$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer File: cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer (raw, json) Hash identifier: lfynXthpz18UI35w8KhtMaBeQ6bSAVqDOyeXQKvvWAE= Subject key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584EB6DA28986F5C99E190A11680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Aug 2026 12:45:12 +0000 Certificate not after: Sun 05 Nov 2028 13:45:12 +0000 Subordinate resources: AS: 8008 AS: 13807 AS: 30164 AS: 33483 IP: 24.51.32.0/21 IP: 24.51.52.0 -- 24.51.63.255 IP: 24.72.204.0/22 IP: 24.72.216.0/21 IP: 24.223.96.0/22 IP: 24.223.104.0 -- 24.223.127.255 IP: 64.64.128.0 -- 64.64.155.255 IP: 72.8.192.0/18 IP: 97.107.196.0/22 IP: 104.36.92.0/22 IP: 104.37.224.0/22 IP: 147.185.52.0/22 IP: 162.221.232.0/22 IP: 162.250.212.0/22 IP: 173.240.80.0/20 IP: 192.91.139.0/24 IP: 192.189.248.0/24 IP: 199.182.136.0/21 IP: 208.175.128.0/20 IP: 216.8.192.0/18 IP: 223.165.96.0/20 IP: 2604:c80::/32 IP: 2604:9500::/32 IP: 2607:5e80::/32 IP: 2607:fdf0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:da:28:98:6f:5c:99:e1:90:a1:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 3 12:45:12 2026 GMT Not After : Nov 5 13:45:12 2028 GMT Subject: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:55:ef:13:ca:8b:72:b6:5a:e6:92:14:b0: c6:ef:74:51:98:ac:4a:17:36:67:6f:ad:a9:6c:df: 8b:4f:41:40:e7:8c:d2:58:e9:ec:88:31:94:2e:80: 96:f8:fd:08:20:8b:0f:8e:84:7c:29:a0:90:cf:72: 0e:2a:f9:a5:45:c8:30:d2:a9:05:20:db:b1:ea:8d: 19:fa:c7:7e:3e:eb:45:a6:c4:0e:7a:53:a6:9a:41: 3a:92:82:11:24:eb:d1:20:ac:0c:cd:75:c8:c4:b3: fe:90:80:85:cf:74:d2:5e:cc:bc:aa:ee:1c:2b:ff: ca:c7:84:26:11:09:56:75:d3:b2:9f:30:74:03:56: 39:5c:ff:b4:92:82:5c:39:94:c2:89:ea:15:06:5d: f5:d2:34:f9:03:c6:70:26:79:3a:0c:eb:a7:9d:e8: 95:6d:7f:cb:16:21:56:d0:70:34:02:96:08:65:fd: 6b:a6:1e:81:d8:00:75:ec:5b:2b:34:67:3f:a1:a7: e3:3d:4c:93:39:ea:2d:1c:c3:b0:18:2f:3b:44:e8: af:1b:03:82:7f:64:bb:d0:f1:7b:70:ca:ef:88:e9: d6:c0:ea:71:1c:04:95:3b:37:14:7d:47:e0:b2:be: 62:1c:84:e4:12:85:1e:88:d8:25:b4:4e:f1:f3:59: dc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 24.51.32.0/21 24.51.52.0-24.51.63.255 24.72.204.0/22 24.72.216.0/21 24.223.96.0/22 24.223.104.0-24.223.127.255 64.64.128.0-64.64.155.255 72.8.192.0/18 97.107.196.0/22 104.36.92.0/22 104.37.224.0/22 147.185.52.0/22 162.221.232.0/22 162.250.212.0/22 173.240.80.0/20 192.91.139.0/24 192.189.248.0/24 199.182.136.0/21 208.175.128.0/20 216.8.192.0/18 223.165.96.0/20 IPv6: 2604:c80::/32 2604:9500::/32 2607:5e80::/32 2607:fdf0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8008 13807 30164 33483 