$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer File: ac42ca24-d785-4ab8-81d3-baec3a30b660.cer (raw, json) Hash identifier: EZkIIomFV+kZHArt0obsv1FrnWiihenBAOLYY8KnQLk= Subject key identifier: F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584D24D7BE64FAF83A3E4717CB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Mar 2026 12:45:22 +0000 Certificate not after: Wed 14 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 18786 AS: 18953 AS: 64211 AS: 393713 IP: 64.79.48.0/20 IP: 74.123.32.0/22 IP: 162.254.112.0/22 IP: 192.157.20.0/22 IP: 199.91.176.0/22 IP: 199.193.180.0/22 IP: 204.62.56.0/21 IP: 208.72.76.0/22 IP: 208.77.8.0/23 IP: 208.82.84.0/22 IP: 208.89.176.0/22 IP: 216.146.224.0/20 IP: 2605:ce80::/32 IP: 2606:c080::/32 IP: 2607:ffe8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:d7:be:64:fa:f8:3a:3e:47:17:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 12 12:45:22 2026 GMT Not After : Jun 14 12:45:22 2028 GMT Subject: CN=ac42ca24-d785-4ab8-81d3-baec3a30b660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:b1:6b:77:52:3d:a8:0a:1c:25:ef:38:70: 80:3f:c1:64:68:5c:2c:24:7d:e8:e9:51:3b:36:ba: ce:3a:65:ad:32:bc:19:3a:44:cd:a3:31:cb:7e:b1: b3:c0:c2:ac:74:17:37:fe:62:f9:1f:4f:bc:63:fc: 76:7b:64:27:48:74:7c:58:91:4b:ca:fd:ef:c6:e9: 6a:7b:d7:86:60:2c:54:d2:8c:65:fa:19:d7:1e:e9: 45:24:92:67:d0:65:8a:02:b0:08:ba:7f:b1:7e:42: b4:b8:f5:e1:2e:ac:f5:77:93:fe:8c:e8:85:14:7f: 3b:4a:1b:37:05:3d:52:6d:15:bf:59:ce:0f:5c:3f: b2:4e:2d:2e:fc:a2:0b:f7:0d:fc:c7:89:3d:50:42: 65:24:59:07:58:77:81:1b:35:34:a4:19:ad:ab:48: 61:be:f1:f3:0e:a4:5b:2c:7d:40:73:3c:ae:d6:20: cb:ff:5f:08:86:61:e5:17:a6:0d:71:0b:f2:4f:0b: 4f:c7:4b:fb:39:0a:73:e5:f3:f6:73:77:48:ec:cb: f4:04:9e:fa:60:cb:cd:f9:2f:b3:30:7f:91:b1:15: 95:d4:ed:86:8b:4c:4f:07:b4:5f:0f:e6:b3:c3:f1: 3f:4b:8c:92:0b:42:ca:11:0d:01:f9:21:21:40:a7: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.79.48.0/20 74.123.32.0/22 162.254.112.0/22 192.157.20.0/22 199.91.176.0/22 199.193.180.0/22 204.62.56.0/21 208.72.76.0/22 208.77.8.0/23 208.82.84.0/22 208.89.176.0/22 216.146.224.0/20 IPv6: 2605:ce80::/32 2606:c080::/32 2607:ffe8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18786 18953 64211 393713 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:41:30:76:a7:90:ac:79:d0:8a:e0:1d:77:fe:6e:f0:c5:f8: e2:b6:ff:fa:d5:8b:25:fa:5b:7b:eb:b7:fc:69:07:f5:6e:86: 