$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer File: a062a219-9ee8-48a3-897a-8410b6da94a1.cer (raw, json) Hash identifier: VW0Riqw/lv7bpE//8+fMNbVQ5egs2wPRoTGpQkzqq+0= Subject key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584CAFB4CAD4DCCFF1B0F47CE500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Jan 2026 13:45:22 +0000 Certificate not after: Wed 03 May 2028 12:45:22 +0000 Subordinate resources: AS: 803 AS: 26501 AS: 399844 IP: 64.110.192.0/18 IP: 64.201.192.0/19 IP: 67.225.0.0/17 IP: 68.69.192.0/19 IP: 69.11.0.0/17 IP: 71.17.0.0/16 IP: 74.113.12.0/22 IP: 96.125.240.0/20 IP: 104.152.28.0/22 IP: 104.219.8.0/22 IP: 104.255.48.0/22 IP: 108.60.160.0/19 IP: 108.160.16.0/20 IP: 108.174.160.0/20 IP: 142.164.0.0/16 IP: 162.253.8.0/22 IP: 192.34.224.0/21 IP: 198.228.86.0 -- 198.228.89.255 IP: 198.230.96.0/19 IP: 198.245.112.0/20 IP: 199.26.190.0/23 IP: 199.189.88.0/21 IP: 206.163.224.0/19 IP: 207.47.128.0/17 IP: 216.126.200.0/22 IP: 216.174.128.0/19 IP: 216.197.128.0/17 IP: 2604:1e80::/32 IP: 2607:f4a8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:b4:ca:d4:dc:cf:f1:b0:f4:7c:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 29 13:45:22 2026 GMT Not After : May 3 12:45:22 2028 GMT Subject: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:8b:ad:81:8d:6b:79:98:f6:db:03:6e:6f: b1:64:8a:1d:d7:f9:cb:56:75:2d:e1:9a:e4:12:d2: 70:02:bb:98:1a:93:61:74:f7:3d:73:21:f8:17:d1: 66:9b:0c:7b:16:79:06:ea:dc:8d:99:d9:f8:8e:e9: 2b:a4:1b:ad:07:ba:53:c0:c3:cd:e2:4b:39:38:fc: d6:bd:1e:b4:19:52:de:c3:ee:58:bd:f6:5d:78:61: f7:e3:86:bf:84:d3:8a:9c:09:88:8f:dd:5c:60:77: 53:ca:31:67:ef:11:68:0a:a3:50:7b:80:4d:39:77: 96:da:d8:b3:f8:1c:1d:a5:e1:6d:5f:52:7a:6c:9f: 18:11:19:8b:4d:0d:3a:7c:64:cc:b2:ce:43:f1:b3: 0a:21:13:ca:97:e6:c1:c1:01:45:6b:e2:04:0c:7a: 49:dd:d7:66:ce:73:42:19:40:0c:d7:1f:6e:36:38: cf:d0:c8:fd:2b:21:a9:98:8c:33:b6:5f:92:58:1c: b2:b0:5a:f8:44:6c:55:aa:d0:1a:fa:f4:75:e2:7f: 73:10:23:e4:00:92:f2:fe:22:ca:34:a0:82:6c:2d: 4e:0f:14:b8:c3:eb:82:7c:80:51:52:c6:88:4d:81: 7c:dd:19:d5:a6:a9:fa:9e:ec:49:6a:9d:92:89:6a: 2f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.110.192.0/18 64.201.192.0/19 67.225.0.0/17 68.69.192.0/19 69.11.0.0/17 71.17.0.0/16 74.113.12.0/22 96.125.240.0/20 104.152.28.0/22 104.219.8.0/22 104.255.48.0/22 108.60.160.0/19 108.160.16.0/20 108.174.160.0/20 142.164.0.0/16 162.253.8.0/22 192.34.224.0/21 198.228.86.0-198.228.89.255 198.230.96.0/19 198.245.112.0/20 199.26.190.0/23 199.189.88.0/21 206.163.224.0/19 207.47.128.0/17 216.126.200.0/22 216.174.128.0/19 216.197.128.0/17 IPv6: 2604:1e80::/32 2607:f4a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 803 26501 399844 