$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer File: 4279ddf8-3e66-45cf-8955-452fbe652c0c.cer (raw, json) Hash identifier: hm+D5yZjIlqxbPcH7sMN43puB3rpuM/caXIz06Fflyo= Subject key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584E31F73590165E3D912D038BD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Jun 2026 22:21:13 +0000 Certificate not after: Mon 17 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 14399 AS: 20376 AS: 27425 AS: 397050 IP: 64.32.38.0/23 IP: 66.242.50.0/23 IP: 104.36.88.0/22 IP: 104.204.56.0/22 IP: 162.213.164.0/22 IP: 162.250.204.0/22 IP: 168.149.192.0/19 IP: 198.203.204.0/23 IP: 198.241.49.0/24 IP: 198.241.62.0/24 IP: 199.45.168.0/21 IP: 204.9.24.0/22 IP: 204.107.216.0/24 IP: 204.144.152.0/21 IP: 207.178.96.0/19 IP: 209.137.196.0 -- 209.137.201.255 IP: 209.137.203.0 -- 209.137.207.255 IP: 209.137.209.0 -- 209.137.219.255 IP: 209.137.222.0/23 IP: 213.170.146.0/24 IP: 2606:2600::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:f7:35:90:16:5e:3d:91:2d:03:8b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jun 16 22:21:13 2026 GMT Not After : Jan 17 01:45:23 2028 GMT Subject: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:2e:19:ae:31:0f:6f:cc:1c:52:0b:e1:95: 81:37:d8:9a:eb:47:43:12:55:e9:24:32:40:d7:7b: 39:dc:28:bf:f9:b9:75:8a:6e:a7:af:23:37:be:fc: 91:3c:5c:e8:42:9e:5a:06:70:53:6b:09:91:1f:30: 58:36:c7:24:11:0a:4b:31:e5:d4:58:01:60:c2:3b: dd:dc:54:c1:db:75:21:4f:52:0d:f1:d7:cb:a5:99: 54:b5:40:c6:e9:6b:65:92:2f:5d:6d:48:61:96:d7: 70:b2:06:f9:6a:2a:26:73:23:82:f0:ff:eb:43:88: 4c:49:cd:8c:41:d2:f1:92:0a:0a:97:aa:6f:74:8f: c0:00:09:b0:71:ea:0f:46:49:2d:1b:11:ba:30:47: 03:14:09:d3:17:74:02:b3:1e:34:03:4a:f8:56:41: 3a:58:c9:3a:c6:36:ea:61:14:e0:11:e4:65:9f:d4: 34:ce:4d:ca:ac:00:29:7c:3f:a6:7e:5a:b1:b7:77: 6c:37:fa:35:7a:78:1b:62:5d:ea:c1:4b:d7:f1:5b: 70:57:98:14:ff:74:6b:ad:4e:79:d4:dc:e0:70:f1: a1:5d:c1:ed:22:11:d9:99:15:57:43:df:4c:ef:52: 8a:35:0e:35:88:c2:5e:c1:fa:00:28:92:1a:ed:10: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 64.32.38.0/23 66.242.50.0/23 104.36.88.0/22 104.204.56.0/22 162.213.164.0/22 162.250.204.0/22 168.149.192.0/19 198.203.204.0/23 198.241.49.0/24 198.241.62.0/24 199.45.168.0/21 204.9.24.0/22 204.107.216.0/24 204.144.152.0/21 207.178.96.0/19 209.137.196.0-209.137.201.255 209.137.203.0-209.137.207.255 209.137.209.0-209.137.219.255 209.137.222.0/23 213.170.146.0/24 IPv6: 2606:2600::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14399 20376 27425 397050 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:75:6f:8d:cb:45:83:fb:1a:e7:49:d7:0f:c9:74:c1:f0:2a: