$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer File: 05a654f5-4306-42f8-a547-0a21265d5db2.cer (raw, json) Hash identifier: Oa+Rego5gwA+1PuObintE3vzr8DIBqLPex6sNKCHsw4= Subject key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584EE392867829964DF035080780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Aug 2026 13:12:14 +0000 Certificate not after: Fri 07 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 1766 AS: 32076 AS: 400380 IP: 64.30.148.0/22 IP: 81.199.36.0/22 IP: 81.199.144.0/23 IP: 131.126.0.0/16 IP: 144.201.0.0/16 IP: 146.156.0.0/16 IP: 147.195.0.0/16 IP: 150.127.0.0/16 IP: 158.21.0.0 -- 158.22.255.255 IP: 158.25.0.0 -- 158.35.255.255 IP: 158.55.0.0/16 IP: 159.70.0.0/16 IP: 159.129.0.0/16 IP: 159.131.0.0/16 IP: 192.65.173.0/24 IP: 192.67.48.0/24 IP: 192.83.106.0/24 IP: 192.104.83.0/24 IP: 198.43.0.0/16 IP: 2620:140::/38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:92:86:78:29:96:4d:f0:35:08:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Aug 19 13:12:14 2026 GMT Not After : Jul 7 12:45:17 2028 GMT Subject: CN=05a654f5-4306-42f8-a547-0a21265d5db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:7b:e6:5f:59:f4:49:eb:64:69:b1:a3:d4: b5:4f:57:17:f1:e0:7c:ae:55:11:b9:a9:44:10:56: 09:3a:d2:9c:aa:02:49:ad:4c:aa:d0:36:d2:d0:6e: 2e:56:7a:18:c0:21:89:b3:f0:c7:dc:22:b0:ac:c4: 04:4f:d1:3b:0d:e0:a9:b8:ee:39:5d:b2:b3:e4:b6: 5f:fe:6c:ae:90:fa:d0:f8:4a:bc:92:5d:d0:aa:ed: 2d:43:d2:46:a8:e9:fd:5d:f4:a0:88:e4:de:ee:ce: 15:f8:4a:11:15:7d:47:a0:74:1f:41:1b:c9:5b:ec: ec:0b:15:5c:15:e0:07:b7:37:ff:a2:40:50:9c:3e: 79:bf:24:1c:af:ed:ae:06:cd:fc:4f:2c:03:a1:24: 6c:10:d6:d8:ab:28:91:73:f9:ea:37:33:02:4d:44: c9:4d:d9:a6:fa:1b:d3:33:e4:8a:f5:3e:51:82:5d: d4:47:5c:39:e3:62:94:a8:28:05:77:fc:e1:3c:67: 7e:01:50:74:22:e0:37:e5:15:a1:73:07:76:10:9f: 60:e8:bd:99:9f:c6:b5:ac:b5:c2:54:9b:c1:9d:41: 6e:5a:4f:08:a8:0b:bc:39:5e:76:15:0c:11:cc:7c: 1b:6c:5a:23:9e:6a:c9:19:07:2d:e7:d7:62:fe:87: c7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 64.30.148.0/22 81.199.36.0/22 81.199.144.0/23 131.126.0.0/16 144.201.0.0/16 146.156.0.0/16 147.195.0.0/16 150.127.0.0/16 158.21.0.0-158.22.255.255 158.25.0.0-158.35.255.255 158.55.0.0/16 159.70.0.0/16 159.129.0.0/16 159.131.0.0/16 192.65.173.0/24 192.67.48.0/24 192.83.106.0/24 192.104.83.0/24 198.43.0.0/16 IPv6: 2620:140::/38 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1766 32076 400380 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:12:32:d1:f9:36:d3:76:d3:f7:4e:78:18:2d:a3:6f:19:6c: