$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer File: 291133eb-e436-4803-adab-f37835fc18e3.cer (raw, json) Hash identifier: KsMWCBtMImy2NGhPJUkA9kEl5n2slW4cUzJNbe45g3Y= Subject key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584DD1DF31D73A0BE569CCA44480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 12:15:14 +0000 Certificate not after: Fri 03 Mar 2028 13:45:24 +0000 Subordinate resources: AS: 11127 IP: 64.49.128.0/18 IP: 207.241.160.0 -- 207.241.171.255 IP: 207.241.174.0 -- 207.241.178.255 IP: 207.241.180.0/22 IP: 207.241.185.0/24 IP: 207.241.188.0/22 IP: 2604:9580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 16 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:df:31:d7:3a:0b:e5:69:cc:a4:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 13 12:15:14 2026 GMT Not After : Mar 3 13:45:24 2028 GMT Subject: CN=291133eb-e436-4803-adab-f37835fc18e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:f1:bb:0e:ba:b8:d4:67:b7:71:f1:6a:66: 97:8e:b5:a2:28:f4:66:e7:5e:d5:fc:23:dd:5a:26: 84:a3:63:e4:86:dc:c8:97:bc:be:ea:09:e4:27:6d: 80:75:35:4f:f5:3e:5b:e0:fb:89:23:52:c5:f9:b5: e9:47:ea:c2:1f:29:29:06:f9:fb:48:5b:21:e7:f1: 4b:8e:9d:aa:fc:87:92:18:9a:eb:fa:e9:86:81:11: b6:59:00:95:7e:45:55:20:c6:29:cf:cd:c6:3c:cd: 85:73:4f:ab:8a:04:0d:0a:b6:77:bd:ed:3e:92:05: 6a:3a:17:1f:92:5d:3d:93:d1:b5:e2:a2:82:60:08: 98:f5:f4:bf:00:31:99:93:72:6c:77:46:ce:b9:ac: 3c:ab:a5:12:de:a8:84:50:41:1c:20:1f:38:e1:fe: 7b:65:50:42:e1:e9:ef:2e:1b:5c:b0:70:b0:d9:d9: 19:2f:f9:49:aa:b6:cf:c4:03:77:ed:15:08:e2:ad: bb:4f:37:32:32:c1:e7:a7:4b:6a:21:ad:98:e2:64: ec:15:f3:7e:91:7a:3c:1d:38:9c:aa:f3:8f:7a:46: 40:2f:9e:f8:68:a0:7e:ef:78:61:64:89:4f:12:72: f2:a0:c5:f2:87:49:ca:ea:36:21:19:bc:58:a2:0e: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.49.128.0/18 207.241.160.0-207.241.171.255 207.241.174.0-207.241.178.255 207.241.180.0/22 207.241.185.0/24 207.241.188.0/22 IPv6: 2604:9580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11127 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:eb:15:64:5d:3f:d0:79:d5:01:76:46:18:ba:11:7a:25:a4: 23:2d:d4:d5:52:93:16:6c:21:84:97:72:3a:55:2a:57:bd:bd: a5:1e:3d:ef:38:d7:3f:46:6b:9b:9b:5c:d6:01:a2:bb:5f:25: a3:cd:74:66:e0:07:25:42:43:03:1b:94:ce:6f:53:ec:62:85: 04:50:20:68:fd:cf:a5:4a:11:9d:01:65:46:8e:0f:32:e4:fa: 54:18:c7:be:45:1a:0c:61:ae:71:6d:60:e9:59:55:61:c8:5e: de:a9:fa:22:c1:f8:94:ea:38:64:04:62:02:19:39:2a:02:17: 57:4b:fc:5a:9f:8f:2d:2a:1b:44:67:95:b1:b0:65:19:00:af: b7:3d:1c:96:81:c7:81:fa:ad:fb:0c:73:b0:45:ea:0b:a6:27: 52:7c:b1:2e:c8:a5:5c:8a:85:90:a2:a9:fc:7e:ea:69:e0:dc: 17:ff:6b:0c:27:1b:8a:f0:5f:6b:af:ed:3a:7d:ce:ba:23:01: 9c:72:ab:9e:3c:f7:68:4f:a9:02:27:c5:56:44:f8:35:6c:a7: 0c:14:41:93:d8:73:0b:0b:c2:db:82:a8:ab:c7:4e:ce:c7:bb: 7d:ba:0b:da:e3:da:8e:44:3d:84:7e:b8:1c:2e:8a:cf:b8:6b: 9c:41:c7:03 -----BEGIN CERTIFICATE----- MIIHRTCCBi2gAwIBAgIUAQ0Mn0MoWE3R3zHXOgvlacykRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDUxMzEyMTUxNFoXDTI4MDMwMzEzNDUyNFowLzEtMCsGA1UEAxMk MjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMxOGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveLxuw66uNRnt3HxamaXjrWiKPRm517V/CPd WiaEo2PkhtzIl7y+6gnkJ22AdTVP9T5b4PuJI1LF+bXpR+rCHykpBvn7SFsh5/FL jp2q/IeSGJrr+umGgRG2WQCVfkVVIMYpz83GPM2Fc0+rigQNCrZ3ve0+kgVqOhcf kl09k9G14qKCYAiY9fS/ADGZk3Jsd0bOuaw8q6US3qiEUEEcIB844f57ZVBC4env LhtcsHCw2dkZL/lJqrbPxAN37RUI4q27TzcyMsHnp0tqIa2Y4mTsFfN+kXo8HTic qvOPekZAL574aKB+73hhZIlPEnLyoMXyh0nK6jYhGbxYog5eGwIDAQABo4IEVzCC BFMwHQYDVR0OBBYEFBhSSTr87zPj8mSc88YLolBaDB1rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y OTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzI5MTEzM2ViLWU0MzYtNDgwMy1h ZGFiLWYzNzgzNWZjMThlMy8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVm YzE4ZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwXAYIKwYBBQUH AQcBAf8ETTBLMDoEAgABMDQDBAZAMYAwDAMEBc/xoAMEAs/xqDAMAwQBz/GuAwQA z/GyAwQCz/G0AwQAz/G5AwQCz/G8MA0EAgACMAcDBQAmBJWAMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAit3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACDrFWRdP9B51QF2Rhi6EXolpCMt1NVS kxZsIYSXcjpVKle9vaUePe841z9Ga5ubXNYBortfJaPNdGbgByVCQwMblM5vU+xi hQRQIGj9z6VKEZ0BZUaODzLk+lQYx75FGgxhrnFtYOlZVWHIXt6p+iLB+JTqOGQE YgIZOSoCF1dL/Fqfjy0qG0RnlbGwZRkAr7c9HJaBx4H6rfsMc7BF6gumJ1J8sS7I pVyKhZCiqfx+6mng3Bf/awwnG4rwX2uv7Tp9zrojAZxyq54892hPqQInxVZE+DVs pwwUQZPYcwsLwtuCqKvHTs7Hu326C9rj2o5EPYR+uBwuis+4a5xBxwM= -----END CERTIFICATE-----Generated at Fri May 15 10:35:03 2026 by rpki-client