ac:75:9d:04:19:43:b4:0b:33:46:e4:42:21:8e:3b:af:be:dd: 82:6a:47:cd:38:cb:23:71:54:86:31:4e:19:49:6d:da:20:e0: 80:8a:08:90:ba:3f:83:1d:69:f7:b1:04:c7:81:60:56:64:47: 6b:a7:86:6d:b7:8c:ee:76:20:71:8e:98:de:37:c8:32:46:b8: ac:93:80:b4:cb:b4:0e:9e:d1:a8:4e:fd:8c:eb:fe:92:0b:f4: 6b:df:91:a4:69:ee:2b:6e:f1:7f:3f:d8:87:1c:b8:45:e3:97: eb:72:12:c5:64:ad:bd:b9:50:1f:e0:e5:4c:ea:71:a6:be:d8: c4:22:b1:b2:e5:6b:eb:0d:7e:f0:85:b7:33:a6:2b:19:6b:ea: 68:ac:87:51:c9:89:5e:28:d3:15:52:27:43:e5:50:1f:ff:57: c1:43:41:af:c5:4d:ca:8d:9e:c8:7b:33:1f:10:f7:02:ae:c6: 03:28:a8:41:76:67:7c:cc:70:31:3e:a6:92:c5:27:73:cc:27: b9:f9:fb:a3:18:d9:f1:ab:28:35:12:c6:42:18:09:39:5f:40: 3a:1b:8d:d6:b8:8e:b4:2f:2a:07:b1:d2:1e:64:d3:0b:81:94: 63:3b:c3:88 -----BEGIN CERTIFICATE----- MIIHszCCBpugAwIBAgIUAQ0Mn0MoWE4x9zWQFl49kS0Di9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDYxNjIyMjExM1oXDTI4MDExNzAxNDUyM1owLzEtMCsGA1UEAxMk NDI3OWRkZjgtM2U2Ni00NWNmLTg5NTUtNDUyZmJlNjUyYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+UuGa4xD2/MHFIL4ZWBN9ia60dDElXpJDJA 13s53Ci/+bl1im6nryM3vvyRPFzoQp5aBnBTawmRHzBYNsckEQpLMeXUWAFgwjvd 3FTB23UhT1IN8dfLpZlUtUDG6Wtlki9dbUhhltdwsgb5aiomcyOC8P/rQ4hMSc2M QdLxkgoKl6pvdI/AAAmwceoPRkktGxG6MEcDFAnTF3QCsx40A0r4VkE6WMk6xjbq YRTgEeRln9Q0zk3KrAApfD+mflqxt3dsN/o1engbYl3qwUvX8VtwV5gU/3RrrU55 1NzgcPGhXcHtIhHZmRVXQ99M71KKNQ41iMJewfoAKJIa7RAn+wIDAQABo4IExTCC BMEwHQYDVR0OBBYEFMqiZBunt0x+imCDTw5Cu3ikUPCEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80 Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2NTJjMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzQyNzlkZGY4LTNlNjYtNDVjZi04 OTU1LTQ1MmZiZTY1MmMwYy80Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2 NTJjMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgbwGCCsGAQUF BwEHAQH/BIGsMIGpMIGXBAIAATCBkAMEAUAgJgMEAULyMgMEAmgkWAMEAmjMOAME AqLVpAMEAqL6zAMEBaiVwAMEAcbLzAMEAMbxMQMEAMbxPgMEA8ctqAMEAswJGAME AMxr2AMEA8yQmAMEBc+yYDAMAwQC0YnEAwQB0YnIMAwDBADRicsDBATRicAwDAME ANGJ0QMEAtGJ2AMEAdGJ3gMEANWqkjANBAIAAjAHAwUEJgYmADAmBggrBgEFBQcB CAEB/wQXMBWgEzARAgI4PwICT5gCAmshAgMGDvowVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAO3VvjctFg/sa 50nXD8l0wfAqrHWdBBlDtAszRuRCIY47r77dgmpHzTjLI3FUhjFOGUlt2iDggIoI kLo/gx1p97EEx4FgVmRHa6eGbbeM7nYgcY6Y3jfIMka4rJOAtMu0Dp7RqE79jOv+ kgv0a9+RpGnuK27xfz/Yhxy4ReOX63ISxWStvblQH+DlTOpxpr7YxCKxsuVr6w1+ 8IW3M6YrGWvqaKyHUcmJXijTFVInQ+VQH/9XwUNBr8VNyo2eyHszHxD3Aq7GAyio QXZnfMxwMT6mksUnc8wnufn7oxjZ8asoNRLGQhgJOV9AOhuN1riOtC8qB7HSHmTT C4GUYzvDiA== -----END CERTIFICATE-----Generated at Sun Jun 21 08:19:01 2026 by rpki-client