$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer File: e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer (raw, json) Hash identifier: mGbniKwkHsatuTv13KKHMKpRorl3PA8Inlpvwe6OAjc= Subject key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D1C7925D0B600E3FDC07C3000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Mar 2026 12:48:18 +0000 Certificate not after: Sun 27 Feb 2028 01:45:24 +0000 Subordinate resources: AS: 18914 AS: 25855 IP: 23.147.88.0 -- 23.147.90.255 IP: 107.161.52.0/22 IP: 167.150.244.0/22 IP: 167.254.252.0/22 IP: 204.8.100.0/22 IP: 204.8.108.0/22 IP: 206.168.14.0/23 IP: 206.168.70.0/23 IP: 206.168.98.0/23 IP: 2602:f891::/40 IP: 2607:1cc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1c:79:25:d0:b6:00:e3:fd:c0:7c:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 9 12:48:18 2026 GMT Not After : Feb 27 01:45:24 2028 GMT Subject: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:83:b2:25:70:0d:3c:2e:84:6d:e1:ad:82:6c: da:8a:de:ab:75:3b:81:e9:09:bb:d8:d4:02:9c:b8: 10:4b:49:b5:1a:bd:9b:47:91:34:b4:eb:af:60:d4: b7:74:37:2c:30:31:4a:74:c5:ff:16:f0:cf:b0:47: a2:ab:11:61:0a:56:e7:36:ac:2b:14:d9:7e:4e:f4: 40:e8:1f:5f:e1:27:46:1b:60:77:30:d4:23:94:c9: f5:cb:9f:25:79:7d:1d:3c:af:2f:51:10:2e:23:9f: 43:aa:1b:2f:f3:33:18:3b:52:a9:66:8f:66:f3:91: 2e:ee:e9:a9:46:ad:16:8f:9e:1a:cb:5d:82:a3:5f: 14:d8:99:2d:02:b6:4b:1b:ec:65:9a:4b:36:1e:b5: bc:0e:00:83:07:e9:87:1c:f7:29:79:e8:6d:5b:f3: 80:59:5f:e7:94:51:5b:fe:b9:80:8c:4b:b2:c3:6a: 87:83:ab:bb:cc:d0:34:06:3e:70:7f:6f:6c:d2:02: 51:84:36:46:1f:6a:56:c1:b8:05:45:b2:4c:97:04: 6f:1c:fc:d6:44:b4:f2:8a:d1:e6:9f:15:7c:8b:7f: 51:9e:48:2e:6b:ff:d7:3b:c2:ae:8c:0e:0f:00:90: 5c:f8:76:fa:ca:4c:56:58:d4:b4:32:6f:a0:9c:8f: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.147.88.0-23.147.90.255 107.161.52.0/22 167.150.244.0/22 167.254.252.0/22 204.8.100.0/22 204.8.108.0/22 206.168.14.0/23 206.168.70.0/23 206.168.98.0/23 IPv6: 2602:f891::/40 2607:1cc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18914 25855 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:12:a8:1c:25:42:8f:32:33:5d:9a:1d:34:5f:cf:e3:0d:0e: e0:3e:7f:e1:6d:e8:18:23:21:b4:17:ed:f0:a3:60:08:55:73: 5c:fe:89:29:fa:51:ca:41:1b:8e:d3:c6:48:ed:a9:f4:f6:8e: f8:b7:82:97:ba:f9:a1:cd:af:f8:ef:8b:8d:67:73:7e:33:ab: 72:de:f7:07:9f:eb:af:7c:a2:0e:e1:7b:55:dd:56:63:1c:7a: 00:57:22:0e:7e:8c:30:22:bc:8b:bb:c3:ac:b0:a7:7a:75:e1: fc:55:46:ce:ed:dc:e2:0b:1e:50:90:b3:ba:1d:04:79:7d:0d: 08:b1:2f:46:c5:22:db:4c:f1:68:ce:cb:33:79:d9:5b:15:9d: f0:b5:e1:e0:8e:e4:35:78:48:24:50:2e:e3:c1:f4:bf:06:c8: 52:4e:a0:c8:3a:61:a7:4d:11:dc:0f:dd:aa:91:35:c6:7d:d4: 86:48:a9:60:21:40:76:61:3e:1d:19:16:f8:db:a4:18:7e:58: 79:a0:a6:2b:02:f0:d7:d3:a0:ba:b0:79:fb:15:f8:44:cc:f4: 58:6e:9c:10:8e:5c:5f:b0:a2:53:60:82:64:2e:dd:b7:c9:31: 33:ee:52:a8:35:c9:f8:f1:90:c0:ee:34:13:4f:8e:48:25:84: 0a:82:f1:af -----BEGIN CERTIFICATE----- MIIHWzCCBkOgAwIBAgIUAQ0Mn0MoWE0ceSXQtgDj/cB8MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDMwOTEyNDgxOFoXDTI4MDIyNzAxNDUyNFowLzEtMCsGA1UEAxMk ZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJjNzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIOyJXANPC6EbeGtgmzait6rdTuB6Qm72NQC nLgQS0m1Gr2bR5E0tOuvYNS3dDcsMDFKdMX/FvDPsEeiqxFhClbnNqwrFNl+TvRA 6B9f4SdGG2B3MNQjlMn1y58leX0dPK8vURAuI59Dqhsv8zMYO1KpZo9m85Eu7ump Rq0Wj54ay12Co18U2JktArZLG+xlmks2HrW8DgCDB+mHHPcpeehtW/OAWV/nlFFb /rmAjEuyw2qHg6u7zNA0Bj5wf29s0gJRhDZGH2pWwbgFRbJMlwRvHPzWRLTyitHm nxV8i39Rnkgua//XO8KujA4PAJBc+Hb6ykxWWNS0Mm+gnI/cZQIDAQABo4IEbTCC BGkwHQYDVR0OBBYEFMeYrpPubWvtol2bcAbx3UU51x+JMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l MzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2UzOWNiOTYwLTIzOTQtNGIyMi1i OWYxLTNhYzU1NjZiYzcyYS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2 YmM3MmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwbgYIKwYBBQUH AQcBAf8EXzBdMEQEAgABMD4wDAMEAxeTWAMEABeTWgMEAmuhNAMEAqeW9AMEAqf+ /AMEAswIZAMEAswIbAMEAc6oDgMEAc6oRgMEAc6oYjAVBAIAAjAPAwYAJgL4kQAD BQAmBxzAMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAkniAgJk/zBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6 EqgcJUKPMjNdmh00X8/jDQ7gPn/hbegYIyG0F+3wo2AIVXNc/okp+lHKQRuO08ZI 7an09o74t4KXuvmhza/474uNZ3N+M6ty3vcHn+uvfKIO4XtV3VZjHHoAVyIOfoww IryLu8OssKd6deH8VUbO7dziCx5QkLO6HQR5fQ0IsS9GxSLbTPFozsszedlbFZ3w teHgjuQ1eEgkUC7jwfS/BshSTqDIOmGnTRHcD92qkTXGfdSGSKlgIUB2YT4dGRb4 26QYflh5oKYrAvDX06C6sHn7FfhEzPRYbpwQjlxfsKJTYIJkLt23yTEz7lKoNcn4 8ZDA7jQTT45IJYQKgvGv -----END CERTIFICATE-----Generated at Sun Mar 22 07:01:44 2026 by rpki-client