$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer File: b84ab52d-915e-4d8a-b37b-496ea49c6798.cer (raw, json) Hash identifier: FTCfbXvGF/O5pV+WnHKxPnE/ZgTRXGtr/+i8frymJQQ= Subject key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584EE385194C74D90AE0D0D11000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Aug 2026 12:45:11 +0000 Certificate not after: Tue 21 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 1403 IP: 64.58.32.0/20 IP: 67.221.48.0/20 IP: 74.116.184.0/21 IP: 96.127.192.0/18 IP: 104.163.128.0/17 IP: 107.159.0.0/16 IP: 107.161.56.0/21 IP: 107.167.248.0/21 IP: 146.71.8.0/21 IP: 172.93.16.0/20 IP: 173.246.0.0/19 IP: 185.146.32.0/22 IP: 192.222.128.0/17 IP: 198.16.128.0/17 IP: 198.58.128.0/17 IP: 199.58.248.0/22 IP: 216.25.240.0/20 IP: 2600:d400::/28 IP: 2606:6d00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:85:19:4c:74:d9:0a:e0:d0:d1:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 19 12:45:11 2026 GMT Not After : Nov 21 13:45:11 2028 GMT Subject: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:b0:53:8f:0d:47:7a:ff:96:fa:06:b4:ab: 00:64:40:31:e3:40:39:f1:e4:03:92:42:c0:49:5b: 85:1d:72:5a:9d:2f:15:cd:e1:2f:af:f5:7f:34:2e: e3:9c:ee:48:46:18:83:82:fd:49:4c:84:3e:bf:09: ba:65:4e:35:6b:5c:0f:4d:07:db:11:36:9d:7f:fe: d7:ab:4c:ab:29:4f:47:5f:6b:41:81:b5:3a:a2:95: 95:47:6c:ff:0e:99:6a:46:e0:66:8d:c4:59:94:58: d0:e2:06:ac:ab:b3:c9:8a:25:43:e8:97:c5:15:21: f9:6d:95:42:81:ba:d6:18:e9:0b:75:4b:d7:9f:d4: e3:fe:ff:57:b7:05:03:16:09:1a:d3:2e:13:d7:40: 7c:a8:71:18:f6:94:10:18:60:6f:10:c3:11:cc:95: d7:71:e3:0e:28:a1:f2:1e:8f:0e:b0:2a:ca:6d:cd: af:ce:27:87:83:22:42:a7:9c:22:01:fe:c1:38:a0: 5a:1a:5e:b6:60:8a:e6:c5:34:8c:c7:10:56:70:6d: ff:d4:8c:b3:60:ee:42:06:65:8c:63:a6:48:90:da: 4c:f4:3e:3b:7c:b2:ab:41:51:d7:e6:db:df:05:db: 2f:5a:4d:17:75:8b:f8:20:6a:9b:bd:b4:15:f6:6f: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.58.32.0/20 67.221.48.0/20 74.116.184.0/21 96.127.192.0/18 104.163.128.0/17 107.159.0.0/16 107.161.56.0/21 107.167.248.0/21 146.71.8.0/21 172.93.16.0/20 173.246.0.0/19 185.146.32.0/22 192.222.128.0/17 198.16.128.0/17 198.58.128.0/17 199.58.248.0/22 216.25.240.0/20 IPv6: 2600:d400::/28 2606:6d00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1403 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:bd:ab:d6:0c:03:30:c3:73:a3:1f:04:b3:93:5f:44:e5:5a: 4b:ab:5d:fa:5f:73:5f:e6:aa:54:09:d1:2a:ae:fc:24:a5:2e: 