$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer File: 68b39235-773a-4108-9528-465304a966b3.cer (raw, json) Hash identifier: DjC8riS5I1ihE5Rn8gxrA2H3E5HB2wI8vatx6tCZj3Y= Subject key identifier: BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D3597D89820739463D7579DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Mar 2026 12:45:22 +0000 Certificate not after: Tue 20 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 63296 IP: 23.174.240.0/24 IP: 52.129.120.0/21 IP: 104.245.72.0/21 IP: 107.178.20.0/24 IP: 107.178.28.0/24 IP: 107.178.31.0/24 IP: 2605:fa40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:97:d8:98:20:73:94:63:d7:57:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 18 12:45:22 2026 GMT Not After : Jun 20 12:45:22 2028 GMT Subject: CN=68b39235-773a-4108-9528-465304a966b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dd:47:aa:22:8a:15:70:4d:75:7a:3d:b8:1c: 0e:e1:06:7e:1e:c2:53:f4:2c:0f:42:e4:34:57:90: ce:b5:b8:78:f3:3a:04:6c:ea:6b:5f:66:fe:df:fb: d2:01:c5:3e:a4:bb:50:f7:15:8f:28:e6:85:72:76: a8:ea:6b:a2:67:41:af:a7:00:93:ec:3b:07:b5:df: 69:a6:c2:63:6c:fe:67:19:81:2d:72:63:64:40:31: a7:ae:16:71:39:75:8e:6a:14:b6:15:5a:ab:9a:01: 03:9a:15:50:b9:bb:ec:bc:36:db:3b:dc:0d:1e:5a: d0:78:e7:40:38:5f:4e:3f:57:71:b5:1b:b2:cc:93: 68:e3:35:ef:0c:a8:00:de:65:ca:d1:9f:75:54:35: ba:06:70:fa:0e:26:f1:29:49:47:c7:e3:46:d9:f7: cb:4b:7a:72:f9:4f:8e:56:4a:0b:58:11:23:e9:c2: f0:33:29:e1:8a:1f:7f:14:52:65:27:23:14:09:ec: 0d:61:9e:0a:e6:cb:e0:b1:ab:e6:5f:45:02:b4:49: d1:f9:6d:ea:4b:39:ec:91:e9:aa:50:19:b9:6f:f1: 25:e8:28:6c:1e:46:b2:57:a2:48:26:1b:7c:f7:4e: e1:0b:02:fc:af:5a:98:4b:e6:1f:e5:d3:6d:42:4b: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.174.240.0/24 52.129.120.0/21 104.245.72.0/21 107.178.20.0/24 107.178.28.0/24 107.178.31.0/24 IPv6: 2605:fa40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63296 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d7:0f:7a:3c:4a:04:9c:81:d9:ba:88:66:dc:b1:bb:2b:da: e8:e7:2d:00:70:e6:15:02:23:16:04:7a:e4:ea:41:f9:aa:c5: e8:19:7a:b6:85:b9:df:b8:38:1a:f7:2a:1f:36:6d:7f:3a:89: d6:e0:f3:e9:6c:e7:85:f2:28:5a:71:23:70:1f:86:94:25:72: 2d:91:3d:b8:5f:10:44:9f:c4:d9:f9:cd:1e:26:77:db:a9:28: 83:2a:f2:c4:5f:2d:1a:02:1c:db:e2:61:cc:12:ba:5b:29:52: 01:b6:29:ae:dc:f3:98:b1:1c:8f:2d:4c:e0:f5:80:41:89:f8: 47:ba:02:79:ab:7a:14:19:fc:d4:30:0a:8d:f4:28:d9:70:27: eb:bf:bc:49:2c:1d:3d:29:b4:94:90:56:5f:33:e5:f6:d3:93: df:67:1e:be:c5:5b:c0:27:fc:ba:86:46:ab:c0:0a:78:f1:38: 94:a8:4e:e4:c8:a3:a0:65:ac:71:fc:d4:34:8a:c2:3d:56:fb: f4:6c:ed:21:29:5c:54:4a:d2:83:4d:82:34:6c:e7:f3:a8:e1: f0:77:e6:2d:11:e1:fb:98:76:8a:03:3f:8d:7a:3a:4c:53:29: 2b:c4:74:c3:5f:d4:c0:53:00:86:b1:e6:70:1c:02:72:ee:4d: 95:d7:37:fc -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWE01l9iYIHOUY9dXncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDMxODEyNDUyMloXDTI4MDYyMDEyNDUyMlowLzEtMCsGA1UEAxMk NjhiMzkyMzUtNzczYS00MTA4LTk1MjgtNDY1MzA0YTk2NmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t1HqiKKFXBNdXo9uBwO4QZ+HsJT9CwPQuQ0 V5DOtbh48zoEbOprX2b+3/vSAcU+pLtQ9xWPKOaFcnao6muiZ0GvpwCT7DsHtd9p psJjbP5nGYEtcmNkQDGnrhZxOXWOahS2FVqrmgEDmhVQubvsvDbbO9wNHlrQeOdA OF9OP1dxtRuyzJNo4zXvDKgA3mXK0Z91VDW6BnD6DibxKUlHx+NG2ffLS3py+U+O VkoLWBEj6cLwMynhih9/FFJlJyMUCewNYZ4K5svgsavmX0UCtEnR+W3qSznskemq UBm5b/El6ChsHkayV6JIJht8907hCwL8r1qYS+Yf5dNtQku4fQIDAQABo4IESDCC BEQwHQYDVR0OBBYEFL63jg/jZT9ayQV6Ykzce3Gu/kUBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 OGIzOTIzNS03NzNhLTQxMDgtOTUyOC00NjUzMDRhOTY2YjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzY4YjM5MjM1LTc3M2EtNDEwOC05 NTI4LTQ2NTMwNGE5NjZiMy82OGIzOTIzNS03NzNhLTQxMDgtOTUyOC00NjUzMDRh OTY2YjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAAXrvADBAM0gXgDBANo9UgDBABrshQDBABrshwD BABrsh8wDQQCAAIwBwMFACYF+kAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPdA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGPXD3o8SgScgdm6iGbcsbsr2ujnLQBw5hUCIxYEeuTqQfmqxegZ eraFud+4OBr3Kh82bX86idbg8+ls54XyKFpxI3AfhpQlci2RPbhfEESfxNn5zR4m d9upKIMq8sRfLRoCHNviYcwSulspUgG2Ka7c85ixHI8tTOD1gEGJ+Ee6AnmrehQZ /NQwCo30KNlwJ+u/vEksHT0ptJSQVl8z5fbTk99nHr7FW8An/LqGRqvACnjxOJSo TuTIo6BlrHH81DSKwj1W+/Rs7SEpXFRK0oNNgjRs5/Oo4fB35i0R4fuYdooDP416 OkxTKSvEdMNf1MBTAIax5nAcAnLuTZXXN/w= -----END CERTIFICATE-----Generated at Sun Mar 22 07:00:07 2026 by rpki-client