$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a.cer File: 54d4a1ca-3709-4693-b886-f80eff68da2a.cer (raw, json) Hash identifier: 3yqE1N1NKlRg+hOu0NY8ffEBvOigYG9lFgomP9lwW/k= Subject key identifier: 79:EF:4C:E8:05:82:45:67:8A:F8:68:04:E1:BD:35:51:AA:4C:88:30 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584E094CA069E815AB349F379500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/54d4a1ca-3709-4693-b886-f80eff68da2a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Jun 2026 08:45:11 +0000 Certificate not after: Mon 04 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 21524 IP: 208.82.220.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:09:4c:a0:69:e8:15:ab:34:9f:37:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 2 08:45:11 2026 GMT Not After : Sep 4 08:45:11 2028 GMT Subject: CN=54d4a1ca-3709-4693-b886-f80eff68da2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:f5:c0:55:37:6e:5f:17:8e:c8:a2:ee:cd: 45:a6:da:68:0a:35:b1:50:92:14:89:82:a2:18:8d: 3c:39:56:8a:11:dd:40:e2:d8:e0:2c:ef:12:3f:63: c5:64:5b:1b:ef:41:0d:14:72:66:a7:9a:b4:1e:9d: d0:c3:a3:ab:a9:b0:84:1d:0b:59:12:c5:16:30:ee: 0c:4f:ba:c7:22:3a:50:ae:2c:ff:da:21:ba:13:e9: fa:27:c3:8e:3e:3f:05:d1:a5:f6:96:e2:cc:f8:1f: 81:7a:87:f8:1c:88:33:1c:12:b7:45:95:d6:0c:29: 67:d6:db:63:93:8e:d2:64:52:b6:e3:e6:47:e2:cd: f2:1d:9f:d1:9d:00:90:da:75:14:b0:d5:fb:2b:60: 86:c9:a0:c3:ad:75:8a:bc:4a:5f:ec:f0:8b:3d:e4: 87:72:38:dc:d3:3f:8a:1a:f7:64:31:6b:81:16:10: b3:61:57:8f:1c:02:88:8d:4e:0c:5c:f9:5b:9d:a4: 73:c4:ec:bd:66:04:77:07:71:36:e2:b2:70:4f:81: 8e:55:0c:92:3e:f0:ee:ef:a1:cf:56:f5:26:e8:a1: 5b:e2:08:b2:91:1b:17:20:af:93:ec:a2:b8:16:94: 79:d4:6b:d6:28:b7:02:e7:b7:60:c5:a6:23:7c:51: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EF:4C:E8:05:82:45:67:8A:F8:68:04:E1:BD:35:51:AA:4C:88:30 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/54d4a1ca-3709-4693-b886-f80eff68da2a/54d4a1ca-3709-4693-b886-f80eff68da2a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 208.82.220.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21524 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f1:3f:cc:80:92:d6:7c:aa:da:98:31:26:3a:2b:a9:c5:34: 40:49:d3:9e:f2:c7:3d:43:30:fb:40:00:0b:f1:1e:d3:1b:2a: 23:e1:c9:77:7d:fa:63:c7:42:b2:20:8e:a4:a4:ca:35:d0:0f: 03:13:12:d9:e6:d9:35:78:59:6b:fb:05:51:9a:56:b0:52:b8: ab:21:79:11:35:e0:7d:73:97:72:04:ad:40:ab:84:65:dc:cb: 89:9c:f3:34:30:c8:24:fc:a8:68:cc:d0:65:aa:5a:1e:4c:58: 40:e5:89:28:8e:24:c6:6c:67:6b:04:e7:9a:ed:6d:4c:99:e4: 8f:23:f6:3c:d2:a7:6f:49:43:04:67:9a:1d:bc:b7:1d:57:48: 1b:e2:42:cb:3f:a7:56:70:4d:b8:da:6c:29:06:fd:be:d3:e0: 37:ab:c7:13:08:c7:e4:2c:2f:53:5e:53:fc:2d:11:07:34:9a: dd:7b:64:c9:e3:1d:7a:49:ed:8d:ac:ec:19:74:7e:1f:b4:20: 9e:37:7e:a6:d7:b3:50:11:aa:e0:95:db:a8:3a:77:45:56:eb: 3c:06:75:64:27:14:ea:fa:96:8d:9e:b7:b1:57:b1:fd:fc:52: d4:c2:d7:90:2c:e2:1f:74:a6:e0:98:4e:76:e5:ca:07:66:e1: 04:7c:cf:e0 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE4JTKBp6BWrNJ83lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDYwMjA4NDUxMVoXDTI4MDkwNDA4NDUxMVowLzEtMCsGA1UEAxMk NTRkNGExY2EtMzcwOS00NjkzLWI4ODYtZjgwZWZmNjhkYTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+n1wFU3bl8Xjsii7s1FptpoCjWxUJIUiYKi GI08OVaKEd1A4tjgLO8SP2PFZFsb70ENFHJmp5q0Hp3Qw6OrqbCEHQtZEsUWMO4M T7rHIjpQriz/2iG6E+n6J8OOPj8F0aX2luLM+B+Beof4HIgzHBK3RZXWDCln1ttj k47SZFK24+ZH4s3yHZ/RnQCQ2nUUsNX7K2CGyaDDrXWKvEpf7PCLPeSHcjjc0z+K GvdkMWuBFhCzYVePHAKIjU4MXPlbnaRzxOy9ZgR3B3E24rJwT4GOVQySPvDu76HP VvUm6KFb4giykRsXIK+T7KK4FpR51GvWKLcC57dgxaYjfFFDjwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFHnvTOgFgkVnivhoBOG9NVGqTIgwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81 NGQ0YTFjYS0zNzA5LTQ2OTMtYjg4Ni1mODBlZmY2OGRhMmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzU0ZDRhMWNhLTM3MDktNDY5My1i ODg2LWY4MGVmZjY4ZGEyYS81NGQ0YTFjYS0zNzA5LTQ2OTMtYjg4Ni1mODBlZmY2 OGRhMmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQUtwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC VBQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAHfE/zICS1nyq2pgxJjorqcU0QEnTnvLHPUMw+0AAC/Ee0xsq I+HJd336Y8dCsiCOpKTKNdAPAxMS2ebZNXhZa/sFUZpWsFK4qyF5ETXgfXOXcgSt QKuEZdzLiZzzNDDIJPyoaMzQZapaHkxYQOWJKI4kxmxnawTnmu1tTJnkjyP2PNKn b0lDBGeaHby3HVdIG+JCyz+nVnBNuNpsKQb9vtPgN6vHEwjH5CwvU15T/C0RBzSa 3XtkyeMdekntjazsGXR+H7Qgnjd+ptezUBGq4JXbqDp3RVbrPAZ1ZCcU6vqWjZ63 sVex/fxS1MLXkCziH3Sm4JhOduXKB2bhBHzP4A== -----END CERTIFICATE-----Generated at Sat Jun 13 09:00:19 2026 by rpki-client