$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer File: 1d639366-c044-456e-b8c8-0de04a543a0c.cer (raw, json) Hash identifier: QKIUcVxkfSKsI5/iknWDdGTOLYEWBMu+VVxWE1piJ9E= Subject key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CA48A0D9AD61B9A5C266EC020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 25 Jan 2026 13:45:21 +0000 Certificate not after: Sat 29 Apr 2028 12:45:21 +0000 Subordinate resources: AS: 6164 AS: 6571 AS: 7431 AS: 11069 AS: 11689 AS: 395273 IP: 45.59.32.0/20 IP: 50.5.0.0/16 IP: 63.250.64.0/19 IP: 64.151.128.0/18 IP: 66.42.128.0/17 IP: 66.117.192.0/18 IP: 66.158.160.0/20 IP: 66.161.128.0/17 IP: 66.170.160.0/20 IP: 69.5.32.0/20 IP: 69.61.128.0/17 IP: 72.49.0.0/16 IP: 74.83.0.0/16 IP: 74.215.0.0/16 IP: 131.241.0.0/16 IP: 163.182.0.0/17 IP: 192.24.128.0/17 IP: 206.221.224.0/20 IP: 208.102.0.0/16 IP: 209.131.192.0/19 IP: 216.9.128.0/19 IP: 216.68.0.0/16 IP: 216.196.128.0/17 IP: 2600:2b00::/28 IP: 2607:f500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:8a:0d:9a:d6:1b:9a:5c:26:6e:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 25 13:45:21 2026 GMT Not After : Apr 29 12:45:21 2028 GMT Subject: CN=1d639366-c044-456e-b8c8-0de04a543a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:74:48:7b:9f:3c:2e:2a:2d:e3:db:e1:6b: 99:d1:d2:f5:10:74:b7:c5:c1:a6:dc:6b:d3:71:04: 44:b7:ed:13:6f:2c:7c:ff:83:95:b8:b6:01:5a:8e: 24:99:6f:e3:cc:38:a6:ba:71:c6:62:5d:9e:7c:b5: 8f:62:6f:09:35:ce:c8:30:65:3d:8f:00:2b:7a:bf: e3:55:57:8e:d1:fc:07:64:1d:d0:79:66:2e:2d:c4: 9c:a5:6a:2c:cd:c3:ef:80:23:21:a0:3a:d2:12:bc: 0a:0d:3c:ef:b9:1a:a5:99:f4:57:6f:af:c1:c2:87: 1a:8c:36:7f:ad:36:7d:8f:05:bd:d6:c1:25:7b:52: 31:0a:c7:10:df:ac:e1:c1:bf:93:a0:72:3d:2a:ef: 94:c4:08:d2:ce:8c:50:f4:fa:8f:cb:e3:1f:95:05: 2b:cd:fe:af:90:ef:c4:74:03:aa:aa:10:11:6e:4a: 4c:e2:42:fd:17:0f:36:45:10:c4:84:bd:61:3a:9d: c1:f6:d9:9a:bd:0e:56:20:92:5a:c9:78:fa:ed:20: 8c:ad:ea:d0:94:0c:38:55:1a:59:2c:4a:43:9e:c9: 4e:97:80:fc:80:c0:39:03:0a:82:a4:33:d1:51:94: 00:43:86:4a:23:cb:55:bd:5b:95:c2:59:86:c9:b6: 69:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 45.59.32.0/20 50.5.0.0/16 63.250.64.0/19 64.151.128.0/18 66.42.128.0/17 66.117.192.0/18 66.158.160.0/20 66.161.128.0/17 66.170.160.0/20 69.5.32.0/20 69.61.128.0/17 72.49.0.0/16 74.83.0.0/16 74.215.0.0/16 131.241.0.0/16 163.182.0.0/17 192.24.128.0/17 206.221.224.0/20 208.102.0.0/16 209.131.192.0/19 216.9.128.0/19 216.68.0.0/16 216.196.128.0/17 IPv6: 2600:2b00::/28 2607:f500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6164 6571 7431 11069 11689 395273 