$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer File: 4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer (raw, json) Hash identifier: Hf9YiOO66PV2A/QU560JlRmZS8sfR5+U+aiBVeOCz9M= Subject key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584E5FD7D6B8F6897A9CF3AB9180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Jul 2026 08:45:11 +0000 Certificate not after: Thu 05 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 11184 AS: 12058 AS: 20165 AS: 20296 AS: 25974 AS: 30630 AS: 46428 AS: 54018 AS: 397089 AS: 397429 AS: 397846 IP: 173.209.80.0/20 IP: 198.151.48.0/23 IP: 198.151.52.0/23 IP: 198.151.60.0/23 IP: 198.175.45.0/24 IP: 198.175.55.0 -- 198.175.58.255 IP: 199.247.88.0/21 IP: 208.64.80.0/21 IP: 208.95.96.0/21 IP: 216.251.112.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:d7:d6:b8:f6:89:7a:9c:f3:ab:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 3 08:45:11 2026 GMT Not After : Oct 5 08:45:11 2028 GMT Subject: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:20:29:57:8e:47:16:e9:f0:3c:87:f2:31: f6:ae:10:9e:e9:31:ee:85:0e:5c:eb:e3:67:33:6e: 3d:2c:30:55:83:df:42:09:98:38:d4:2f:93:61:5b: 89:27:8a:1d:35:2a:72:cc:fc:71:af:e9:db:95:85: e4:d4:7b:02:c0:ae:e8:a2:a5:e9:1f:13:03:ae:d5: 5e:0d:a5:e5:eb:6f:f3:88:19:3e:47:ef:9a:de:39: ba:ad:ce:66:9e:e8:97:99:9a:36:16:23:b9:bd:e5: fd:9c:ce:28:80:33:93:f8:34:4a:57:d3:b4:eb:6d: 7e:0b:e4:81:c2:88:44:23:e3:7b:32:68:24:07:e1: b0:e5:5f:25:8b:72:d2:f9:4b:6e:28:54:65:41:3d: d2:ef:10:ca:b5:25:63:3c:d4:76:2d:d8:25:d6:0a: e2:38:92:e4:5e:82:19:d6:fb:f6:d0:b6:0b:3b:6f: d0:d0:df:88:04:72:ef:68:45:33:b9:c8:90:b5:40: b4:72:40:10:4f:01:2f:91:8c:43:42:4f:01:89:46: a1:2b:af:2a:f0:b8:2e:ab:b0:a0:b9:22:90:30:52: b3:9f:a7:bb:82:8c:29:98:56:e7:a3:9d:e3:34:f3: a8:0a:82:43:fe:dc:2a:0f:4f:e0:fe:7f:2c:bd:7f: e7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 173.209.80.0/20 198.151.48.0/23 198.151.52.0/23 198.151.60.0/23 198.175.45.0/24 198.175.55.0-198.175.58.255 199.247.88.0/21 208.64.80.0/21 208.95.96.0/21 216.251.112.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11184 12058 20165 20296 25974 30630 46428 54018 397089 397429 397846 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e0:10:5c:34:4c:f2:ce:15:b4:a7:3d:98:a0:3b:14:ba:62: fd:90:bd:c5:aa:cb:56:db:61:0d:c2:09:77:8b:0d:c2:3d:e2: 99:92:ea:37:af:c6:2f:8d:22:e6:8c:48:38:84:91:ce:8f:07: 92:ea:81:a0:3b:a0:87:a3:2c:1a:6f:04:ba:63:57:e1:22:d5: 61:8a:56:b2:8b:c6:5d:e4:d5:68:a7:c4:ae:fa:64:29:5c:bf: 33:93:ba:6a:58:ad:bb:90:e7:95:ee:ee:bc:f6:79:44:e1:b5: 24:20:a3:18:ed:99:e4:3d:5a:f6:64:af:09:bf:1e:31:9a:94: db:13:dd:dc:91:fe:31:ab:6b:c8:9c:c3:85:f0:60:7f:8f:00: 18:60:ee:94:f1:28:0f:f6:92:a1:00:78:e3:cc:74:68:5e:15: 8c:be:ff:77:80:4a:65:ea:bc:ef:ab:50:9d:39:9f:bd:0c:c1: b6:2e:06:80:31:d7:c9:81:31:fc:7d:35:33:ab:1f:f1:03:7f: 4d:07:91:c9:92:53:65:ec:fd:7e:bb:46:03:46:4d:cd:39:fd: bc:9b:2d:5d:e5:77:3d:23:13:67:cc:35:0b:a5:ca:51:78:aa: aa:8c:1f:fb:02:89:fd:ba:65:56:a1:ce:e8:ba:f9:71:3b:02: 59:a9:06:fa -----BEGIN CERTIFICATE----- MIIHczCCBlugAwIBAgIUAQ0Mn0MoWE5f19a49ol6nPOrkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDcwMzA4NDUxMVoXDTI4MTAwNTA4NDUxMVowLzEtMCsGA1UEAxMk NGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBlMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUogKVeORxbp8DyH8jH2rhCe6THuhQ5c6+Nn M249LDBVg99CCZg41C+TYVuJJ4odNSpyzPxxr+nblYXk1HsCwK7ooqXpHxMDrtVe DaXl62/ziBk+R++a3jm6rc5mnuiXmZo2FiO5veX9nM4ogDOT+DRKV9O0621+C+SB wohEI+N7MmgkB+Gw5V8li3LS+UtuKFRlQT3S7xDKtSVjPNR2Ldgl1griOJLkXoIZ 1vv20LYLO2/Q0N+IBHLvaEUzuciQtUC0ckAQTwEvkYxDQk8BiUahK68q8Lguq7Cg uSKQMFKzn6e7gowpmFbno53jNPOoCoJD/twqD0/g/n8svX/n4QIDAQABo4IEhTCC BIEwHQYDVR0OBBYEFCG0bb/LGSqNKVTwayCCg8ISG3/ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80 ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzRlODdjMGIzLTM4M2EtNDM4Yy1h YTQ1LTFlNWRmMGQwZTA2MS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBk MGUwNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwXQYIKwYBBQUH AQcBAf8ETjBMMEoEAgABMEQDBASt0VADBAHGlzADBAHGlzQDBAHGlzwDBADGry0w DAMEAMavNwMEAMavOgMEA8f3WAMEA9BAUAMEA9BfYAMEBNj7cDBGBggrBgEFBQcB CAEB/wQ3MDWgMzAxAgIrsAICLxoCAk7FAgJPSAICZXYCAnemAgMAtVwCAwDTAgID Bg8hAgMGEHUCAwYSFjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAD4BBcNEzyzhW0pz2YoDsUumL9kL3FqstW 22ENwgl3iw3CPeKZkuo3r8YvjSLmjEg4hJHOjweS6oGgO6CHoywabwS6Y1fhItVh ilayi8Zd5NVop8Su+mQpXL8zk7pqWK27kOeV7u689nlE4bUkIKMY7ZnkPVr2ZK8J vx4xmpTbE93ckf4xq2vInMOF8GB/jwAYYO6U8SgP9pKhAHjjzHRoXhWMvv93gEpl 6rzvq1CdOZ+9DMG2LgaAMdfJgTH8fTUzqx/xA39NB5HJklNl7P1+u0YDRk3NOf28 my1d5Xc9IxNnzDULpcpReKqqjB/7Aon9umVWoc7ouvlxOwJZqQb6 -----END CERTIFICATE-----Generated at Mon Jul 6 19:23:33 2026 by rpki-client