$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer File: 174db496-399b-48c7-919e-3e6dfd4a5584.cer (raw, json) Hash identifier: sF1AxcxbjU8Fh33tXu4ndD6eOd2w0viLnDXHmzJ4Fzo= Subject key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584DCC58BE5A0C00B9FA1BE53AB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 May 2026 12:45:17 +0000 Certificate not after: Sun 13 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 13775 AS: 31833 AS: 40934 AS: 53928 IP: 23.249.48.0/20 IP: 66.35.16.0/20 IP: 66.103.16.0/20 IP: 69.48.232.0/21 IP: 72.1.64.0/19 IP: 96.45.32.0/20 IP: 104.204.176.0/20 IP: 104.204.255.0/24 IP: 139.138.105.0/24 IP: 141.109.160.0/20 IP: 148.230.32.0/19 IP: 159.48.160.0/19 IP: 160.223.160.0/20 IP: 173.243.128.0/20 IP: 176.23.128.0/19 IP: 189.25.0.0/16 IP: 192.35.158.0/24 IP: 193.149.130.0/24 IP: 193.149.134.0/23 IP: 193.149.139.0/24 IP: 199.4.211.0/24 IP: 204.155.240.0/20 IP: 208.91.112.0/22 IP: 209.40.96.0/19 IP: 2602:fc4e::/36 IP: 2620:101:9000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:58:be:5a:0c:00:b9:fa:1b:e5:3a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: May 11 12:45:17 2026 GMT Not After : Aug 13 12:45:17 2028 GMT Subject: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:55:7b:fb:d3:fb:a7:eb:99:34:92:f6:50: 6c:96:98:b5:4d:76:61:56:7b:0d:e8:68:58:e7:c8: 65:fa:db:f9:64:d4:93:3d:a2:39:1f:54:60:35:80: 1b:f1:cf:ae:55:bd:95:9e:e2:3c:93:35:53:07:85: db:5f:98:f3:49:00:00:5f:07:d3:9f:46:60:2d:25: 68:bc:1e:4e:4c:38:92:38:84:ae:86:db:42:94:e2: 8c:dd:f1:59:5b:e5:97:f7:c2:fe:5d:20:c3:2a:43: b6:97:fd:58:a5:29:b5:19:37:12:79:a2:07:af:ce: cd:42:eb:87:af:1f:20:39:2b:e8:45:f3:87:3c:f2: db:e6:8f:36:ff:78:a6:72:46:7c:20:3d:b5:9c:99: 89:21:5b:bc:1e:95:eb:d1:77:35:bf:32:9b:ba:40: 00:12:66:74:a0:cc:38:62:b6:ac:91:30:f3:fb:3a: 9d:69:ed:9a:ea:ad:ff:56:46:52:6a:fd:d8:f9:c0: 84:a7:24:b6:e5:af:79:72:97:26:f1:6c:f9:9d:77: 63:37:58:4d:8f:f5:42:c2:31:dc:8e:ae:cb:11:0b: fa:54:57:95:e9:b8:38:cd:c6:b0:88:79:49:33:c4: 1f:77:c3:49:c1:aa:4f:d3:6f:19:5d:4a:d9:b7:c8: 72:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.249.48.0/20 66.35.16.0/20 66.103.16.0/20 69.48.232.0/21 72.1.64.0/19 96.45.32.0/20 104.204.176.0/20 104.204.255.0/24 139.138.105.0/24 141.109.160.0/20 148.230.32.0/19 159.48.160.0/19 160.223.160.0/20 173.243.128.0/20 176.23.128.0/19 189.25.0.0/16 192.35.158.0/24 193.149.130.0/24 193.149.134.0/23 193.149.139.0/24 199.4.211.0/24 204.155.240.0/20 208.91.112.0/22 209.40.96.0/19 IPv6: 2602:fc4e::/36 2620:101:9000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13775 31833 40934 53928 