5b:b6:15:e4:c8:7a:1a:5f:a3:42:0a:f0:c6:2f:a4:73:3c:f7: db:ab:8b:9e:1a:f7:4f:18:52:5d:a2:48:ea:d4:2e:d2:15:84: e2:2c:5f:3c:ca:c6:ec:ee:2b:0b:a9:13:4a:23:86:aa:f6:43: 6f:f5:23:05:bd:90:79:27:32:5b:85:cf:d4:fc:8f:84:32:b9: c0:0f:51:ac:3b:1f:b0:3f:84:32:38:99:30:9c:d9:b1:8c:9f: 73:1f:69:5d:ae:70:19:75:8e:15:52:dc:5c:8d:f7:79:73:7b: 41:74:ca:53:45:10:fc:24:bd:d5:2b:1a:1e:70:7d:63:50:9d: b6:ad:24:f7:e0:36:06:a6:5b:82:35:1c:26:90:0d:0b:ba:50: 0f:83:69:8d:fe:c1:a5:f3:1b:8c:a8:99:b8:bb:6e:09:d4:80: 90:12:ac:ab:41:32:9a:19:25:fc:48:8d:21:29:f8:ed:30:13: cc:ac:a2:95:1c:21:a0:22:41:60:1f:65:83:92:ff:9b:0e:86: fa:ef:83:20:15:2d:14:39:43:53:33:b4:85:dc:89:34:1a:44: 0b:54:ec:8d -----BEGIN CERTIFICATE----- MIIHdTCCBl2gAwIBAgIUAQ0Mn0MoWE0k175k+vg6PkcXywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDMxMjEyNDUyMloXDTI4MDYxNDEyNDUyMlowLzEtMCsGA1UEAxMk YWM0MmNhMjQtZDc4NS00YWI4LTgxZDMtYmFlYzNhMzBiNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSWxa3dSPagKHCXvOHCAP8FkaFwsJH3o6VE7 NrrOOmWtMrwZOkTNozHLfrGzwMKsdBc3/mL5H0+8Y/x2e2QnSHR8WJFLyv3vxulq e9eGYCxU0oxl+hnXHulFJJJn0GWKArAIun+xfkK0uPXhLqz1d5P+jOiFFH87Shs3 BT1SbRW/Wc4PXD+yTi0u/KIL9w38x4k9UEJlJFkHWHeBGzU0pBmtq0hhvvHzDqRb LH1Aczyu1iDL/18IhmHlF6YNcQvyTwtPx0v7OQpz5fP2c3dI7Mv0BJ76YMvN+S+z MH+RsRWV1O2Gi0xPB7RfD+azw/E/S4ySC0LKEQ0B+SEhQKcaTwIDAQABo4IEhzCC BIMwHQYDVR0OBBYEFPS29e8Lg0l5a1BiWfA2Ro3nCB+vMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h YzQyY2EyNC1kNzg1LTRhYjgtODFkMy1iYWVjM2EzMGI2NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2FjNDJjYTI0LWQ3ODUtNGFiOC04 MWQzLWJhZWMzYTMwYjY2MC9hYzQyY2EyNC1kNzg1LTRhYjgtODFkMy1iYWVjM2Ez MGI2NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwfgYIKwYBBQUH AQcBAf8EbzBtME4EAgABMEgDBARATzADBAJKeyADBAKi/nADBALAnRQDBALHW7AD BALHwbQDBAPMPjgDBALQSEwDBAHQTQgDBALQUlQDBALQWbADBATYkuAwGwQCAAIw FQMFACYFzoADBQAmBsCAAwUAJgf/6DAnBggrBgEFBQcBCAEB/wQYMBagFDASAgJJ YgICSgkCAwD60wIDBgHxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACJBMHankKx50IrgHXf+bvDF+OK2//rV iyX6W3vrt/xpB/Vuhlu2FeTIehpfo0IK8MYvpHM899uri54a908YUl2iSOrULtIV hOIsXzzKxuzuKwupE0ojhqr2Q2/1IwW9kHknMluFz9T8j4QyucAPUaw7H7A/hDI4 mTCc2bGMn3MfaV2ucBl1jhVS3FyN93lze0F0ylNFEPwkvdUrGh5wfWNQnbatJPfg NgamW4I1HCaQDQu6UA+DaY3+waXzG4yombi7bgnUgJASrKtBMpoZJfxIjSEp+O0w E8ysopUcIaAiQWAfZYOS/5sOhvrvgyAVLRQ5Q1MztIXciTQaRAtU7I0= -----END CERTIFICATE-----Generated at Mon Mar 16 08:20:37 2026 by rpki-client