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fd:57:e0:57:4c:9a:9c:b2:f1:67:94:39:ea:11:7a:31:70: df:bf:d8:1d:13:7c:65:69:f0:05:00:22:3c:bd:d1:b4:fb:c0: 32:da:cb:a9:69:de:3c:48:d6:81:f6:42:1b:b6:1d:43:c2:40: 2a:47:3d:e9:2e:3f:d0:c6:89:1c:b2:1f:8f:43:11:82:3f:06: 4f:49:43:c5:7e:0d:a9:e6:b9:58:e2:89:35:56:a8:a8:6e:d1: 9e:1c:e6:bb:19:c9:17:2e:64:80:11:fd:5d:ce:62:d7:c6:c6: 0a:0c:1b:c5:3f:7f:ef:f8:a2:c3:e7:a3:a5:79:b5:14:dd:81: 4d:9c:24:97:d6:b6:00:19:d9:b0:2d:1a:a0:ac:d7:73:e8:58: e3:86:62:73:16:5f:e9:6f:75:de:14:18:5b:ff:c2:f7:02:a3: 4f:8d:9a:40:48:54:cb:5b:5c:ac:98:9d:6c:b6:7c:96:8e:36: 2c:89:21:02:ce:23:61:97:70:94:0d:08:1e:45:d3:86:2c:7b: 6d:fb:97:20:fe:fd:3b:96:2a:6e:f2:9d:3c:85:dd:12:87:92: ef:6e:28:65:3f:ca:b9:ac:ec:97:02:92:e9:d1:51:94:a1:91: 61:ba:90:47:37:f1:ba:31:1b:14:fc:f8:7d:05:aa:5c:8b:0b: c0:0a:7a:d8 -----BEGIN CERTIFICATE----- MIIHtTCCBp2gAwIBAgIUAQ0Mn0MoWEykig2a1huaXCZuwCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEyNTEzNDUyMVoXDTI4MDQyOTEyNDUyMVowLzEtMCsGA1UEAxMk MWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQzYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5J0SHufPC4qLePb4WuZ0dL1EHS3xcGm3GvT cQREt+0Tbyx8/4OVuLYBWo4kmW/jzDimunHGYl2efLWPYm8JNc7IMGU9jwArer/j VVeO0fwHZB3QeWYuLcScpWoszcPvgCMhoDrSErwKDTzvuRqlmfRXb6/BwocajDZ/ rTZ9jwW91sEle1IxCscQ36zhwb+ToHI9Ku+UxAjSzoxQ9PqPy+MflQUrzf6vkO/E dAOqqhARbkpM4kL9Fw82RRDEhL1hOp3B9tmavQ5WIJJayXj67SCMrerQlAw4VRpZ LEpDnslOl4D8gMA5AwqCpDPRUZQAQ4ZKI8tVvVuVwlmGybZpUQIDAQABo4IExzCC BMMwHQYDVR0OBBYEFPw1V8kOPbUZBYWkp+cQ6WVqBGeHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x ZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFkNjM5MzY2LWMwNDQtNDU2ZS1i OGM4LTBkZTA0YTU0M2EwYy8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1 NDNhMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwgbYGCCsGAQUF BwEHAQH/BIGmMIGjMIGKBAIAATCBgwMEBC07IAMDADIFAwQFP/pAAwQGQJeAAwQH QiqAAwQGQnXAAwQEQp6gAwQHQqGAAwQEQqqgAwQERQUgAwQHRT2AAwMASDEDAwBK UwMDAErXAwMAg/EDBAejtgADBAfAGIADBATO3eADAwDQZgMEBdGDwAMEBdgJgAMD ANhEAwQH2MSAMBQEAgACMA4DBQQmACsAAwUAJgf1ADAuBggrBgEFBQcBCAEB/wQf MB2gGzAZAgIYFAICGasCAh0HAgIrPQICLakCAwYICTBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAg/VfgV0ya nLLxZ5Q56hF6MXDfv9gdE3xlafAFACI8vdG0+8Ay2supad48SNaB9kIbth1DwkAq Rz3pLj/Qxokcsh+PQxGCPwZPSUPFfg2p5rlY4ok1VqiobtGeHOa7GckXLmSAEf1d zmLXxsYKDBvFP3/v+KLD56OlebUU3YFNnCSX1rYAGdmwLRqgrNdz6FjjhmJzFl/p b3XeFBhb/8L3AqNPjZpASFTLW1ysmJ1stnyWjjYsiSECziNhl3CUDQgeRdOGLHtt +5cg/v07lipu8p08hd0Sh5LvbihlP8q5rOyXApLp0VGUoZFhupBHN/G6MRsU/Ph9 BapciwvACnrY -----END CERTIFICATE-----Generated at Sun Mar 1 20:22:59 2026 by rpki-client