$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer File: ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer (raw, json) Hash identifier: xzSuQ4qYKPet7J6BAZ/Z3YWhUgyEMxn0F9nM4cMZ8IY= Subject key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E86ED69E1FD5789479BD5B180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Jul 2026 08:45:11 +0000 Certificate not after: Thu 19 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 14403 AS: 22102 AS: 23076 AS: 39948 AS: 62738 AS: 394393 AS: 397026 AS: 397354 AS: 398137 AS: 398270 IP: 23.131.248.0/24 IP: 23.151.240.0/24 IP: 69.53.208.0/20 IP: 74.209.144.0/20 IP: 96.47.168.0/22 IP: 104.152.180.0/22 IP: 130.250.204.0/23 IP: 139.64.168.0/22 IP: 148.59.174.0/23 IP: 172.102.248.0/22 IP: 192.169.12.0/22 IP: 199.10.87.0/24 IP: 199.115.196.0/22 IP: 209.112.224.0/20 IP: 216.224.224.0/19 IP: 2604:f840::/32 IP: 2605:7ec0::/32 IP: 2605:a740::/32 IP: 2607:5680::/32 IP: 2607:59c0::/32 IP: 2607:bfc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:ed:69:e1:fd:57:89:47:9b:d5:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 17 08:45:11 2026 GMT Not After : Oct 19 08:45:11 2028 GMT Subject: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fb:1b:3d:38:46:51:11:70:32:ea:4a:a6:08: ec:a6:18:31:82:93:29:a3:ba:53:6f:1c:ab:0d:5f: 98:25:53:0e:7c:48:bd:ac:65:70:8f:ed:c4:74:3a: 5a:f5:51:e1:71:6d:30:07:11:4f:e9:88:c2:f3:05: 36:c3:a8:86:73:6f:c9:ac:2f:bb:65:16:4a:18:50: 4a:4c:d9:73:0d:c4:f2:45:54:e1:9f:2c:f5:5a:d9: d6:b2:fc:50:0e:7a:64:ea:eb:fb:9a:51:d7:40:cb: e0:6d:e6:46:ea:96:03:d6:9e:54:39:73:12:a6:31: 63:7c:7e:1c:09:05:c3:27:2d:4e:b5:15:27:49:36: 53:46:9f:8b:a7:ca:cf:d9:74:f0:ec:1d:01:ea:a8: 8a:74:05:4a:c0:01:47:4f:78:71:fb:fe:7d:85:b7: af:3d:2f:1d:c0:63:6a:bb:07:31:f6:04:f8:6d:e5: c9:43:bf:77:4c:6a:2e:b6:a5:d8:18:ec:46:0a:88: 54:8d:17:c4:96:a7:1a:b9:10:02:2d:43:b5:df:8a: f7:30:fb:a0:93:56:3f:65:20:6b:1b:47:cc:44:fe: 42:cd:01:1c:e8:df:74:ed:c7:f5:17:a8:63:8c:d0: c6:bf:6a:05:e3:8b:cb:2d:e7:52:34:e2:98:95:76: d3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.131.248.0/24 23.151.240.0/24 69.53.208.0/20 74.209.144.0/20 96.47.168.0/22 104.152.180.0/22 130.250.204.0/23 139.64.168.0/22 148.59.174.0/23 172.102.248.0/22 192.169.12.0/22 199.10.87.0/24 199.115.196.0/22 209.112.224.0/20 216.224.224.0/19 IPv6: 2604:f840::/32 2605:7ec0::/32 2605:a740::/32 2607:5680::/32 2607:59c0::/32 2607:bfc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14403 22102 23076 39948 62738 394393 397026 397354 398137 398270 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:4b:99:ed:a9:64:c2:b8:7c:37:4b:7a:9e:a1:9a:08:bb:be: 