$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer File: 83220b5e-8104-4c4e-bbce-305b174b684a.cer (raw, json) Hash identifier: t7cUxZ5BfNpVYkL9IKMLREushV94Fdl4x1hrbaceMuc= Subject key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CA1BF5ECCB577B785F2FC4B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 24 Jan 2026 13:45:21 +0000 Certificate not after: Fri 28 Apr 2028 12:45:21 +0000 Subordinate resources: AS: 847 -- 850 AS: 853 -- 854 AS: 26309 AS: 26393 AS: 26628 AS: 27300 AS: 30025 AS: 46500 AS: 400074 AS: 400995 IP: 23.137.120.0 -- 23.137.125.255 IP: 23.152.192.0 -- 23.152.194.255 IP: 23.174.176.0/24 IP: 64.234.224.0/22 IP: 149.112.14.0 -- 149.112.16.255 IP: 149.112.23.0/24 IP: 149.112.33.0 -- 149.112.38.255 IP: 172.82.0.0/22 IP: 206.80.232.0/24 IP: 2001:504:79::/48 IP: 2001:504:106:: -- 2001:504:108:ffff:ffff:ffff:ffff:ffff IP: 2001:504:113::/48 IP: 2001:504:119::/48 IP: 2001:504:120:: -- 2001:504:124:ffff:ffff:ffff:ffff:ffff IP: 2620:134:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a1:bf:5e:cc:b5:77:b7:85:f2:fc:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 24 13:45:21 2026 GMT Not After : Apr 28 12:45:21 2028 GMT Subject: CN=83220b5e-8104-4c4e-bbce-305b174b684a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:87:2c:7b:63:fe:15:b0:70:51:6d:9a:bf:9f: 62:40:f1:bb:4c:f3:5b:55:b8:f3:4f:c6:31:07:66: d4:92:04:e1:25:30:18:e1:c1:68:34:10:86:63:16: 09:57:47:11:8c:aa:ab:d6:e0:eb:45:cf:95:a6:36: 27:a5:87:41:19:23:2c:ed:e6:22:db:ad:79:d2:a2: 23:c9:cf:14:d7:10:b3:55:f1:49:f7:11:0a:79:33: 3d:ad:cc:eb:14:a2:26:18:2d:de:30:ad:85:0d:8e: 84:a8:bc:93:10:40:a4:e3:83:96:eb:14:75:85:5f: e7:4d:1e:c9:aa:24:c4:54:7b:dc:f2:cf:b1:a5:a4: bd:cf:0f:45:38:66:5c:8f:7a:40:c8:7a:1e:a8:ec: 80:aa:ae:5e:80:6c:90:f3:9a:d4:f2:01:35:89:40: e5:d8:35:13:ab:b3:24:7e:4f:6e:e7:66:ec:06:1e: 2b:30:46:09:4a:26:f3:cd:b7:cf:d8:dd:e1:cd:c7: 37:75:61:4e:a0:8c:35:1b:7b:8e:8b:dd:d8:ce:21: 0c:22:b4:60:b7:a7:00:4c:08:c2:8f:b1:3d:8a:7c: d9:b5:7a:ed:17:f9:92:a8:06:06:5b:a2:80:8e:36: b3:49:51:cd:ed:fa:2f:46:c3:4c:9f:28:12:57:19: 2c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.137.120.0-23.137.125.255 23.152.192.0-23.152.194.255 23.174.176.0/24 64.234.224.0/22 149.112.14.0-149.112.16.255 149.112.23.0/24 149.112.33.0-149.112.38.255 172.82.0.0/22 206.80.232.0/24 IPv6: 2001:504:79::/48 2001:504:106::-2001:504:108:ffff:ffff:ffff:ffff:ffff 2001:504:113::/48 2001:504:119::/48 2001:504:120::-2001:504:124:ffff:ffff:ffff:ffff:ffff 2620:134:1000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 847-850 853-854 26309 26393 26628 27300 30025 46500 400074 400995 