOp8D6J75q6ipU= Subject key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584C77DF1F8709A81F70D9252DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Jan 2026 13:45:24 +0000 Certificate not after: Thu 13 Apr 2028 12:45:24 +0000 Subordinate resources: IP: 139.64.232.0/22 IP: 142.202.40.0/22 IP: 2606:2c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:77:df:1f:87:09:a8:1f:70:d9:25:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 9 13:45:24 2026 GMT Not After : Apr 13 12:45:24 2028 GMT Subject: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:74:99:d3:ee:b9:6e:3b:37:01:6e:66:43: 80:d4:26:a1:ed:be:c0:f7:82:98:e5:a0:15:e9:e0: 2b:4f:40:c8:68:7e:9d:62:9a:c2:cc:e3:66:ca:0d: 0c:7b:af:e9:5c:24:5b:bc:15:cb:69:4f:e7:c7:30: f6:d2:8b:e9:74:7d:f7:20:99:52:cd:19:d6:a8:6d: 6d:bd:bd:1e:05:4f:1e:fc:9a:21:ea:aa:42:81:ce: 81:f3:c1:f9:7d:c0:59:84:97:c3:f2:bd:a8:80:ca: b8:a3:b6:ff:1d:63:13:a6:b5:43:90:59:f7:2a:cf: 53:95:36:8a:fb:21:f5:1e:17:e9:80:02:f4:bd:3d: 4e:13:cd:97:b0:ba:67:f0:e0:ba:e4:f4:01:7c:47: 2e:a0:dc:7e:a8:a2:05:4f:6d:bc:c4:9c:59:d5:51: c7:38:02:ed:2c:7b:73:17:35:35:07:54:ae:47:51: 66:44:c4:2b:36:fd:6d:5f:af:60:39:73:4e:0a:43: 4a:7e:c6:dc:50:4d:21:6c:bf:0f:18:11:f2:ae:b9: 50:3a:f0:37:a2:aa:41:d5:ca:e7:64:5e:fc:9c:94: 2e:cc:6a:6e:ee:4e:cc:bb:07:29:65:79:c0:f5:f8: de:81:3a:b8:a7:c5:56:3d:b1:8c:f5:e8:5a:24:32: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 139.64.232.0/22 142.202.40.0/22 IPv6: 2606:2c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4b:17:14:6b:58:61:c9:e2:c2:f7:f4:27:7d:0a:39:1d:99: 7f:46:78:e3:a2:99:30:3b:a3:f0:8d:30:57:b7:4f:55:37:68: f3:e1:68:5f:ab:ec:55:a3:a5:cb:00:02:c9:fb:da:b5:16:3c: 57:c0:a0:c9:3c:eb:b2:29:dd:79:3f:e9:e6:f3:a8:e4:40:81: b4:9f:ae:bc:43:48:ec:fb:55:91:45:4a:79:6c:98:33:7a:70: fa:f9:a7:ce:f5:d3:4f:3c:a0:d7:4f:31:55:a3:3f:a1:fa:93: 57:8d:ee:8f:31:44:13:65:e0:7a:f0:9f:dd:e1:fb:4d:43:0a: c6:3e:89:69:c3:84:d5:bc:58:50:19:39:22:67:7d:7e:03:d1: 4e:ee:7a:24:52:2a:d2:6c:b7:b8:d1:4b:f6:f7:70:83:93:7d: fe:69:5f:c9:f1:6f:60:43:ce:7e:4a:1a:cd:46:c5:20:9e:5f: 85:6d:c4:8a:68:a4:7f:67:97:ab:46:c1:32:55:25:1b:08:99: d7:15:2d:3a:88:27:62:42:4b:c0:aa:b2:5d:97:af:b6:94:2f: 69:ca:31:70:19:41:84:1c:8a:2e:fb:5b:8a:7d:b8:ba:24:3a: 33:21:2f:f0:a1:87:57:1c:6b:de:1b:b9:0f:f1:aa:cc:96:3f: 80:6b:10:82 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEx33x+HCagfcNklLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDEwOTEzNDUyNFoXDTI4MDQxMzEyNDUyNFowLzEtMCsGA1UEAxMk MzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1NTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEt0mdPuuW47NwFuZkOA1Cah7b7A94KY5aAV 6eArT0DIaH6dYprCzONmyg0Me6/pXCRbvBXLaU/nxzD20ovpdH33IJlSzRnWqG1t vb0eBU8e/Joh6qpCgc6B88H5fcBZhJfD8r2ogMq4o7b/HWMTprVDkFn3Ks9TlTaK +yH1HhfpgAL0vT1OE82XsLpn8OC65PQBfEcuoNx+qKIFT228xJxZ1VHHOALtLHtz FzU1B1SuR1FmRMQrNv1tX69gOXNOCkNKfsbcUE0hbL8PGBHyrrlQOvA3oqpB1crn ZF78nJQuzGpu7k7MuwcpZXnA9fjegTq4p8VWPbGM9ehaJDLhfQIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFN5otUUwetoLc24V7mCJnC+e7hw/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z NWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzM1ZGQzNGM0LTY0NGQtNDYzZi04 YWJhLTVhM2Q1MDlkNTU2MC8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5 ZDU1NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKLQOgDBAKOyigwDQQCAAIwBwMFACYGAsAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAa0sXFGtYYcniwvf0J30KOR2Zf0Z446KZMDuj8I0wV7dPVTdo8+FoX6vs VaOlywACyfvatRY8V8CgyTzrsindeT/p5vOo5ECBtJ+uvENI7PtVkUVKeWyYM3pw +vmnzvXTTzyg108xVaM/ofqTV43ujzFEE2XgevCf3eH7TUMKxj6JacOE1bxYUBk5 Imd9fgPRTu56JFIq0my3uNFL9vdwg5N9/mlfyfFvYEPOfkoazUbFIJ5fhW3Eimik f2eXq0bBMlUlGwiZ1xUtOognYkJLwKqyXZevtpQvacoxcBlBhByKLvtbin24uiQ6 MyEv8KGHVxxr3hu5D/GqzJY/gGsQgg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:29:15 2026 by rpki-client