$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer File: 23658315-b56f-46db-89d2-184000d7f7e1.cer (raw, json) Hash identifier: wlnu8HGai7TO58t/taCnahLZrTtIXLYxphlU07RBEBc= Subject key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584DE54F332316EEAF19F10135C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 May 2026 11:21:16 +0000 Certificate not after: Tue 21 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 14007 IP: 74.50.224.0/20 IP: 192.149.104.0/24 IP: 192.234.196.0/22 IP: 192.234.204.0/24 IP: 199.101.72.0/22 IP: 216.251.128.0/19 IP: 2600:ac00::/28 IP: 2607:f040::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:4f:33:23:16:ee:af:19:f1:01:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 20 11:21:16 2026 GMT Not After : Mar 21 12:45:23 2028 GMT Subject: CN=23658315-b56f-46db-89d2-184000d7f7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:e4:95:e6:53:23:86:47:3a:3e:a3:01:8a: d9:a5:b1:57:7a:92:7f:f0:4e:0f:65:e7:a3:80:a7: aa:7d:98:10:5d:bc:15:3a:e5:b3:f6:0c:c3:3a:b9: 9b:aa:ba:ac:59:20:74:0a:03:5a:86:14:d0:52:93: 0a:5d:ca:cb:3f:6c:94:d8:21:2a:63:b9:d9:10:8c: 55:55:90:cd:fb:40:49:7a:a3:92:86:b2:b5:d2:90: 81:7b:25:3c:81:b3:8c:ba:19:49:a4:5c:98:98:38: e1:2a:e4:76:9c:ff:d9:3c:ff:d0:ad:bb:c7:91:da: e8:2b:e8:63:45:e6:fa:f8:d6:ea:f7:3f:2f:1d:df: 2d:5b:4f:e4:6b:02:8d:3a:fa:7e:61:c8:82:12:36: d9:16:79:b9:13:28:e6:2c:85:54:a4:a0:71:ad:5e: 1e:ff:a2:85:29:ef:0e:a1:6c:10:4c:b3:f1:1f:25: eb:e4:ed:91:7d:cc:9a:fc:30:47:70:47:3f:51:93: e1:06:8f:59:9e:a9:60:de:8c:ed:29:bb:20:06:8a: 92:61:55:a5:f0:c1:08:f5:a7:f3:f8:2d:9a:35:66: 2a:4a:92:14:b8:af:4b:cc:e7:07:8e:68:08:da:81: 1f:7f:16:be:be:97:a8:c5:84:e1:c1:38:ed:ae:7d: 2b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 74.50.224.0/20 192.149.104.0/24 192.234.196.0/22 192.234.204.0/24 199.101.72.0/22 216.251.128.0/19 IPv6: 2600:ac00::/28 2607:f040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14007 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:b0:ca:10:7a:3a:ff:b6:85:45:79:2b:d1:d2:4b:2a:8b:fb: 1a:7f:3c:82:dc:e1:d3:b0:41:a5:8e:94:76:24:fe:5a:bd:77: dc:13:f1:10:b4:14:70:34:7e:13:e6:24:4f:1d:6d:5b:22:16: 6a:0b:22:76:91:e8:61:2f:51:5b:02:14:56:af:88:62:98:12: 62:c4:f5:81:03:2f:05:5b:b0:e1:5a:a9:e6:a8:86:64:ed:a7: 47:25:53:fe:00:19:5d:d0:4e:dc:f7:f0:ab:4a:41:6d:e5:b5: 04:56:04:5b:9d:16:0e:ea:a9:dc:0b:24:3e:ae:c8:fc:9d:20: 2c:8f:de:40:ce:8a:61:f9:dc:f2:ff:33:99:70:d9:f1:f5:65: e3:70:19:75:70:0a:ba:ca:8e:43:7a:9a:77:ba:47:67:dd:f3: 1c:0f:f6:92:79:28:42:2e:a5:1d:1f:99:a2:0d:f6:13:27:c1: a5:e0:f6:2e:a5:03:78:aa:81:c9:94:fd:03:0d:b5:2b:a6:5e: 90:e7:01:2a:99:eb:d1:12:e9:ba:0c:b2:a1:06:b5:4c:cd:db: 62:00:97:95:2b:f9:85:f1:37:03:27:18:57:30:dd:04:55:ec: 03:8d:84:60:f4:32:af:20:65:76:dc:d7:c2:b2:e5:f6:00:95: 3e:ac:c1:f1 -----BEGIN CERTIFICATE----- MIIHPDCCBiSgAwIBAgIUAQ0Mn0MoWE3lTzMjFu6vGfEBNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDUyMDExMjExNloXDTI4MDMyMTEyNDUyM1owLzEtMCsGA1UEAxMk MjM2NTgzMTUtYjU2Zi00NmRiLTg5ZDItMTg0MDAwZDdmN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxenkleZTI4ZHOj6jAYrZpbFXepJ/8E4PZeej gKeqfZgQXbwVOuWz9gzDOrmbqrqsWSB0CgNahhTQUpMKXcrLP2yU2CEqY7nZEIxV VZDN+0BJeqOShrK10pCBeyU8gbOMuhlJpFyYmDjhKuR2nP/ZPP/QrbvHkdroK+hj Reb6+Nbq9z8vHd8tW0/kawKNOvp+YciCEjbZFnm5EyjmLIVUpKBxrV4e/6KFKe8O oWwQTLPxHyXr5O2Rfcya/DBHcEc/UZPhBo9Znqlg3oztKbsgBoqSYVWl8MEI9afz +C2aNWYqSpIUuK9LzOcHjmgI2oEffxa+vpeoxYThwTjtrn0rLwIDAQABo4IETjCC BEowHQYDVR0OBBYEFOWHzG2O7deC5R2NTll3azZjNHd6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y MzY1ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQwMDBkN2Y3ZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzIzNjU4MzE1LWI1NmYtNDZkYi04 OWQyLTE4NDAwMGQ3ZjdlMS8yMzY1ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQwMDBk N2Y3ZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwUwYIKwYBBQUH AQcBAf8ERDBCMCoEAgABMCQDBARKMuADBADAlWgDBALA6sQDBADA6swDBALHZUgD BAXY+4AwFAQCAAIwDgMFBCYArAADBQAmB/BAMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAja3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBALWwyhB6Ov+2hUV5K9HSSyqL+xp/PILc4dOwQaWOlHYk /lq9d9wT8RC0FHA0fhPmJE8dbVsiFmoLInaR6GEvUVsCFFaviGKYEmLE9YEDLwVb sOFaqeaohmTtp0clU/4AGV3QTtz38KtKQW3ltQRWBFudFg7qqdwLJD6uyPydICyP 3kDOimH53PL/M5lw2fH1ZeNwGXVwCrrKjkN6mne6R2fd8xwP9pJ5KEIupR0fmaIN 9hMnwaXg9i6lA3iqgcmU/QMNtSumXpDnASqZ69ES6boMsqEGtUzN22IAl5Ur+YXx NwMnGFcw3QRV7AONhGD0Mq8gZXbc18Ky5fYAlT6swfE= -----END CERTIFICATE-----Generated at Sat Jun 13 22:04:59 2026 by rpki-client