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ca:b0:10:77:6d:a9:8d:0a:d5:06:f3:cd:e2:1e:81:54:cb: 02:cd:ce:8b:74:8c:bc:db:4c:01:d1:5c:ed:ee:58:5a:bb:b9: f5:f0:98:ca:7c:ac:09:dc:49:de:ae:a2:b0:a7:b8:c4:48:c3: 74:30:89:60:d7:e3:7a:b4:df:02:be:10:e3:97:09:51:b6:5f: 61:b0:06:2a:07:1b:f5:59:8b:40:cc:f2:37:ca:e5:31:da:f1: ca:8d:2f:dc:99:db:16:15:c9:3d:c8:27:66:f1:4c:67:b9:c8: ae:6e:bb:a5:b2:b8:05:46:e9:1b:6d:e4:1d:a3:23:3c:0c:59: 08:27:9d:62:0c:e3:7f:2d:7c:72:9c:50:29:50:5f:3a:66:11: 42:82:f5:dd:f6:7d:0a:4a:e5:b8:06:9e:90:e5:ff:da:fa:fe: f3:53:df:4e:02:8b:5c:19:88:d0:9d:62:21:05:61:10:2e:86: 51:d7:97:f5:0e:f3:8f:b3:0b:82:f6:41:82:ed:d6:8a:ac:ad: b0:5b:af:eb:42:15:63:97:93:50:ea:f9:c8:40:d5:dd:47:74: 8f:93:de:b1:28:57:7b:25:d1:83:70:03:d9:ae:89:bc:d8:e9: 1b:72:2e:f6:25:d0:8b:62:65:2a:94:a0:de:a8:c1:68:4a:4f: fb:25:50:f1 -----BEGIN CERTIFICATE----- MIIH4jCCBsqgAwIBAgIUAQ0Mn0MoWEyhv17MtXe3hfL8SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEyNDEzNDUyMVoXDTI4MDQyODEyNDUyMVowLzEtMCsGA1UEAxMk ODMyMjBiNWUtODEwNC00YzRlLWJiY2UtMzA1YjE3NGI2ODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIcse2P+FbBwUW2av59iQPG7TPNbVbjzT8Yx B2bUkgThJTAY4cFoNBCGYxYJV0cRjKqr1uDrRc+VpjYnpYdBGSMs7eYi26150qIj yc8U1xCzVfFJ9xEKeTM9rczrFKImGC3eMK2FDY6EqLyTEECk44OW6xR1hV/nTR7J qiTEVHvc8s+xpaS9zw9FOGZcj3pAyHoeqOyAqq5egGyQ85rU8gE1iUDl2DUTq7Mk fk9u52bsBh4rMEYJSibzzbfP2N3hzcc3dWFOoIw1G3uOi93YziEMIrRgt6cATAjC j7E9inzZtXrtF/mSqAYGW6KAjjazSVHN7fovRsNMnygSVxksFQIDAQABo4IE9DCC BPAwHQYDVR0OBBYEFKFoU4TEb3hqY79peJXAYzII+VOpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 MzIyMGI1ZS04MTA0LTRjNGUtYmJjZS0zMDViMTc0YjY4NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzgzMjIwYjVlLTgxMDQtNGM0ZS1i YmNlLTMwNWIxNzRiNjg0YS84MzIyMGI1ZS04MTA0LTRjNGUtYmJjZS0zMDViMTc0 YjY4NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwgcUGCCsGAQUF BwEHAQH/BIG1MIGyMFwEAgABMFYwDAMEAxeJeAMEAReJfDAMAwQGF5jAAwQAF5jC AwQAF66wAwQCQOrgMAwDBAGVcA4DBACVcBADBACVcBcwDAMEAJVwIQMEAJVwJgME AqxSAAMEAM5Q6DBSBAIAAjBMAwcAIAEFBAB5MBIDBwEgAQUEAQYDBwAgAQUEAQgD BwAgAQUEARMDBwAgAQUEARkwEgMHBSABBQQBIAMHACABBQQBJAMHBCYgATQQADBM BggrBgEFBQcBCAEB/wQ9MDugOTA3MAgCAgNPAgIDUjAIAgIDVQICA1YCAmbFAgJn GQICaAQCAmqkAgJ1SQIDALWkAgMGGsoCAwYeYzBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsyrAQd22pjQrV BvPN4h6BVMsCzc6LdIy820wB0Vzt7lhau7n18JjKfKwJ3EnerqKwp7jESMN0MIlg 1+N6tN8CvhDjlwlRtl9hsAYqBxv1WYtAzPI3yuUx2vHKjS/cmdsWFck9yCdm8Uxn uciubrulsrgFRukbbeQdoyM8DFkIJ51iDON/LXxynFApUF86ZhFCgvXd9n0KSuW4 Bp6Q5f/a+v7zU99OAotcGYjQnWIhBWEQLoZR15f1DvOPswuC9kGC7daKrK2wW6/r QhVjl5NQ6vnIQNXdR3SPk96xKFd7JdGDcAPZrom82Okbci72JdCLYmUqlKDeqMFo Sk/7JVDx -----END CERTIFICATE-----Generated at Sun Mar 1 20:17:16 2026 by rpki-client