$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer File: 20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer (raw, json) Hash identifier: 6TZy93wD8ZNaUTkZXWTmLPpdQMEF4kbsyhYUrQBxz94= Subject key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584E81580B13EDDA999A5C523A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Jul 2026 08:45:11 +0000 Certificate not after: Tue 17 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 14004 AS: 33387 IP: 63.141.224.0/19 IP: 74.91.16.0/20 IP: 107.150.32.0/19 IP: 142.54.160.0/19 IP: 192.151.144.0/20 IP: 192.187.96.0/19 IP: 198.204.224.0/19 IP: 199.168.96.0/21 IP: 2604:4300::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:58:0b:13:ed:da:99:9a:5c:52:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 15 08:45:11 2026 GMT Not After : Oct 17 08:45:11 2028 GMT Subject: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e7:3c:42:46:4a:f8:8a:fe:39:12:c8:18:3b: 6e:b0:8c:e6:12:46:7b:37:6b:c4:a4:86:35:7c:66: b7:f5:9b:a1:4c:df:b7:f0:39:62:01:8d:e0:fe:b7: e8:39:5a:c0:fd:23:2d:bf:7d:0e:8a:bc:87:05:9d: ff:63:32:35:c7:2f:69:77:0a:ed:be:42:2d:05:68: 8f:9c:cc:e2:a4:59:a6:13:3a:00:86:ab:37:ea:46: 59:dd:88:92:db:d1:ec:37:7e:e4:de:c1:91:4f:8d: ec:33:e6:7e:5b:82:60:b2:70:a1:2c:41:54:30:89: 92:26:ce:6e:c0:18:c6:50:24:c9:ba:4f:b3:e6:17: 65:0a:c6:0a:ca:2b:06:a4:db:2a:92:60:4f:8d:af: 3c:a2:a9:d6:31:38:ac:ec:c8:71:fe:ee:9a:53:d1: 60:fa:4d:59:98:7c:a8:8d:8d:d1:96:55:33:3a:eb: 2e:89:1f:58:28:b3:a7:25:06:09:11:5a:8b:a1:1e: c4:81:8f:45:b3:dc:49:3f:61:39:d6:a1:da:5c:74: 4e:f8:93:0a:0d:dc:f9:c5:65:e5:87:75:26:a4:27: 67:0a:13:d2:c5:39:65:12:e0:a0:c7:8d:fe:31:3d: bb:4b:f6:5d:40:b0:2b:86:28:75:f7:11:6c:39:d0: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 63.141.224.0/19 74.91.16.0/20 107.150.32.0/19 142.54.160.0/19 192.151.144.0/20 192.187.96.0/19 198.204.224.0/19 199.168.96.0/21 IPv6: 2604:4300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14004 33387 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:36:0a:8d:12:27:19:9e:97:f3:c0:bb:15:cb:66:f3:82:2f: 36:f0:96:db:2e:d0:7f:78:fc:c0:5e:14:b8:ac:d2:47:11:66: 97:72:1b:ae:fd:d7:4e:d2:7e:58:2e:de:83:13:a2:2b:03:60: f3:ae:37:47:35:ea:bb:5a:b5:d5:80:a3:0e:c5:2a:e8:e8:9f: da:d7:65:d8:64:82:43:a4:bb:02:03:e5:3b:c0:f0:30:ff:6a: 67:23:79:4a:d9:e6:aa:7a:40:0a:d4:f8:2c:b4:6c:e9:af:77: 4a:97:e3:74:de:bb:90:93:73:6e:02:7b:80:df:b0:3c:1b:5e: 0f:d1:48:94:88:1c:34:0d:e1:f0:da:39:73:7e:eb:fb:57:68: c3:16:19:e5:18:2b:70:59:0b:13:6e:f3:bc:40:33:9d:af:87: c6:2f:a1:d5:4d:29:50:08:85:5d:10:2f:f7:ac:f2:24:39:68: ae:6c:0e:50:17:c0:5b:05:ec:84:3d:21:af:27:49:16:37:5f: 76:11:39:b5:26:89:77:4f:3b:62:f4:30:9b:c8:7f:f2:a6:5b: 81:19:bf:45:54:87:f4:1f:df:d3:e4:06:95:06:1c:62:fc:97: 0f:1a:37:4d:b4:5f:68:04:3a:0f:91:c3:e0:66:b3:c3:1e:c7: a9:c2:85:b8 -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWE6BWAsT7dqZmlxSOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDcxNTA4NDUxMVoXDTI4MTAxNzA4NDUxMVowLzEtMCsGA1UEAxMk MjBjNGFmNzktY2RjZi00NjQwLWFiNGUtZjBmMzM2NDhjYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+c8QkZK+Ir+ORLIGDtusIzmEkZ7N2vEpIY1 fGa39ZuhTN+38DliAY3g/rfoOVrA/SMtv30OiryHBZ3/YzI1xy9pdwrtvkItBWiP nMzipFmmEzoAhqs36kZZ3YiS29HsN37k3sGRT43sM+Z+W4JgsnChLEFUMImSJs5u wBjGUCTJuk+z5hdlCsYKyisGpNsqkmBPja88oqnWMTis7Mhx/u6aU9Fg+k1ZmHyo jY3RllUzOusuiR9YKLOnJQYJEVqLoR7EgY9Fs9xJP2E51qHaXHRO+JMKDdz5xWXl h3UmpCdnChPSxTllEuCgx43+MT27S/ZdQLArhih19xFsOdBZ6wIDAQABo4IEWDCC BFQwHQYDVR0OBBYEFFSbIRdyuS3sPV1igQpsz/enYkNNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y MGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0OGNjNTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzIwYzRhZjc5LWNkY2YtNDY0MC1h YjRlLWYwZjMzNjQ4Y2M1NS8yMGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0 OGNjNTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAU/jeADBARKWxADBAVrliADBAWONqADBATAl5AD BAXAu2ADBAXGzOADBAPHqGAwDQQCAAIwBwMFACYEQwAwHgYIKwYBBQUHAQgBAf8E DzANoAswCQICNrQCAwCCazBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4NgqNEicZnpfzwLsVy2bzgi828Jbb LtB/ePzAXhS4rNJHEWaXchuu/ddO0n5YLt6DE6IrA2DzrjdHNeq7WrXVgKMOxSro 6J/a12XYZIJDpLsCA+U7wPAw/2pnI3lK2eaqekAK1PgstGzpr3dKl+N03ruQk3Nu AnuA37A8G14P0UiUiBw0DeHw2jlzfuv7V2jDFhnlGCtwWQsTbvO8QDOdr4fGL6HV TSlQCIVdEC/3rPIkOWiubA5QF8BbBeyEPSGvJ0kWN192ETm1Jol3Tzti9DCbyH/y pluBGb9FVIf0H9/T5AaVBhxi/JcPGjdNtF9oBDoPkcPgZrPDHsepwoW4 -----END CERTIFICATE-----Generated at Thu Jul 23 23:09:19 2026 by rpki-client