$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer File: 3990f0e4-fc13-467e-a765-98d98d252d56.cer (raw, json) Hash identifier: BJL8QyK/zh4RcdEKmx3Q/9IHpwm7KNkw2WWKMOYWx5A= Subject key identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EB2AA220D4721332CB8273C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Aug 2026 00:45:11 +0000 Certificate not after: Sat 04 Nov 2028 00:45:11 +0000 Subordinate resources: AS: 4943 AS: 11215 AS: 13637 AS: 13973 AS: 25956 AS: 36366 AS: 53659 IP: 66.64.0.0/18 IP: 66.196.192.0/18 IP: 67.200.128.0/17 IP: 69.94.224.0/19 IP: 74.213.0.0/18 IP: 96.43.0.0/19 IP: 104.219.224.0/22 IP: 139.138.128.0/18 IP: 162.252.160.0/22 IP: 192.52.188.0/22 IP: 192.64.92.0/22 IP: 199.15.164.0/22 IP: 199.115.168.0/22 IP: 199.241.248.0/21 IP: 206.126.32.0/19 IP: 207.91.128.0/18 IP: 209.94.224.0/19 IP: 209.189.232.0/21 IP: 216.74.224.0/19 IP: 216.130.240.0/20 IP: 216.201.128.0/17 IP: 216.215.64.0/18 IP: 2605:b400::/32 IP: 2607:f568::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:aa:22:0d:47:21:33:2c:b8:27:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 2 00:45:11 2026 GMT Not After : Nov 4 00:45:11 2028 GMT Subject: CN=3990f0e4-fc13-467e-a765-98d98d252d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bb:c3:7f:48:fb:1f:3a:84:42:ac:3a:8e:d3: 48:07:90:8d:4f:40:fa:8f:43:12:23:16:2c:fc:1b: be:97:d4:5c:81:8c:67:b0:20:58:73:c7:cc:01:7f: 1d:13:6c:e6:2b:dd:27:21:7d:ee:58:40:87:dd:dd: c7:15:b9:52:c3:df:99:7e:60:25:5d:90:f5:5f:69: d6:3a:a3:51:97:80:64:06:bb:ab:3f:9b:88:05:e9: 6c:5a:3a:74:47:a7:b7:28:19:dd:81:21:11:5d:c6: 82:3a:0f:f1:83:ea:e7:98:ed:78:eb:c0:72:6a:c1: c5:84:c9:ec:f7:f0:0b:6e:b7:99:1a:1a:21:3f:4d: 10:08:b2:71:ae:1f:9e:11:04:31:7e:1b:77:87:e5: e6:82:dd:ff:cf:f1:5c:18:66:f0:54:92:b1:3e:c4: 2f:90:68:ea:60:ed:6f:2f:5f:bc:92:9a:1e:0b:1c: c1:f6:84:87:ea:8a:02:c3:43:2b:e9:90:d2:18:c0: 2c:49:38:34:3b:79:e4:5e:73:4d:19:62:05:7a:89: 4f:30:f7:86:2e:7a:71:bc:1e:2c:41:03:ea:ed:4b: d9:0e:98:0f:19:7a:2d:45:b1:79:0e:1c:9d:fa:02: 33:8f:b7:36:6d:9f:05:9d:64:7f:3f:fd:f6:ab:aa: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 66.64.0.0/18 66.196.192.0/18 67.200.128.0/17 69.94.224.0/19 74.213.0.0/18 96.43.0.0/19 104.219.224.0/22 139.138.128.0/18 162.252.160.0/22 192.52.188.0/22 192.64.92.0/22 199.15.164.0/22 199.115.168.0/22 199.241.248.0/21 206.126.32.0/19 207.91.128.0/18 209.94.224.0/19 209.189.232.0/21 216.74.224.0/19 216.130.240.0/20 216.201.128.0/17 216.215.64.0/18 IPv6: 2605:b400::/32 2607:f568::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4943 11215 13637 13973 25956 36366 53659 