$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer File: e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer (raw, json) Hash identifier: /IzSPm+EzMV0QD8j0mFUk7TIg1gofzJg91aIhcnxPic= Subject key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584CFB2E8B373F3948C6305387C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Feb 2026 14:36:19 +0000 Certificate not after: Tue 07 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 30644 AS: 39967 AS: 396998 IP: 23.183.240.0/21 IP: 64.52.81.0/24 IP: 104.152.140.0/22 IP: 141.193.68.0/24 IP: 163.123.193.0/24 IP: 163.123.195.0/24 IP: 172.111.32.0/22 IP: 205.178.177.0/24 IP: 205.178.182.0/23 IP: 205.220.224.0 -- 205.220.226.255 IP: 205.220.228.0/24 IP: 205.220.230.0/23 IP: 206.71.159.0/24 IP: 209.127.214.0/24 IP: 209.237.140.0/23 IP: 216.126.207.0/24 IP: 2600:3500::/28 IP: 2602:fd00::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:2e:8b:37:3f:39:48:c6:30:53:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Feb 25 14:36:19 2026 GMT Not After : Dec 7 01:45:24 2027 GMT Subject: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:41:8e:a1:cc:95:46:aa:ea:df:c8:b0:16: b8:fc:ec:9e:e9:ba:05:2a:d2:15:12:70:9d:f4:9f: ab:59:cb:b5:a2:29:0e:84:4b:57:04:c6:24:84:25: 74:58:01:31:e6:2e:16:2a:d8:25:3c:c7:60:6e:be: c4:42:b3:f9:fd:d6:02:7c:b1:a2:05:5f:ef:70:15: 97:ac:8a:83:4a:69:e5:ee:06:d4:51:01:7d:b5:f6: 32:0c:e3:81:43:1f:84:c2:00:3c:fa:3e:db:9e:d0: 9a:52:e6:dc:c2:78:18:5a:c6:9f:61:c3:ca:77:f5: 92:b9:16:51:1a:fe:d5:59:11:bb:b2:2c:94:6d:9f: 4c:7e:53:22:d4:29:aa:c8:a3:9b:39:a4:a8:ec:6a: 15:67:38:8a:18:3a:ab:35:bc:c9:02:8f:be:7f:57: b4:63:5c:fe:8a:60:89:ed:e4:81:a6:a6:38:20:f4: 7f:c7:16:6d:a4:a4:42:56:4f:56:81:38:ab:cb:f1: 0b:2d:b5:19:c2:ac:b1:7c:3c:a6:2a:df:cc:ec:1b: 31:22:57:d3:d5:e5:c7:43:84:b7:76:88:c3:af:bb: e8:b1:42:68:1b:47:7e:a4:1e:04:04:88:7a:4e:e9: 9a:29:4e:af:fe:58:7b:b8:7d:3f:7c:10:fb:86:4f: 3c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.183.240.0/21 64.52.81.0/24 104.152.140.0/22 141.193.68.0/24 163.123.193.0/24 163.123.195.0/24 172.111.32.0/22 205.178.177.0/24 205.178.182.0/23 205.220.224.0-205.220.226.255 205.220.228.0/24 205.220.230.0/23 206.71.159.0/24 209.127.214.0/24 209.237.140.0/23 216.126.207.0/24 IPv6: 2600:3500::/28 2602:fd00::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30644 39967 396998 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:48:57:56:46:c2:aa:e8:e8:8c:1a:ed:83:e8:74:34:2b:6b: 