$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer File: 0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer (raw, json) Hash identifier: eCWv+iQPb77miQ3aSDP2UD7fz1Fcd7Mcz0DTr6RW9Q0= Subject key identifier: A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584CAA1F698F39FA8716F327F530 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 Jan 2026 13:45:21 +0000 Certificate not after: Mon 01 May 2028 12:45:21 +0000 Subordinate resources: AS: 12175 AS: 14517 AS: 20394 IP: 66.243.212.0/22 IP: 66.243.223.0/24 IP: 66.243.225.0 -- 66.243.226.255 IP: 66.243.232.0 -- 66.243.255.255 IP: 69.10.192.0/19 IP: 71.161.76.0/22 IP: 74.50.192.0/20 IP: 74.209.8.0/22 IP: 74.209.52.0/22 IP: 216.177.224.0/19 IP: 216.227.6.0/23 IP: 216.227.100.0 -- 216.227.117.255 IP: 2604:b100::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:1f:69:8f:39:fa:87:16:f3:27:f5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 27 13:45:21 2026 GMT Not After : May 1 12:45:21 2028 GMT Subject: CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:d5:fa:fe:62:35:14:3b:35:35:ba:5d:49: 5e:c9:9a:50:aa:37:36:61:40:4f:d8:87:91:0f:cd: 69:e9:5b:29:1d:84:c2:ca:2c:a1:f9:1b:33:e6:ba: ea:25:0d:91:d3:8e:4f:be:c8:b2:81:a7:52:33:5d: ee:d7:90:52:6e:ca:3a:a9:dd:52:18:c0:df:a7:60: 7a:03:3c:a7:c4:fe:a9:c2:5f:07:2d:bb:9d:55:b9: 03:f8:4e:0d:01:d4:03:3c:3d:d5:5e:95:41:32:38: bb:7e:02:b6:d0:18:a5:5d:92:e4:a2:a6:df:59:cf: 0e:51:91:f0:3e:a6:4d:77:d8:20:bb:20:0e:db:87: 38:1f:d1:62:1d:d1:b2:46:56:f5:eb:eb:32:75:e5: 68:d4:12:1c:0d:36:96:c1:8d:27:0a:16:5d:39:f3: 67:a6:c7:96:cb:82:55:d0:4e:0f:61:2f:a8:de:8f: aa:40:55:bd:da:44:67:b4:fc:a4:8b:c4:55:48:66: 52:64:e0:cc:66:b6:7a:12:93:a3:97:c1:09:66:c8: 77:13:0f:de:32:bf:ce:f3:f5:55:81:8c:6a:6f:90: fe:3b:09:1e:df:e2:1f:60:44:3e:5a:70:7d:23:5a: 26:d7:ad:8f:36:22:b1:b8:d5:fa:17:7d:72:fe:a8: b2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.243.212.0/22 66.243.223.0/24 66.243.225.0-66.243.226.255 66.243.232.0-66.243.255.255 69.10.192.0/19 71.161.76.0/22 74.50.192.0/20 74.209.8.0/22 74.209.52.0/22 216.177.224.0/19 216.227.6.0/23 216.227.100.0-216.227.117.255 IPv6: 2604:b100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12175 14517 20394 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:4a:62:92:3b:b3:f7:9c:bf:71:e6:55:85:de:d3:5c:81:49: d9:97:e4:5e:cd:a9:96:87:d2:94:2d:18:d1:60:72:e5:9e:78: 