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:82:b3:1e:7d:e8:d5:d7:b0:77:f5:2b:9d:e2:01:01:30:0c: 01:30:c0:f7:a7:b9:66:cf:b2:49:97:55:68:c0:21:0e:ba:a7: 43:72:55:a3:c1:73:49:a6:b2:1a:d1:1d:e7:e2:de:71:af:51: 13:7b:06:1b:3e:57:24:83:fb:e9:97:72:6a:3f:e9:3c:35:2a: aa:dc:12:c2:14:7e:9b:79:fc:74:50:6c:c0:8d:7c:e4:3f:9e: 6e:1a:d6:74:84:68:12:00:95:4f:ac:c4:6a:ca:45:3e:81:b5: 9f:fe:f4:e1:93:30:39:00:72:fc:3f:b4:8b:1a:f3:f0:e5:89: c3:0d:43:a4:9e:d6:f7:37:e8:b3:0c:0e:1a:8a:61:a0:73:bc: 35:fd:dc:7d:27:70:ed:62:11:a1:5a:9a:c4:5f:3e:a3:7d:05: 73:27:84:b9:68:9e:68:44:58:43:ac:98:bf:29:50:16:65:20: c3:26:af:07:93:1c:fd:8e:05:ad:dc:47:d9:16:16:80:39:ec: 61:af:fe:49:8d:6f:a0:ef:ee:50:c9:44:8e:28:e4:0f:5a:31: 7c:4d:c6:06:1e:92:85:a0:76:27:09:ae:3b:fa:10:dd:9a:12: a8:39:e4:fe:48:9f:72:a7:d3:98:7d:95:9b:94:5c:2d:93:73: d7:b0:df:23 -----BEGIN CERTIFICATE----- MIIHuzCCBqOgAwIBAgIUAQ0Mn0MoWE6yqiINRyEzLLgnPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgwMjAwNDUxMVoXDTI4MTEwNDAwNDUxMVowLzEtMCsGA1UEAxMk Mzk5MGYwZTQtZmMxMy00NjdlLWE3NjUtOThkOThkMjUyZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbvDf0j7HzqEQqw6jtNIB5CNT0D6j0MSIxYs /Bu+l9RcgYxnsCBYc8fMAX8dE2zmK90nIX3uWECH3d3HFblSw9+ZfmAlXZD1X2nW OqNRl4BkBrurP5uIBelsWjp0R6e3KBndgSERXcaCOg/xg+rnmO1468ByasHFhMns 9/ALbreZGhohP00QCLJxrh+eEQQxfht3h+Xmgt3/z/FcGGbwVJKxPsQvkGjqYO1v L1+8kpoeCxzB9oSH6ooCw0Mr6ZDSGMAsSTg0O3nkXnNNGWIFeolPMPeGLnpxvB4s QQPq7UvZDpgPGXotRbF5Dhyd+gIzj7c2bZ8FnWR/P/32q6rgDwIDAQABo4IEzTCC BMkwHQYDVR0OBBYEFP89ZyImURnyc5R+bRUzHRMQpEG9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z OTkwZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5OGQyNTJkNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzM5OTBmMGU0LWZjMTMtNDY3ZS1h NzY1LTk4ZDk4ZDI1MmQ1Ni8zOTkwZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5OGQy NTJkNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwgbcGCCsGAQUF BwEHAQH/BIGnMIGkMIGLBAIAATCBhAMEBkJAAAMEBkLEwAMEB0PIgAMEBUVe4AME BkrVAAMEBWArAAMEAmjb4AMEBouKgAMEAqL8oAMEAsA0vAMEAsBAXAMEAscPpAME AsdzqAMEA8fx+AMEBc5+IAMEBs9bgAMEBdFe4AMEA9G96AMEBdhK4AMEBNiC8AME B9jJgAMEBtjXQDAUBAIAAjAOAwUAJgW0AAMFACYH9WgwMwYIKwYBBQUHAQgBAf8E JDAioCAwHgICE08CAivPAgI1RQICNpUCAmVkAgMAjg4CAwDRmzBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCF grMefejV17B39Sud4gEBMAwBMMD3p7lmz7JJl1VowCEOuqdDclWjwXNJprIa0R3n 4t5xr1ETewYbPlckg/vpl3JqP+k8NSqq3BLCFH6befx0UGzAjXzkP55uGtZ0hGgS AJVPrMRqykU+gbWf/vThkzA5AHL8P7SLGvPw5YnDDUOkntb3N+izDA4aimGgc7w1 /dx9J3DtYhGhWprEXz6jfQVzJ4S5aJ5oRFhDrJi/KVAWZSDDJq8Hkxz9jgWt3EfZ FhaAOexhr/5JjW+g7+5QyUSOKOQPWjF8TcYGHpKFoHYnCa47+hDdmhKoOeT+SJ9y p9OYfZWblFwtk3PXsN8j -----END CERTIFICATE-----Generated at Sat Aug 22 06:19:38 2026 by rpki-client