$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer File: 8a8a1a2d-c949-4896-93b9-71f917048e79.cer (raw, json) Hash identifier: swyH9n5CGFR8YX0ggHfCPWFtjDukdyLfMaew6uaS4DU= Subject key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584E4F17BBD033CF59728E4BA680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 27 Jun 2026 08:45:12 +0000 Certificate not after: Fri 29 Sep 2028 08:45:12 +0000 Subordinate resources: AS: 399804 IP: 66.187.4.0/22 IP: 158.51.124.0/22 IP: 2606:65c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:17:bb:d0:33:cf:59:72:8e:4b:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 27 08:45:12 2026 GMT Not After : Sep 29 08:45:12 2028 GMT Subject: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:e9:02:fd:d5:ad:72:fb:cf:14:a3:09:60: 70:f1:d6:fe:47:4f:0e:52:cb:87:6a:8f:6c:e9:ae: c0:4b:2b:a8:9a:06:d9:1e:8b:be:f4:4e:ed:f8:18: e1:7f:f7:2c:99:d2:c3:6f:8d:1c:72:11:3d:eb:89: 92:4f:6e:00:91:8d:cb:07:00:2c:cd:cd:ca:ab:52: 96:7e:5c:da:82:39:22:ee:be:97:5b:27:b8:53:a1: 06:a8:ce:72:e0:89:39:a2:12:63:67:b4:db:bf:d8: 7e:ed:55:e5:48:ed:81:00:01:86:be:3c:a0:24:fe: aa:ea:5e:b8:a9:11:b7:ab:71:fa:10:6c:49:8c:82: 06:42:4d:d9:f2:ed:72:5f:6d:fc:d8:a3:44:8d:ac: 5f:5c:1c:f0:0e:42:a9:7a:a3:36:55:53:93:2b:78: a6:2e:1d:ab:09:e7:08:c2:0d:b7:35:1b:38:c7:87: 4c:2f:5c:31:98:d3:7a:e5:0b:f0:a2:ed:86:de:43: ee:48:67:d3:e4:b0:66:8a:2d:0d:a8:02:ed:09:39: 84:0e:b7:bf:4d:a7:41:d6:11:59:1c:65:e2:72:02: 44:1e:7c:49:5d:c4:34:49:27:41:0e:a5:c0:c5:e8: 1b:e3:6c:9e:fe:93:ff:16:79:22:18:2c:67:7b:86: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 66.187.4.0/22 158.51.124.0/22 IPv6: 2606:65c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399804 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:41:51:b9:6b:4f:b5:0a:b7:53:13:78:93:4f:64:84:89:5a: 17:02:1a:10:4c:b6:fe:e8:aa:c4:63:9a:b8:f3:23:66:5b:71: 35:ac:ec:ee:85:43:6d:a3:2b:42:75:7f:ef:f7:51:ce:d1:7d: a6:f3:aa:56:a9:6c:cb:ec:e3:e8:57:a2:15:6f:4a:4b:39:81: ec:97:88:25:9f:76:97:42:8e:a4:39:0d:c2:52:d8:fb:2c:df: 0c:50:ff:63:c3:84:c4:c0:10:72:d1:ec:56:d0:8e:23:ca:91: 41:d7:a8:66:d1:90:d3:48:19:86:2d:49:cd:c3:63:34:5b:4f: f4:12:15:b0:39:4e:c1:fd:b0:10:6f:36:48:1c:c3:9a:d7:6c: c4:19:2b:96:b0:4b:ad:a1:32:da:06:b2:a1:97:3c:62:e5:4a: f8:d3:86:79:8a:3c:fa:30:fa:de:76:9c:49:06:81:20:c6:05: 6e:77:a9:69:9c:f5:f7:1f:7c:0f:ad:58:e4:d1:1b:18:5a:97: ed:37:33:0e:b3:a8:b3:7a:d2:00:64:ae:61:52:d5:dc:ca:99: de:21:1f:0e:0a:cb:04:5e:83:5e:63:d8:80:0b:c3:cb:f2:d0: 66:b0:2a:c3:e1:ee:97:6d:56:10:c7:b3:de:f6:ce:ae:ba:8e: 13:f2:5d:56 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE5PF7vQM89Zco5LpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDYyNzA4NDUxMloXDTI4MDkyOTA4NDUxMlowLzEtMCsGA1UEAxMk OGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4ZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZbpAv3VrXL7zxSjCWBw8db+R08OUsuHao9s 6a7ASyuomgbZHou+9E7t+Bjhf/csmdLDb40cchE964mST24AkY3LBwAszc3Kq1KW flzagjki7r6XWye4U6EGqM5y4Ik5ohJjZ7Tbv9h+7VXlSO2BAAGGvjygJP6q6l64 qRG3q3H6EGxJjIIGQk3Z8u1yX2382KNEjaxfXBzwDkKpeqM2VVOTK3imLh2rCecI wg23NRs4x4dML1wxmNN65Qvwou2G3kPuSGfT5LBmii0NqALtCTmEDre/TadB1hFZ HGXicgJEHnxJXcQ0SSdBDqXAxegb42ye/pP/FnkiGCxne4ZCmwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFMpl4nlEpZzKbxvGZbw3C41vuM/rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzhhOGExYTJkLWM5NDktNDg5Ni05 M2I5LTcxZjkxNzA0OGU3OS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcw NDhlNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJCuwQDBAKeM3wwDQQCAAIwBwMFACYGZcAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhm8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAARBUblrT7UKt1MTeJNP ZISJWhcCGhBMtv7oqsRjmrjzI2ZbcTWs7O6FQ22jK0J1f+/3Uc7RfabzqlapbMvs 4+hXohVvSks5geyXiCWfdpdCjqQ5DcJS2Pss3wxQ/2PDhMTAEHLR7FbQjiPKkUHX qGbRkNNIGYYtSc3DYzRbT/QSFbA5TsH9sBBvNkgcw5rXbMQZK5awS62hMtoGsqGX PGLlSvjThnmKPPow+t52nEkGgSDGBW53qWmc9fcffA+tWOTRGxhal+03Mw6zqLN6 0gBkrmFS1dzKmd4hHw4KywReg15j2IALw8vy0GawKsPh7pdtVhDHs972zq66jhPy XVY= -----END CERTIFICATE-----Generated at Wed Jul 8 22:38:19 2026 by rpki-client