$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer File: 3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer (raw, json) Hash identifier: 0MScSNR0mEstEz7dAUnJxtourJFJLx8hM53LXdB4wgo= Subject key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584EDB250DA74036804AF43A02C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 16 Aug 2026 12:45:12 +0000 Certificate not after: Sat 18 Nov 2028 13:45:12 +0000 Subordinate resources: AS: 13576 AS: 393417 IP: 64.33.224.0/19 IP: 66.115.192.0/18 IP: 66.128.160.0/19 IP: 66.231.0.0/19 IP: 208.53.192.0/18 IP: 209.151.176.0/20 IP: 216.106.192.0/18 IP: 216.249.192.0/18 IP: 2605:7c80::/32 IP: 2607:fc00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:db:25:0d:a7:40:36:80:4a:f4:3a:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 16 12:45:12 2026 GMT Not After : Nov 18 13:45:12 2028 GMT Subject: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:61:3c:92:20:c2:8e:df:7e:99:83:8c:c0:7c: db:17:a3:2d:00:0f:4b:09:02:b7:0c:aa:e8:20:c3: 31:6d:e4:b4:28:a4:3a:89:8f:29:ec:7f:9e:8a:8c: 63:3c:a3:3d:8e:3a:4a:9b:ce:0c:4f:25:45:27:fd: 30:4f:d3:2f:57:e0:7e:3f:44:92:8a:e6:18:31:09: 46:5f:21:8f:be:b6:50:4f:d2:62:c7:ee:cb:24:43: 46:c4:46:c2:46:65:f5:0f:43:d1:76:8b:6f:0c:a6: 40:53:36:51:54:46:81:8e:6d:e1:fe:9a:65:37:79: e9:d2:15:64:60:d3:15:13:a3:f0:92:21:dc:53:ca: e5:0a:01:aa:7c:97:62:a0:ac:62:98:31:e0:74:a2: 27:ae:66:c6:d9:29:84:98:74:5e:b8:45:51:c1:28: fd:8d:e0:90:74:1a:11:71:1a:ea:48:b5:dd:a5:79: 7f:04:8f:51:b2:d7:a7:36:4d:86:f8:cc:9d:c6:96: 18:ee:6c:f5:d0:68:d0:63:d6:ff:14:e2:ad:0a:87: 81:e1:ec:7c:7b:a9:06:51:d2:a4:5b:13:61:95:c7: 89:a3:fb:d7:d6:aa:ed:3f:18:29:1e:3b:9f:5e:11: db:b3:4f:e5:02:f5:e8:43:a1:8f:6d:12:5c:9a:26: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/19 66.115.192.0/18 66.128.160.0/19 66.231.0.0/19 208.53.192.0/18 209.151.176.0/20 216.106.192.0/18 216.249.192.0/18 IPv6: 2605:7c80::/32 2607:fc00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13576 393417 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:55:0e:bc:f6:61:11:cc:a5:0d:6e:e3:e2:30:7b:aa:1c:c7: 2b:97:0b:e7:f0:b9:b3:f1:4c:b5:0c:ab:58:73:45:c8:c0:4c: 64:80:63:34:26:71:b0:84:54:32:d3:16:8b:00:cd:ec:f8:3f: c6:f4:f7:f5:4c:5c:10:8d:9b:0e:cc:4a:f8:71:67:0a:70:a9: 87:45:98:9d:22:02:ef:54:2c:39:95:32:e1:71:03:de:2d:c7: e2:41:62:f8:3d:d0:d1:c3:d3:7b:1c:ca:4a:43:ae:97:3d:da: 70:d9:dd:a5:8b:fe:ef:66:88:ac:7b:e5:40:89:b1:28:ef:1d: c3:90:ea:62:8d:6f:27:ce:76:b8:54:28:8b:92:78:78:cc:0e: 2e:fd:5d:59:0c:7b:dc:9d:cb:80:41:37:f7:88:b8:d4:42:0a: c1:7d:9f:d2:a4:39:24:81:85:73:29:e8:73:ec:5d:56:03:b5: 18:a9:fb:a5:dd:f2:47:cc:8e:82:bf:d0:5c:8f:cf:4a:cb:ee: d4:65:8c:f8:0e:8a:a1:cd:61:1b:b0:8f:c4:c1:26:a4:f3:af: e4:4b:d3:be:0a:e9:3c:e0:ac:33:a4:db:04:f6:a6:7e:34:c7: 83:22:01:95:39:07:36:3c:f6:90:b8:ea:8d:2c:08:09:33:b6: 22:6b:6f:03 -----BEGIN CERTIFICATE----- MIIHTTCCBjWgAwIBAgIUAQ0Mn0MoWE7bJQ2nQDaASvQ6AsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDgxNjEyNDUxMloXDTI4MTExODEzNDUxMlowLzEtMCsGA1UEAxMk M2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GE8kiDCjt9+mYOMwHzbF6MtAA9LCQK3DKro IMMxbeS0KKQ6iY8p7H+eioxjPKM9jjpKm84MTyVFJ/0wT9MvV+B+P0SSiuYYMQlG XyGPvrZQT9Jix+7LJENGxEbCRmX1D0PRdotvDKZAUzZRVEaBjm3h/pplN3np0hVk YNMVE6PwkiHcU8rlCgGqfJdioKximDHgdKInrmbG2SmEmHReuEVRwSj9jeCQdBoR cRrqSLXdpXl/BI9RstenNk2G+MydxpYY7mz10GjQY9b/FOKtCoeB4ex8e6kGUdKk WxNhlceJo/vX1qrtPxgpHjufXhHbs0/lAvXoQ6GPbRJcmiYMlwIDAQABo4IEXzCC BFswHQYDVR0OBBYEFNzJCDZV525bpbBnoeZg0yOpYUQgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z ZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzNkN2ZiMWMyLWYzODctNDgyZC1h NmZlLWRjNWE4NDRmODVlZi8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0 Zjg1ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwXwYIKwYBBQUH AQcBAf8EUDBOMDYEAgABMDADBAVAIeADBAZCc8ADBAVCgKADBAVC5wADBAbQNcAD BATRl7ADBAbYasADBAbY+cAwFAQCAAIwDgMFACYFfIADBQAmB/wAMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAjUIAgMGAMkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjVUOvPZhEcylDW7j4jB7 qhzHK5cL5/C5s/FMtQyrWHNFyMBMZIBjNCZxsIRUMtMWiwDN7Pg/xvT39UxcEI2b DsxK+HFnCnCph0WYnSIC71QsOZUy4XED3i3H4kFi+D3Q0cPTexzKSkOulz3acNnd pYv+72aIrHvlQImxKO8dw5DqYo1vJ852uFQoi5J4eMwOLv1dWQx73J3LgEE394i4 1EIKwX2f0qQ5JIGFcynoc+xdVgO1GKn7pd3yR8yOgr/QXI/PSsvu1GWM+A6Koc1h G7CPxMEmpPOv5EvTvgrpPOCsM6TbBPamfjTHgyIBlTkHNjz2kLjqjSwICTO2Imtv Aw== -----END CERTIFICATE-----Generated at Wed Aug 19 05:17:44 2026 by rpki-client