$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer File: 618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer (raw, json) Hash identifier: 9A3ADA/1uSxM1JsmH64v1rwci9VY//I3YeFay3inG2g= Subject key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584E3B8CF1F6026A76758EA8D280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 20 Jun 2026 08:45:11 +0000 Certificate not after: Fri 22 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 11641 AS: 14436 AS: 20439 AS: 21894 AS: 30181 AS: 36774 AS: 54802 AS: 393711 IP: 173.240.160.0/20 IP: 199.16.136.0/21 IP: 199.187.152.0/21 IP: 206.108.40.0/21 IP: 206.225.192.0/19 IP: 2601:5000::/24 IP: 2620:103:7000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:8c:f1:f6:02:6a:76:75:8e:a8:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 20 08:45:11 2026 GMT Not After : Sep 22 08:45:11 2028 GMT Subject: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:21:92:74:32:1b:f7:20:ef:36:ae:bc:2f:c2: 3a:6c:ae:80:03:6e:04:b2:fb:d7:d0:da:c0:c7:f9: ff:86:41:7a:d9:21:51:44:38:92:71:69:0a:f2:62: 18:36:d0:1d:3f:fd:db:cc:27:d2:b2:5f:54:43:0c: 83:d0:4b:7b:e7:55:ba:2a:03:c3:3b:86:d5:27:f8: de:26:c7:3e:81:1e:b9:60:77:2a:7a:c6:9b:59:c4: ae:7c:38:dc:ce:c9:0e:3b:8b:1d:65:48:be:b3:35: 44:ee:30:13:56:65:1d:4e:3e:94:4b:4c:23:16:48: fd:fe:1b:3f:18:77:27:1f:b5:8a:dc:93:52:fd:fe: dd:05:ce:cc:ec:32:a5:78:a7:c9:7e:a3:87:6a:37: f4:fd:3e:6c:36:73:d4:20:cf:72:e8:a0:71:35:25: 14:5d:86:82:18:f5:c9:94:3c:e7:d6:aa:79:bb:1b: 65:3b:4e:e6:5a:af:b3:68:c8:a1:4b:b2:eb:e0:a9: be:59:27:1a:68:fd:ef:d0:c5:d4:57:69:27:40:3f: 89:bc:67:f2:dc:3c:ad:8f:c6:d4:dd:b5:82:1c:ce: 82:b7:78:05:68:f9:42:8d:ec:2b:04:de:12:30:d6: 21:6a:fe:e8:5a:13:ac:06:26:be:10:7c:fe:d2:ad: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 173.240.160.0/20 199.16.136.0/21 199.187.152.0/21 206.108.40.0/21 206.225.192.0/19 IPv6: 2601:5000::/24 2620:103:7000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11641 14436 20439 21894 30181 36774 54802 393711 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f3:b2:d2:fc:4b:4c:5a:73:8a:58:e3:fb:0c:30:b4:3a:c5: b8:f5:39:ab:f0:29:2b:bd:01:78:49:06:50:d9:cd:91:08:7e: 4d:06:dd:95:31:b1:1d:2a:08:b8:b6:ac:c5:34:60:79:26:80: c1:9d:44:db:6e:90:b3:c7:1f:b8:58:1b:31:6d:9f:4b:72:25: 6e:55:1d:07:0b:4a:7b:6b:2d:66:56:60:12:97:33:97:86:b2: 2b:46:46:28:ad:bb:1c:b1:ab:70:f8:65:27:8e:fe:3e:ab:e6: 7e:50:71:d3:0f:7f:50:6b:a3:c5:a6:e6:ef:c5:ea:fa:08:b6: e8:77:43:4f:54:da:16:b3:f7:fe:23:64:2b:cc:b6:e0:1c:9a: 2f:31:31:b1:66:bd:ac:d4:8c:11:48:ef:d1:be:28:93:d1:29: ce:a4:4d:83:dd:90:45:98:c9:a0:6f:85:b7:94:cc:35:65:b2: 6b:88:03:eb:d6:d0:7f:72:e1:6e:e3:61:f0:c1:c7:1f:5a:95: 31:fd:32:33:78:9e:56:12:0c:d7:17:4c:bd:29:bb:bb:19:c0: 3e:c1:d1:5f:6d:95:13:29:b7:a0:6f:85:ac:30:f5:ca:d6:30: e2:11:fe:4f:ca:6a:27:7f:24:ec:21:40:37:69:6c:6c:53:5e: b0:c8:4e:85 -----BEGIN CERTIFICATE----- MIIHVjCCBj6gAwIBAgIUAQ0Mn0MoWE47jPH2Amp2dY6o0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDYyMDA4NDUxMVoXDTI4MDkyMjA4NDUxMVowLzEtMCsGA1UEAxMk NjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0MGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SGSdDIb9yDvNq68L8I6bK6AA24EsvvX0NrA x/n/hkF62SFRRDiScWkK8mIYNtAdP/3bzCfSsl9UQwyD0Et751W6KgPDO4bVJ/je Jsc+gR65YHcqesabWcSufDjczskOO4sdZUi+szVE7jATVmUdTj6US0wjFkj9/hs/ GHcnH7WK3JNS/f7dBc7M7DKleKfJfqOHajf0/T5sNnPUIM9y6KBxNSUUXYaCGPXJ lDzn1qp5uxtlO07mWq+zaMihS7Lr4Km+WScaaP3v0MXUV2knQD+JvGfy3Dytj8bU 3bWCHM6Ct3gFaPlCjewrBN4SMNYhav7oWhOsBia+EHz+0q3WTQIDAQABo4IEaDCC BGQwHQYDVR0OBBYEFJc+V/UxgbFSUmfTBiul8UpIvqN1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYxOGE4YWU0LWJlNjItNGVmMC05 ZGM3LTRjNGQ4MjZhNDBkZi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2 YTQwZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MCQEAgABMB4DBASt8KADBAPHEIgDBAPHu5gDBAPObCgDBAXO4cAw FQQCAAIwDwMEACYBUAMHBCYgAQNwADA4BggrBgEFBQcBCAEB/wQpMCegJTAjAgIt eQICOGQCAk/XAgJVhgICdeUCAwCPpgIDANYSAgMGAe8wVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAffOy0vxL TFpziljj+wwwtDrFuPU5q/ApK70BeEkGUNnNkQh+TQbdlTGxHSoIuLasxTRgeSaA wZ1E226Qs8cfuFgbMW2fS3IlblUdBwtKe2stZlZgEpczl4ayK0ZGKK27HLGrcPhl J47+PqvmflBx0w9/UGujxabm78Xq+gi26HdDT1TaFrP3/iNkK8y24ByaLzExsWa9 rNSMEUjv0b4ok9EpzqRNg92QRZjJoG+Ft5TMNWWya4gD69bQf3LhbuNh8MHHH1qV Mf0yM3ieVhIM1xdMvSm7uxnAPsHRX22VEym3oG+FrDD1ytYw4hH+T8pqJ38k7CFA N2lsbFNesMhOhQ== -----END CERTIFICATE-----Generated at Mon Jul 6 19:23:51 2026 by rpki-client