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ef:bb:24:86:91:25:e7:f4:61:2f:1b:4e:c7:10:38:88:62: 3a:89:7f:b9:9d:3d:7f:39:d5:98:1b:19:5d:4f:dd:56:1c:d9: df:d9:5e:2d:e0:e7:fc:79:89:ea:82:4c:86:b9:a6:32:73:03: f0:0d:09:17:7d:f9:a2:1d:0b:eb:60:00:0e:f8:7b:3a:95:2c: 69:f5:e2:80:dd:3c:39:9c:5b:d3:c5:64:ad:6f:71:72:b6:e9: ae:06:3c:b2:8e:d3:2f:62:20:96:5e:8e:7c:12:74:4c:79:8d: ac:10:76:8c:17:6c:1c:93:6a:29:2d:8b:e7:74:65:04:1a:cf: 0d:bc:06:66:09:91:ae:30:3a:3f:9b:07:4b:62:57:c1:54:1f: 5b:22:3f:53:7e:5a:a7:54:ed:bc:db:38:71:5a:c6:8d:d1:ee: 2a:6b:e3:a1:7c:1f:77:aa:ed:c2:7b:58:10:92:67:70:c7:3b: 48:24:a9:8d:9f:b2:40:ba:69:e0:de:d1:9b:c8:d8:e9:5c:2e: d4:9b:83:49:b1:c1:89:c2:c1:6b:b7:5a:89:db:6a:b5:93:e6: 0c:00:ce:5f:f2:33:00:d0:8b:83:68:fd:55:2e:cf:ff:0f:62: 19:d0:b3:31:16:89:9b:e9:96:a8:9e:48:b4:5b:53:e7:88:e7: 1d:4d:fc:88 -----BEGIN CERTIFICATE----- MIIHzjCCBragAwIBAgIUAQ0Mn0MoWE622iiYb1yZ4ZChFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDgwMzEyNDUxMloXDTI4MTEwNTEzNDUxMlowLzEtMCsGA1UEAxMk Y2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMwNTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJxV7xPKi3K2WuaSFLDG73RRmKxKFzZnb62p bN+LT0FA54zSWOnsiDGULoCW+P0IIIsPjoR8KaCQz3IOKvmlRcgw0qkFINux6o0Z +sd+PutFpsQOelOmmkE6koIRJOvRIKwMzXXIxLP+kICFz3TSXsy8qu4cK//Kx4Qm EQlWddOynzB0A1Y5XP+0koJcOZTCieoVBl310jT5A8ZwJnk6DOunneiVbX/LFiFW 0HA0ApYIZf1rph6B2AB17FsrNGc/oafjPUyTOeotHMOwGC87ROivGwOCf2S70PF7 cMrviOnWwOpxHASVOzcUfUfgsr5iHITkEoUeiNgltE7x81nc7wIDAQABo4IE4DCC BNwwHQYDVR0OBBYEFLlQzZRiqUi716KxABAuTkWLbWR7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j ZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2NmMGYzMWI2LWVmNjItNGRkNS04 NzliLWZlN2FlZTBjMDUzNi9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUw YzA1MzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgdcGCCsGAQUF BwEHAQH/BIHHMIHEMIGdBAIAATCBlgMEAxgzIDAMAwQCGDM0AwQGGDMAAwQCGEjM AwQDGEjYAwQCGN9gMAwDBAMY32gDBAcY3wAwDAMEB0BAgAMEAkBAmAMEBkgIwAME AmFrxAMEAmgkXAMEAmgl4AMEApO5NAMEAqLd6AMEAqL61AMEBK3wUAMEAMBbiwME AMC9+AMEA8e2iAMEBNCvgAMEBtgIwAMEBN+lYDAiBAIAAjAcAwUAJgQMgAMFACYE lQADBQAmB16AAwUAJgf98DAmBggrBgEFBQcBCAEB/wQXMBWgEzARAgIfSAICNe8C AnXUAgMAgsswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEACO+7JIaRJef0YS8bTscQOIhiOol/uZ09fznVmBsZ XU/dVhzZ39leLeDn/HmJ6oJMhrmmMnMD8A0JF335oh0L62AADvh7OpUsafXigN08 OZxb08VkrW9xcrbprgY8so7TL2Igll6OfBJ0THmNrBB2jBdsHJNqKS2L53RlBBrP DbwGZgmRrjA6P5sHS2JXwVQfWyI/U35ap1TtvNs4cVrGjdHuKmvjoXwfd6rtwntY EJJncMc7SCSpjZ+yQLpp4N7Rm8jY6Vwu1JuDSbHBicLBa7daidtqtZPmDADOX/Iz ANCLg2j9VS7P/w9iGdCzMRaJm+mWqJ5ItFtT54jnHU38iA== -----END CERTIFICATE-----Generated at Sat Sep 12 12:42:48 2026 by rpki-client