44:8a:40:a6:b9:67:d2:41:df:47:d5:da:58:47:e0:1b:fe:7e: 10:7c:59:c0:a4:38:79:d0:08:f3:90:f0:55:32:4c:6b:d3:39: 4b:00:9d:9c:05:e3:ea:3d:69:e6:94:6f:31:47:87:a2:07:74: fc:1b:bc:d3:74:04:f7:75:e7:c7:76:2b:ca:30:ab:8d:c0:8f: 9f:4c:b3:30:53:c7:da:82:7e:41:d8:76:4f:f4:f6:51:2a:b8: fa:2d:27:b5:0f:de:81:49:f2:cd:9e:13:49:14:d8:f3:78:be: f4:b7:5f:e2:b0:76:a7:63:01:57:4a:22:74:0e:0e:48:eb:62: 2b:cb:21:ee:0e:a7:1d:ba:32:c5:65:4b:53:fc:8a:87:cf:da: 30:63:25:db:e5:f6:dd:1c:29:d4:8e:9f:17:96:a9:c5:49:97: 1f:80:ae:75:8c:5e:cd:78:ca:47:7f:00:6d:a3:a7:6b:0d:ab: 84:9c:dd:73:c7:ae:e8:af:fa:2b:ac:3a:91:78:50:cf:8f:25: 94:a8:8e:bb:d8:75:09:5e:55:65:41:03:a6:5c:5d:f4:d2:5d: ca:4a:6d:5e:19:0d:11:88:ec:9f:f7:52:c9:66:5c:de:0b:47: ca:ae:b6:2d -----BEGIN CERTIFICATE----- MIIHvDCCBqSgAwIBAgIUAQ0Mn0MoWE6G7Wnh/VeJR5vVsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDcxNzA4NDUxMVoXDTI4MTAxOTA4NDUxMVowLzEtMCsGA1UEAxMk ZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBjOTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vsbPThGURFwMupKpgjsphgxgpMpo7pTbxyr DV+YJVMOfEi9rGVwj+3EdDpa9VHhcW0wBxFP6YjC8wU2w6iGc2/JrC+7ZRZKGFBK TNlzDcTyRVThnyz1WtnWsvxQDnpk6uv7mlHXQMvgbeZG6pYD1p5UOXMSpjFjfH4c CQXDJy1OtRUnSTZTRp+Lp8rP2XTw7B0B6qiKdAVKwAFHT3hx+/59hbevPS8dwGNq uwcx9gT4beXJQ793TGoutqXYGOxGCohUjRfElqcauRACLUO134r3MPugk1Y/ZSBr G0fMRP5CzQEc6N907cf1F6hjjNDGv2oF44vLLedSNOKYlXbTKwIDAQABo4IEzjCC BMowHQYDVR0OBBYEFHE3/svBdD/jK0cbqV4eomonDkjAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m ZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZmOGNmYjc2LWQzY2YtNGRhNi1i ZmUwLTM2MWQ3NzUwYzkwMi9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1 MGM5MDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgacGCCsGAQUF BwEHAQH/BIGXMIGUMGAEAgABMFoDBAAXg/gDBAAXl/ADBARFNdADBARK0ZADBAJg L6gDBAJomLQDBAGC+swDBAKLQKgDBAGUO64DBAKsZvgDBALAqQwDBADHClcDBALH c8QDBATRcOADBAXY4OAwMAQCAAIwKgMFACYE+EADBQAmBX7AAwUAJgWnQAMFACYH VoADBQAmB1nAAwUAJge/wDBEBggrBgEFBQcBCAEB/wQ1MDOgMTAvAgI4QwICVlYC AlokAgMAnAwCAwD1EgIDBgSZAgMGDuICAwYQKgIDBhM5AgMGE74wVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA MEuZ7alkwrh8N0t6nqGaCLu+RIpAprln0kHfR9XaWEfgG/5+EHxZwKQ4edAI85Dw VTJMa9M5SwCdnAXj6j1p5pRvMUeHogd0/Bu803QE93Xnx3YryjCrjcCPn0yzMFPH 2oJ+Qdh2T/T2USq4+i0ntQ/egUnyzZ4TSRTY83i+9Ldf4rB2p2MBV0oidA4OSOti K8sh7g6nHboyxWVLU/yKh8/aMGMl2+X23Rwp1I6fF5apxUmXH4CudYxezXjKR38A baOnaw2rhJzdc8eu6K/6K6w6kXhQz48llKiOu9h1CV5VZUEDplxd9NJdykptXhkN EYjsn/dSyWZc3gtHyq62LQ== -----END CERTIFICATE-----Generated at Thu Jul 23 20:17:16 2026 by rpki-client