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e5:4a:69:1c:7d:b2:8d:d8:56:99:67:21:c0:2d:71:99:0f: d0:4a:5a:01:2e:d9:23:b6:07:84:16:3c:a5:02:72:83:b7:e0: 7d:5f:1e:f2:81:b6:85:c8:6e:51:79:e3:ac:f8:2f:a6:8c:7f: b2:92:d0:99:6b:63:5a:76:50:51:23:30:a9:00:82:54:0f:46: 6c:2c:14:a7:ad:9c:19:10:35:5f:88:d7:97:59:86:3b:a6:ff: fa:df:99:f0:25:09:f5:cb:15:1e:4b:5c:87:39:21:c3:8f:d5: 91:b5:92:bd:0a:c5:4f:18:3b:f0:00:1f:0c:21:29:5b:7b:b3: a3:9e:92:ad:0c:8f:f7:fd:84:b1:69:05:82:1c:5b:aa:2e:c2: 2f:70:60:3d:ee:64:78:7f:c4:6b:82:fd:02:12:42:7b:12:83: 18:fa:a5:03:23:ef:cc:fb:18:97:48:5b:da:ef:59:81:4c:5f: a4:0c:4d:2f:89:61:e9:2c:2b:c0:42:a8:65:71:52:47:c7:08: 52:5d:c1:8c:6b:ff:21:ab:c5:7a:f5:7d:51:f2:4e:77:e4:86: 5d:64:28:ba:76:0c:f2:e5:16:c1:84:92:7e:f3:dd:73:f3:38: 4e:5d:4b:15:de:45:dd:1f:dc:35:36:a3:0b:b0:d1:8b:73:92: 5b:f6:1c:32 -----BEGIN CERTIFICATE----- MIIHzjCCBragAwIBAgIUAQ0Mn0MoWEyvtMrU3M/xsPR85QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDEyOTEzNDUyMloXDTI4MDUwMzEyNDUyMlowLzEtMCsGA1UEAxMk YTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5NGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssKLrYGNa3mY9tsDbm+xZIod1/nLVnUt4Zrk EtJwAruYGpNhdPc9cyH4F9Fmmwx7FnkG6tyNmdn4jukrpButB7pTwMPN4ks5OPzW vR60GVLew+5YvfZdeGH344a/hNOKnAmIj91cYHdTyjFn7xFoCqNQe4BNOXeW2tiz +BwdpeFtX1J6bJ8YERmLTQ06fGTMss5D8bMKIRPKl+bBwQFFa+IEDHpJ3ddmznNC GUAM1x9uNjjP0Mj9KyGpmIwztl+SWByysFr4RGxVqtAa+vR14n9zECPkAJLy/iLK NKCCbC1ODxS4w+uCfIBRUsaITYF83RnVpqn6nuxJap2SiWovaQIDAQABo4IE4DCC BNwwHQYDVR0OBBYEFBQoJ2YFnSSgtPKID++p7ODpboYYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h MDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2EwNjJhMjE5LTllZTgtNDhhMy04 OTdhLTg0MTBiNmRhOTRhMS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZk YTk0YTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgdsGCCsGAQUF BwEHAQH/BIHLMIHIMIGvBAIAATCBqAMEBkBuwAMEBUDJwAMEB0PhAAMEBURFwAME B0ULAAMDAEcRAwQCSnEMAwQEYH3wAwQCaJgcAwQCaNsIAwQCaP8wAwQFbDygAwQE bKAQAwQEbK6gAwMAjqQDBAKi/QgDBAPAIuAwDAMEAcbkVgMEAcbkWAMEBcbmYAME BMb1cAMEAccavgMEA8e9WAMEBc6j4AMEB88vgAMEAth+yAMEBdiugAMEB9jFgDAU BAIAAjAOAwUAJgQegAMFACYH9KgwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICAyMC AmeFAgMGGeQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAWuVKaRx9so3YVplnIcAtcZkP0EpaAS7ZI7YHhBY8 pQJyg7fgfV8e8oG2hchuUXnjrPgvpox/spLQmWtjWnZQUSMwqQCCVA9GbCwUp62c GRA1X4jXl1mGO6b/+t+Z8CUJ9csVHktchzkhw4/VkbWSvQrFTxg78AAfDCEpW3uz o56SrQyP9/2EsWkFghxbqi7CL3BgPe5keH/Ea4L9AhJCexKDGPqlAyPvzPsYl0hb 2u9ZgUxfpAxNL4lh6SwrwEKoZXFSR8cIUl3BjGv/IavFevV9UfJOd+SGXWQounYM 8uUWwYSSfvPdc/M4Tl1LFd5F3R/cNTajC7DRi3OSW/YcMg== -----END CERTIFICATE-----Generated at Fri Feb 27 09:04:18 2026 by rpki-client