$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer File: 1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer (raw, json) Hash identifier: rsR1Uvjdwg3GPZcG7K5IXROvG8VIeqw80BDVCnL2JvY= Subject key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584F1E75E4A94C4A0082D5206840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Sep 2026 15:27:14 +0000 Certificate not after: Wed 08 Dec 2027 16:09:40 +0000 Subordinate resources: AS: 14472 AS: 19835 AS: 26230 AS: 26788 AS: 30147 IP: 24.137.192.0/19 IP: 64.119.96.0/19 IP: 64.201.32.0/19 IP: 66.146.128.0/19 IP: 66.207.96.0/19 IP: 66.209.48.0/20 IP: 66.252.144.0/20 IP: 67.210.160.0/20 IP: 69.17.128.0/18 IP: 69.164.176.0/20 IP: 72.1.192.0/19 IP: 72.14.160.0/20 IP: 162.212.232.0/21 IP: 173.46.0.0/19 IP: 173.195.48.0/20 IP: 209.104.160.0/19 IP: 216.16.224.0/19 IP: 216.171.96.0/20 IP: 216.183.80.0/20 IP: 216.185.64.0/19 IP: 2604:3b00::/32 IP: 2606:f900::/32 IP: 2607:f090::/32 IP: 2607:fcf8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:75:e4:a9:4c:4a:00:82:d5:20:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 9 15:27:14 2026 GMT Not After : Dec 8 16:09:40 2027 GMT Subject: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fc:b3:b6:71:38:82:61:5b:74:ae:9f:13:16: 21:14:69:dc:93:8b:01:21:c6:a0:08:62:d0:45:23: 17:7d:78:66:31:0e:d8:58:33:14:9e:60:42:a4:ec: 70:e9:bf:ee:a6:26:c8:05:1b:ee:76:71:28:c0:13: 99:ca:36:7b:ea:74:d7:6c:13:94:ae:89:69:42:c8: ef:7b:11:c7:5b:31:f4:f2:06:d9:8d:b0:74:89:0b: fb:9f:3a:a2:d7:2b:32:ed:0f:a0:a6:52:37:81:18: d6:12:99:ed:cd:96:0f:b9:72:34:d3:c3:77:35:3c: 61:38:a2:1b:08:60:3e:3c:e8:3c:fc:f4:ee:0f:8a: 51:12:66:00:99:d9:e1:5a:99:07:41:5d:7f:c1:ba: 6e:6b:37:87:77:81:dd:92:16:b5:01:d0:00:58:19: 5c:a2:64:d3:f5:76:58:4b:bc:fe:8a:df:a8:12:5a: 9f:c8:c6:b4:4f:24:46:cb:b3:11:5c:f4:f5:ee:9c: 6b:7a:8a:09:ef:cf:d8:a9:06:0d:e7:8a:0a:47:2c: 68:68:05:44:ee:94:1c:b3:e8:8c:67:2d:ae:b2:b9: 2f:82:2b:f1:b9:57:be:fd:29:d3:f6:ad:98:c1:de: e1:e6:38:fb:43:b3:53:06:81:6d:d1:a0:50:7d:27: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 24.137.192.0/19 64.119.96.0/19 64.201.32.0/19 66.146.128.0/19 66.207.96.0/19 66.209.48.0/20 66.252.144.0/20 67.210.160.0/20 69.17.128.0/18 69.164.176.0/20 72.1.192.0/19 72.14.160.0/20 162.212.232.0/21 173.46.0.0/19 173.195.48.0/20 209.104.160.0/19 216.16.224.0/19 216.171.96.0/20 216.183.80.0/20 216.185.64.0/19 IPv6: 2604:3b00::/32 2606:f900::/32 2607:f090::/32 2607:fcf8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14472 19835 26230 26788 30147 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:bb:25:74:e2:41:ad:5f:6d:50:50:59:41:ca:db:e3:5e:96: 