01:ed:d2:c0:6f:ff:0e:37:2e:11:71:70:70:52:5c:77:e0:8f: d6:cf:d9:ee:fd:19:49:13:ef:e7:5a:66:42:96:0e:e6:07:5f: dc:b3:85:14:72:85:52:24:22:d7:34:54:14:0b:f6:f7:ae:b1: 8c:bb:05:de:95:e0:df:00:27:2f:62:dc:5a:a4:f1:52:18:8e: d3:40:98:cd:43:c9:a6:84:73:28:ed:c8:fd:3f:77:ef:73:2d: dc:b2:aa:67:12:30:03:b8:34:e5:bf:2c:05:95:02:96:75:51: 37:cc:e8:e6:23:2e:89:52:b8:84:c8:bc:60:ee:df:fe:74:0f: 0b:de:19:56:ec:9b:88:77:72:11:5b:2c:a8:9d:a1:e1:a4:fc: 89:0c:67:55:0a:86:c6:4e:7a:5f:31:15:38:f0:cf:aa:71:14: e6:4c:a2:85:7a:63:13:b1:69:c6:b3:c7:f7:cd:46:d6:88:46: 3c:43:2a:20:8c:b8:2b:56:5f:3c:13:ce:b7:2c:59:7c:a9:7f: fc:f2:f6:e3:0a:e9:65:74:7e:e8:60:da:1c:36:d9:74:05:3a: e4:da:91:d2 -----BEGIN CERTIFICATE----- MIIHeTCCBmGgAwIBAgIUAQ0Mn0MoWEyqH2mPOfqHFvMn9TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDEyNzEzNDUyMVoXDTI4MDUwMTEyNDUyMVowLzEtMCsGA1UEAxMk MDc5NWI3YjktZjJkYS00NGZhLWIxODEtZDc0YTU3ZjY0ZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9nV+v5iNRQ7NTW6XUleyZpQqjc2YUBP2IeR D81p6VspHYTCyiyh+Rsz5rrqJQ2R045PvsiygadSM13u15BSbso6qd1SGMDfp2B6 AzynxP6pwl8HLbudVbkD+E4NAdQDPD3VXpVBMji7fgK20BilXZLkoqbfWc8OUZHw PqZNd9gguyAO24c4H9FiHdGyRlb16+sydeVo1BIcDTaWwY0nChZdOfNnpseWy4JV 0E4PYS+o3o+qQFW92kRntPyki8RVSGZSZODMZrZ6EpOjl8EJZsh3Ew/eMr/O8/VV gYxqb5D+Owke3+IfYEQ+WnB9I1om162PNiKxuNX6F31y/qiyNwIDAQABo4IEizCC BIcwHQYDVR0OBBYEFKP7HVnNL9vkTliKWLtuTW8ndkoDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w Nzk1YjdiOS1mMmRhLTQ0ZmEtYjE4MS1kNzRhNTdmNjRlMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzA3OTViN2I5LWYyZGEtNDRmYS1i MTgxLWQ3NGE1N2Y2NGUxYi8wNzk1YjdiOS1mMmRhLTQ0ZmEtYjE4MS1kNzRhNTdm NjRlMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgYcGCCsGAQUF BwEHAQH/BHgwdjBlBAIAATBfAwQCQvPUAwQAQvPfMAwDBABC8+EDBABC8+IwCwME A0Lz6AMDAkLwAwQFRQrAAwQCR6FMAwQESjLAAwQCStEIAwQCStE0AwQF2LHgAwQB 2OMGMAwDBALY42QDBAHY43QwDQQCAAIwBwMFACYEsQAwIQYIKwYBBQUHAQgBAf8E EjAQoA4wDAICL48CAji1AgJPqjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXSmKSO7P3nL9x5lWF3tNcgUnZ l+RezamWh9KULRjRYHLlnngB7dLAb/8ONy4RcXBwUlx34I/Wz9nu/RlJE+/nWmZC lg7mB1/cs4UUcoVSJCLXNFQUC/b3rrGMuwXeleDfACcvYtxapPFSGI7TQJjNQ8mm hHMo7cj9P3fvcy3csqpnEjADuDTlvywFlQKWdVE3zOjmIy6JUriEyLxg7t/+dA8L 3hlW7JuId3IRWyyonaHhpPyJDGdVCobGTnpfMRU48M+qcRTmTKKFemMTsWnGs8f3 zUbWiEY8QyogjLgrVl88E863LFl8qX/88vbjCulldH7oYNocNtl0BTrk2pHS -----END CERTIFICATE-----Generated at Mon Mar 2 04:16:25 2026 by rpki-client