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:eb:71:90:71:a9:1b:e6:7f:17:56:50:8e:40:21:c9:db:9e: 33:dc:bc:b4:a2:24:18:3c:3d:fe:d3:b3:49:83:76:a4:01:23: 5a:8f:11:a0:43:4b:07:2e:8a:6a:b2:73:4d:87:b1:00:05:0a: 70:b0:44:8c:f1:fc:a4:3b:43:cc:ad:3e:ef:52:88:66:b6:9a: 6d:08:48:fa:8b:8e:12:a8:56:a9:d2:de:45:fe:64:4a:fc:89: bd:5c:9c:41:83:7d:9a:c3:40:81:7e:47:6a:9d:4b:7c:66:a3: 02:2b:b6:82:20:77:ed:73:c4:fc:c9:c8:5d:1d:08:84:bc:a5: 9c:3a:17:9e:11:83:a0:51:30:c3:f8:bc:67:21:6c:75:c5:de: bb:e4:d4:b3:0f:1a:80:3f:c3:12:73:97:c7:da:cc:2e:41:e1: bc:43:4e:c9:62:16:1e:65:5b:83:95:e1:8e:50:40:f2:5f:02: 73:5c:57:fb:f8:45:84:18:5d:b7:3e:d2:85:55:37:aa:77:11: 63:a8:1a:ba:59:1e:69:f9:c0:fd:c9:49:94:b5:4f:25:d1:ba: eb:8f:bb:f9:a8:83:af:ea:c5:71:19:67:fc:ef:83:7a:bc:bd: 5f:00:fc:16:17:2b:8d:2b:10:e3:67:3a:db:98:f1:d1:71:6d: 3c:f5:7a:43 -----BEGIN CERTIFICATE----- MIIHvTCCBqWgAwIBAgIUAQ0Mn0MoWE3MWL5aDAC5+hvlOrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDUxMTEyNDUxN1oXDTI4MDgxMzEyNDUxN1owLzEtMCsGA1UEAxMk MTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1NTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAospVe/vT+6frmTSS9lBslpi1TXZhVnsN6GhY 58hl+tv5ZNSTPaI5H1RgNYAb8c+uVb2VnuI8kzVTB4XbX5jzSQAAXwfTn0ZgLSVo vB5OTDiSOISuhttClOKM3fFZW+WX98L+XSDDKkO2l/1YpSm1GTcSeaIHr87NQuuH rx8gOSvoRfOHPPLb5o82/3imckZ8ID21nJmJIVu8HpXr0Xc1vzKbukAAEmZ0oMw4 YraskTDz+zqdae2a6q3/VkZSav3Y+cCEpyS25a95cpcm8Wz5nXdjN1hNj/VCwjHc jq7LEQv6VFeV6bg4zcawiHlJM8Qfd8NJwapP028ZXUrZt8hySQIDAQABo4IEzzCC BMswHQYDVR0OBBYEFJ22L6sMhL/he5ErRzDHNbF6r4DRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8x NzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzE3NGRiNDk2LTM5OWItNDhjNy05 MTllLTNlNmRmZDRhNTU4NC8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0 YTU1ODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwgcUGCCsGAQUF BwEHAQH/BIG1MIGyMIGWBAIAATCBjwMEBBf5MAMEBEIjEAMEBEJnEAMEA0Uw6AME BUgBQAMEBGAtIAMEBGjMsAMEAGjM/wMEAIuKaQMEBI1toAMEBZTmIAMEBZ8woAME BKDfoAMEBK3zgAMEBbAXgAMDAL0ZAwQAwCOeAwQAwZWCAwQBwZWGAwQAwZWLAwQA xwTTAwQEzJvwAwQC0FtwAwQF0ShgMBcEAgACMBEDBgQmAvxOAAMHBCYgAQGQADAn BggrBgEFBQcBCAEB/wQYMBagFDASAgI1zwICfFkCAwCf5gIDANKoMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AFbrcZBxqRvmfxdWUI5AIcnbnjPcvLSiJBg8Pf7Ts0mDdqQBI1qPEaBDSwcuimqy c02HsQAFCnCwRIzx/KQ7Q8ytPu9SiGa2mm0ISPqLjhKoVqnS3kX+ZEr8ib1cnEGD fZrDQIF+R2qdS3xmowIrtoIgd+1zxPzJyF0dCIS8pZw6F54Rg6BRMMP4vGchbHXF 3rvk1LMPGoA/wxJzl8fazC5B4bxDTsliFh5lW4OV4Y5QQPJfAnNcV/v4RYQYXbc+ 0oVVN6p3EWOoGrpZHmn5wP3JSZS1TyXRuuuPu/mog6/qxXEZZ/zvg3q8vV8A/BYX K40rEONnOtuY8dFxbTz1ekM= -----END CERTIFICATE-----Generated at Wed May 13 05:18:05 2026 by rpki-client