b4:63:d3:58:7e:4e:d9:75:ab:a9:ad:27:de:83:e9:1c:5c:77: 04:48:c5:75:92:19:b7:fc:a5:f2:33:a3:02:53:1e:50:7a:df: 2c:1d:e2:cd:5b:41:f7:c1:62:ff:47:22:ff:45:f7:59:c5:9d: 20:a8:c3:4d:b7:b3:01:68:5d:e7:3a:9e:b6:a3:e6:d6:34:1d: bc:9b:9c:3b:1c:5b:fc:38:74:d6:74:4e:82:75:5b:d4:4a:a9: 88:ec:42:2e:15:f9:f1:fc:f3:cf:e4:f4:54:f8:c9:72:54:50: 03:eb:f7:28:72:b5:aa:3f:80:87:d5:33:d1:10:ce:e0:d1:66: 78:99:41:85:3d:91:a6:5b:28:02:7d:47:13:40:aa:a3:62:ef: f3:f5:7e:d7:4b:bc:95:61:25:c5:a5:c8:24:5e:0f:a2:bf:40: 6d:97:4f:b8:c5:95:32:07:03:1f:53:a3:f5:28:15:31:cf:c6: 1e:49:4d:ec:25:71:d8:23:e9:7f:e3:eb:3a:09:8d:d5:60:35: 7f:dc:62:ea:86:90:84:5b:fe:1b:0d:a8:d1:6f:26:91:e8:64: 12:a1:22:6f:e2:26:0b:0c:40:be:34:55:26:de:bc:ee:26:5a: 3d:74:d4:c9 -----BEGIN CERTIFICATE----- MIIHkjCCBnqgAwIBAgIUAQ0Mn0MoWE7jkoZ4KZZN8DUIB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDgxOTEzMTIxNFoXDTI4MDcwNzEyNDUxN1owLzEtMCsGA1UEAxMk MDVhNjU0ZjUtNDMwNi00MmY4LWE1NDctMGEyMTI2NWQ1ZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVt75l9Z9EnrZGmxo9S1T1cX8eB8rlURualE EFYJOtKcqgJJrUyq0DbS0G4uVnoYwCGJs/DH3CKwrMQET9E7DeCpuO45XbKz5LZf /myukPrQ+Eq8kl3Qqu0tQ9JGqOn9XfSgiOTe7s4V+EoRFX1HoHQfQRvJW+zsCxVc FeAHtzf/okBQnD55vyQcr+2uBs38TywDoSRsENbYqyiRc/nqNzMCTUTJTdmm+hvT M+SK9T5Rgl3UR1w542KUqCgFd/zhPGd+AVB0IuA35RWhcwd2EJ9g6L2Zn8a1rLXC VJvBnUFuWk8IqAu8OV52FQwRzHwbbFojnmrJGQct59di/ofHfQIDAQABo4IEpDCC BKAwHQYDVR0OBBYEFHKmdXN3dv5L5+A55YXdj8L6f91jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w NWE2NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIxMjY1ZDVkYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzA1YTY1NGY1LTQzMDYtNDJmOC1h NTQ3LTBhMjEyNjVkNWRiMi8wNWE2NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIxMjY1 ZDVkYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwgZ8GCCsGAQUF BwEHAQH/BIGPMIGMMHoEAgABMHQDBAJAHpQDBAJRxyQDBAFRx5ADAwCDfgMDAJDJ AwMAkpwDAwCTwwMDAJZ/MAoDAwCeFQMDAJ4WMAoDAwCeGQMDAp4gAwMAnjcDAwCf RgMDAJ+BAwMAn4MDBADAQa0DBADAQzADBADAU2oDBADAaFMDAwDGKzAOBAIAAjAI AwYCJiABQAAwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICBuYCAn1MAgMGG/wwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcRIy0fk203bT9054GC2jbxlstGPTWH5O2XWrqa0n3oPpHFx3BEjFdZIZ t/yl8jOjAlMeUHrfLB3izVtB98Fi/0ci/0X3WcWdIKjDTbezAWhd5zqetqPm1jQd vJucOxxb/Dh01nROgnVb1EqpiOxCLhX58fzzz+T0VPjJclRQA+v3KHK1qj+Ah9Uz 0RDO4NFmeJlBhT2RplsoAn1HE0Cqo2Lv8/V+10u8lWElxaXIJF4Por9AbZdPuMWV MgcDH1Oj9SgVMc/GHklN7CVx2CPpf+PrOgmN1WA1f9xi6oaQhFv+Gw2o0W8mkehk EqEib+ImCwxAvjRVJt687iZaPXTUyQ== -----END CERTIFICATE-----Generated at Fri Aug 21 00:19:10 2026 by rpki-client