$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.cer File: 4bb96a0d-945a-427f-bdc4-a9da310cb3a5.cer (raw, json) Hash identifier: S18E1fUKQ6XVwObsgNNok5M2oM737Ax9wjM7toJmqGo= Subject key identifier: 27:5D:11:4A:E3:1B:79:F7:53:84:2C:B4:36:4E:BD:E7:6F:94:87:1B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584CB27F7B9EF9A9B6CE089A4940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Jan 2026 13:45:23 +0000 Certificate not after: Thu 04 May 2028 12:45:23 +0000 Subordinate resources: IP: 66.6.32.0/20 IP: 2620:109:b000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:7f:7b:9e:f9:a9:b6:ce:08:9a:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 30 13:45:23 2026 GMT Not After : May 4 12:45:23 2028 GMT Subject: CN=4bb96a0d-945a-427f-bdc4-a9da310cb3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:b3:a3:ac:e6:ea:0a:91:c6:9b:ac:a7:86: ac:28:10:7a:a0:9c:d4:53:4f:d3:42:da:52:bb:7c: 7e:22:58:fc:52:60:7a:7b:ec:c9:23:1a:0e:52:ef: 23:0d:37:71:25:8a:fc:91:76:7d:ff:4f:d5:a8:c2: d8:6d:b7:9d:f5:91:bb:2a:df:f3:5c:ae:4d:14:16: 81:94:6c:ce:6e:87:60:94:85:27:c4:40:91:83:26: 9c:5a:f4:f7:90:2c:0c:00:6f:a3:55:56:eb:82:b5: 3e:17:cb:3e:d4:92:5a:f7:da:b2:f3:64:90:bf:2b: 98:58:ca:f2:ec:a2:05:ef:81:47:36:3c:c7:b5:4c: 52:bb:fe:55:16:44:ac:cd:47:60:d7:df:26:88:bf: 5c:fa:b7:93:49:89:22:8f:df:a7:7e:6f:75:57:15: 52:a4:c0:5d:e8:7d:94:66:cc:75:52:4c:c7:84:c1: ec:18:bd:ff:6d:ac:d1:a9:73:2d:c8:0a:e8:92:ad: d0:a2:02:4e:8b:0a:c5:3c:e6:5e:63:37:08:69:24: b4:f3:cf:7c:c8:85:be:30:54:94:63:11:17:c6:5a: 25:63:98:00:e0:b4:f8:c9:fd:47:d1:12:f2:38:ba: f2:53:12:c6:89:bf:83:1a:79:55:e3:db:22:20:61: a8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5D:11:4A:E3:1B:79:F7:53:84:2C:B4:36:4E:BD:E7:6F:94:87:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bb96a0d-945a-427f-bdc4-a9da310cb3a5/4bb96a0d-945a-427f-bdc4-a9da310cb3a5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 66.6.32.0/20 IPv6: 2620:109:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:96:47:57:02:1f:3c:62:ea:a5:4a:62:16:e2:72:bf:b4:0b: af:24:08:6f:fa:d6:b4:f2:30:4e:d6:7a:fb:e1:47:df:6b:e9: 9c:2c:aa:91:b2:19:5d:7c:99:30:07:89:fd:4a:8c:3f:4f:d2: 51:fa:11:4c:8e:6a:d9:7d:f8:f2:5f:72:e7:e4:a9:00:77:73: 0e:50:13:46:6f:80:14:39:3f:79:5d:f4:88:a0:76:9c:b3:e3: be:d5:3d:3a:99:ca:43:37:0a:e0:84:57:c7:02:25:de:00:3c: f4:af:cd:7f:b0:74:09:0a:45:76:9b:ee:99:6b:c6:4c:17:89: 4c:67:92:3f:07:06:5f:63:8a:be:f6:51:1f:58:92:ea:4b:a4: 7c:58:b4:7d:02:71:48:3e:3b:80:d1:6a:87:c6:d6:60:7e:5e: 92:e1:e2:97:7b:95:de:ef:f7:bd:5d:8f:fa:a3:83:28:73:9d: 20:42:f1:6c:4d:53:af:28:70:1a:48:a2:f4:dd:38:45:a7:09: a8:8b:3a:39:b3:2d:be:1f:5b:8a:bf:30:57:c5:06:17:be:b9: 8b:50:af:29:a3:2b:b0:e5:f3:20:0c:68:64:33:24:ad:ac:42: cb:e5:ec:1d:9f:30:26:4d:e5:54:cb:8c:2a:07:58:ee:d0:fd: 7f:4d:e6:2c -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEyyf3ue+am2zgiaSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDEzMDEzNDUyM1oXDTI4MDUwNDEyNDUyM1owLzEtMCsGA1UEAxMk NGJiOTZhMGQtOTQ1YS00MjdmLWJkYzQtYTlkYTMxMGNiM2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpuzo6zm6gqRxpusp4asKBB6oJzUU0/TQtpS u3x+Ilj8UmB6e+zJIxoOUu8jDTdxJYr8kXZ9/0/VqMLYbbed9ZG7Kt/zXK5NFBaB lGzObodglIUnxECRgyacWvT3kCwMAG+jVVbrgrU+F8s+1JJa99qy82SQvyuYWMry 7KIF74FHNjzHtUxSu/5VFkSszUdg198miL9c+reTSYkij9+nfm91VxVSpMBd6H2U Zsx1UkzHhMHsGL3/bazRqXMtyArokq3QogJOiwrFPOZeYzcIaSS08898yIW+MFSU YxEXxlolY5gA4LT4yf1H0RLyOLryUxLGib+DGnlV49siIGGowQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFCddEUrjG3n3U4QstDZOvedvlIcbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 YmI5NmEwZC05NDVhLTQyN2YtYmRjNC1hOWRhMzEwY2IzYTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzRiYjk2YTBkLTk0NWEtNDI3Zi1i ZGM0LWE5ZGEzMTBjYjNhNS80YmI5NmEwZC05NDVhLTQyN2YtYmRjNC1hOWRhMzEw Y2IzYTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBARCBiAwDwQCAAIwCQMHBCYgAQmwADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQABlkdXAh88YuqlSmIW4nK/tAuvJAhv+ta08jBO1nr74Uffa+mcLKqRshldfJkw B4n9Sow/T9JR+hFMjmrZffjyX3Ln5KkAd3MOUBNGb4AUOT95XfSIoHacs+O+1T06 mcpDNwrghFfHAiXeADz0r81/sHQJCkV2m+6Za8ZMF4lMZ5I/BwZfY4q+9lEfWJLq S6R8WLR9AnFIPjuA0WqHxtZgfl6S4eKXe5Xe7/e9XY/6o4Moc50gQvFsTVOvKHAa SKL03ThFpwmoizo5sy2+H1uKvzBXxQYXvrmLUK8poyuw5fMgDGhkMyStrELL5ewd nzAmTeVUy4wqB1ju0P1/TeYs -----END CERTIFICATE-----Generated at Mon Mar 2 02:12:16 2026 by rpki-client