8e:29:67:44:9f:d1:25:3b:44:36:ce:cb:e7:9d:42:31:80:a9: 9e:e9:13:54:0f:6e:60:cd:82:40:c1:49:72:71:0a:65:70:09: 46:9a:2e:74:f0:cd:0e:03:09:0c:1f:6a:98:52:b7:26:e6:5c: 2f:c3:27:c1:76:f9:be:37:a8:45:a0:f2:fb:c6:8c:fc:77:e6: 7a:69:1c:54:a9:7c:cd:8e:71:cb:f6:72:76:54:24:2a:63:0c: 34:f9:a0:af:b8:8d:dd:2d:91:95:ac:84:ba:01:85:3c:88:f2: 6e:04:e5:91:ff:9b:80:16:ce:b6:06:c9:15:1c:93:50:ab:ac: c3:ba:0b:f5:4b:33:25:22:98:6e:3b:7f:96:21:37:db:38:d7: 4c:15:35:04:63:6c:8f:5d:b7:1c:16:64:d3:61:58:76:24:9a: 26:24:67:21:30:67:f0:44:f6:8f:43:8f:9a:fb:c6:ee:13:97: c0:4e:9a:f4:81:1a:bf:ea:ea:fe:3f:a0:45:50:92:97:b2:70: 61:bf:4b:dc:18:8f:72:2c:85:36:cc:7d:7b:db:38:a4:a7:d3: 67:bb:c0:2e -----BEGIN CERTIFICATE----- MIIHgDCCBmigAwIBAgIUAQ0Mn0MoWE7jhRlMdNkK4NDREAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDgxOTEyNDUxMVoXDTI4MTEyMTEzNDUxMVowLzEtMCsGA1UEAxMk Yjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2Nzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RywU48NR3r/lvoGtKsAZEAx40A58eQDkkLA SVuFHXJanS8VzeEvr/V/NC7jnO5IRhiDgv1JTIQ+vwm6ZU41a1wPTQfbETadf/7X q0yrKU9HX2tBgbU6opWVR2z/DplqRuBmjcRZlFjQ4gasq7PJiiVD6JfFFSH5bZVC gbrWGOkLdUvXn9Tj/v9XtwUDFgka0y4T10B8qHEY9pQQGGBvEMMRzJXXceMOKKHy Ho8OsCrKbc2vzieHgyJCp5wiAf7BOKBaGl62YIrmxTSMxxBWcG3/1IyzYO5CBmWM Y6ZIkNpM9D47fLKrQVHX5tvfBdsvWk0XdYv4IGqbvbQV9m9zYQIDAQABo4IEkjCC BI4wHQYDVR0OBBYEFN21Mu9TELtZ3YErVejb9+YQAyR8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i ODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4NGFiNTJkLTkxNWUtNGQ4YS1i MzdiLTQ5NmVhNDljNjc5OC9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5 YzY3OTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgZYGCCsGAQUF BwEHAQH/BIGGMIGDMGsEAgABMGUDBARAOiADBARD3TADBANKdLgDBAZgf8ADBAdo o4ADAwBrnwMEA2uhOAMEA2un+AMEA5JHCAMEBKxdEAMEBa32AAMEArmSIAMEB8De gAMEB8YQgAMEB8Y6gAMEAsc6+AMEBNgZ8DAUBAIAAjAOAwUEJgDUAAMFACYGbQAw GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICBXswVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARL2r1gwDMMNzox8E s5NfROVaS6td+l9zX+aqVAnRKq78JKUujilnRJ/RJTtENs7L551CMYCpnukTVA9u YM2CQMFJcnEKZXAJRpoudPDNDgMJDB9qmFK3JuZcL8MnwXb5vjeoRaDy+8aM/Hfm emkcVKl8zY5xy/ZydlQkKmMMNPmgr7iN3S2RlayEugGFPIjybgTlkf+bgBbOtgbJ FRyTUKusw7oL9UszJSKYbjt/liE32zjXTBU1BGNsj123HBZk02FYdiSaJiRnITBn 8ET2j0OPmvvG7hOXwE6a9IEav+rq/j+gRVCSl7JwYb9L3BiPciyFNsx9e9s4pKfT Z7vALg== -----END CERTIFICATE-----Generated at Tue Sep 22 19:10:57 2026 by rpki-client