57:96:37:f4:7f:fc:77:0b:b4:86:83:55:99:db:69:da:7b:d6: b8:d6:12:42:8b:0e:33:b5:29:98:44:66:6b:fa:bf:1e:bb:6e: 56:3a:5a:29:d4:39:7e:5f:2d:91:08:1d:c1:d6:8c:e0:01:f5: 99:3a:07:0f:74:9a:e5:50:9e:30:43:ab:69:a6:9f:a5:79:16: db:28:f3:ac:a0:d5:23:05:bb:da:bf:06:5f:2c:7e:4a:88:7b: f1:cf:a7:14:16:44:37:c7:70:c8:73:97:82:ab:7b:0a:c0:95: 26:80:b6:dc:7e:7d:31:7d:49:29:54:de:c8:43:f8:90:49:a2: 04:62:fe:80:c4:47:76:ae:23:a8:b5:eb:4f:83:90:24:17:ff: 27:cc:37:da:ad:51:48:f4:5a:a0:3e:65:42:b5:fe:bc:1f:6f: b2:78:cd:1e:81:81:f9:f6:63:10:2b:cb:40:ce:56:c5:46:7b: ff:85:37:f5:0f:ed:c1:db:d4:6c:53:b2:c8:c3:c3:95:31:f0: ca:fc:ad:cb:63:c2:49:54:55:ab:4d:4c:4b:ac:80:d0:7d:64: 4d:56:94:00:9b:f1:e4:82:a4:b2:04:f9:3c:9e:4f:48:97:3c: f3:e8:e7:3a -----BEGIN CERTIFICATE----- MIIHsTCCBpmgAwIBAgIUAQ0Mn0MoWE8edeSpTEoAgtUgaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDkwOTE1MjcxNFoXDTI3MTIwODE2MDk0MFowLzEtMCsGA1UEAxMk MWY3YzkxYWUtMDI2Yy00NzlkLTljYjUtZDM4MzdlM2Q0NzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfyztnE4gmFbdK6fExYhFGnck4sBIcagCGLQ RSMXfXhmMQ7YWDMUnmBCpOxw6b/upibIBRvudnEowBOZyjZ76nTXbBOUrolpQsjv exHHWzH08gbZjbB0iQv7nzqi1ysy7Q+gplI3gRjWEpntzZYPuXI008N3NTxhOKIb CGA+POg8/PTuD4pREmYAmdnhWpkHQV1/wbpuazeHd4Hdkha1AdAAWBlcomTT9XZY S7z+it+oElqfyMa0TyRGy7MRXPT17pxreooJ78/YqQYN54oKRyxoaAVE7pQcs+iM Zy2usrkvgivxuVe+/SnT9q2Ywd7h5jj7Q7NTBoFt0aBQfSeiaQIDAQABo4IEwzCC BL8wHQYDVR0OBBYEFLYxINwwSxsm9B/kWyuSfWJSfhPLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x ZjdjOTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgzN2UzZDQ3NTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFmN2M5MWFlLTAyNmMtNDc5ZC05 Y2I1LWQzODM3ZTNkNDc1MS8xZjdjOTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgzN2Uz ZDQ3NTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwgbcGCCsGAQUF BwEHAQH/BIGnMIGkMH4EAgABMHgDBAUYicADBAVAd2ADBAVAySADBAVCkoADBAVC z2ADBARC0TADBARC/JADBARD0qADBAZFEYADBARFpLADBAVIAcADBARIDqADBAOi 1OgDBAWtLgADBAStwzADBAXRaKADBAXYEOADBATYq2ADBATYt1ADBAXYuUAwIgQC AAIwHAMFACYEOwADBQAmBvkAAwUAJgfwkAMFACYH/PgwKQYIKwYBBQUHAQgBAf8E GjAYoBYwFAICOIgCAk17AgJmdgICaKQCAnXDMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFa7JXTiQa1fbVBQ WUHK2+NelleWN/R//HcLtIaDVZnbadp71rjWEkKLDjO1KZhEZmv6vx67blY6WinU OX5fLZEIHcHWjOAB9Zk6Bw90muVQnjBDq2mmn6V5Ftso86yg1SMFu9q/Bl8sfkqI e/HPpxQWRDfHcMhzl4KrewrAlSaAttx+fTF9SSlU3shD+JBJogRi/oDER3auI6i1 60+DkCQX/yfMN9qtUUj0WqA+ZUK1/rwfb7J4zR6Bgfn2YxAry0DOVsVGe/+FN/UP 7cHb1GxTssjDw5Ux8Mr8rctjwklUVatNTEusgNB9ZE1WlACb8eSCpLIE+TyeT0iX PPPo5zo= -----END CERTIFICATE-----Generated at Sun Sep 20 16:53:38 2026 by rpki-client