$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer File: 9696ca72-0d62-4fc3-b383-c596c4f11958.cer (raw, json) Hash identifier: h1hSSPhKOtRzyWCwviIEGznDxAquBixNjoPdSQXRibE= Subject key identifier: 2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584D70382C56072BC26865A76800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Apr 2026 12:45:17 +0000 Certificate not after: Tue 11 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 3562 IP: 134.252.0.0/16 IP: 146.246.0.0/16 IP: 192.73.208.0/24 IP: 192.160.228.0/24 IP: 198.206.219.0/24 IP: 198.206.221.0/24 IP: 204.238.65.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:38:2c:56:07:2b:c2:68:65:a7:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 8 12:45:17 2026 GMT Not After : Jul 11 12:45:17 2028 GMT Subject: CN=9696ca72-0d62-4fc3-b383-c596c4f11958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:52:60:f0:15:27:53:58:66:8f:be:36:f9: 3c:0a:2a:45:c4:df:26:b2:45:6f:e4:5c:d4:44:30: ea:47:25:14:5d:df:a8:00:88:9c:ad:f6:c0:0f:fb: 69:74:73:e9:de:81:ae:ec:fe:c2:b9:72:43:f2:df: ef:b3:8a:9b:56:a7:fc:54:f3:d2:45:53:40:6d:b2: 2c:0b:fa:de:af:4e:df:e1:da:9f:97:30:51:3c:3d: 1c:70:eb:b9:3f:ac:d9:23:fe:5d:d3:81:4c:d6:e9: a7:23:96:7a:8c:f9:db:c5:3c:4b:40:18:c8:72:a2: f6:0a:15:86:6d:37:35:38:ad:d9:85:d3:b3:f0:a5: ae:95:07:02:38:39:95:78:da:ee:34:5f:17:70:d0: f9:df:86:37:a4:6b:06:97:28:47:55:9f:68:2a:97: fb:8a:42:bf:d5:2e:b8:1d:ce:57:23:e7:fb:e7:a3: e4:f6:f4:12:38:ee:f4:bf:27:a6:7f:12:65:14:97: e5:02:c1:ab:df:fa:a1:64:89:7b:29:05:4a:85:33: 78:61:76:c4:27:85:4f:78:21:06:67:3b:a0:03:f9: cd:d7:c0:8c:9a:6a:b0:65:a4:1b:e4:c4:ce:38:07: 0b:d9:15:8f:f5:33:1a:7f:05:53:96:7c:f6:1b:30: 52:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 134.252.0.0/16 146.246.0.0/16 192.73.208.0/24 192.160.228.0/24 198.206.219.0/24 198.206.221.0/24 204.238.65.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3562 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:83:83:97:7c:18:24:d4:30:70:b5:92:a1:a9:66:4a:72:83: 5d:0c:44:b4:6f:ab:f6:5b:f1:33:07:27:ce:ec:16:33:00:e0: f6:d9:c2:4e:4f:be:7d:a0:e1:f9:08:f5:d2:63:4b:4f:8a:0c: 94:1e:2c:77:1f:16:45:a5:17:bd:7f:a5:df:40:9e:58:f7:e6: 44:98:f5:d8:d7:fc:2b:23:53:e1:e4:bf:32:26:8e:99:90:cb: 15:be:40:25:7c:e0:7a:db:3f:66:b0:1c:1c:a3:d1:ee:46:1b: ac:fa:b6:67:a8:b0:30:cb:67:86:93:2a:2f:bb:c3:9b:f5:ef: 79:36:3f:78:68:cc:b1:ce:cc:21:c8:73:96:2d:72:3a:f2:f5: b2:3d:0e:c4:e6:45:92:e9:69:93:ca:97:b1:83:8b:3c:64:2c: 8b:60:d9:b4:85:17:55:03:44:e2:cc:34:69:80:a8:e5:03:71: 77:a4:f5:ca:9b:fb:1b:ba:20:e7:2f:18:4d:39:02:5c:bb:a1: a9:48:78:68:58:bd:e4:38:7a:4a:d2:4f:33:0e:2b:96:ea:8c: 44:b5:93:69:85:4e:a1:6f:6c:bb:a1:5d:b6:0f:ff:c7:95:4a: 14:69:23:ca:e2:ca:fe:a8:a9:43:44:3e:6a:0e:e5:92:c4:25: 2a:25:34:c9 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWE1wOCxWByvCaGWnaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDQwODEyNDUxN1oXDTI4MDcxMTEyNDUxN1owLzEtMCsGA1UEAxMk OTY5NmNhNzItMGQ2Mi00ZmMzLWIzODMtYzU5NmM0ZjExOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K1SYPAVJ1NYZo++Nvk8CipFxN8mskVv5FzU RDDqRyUUXd+oAIicrfbAD/tpdHPp3oGu7P7CuXJD8t/vs4qbVqf8VPPSRVNAbbIs C/rer07f4dqflzBRPD0ccOu5P6zZI/5d04FM1umnI5Z6jPnbxTxLQBjIcqL2ChWG bTc1OK3ZhdOz8KWulQcCODmVeNruNF8XcND534Y3pGsGlyhHVZ9oKpf7ikK/1S64 Hc5XI+f756Pk9vQSOO70vyemfxJlFJflAsGr3/qhZIl7KQVKhTN4YXbEJ4VPeCEG ZzugA/nN18CMmmqwZaQb5MTOOAcL2RWP9TMafwVTlnz2GzBSYQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFC5V/JEdRK4Oc4asaXkUPNfNSsQDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 Njk2Y2E3Mi0wZDYyLTRmYzMtYjM4My1jNTk2YzRmMTE5NTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk2OTZjYTcyLTBkNjItNGZjMy1i MzgzLWM1OTZjNGYxMTk1OC85Njk2Y2E3Mi0wZDYyLTRmYzMtYjM4My1jNTk2YzRm MTE5NTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMC4EAgABMCgDAwCG/AMDAJL2AwQAwEnQAwQAwKDkAwQAxs7bAwQA xs7dAwQAzO5BMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAg3qMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG2D g5d8GCTUMHC1kqGpZkpyg10MRLRvq/Zb8TMHJ87sFjMA4PbZwk5Pvn2g4fkI9dJj S0+KDJQeLHcfFkWlF71/pd9Anlj35kSY9djX/CsjU+HkvzImjpmQyxW+QCV84Hrb P2awHByj0e5GG6z6tmeosDDLZ4aTKi+7w5v173k2P3hozLHOzCHIc5Ytcjry9bI9 DsTmRZLpaZPKl7GDizxkLItg2bSFF1UDROLMNGmAqOUDcXek9cqb+xu6IOcvGE05 Aly7oalIeGhYveQ4ekrSTzMOK5bqjES1k2mFTqFvbLuhXbYP/8eVShRpI8riyv6o qUNEPmoO5ZLEJSolNMk= -----END CERTIFICATE-----Generated at Fri Apr 17 07:31:33 2026 by rpki-client