41:6b:fa:2b:a7:65:e0:87:26:a9:70:86:bc:c5:9f:ff:13:a9: d0:67:b0:31:cf:0d:5a:21:28:be:3a:38:3f:0e:17:80:7e:d6: 5a:04:d3:04:66:b4:a8:5b:b7:ad:06:a8:6e:58:2b:53:05:d0: 92:6b:2d:dd:ad:e2:3d:27:fe:04:e0:0c:dc:5f:12:e4:ae:95: 8f:24:de:db:6d:d3:10:17:14:91:a6:61:31:77:61:6d:c6:0b: 38:8a:55:a9:91:37:75:99:1e:e8:f4:ff:62:b5:3a:84:32:ca: 27:30:4f:af:1d:bc:db:a7:a3:6b:6b:3e:88:e1:ad:41:11:a6: 59:51:c3:53:c2:d2:08:2f:f6:4b:bf:16:ce:fc:02:f8:e7:70: 51:11:8f:f3:3f:cf:2b:94:f4:56:d5:ca:b2:71:7e:0e:e6:fb: f0:25:af:3d:c6:be:71:d2:10:49:b6:be:09:b5:c5:f9:9d:ed: 2c:61:6f:07:04:9d:23:0b:2b:4d:59:bb:11:ee:a4:75:06:b5: 65:bf:4c:4c:2f:63:53:ef:ad:94:64:5c:f4:0a:8a:29:3f:40: 5c:1f:c1:dc:2b:51:b0:e9:55:f5:40:92:d9:5c:f9:60:25:25: 20:75:e7:2e -----BEGIN CERTIFICATE----- MIIHjjCCBnagAwIBAgIUAQ0Mn0MoWEz7Los3PzlIxjBTh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDIyNTE0MzYxOVoXDTI3MTIwNzAxNDUyNFowLzEtMCsGA1UEAxMk ZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4ZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb1BjqHMlUaq6t/IsBa4/Oye6boFKtIVEnCd 9J+rWcu1oikOhEtXBMYkhCV0WAEx5i4WKtglPMdgbr7EQrP5/dYCfLGiBV/vcBWX rIqDSmnl7gbUUQF9tfYyDOOBQx+EwgA8+j7bntCaUubcwngYWsafYcPKd/WSuRZR Gv7VWRG7siyUbZ9MflMi1CmqyKObOaSo7GoVZziKGDqrNbzJAo++f1e0Y1z+imCJ 7eSBpqY4IPR/xxZtpKRCVk9WgTiry/ELLbUZwqyxfDymKt/M7BsxIlfT1eXHQ4S3 dojDr7vosUJoG0d+pB4EBIh6TumaKU6v/lh7uH0/fBD7hk88KwIDAQABo4IEoDCC BJwwHQYDVR0OBBYEFKu245A2RkvQC5rVIlpeo2B8ndV8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l OTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2U5NmIyNGM0LWI2OTItNGI5NC04 M2Y1LTFkYTU0OTBiOGYzYy9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkw YjhmM2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgZoGCCsGAQUF BwEHAQH/BIGKMIGHMG4EAgABMGgDBAMXt/ADBABANFEDBAJomIwDBACNwUQDBACj e8EDBACje8MDBAKsbyADBADNsrEDBAHNsrYwDAMEBc3c4AMEAM3c4gMEAM3c5AME Ac3c5gMEAM5HnwMEANF/1gMEAdHtjAMEANh+zzAVBAIAAjAPAwUEJgA1AAMGBCYC /QAAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAne0AgMAnB8CAwYOxjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQB9SFdWRsKq6OiMGu2D6HQ0K2tBa/orp2XghyapcIa8xZ//E6nQZ7Axzw1aISi+ Ojg/DheAftZaBNMEZrSoW7etBqhuWCtTBdCSay3dreI9J/4E4AzcXxLkrpWPJN7b bdMQFxSRpmExd2Ftxgs4ilWpkTd1mR7o9P9itTqEMsonME+vHbzbp6Nraz6I4a1B EaZZUcNTwtIIL/ZLvxbO/AL453BREY/zP88rlPRW1cqycX4O5vvwJa89xr5x0hBJ tr4JtcX5ne0sYW8HBJ0jCytNWbsR7qR1BrVlv0xML2NT762UZFz0CoopP0BcH8Hc K1Gw6VX1QJLZXPlgJSUgdecu -----END CERTIFICATE-----Generated at Sun Mar 1 14:46:22 2026 by rpki-client