$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer File: 4279ddf8-3e66-45cf-8955-452fbe652c0c.cer (raw, json) Hash identifier: NkDjOSFZPLD2rB2KLhZ/oPYjg/3zSIoUDbDKFBJguNI= Subject key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584E4CB0D3EFB86BA8B317655760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jun 2026 12:06:14 +0000 Certificate not after: Mon 17 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 14399 AS: 20376 AS: 27425 AS: 397050 IP: 64.32.38.0/23 IP: 66.242.50.0/23 IP: 104.36.88.0/22 IP: 104.204.56.0/22 IP: 162.213.164.0/22 IP: 162.250.204.0/22 IP: 168.149.192.0/19 IP: 177.1.224.0/20 IP: 198.203.204.0/23 IP: 198.241.49.0/24 IP: 198.241.62.0/24 IP: 199.45.168.0/21 IP: 204.9.24.0/22 IP: 204.107.216.0/24 IP: 204.144.152.0/21 IP: 207.178.96.0/19 IP: 209.137.196.0 -- 209.137.201.255 IP: 209.137.203.0 -- 209.137.207.255 IP: 209.137.209.0 -- 209.137.219.255 IP: 209.137.222.0/23 IP: 213.170.146.0/24 IP: 2606:2600::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:b0:d3:ef:b8:6b:a8:b3:17:65:57:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jun 26 12:06:14 2026 GMT Not After : Jan 17 01:45:23 2028 GMT Subject: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:2e:19:ae:31:0f:6f:cc:1c:52:0b:e1:95: 81:37:d8:9a:eb:47:43:12:55:e9:24:32:40:d7:7b: 39:dc:28:bf:f9:b9:75:8a:6e:a7:af:23:37:be:fc: 91:3c:5c:e8:42:9e:5a:06:70:53:6b:09:91:1f:30: 58:36:c7:24:11:0a:4b:31:e5:d4:58:01:60:c2:3b: dd:dc:54:c1:db:75:21:4f:52:0d:f1:d7:cb:a5:99: 54:b5:40:c6:e9:6b:65:92:2f:5d:6d:48:61:96:d7: 70:b2:06:f9:6a:2a:26:73:23:82:f0:ff:eb:43:88: 4c:49:cd:8c:41:d2:f1:92:0a:0a:97:aa:6f:74:8f: c0:00:09:b0:71:ea:0f:46:49:2d:1b:11:ba:30:47: 03:14:09:d3:17:74:02:b3:1e:34:03:4a:f8:56:41: 3a:58:c9:3a:c6:36:ea:61:14:e0:11:e4:65:9f:d4: 34:ce:4d:ca:ac:00:29:7c:3f:a6:7e:5a:b1:b7:77: 6c:37:fa:35:7a:78:1b:62:5d:ea:c1:4b:d7:f1:5b: 70:57:98:14:ff:74:6b:ad:4e:79:d4:dc:e0:70:f1: a1:5d:c1:ed:22:11:d9:99:15:57:43:df:4c:ef:52: 8a:35:0e:35:88:c2:5e:c1:fa:00:28:92:1a:ed:10: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 64.32.38.0/23 66.242.50.0/23 104.36.88.0/22 104.204.56.0/22 162.213.164.0/22 162.250.204.0/22 168.149.192.0/19 177.1.224.0/20 198.203.204.0/23 198.241.49.0/24 198.241.62.0/24 199.45.168.0/21 204.9.24.0/22 204.107.216.0/24 204.144.152.0/21 207.178.96.0/19 209.137.196.0-209.137.201.255 209.137.203.0-209.137.207.255 209.137.209.0-209.137.219.255 209.137.222.0/23 213.170.146.0/24 IPv6: 2606:2600::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14399 20376 27425 397050 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:36:7c:75:a7:c1:38:4b:8c:37:ac:89:48:3c:01:3b:eb:28: 27:57:67:ad:91:72:a8:0f:71:91:7c:7e:db:6f:98:a8:a8:6d: 1a:0d:8e:78:46:7a:61:2d:02:67:e2:d8:42:e1:42:c8:ed:f2: 91:d4:d7:6b:9f:43:47:f3:f2:cf:ed:65:85:04:ad:b8:be:92: 2a:3a:a2:8c:b1:61:9a:44:a7:e7:b6:a8:4b:4f:ff:a4:af:51: e3:7b:8d:36:65:56:d7:18:61:45:b5:92:b3:ad:33:68:81:3a: b5:15:63:d5:88:ec:ab:35:73:6f:d3:c8:f7:fb:58:6f:fa:6d: 77:7d:9c:33:0f:1e:90:50:9a:a4:51:72:ca:9e:45:71:74:8a: 2e:55:ba:05:83:40:c4:e2:eb:01:98:fc:6a:3c:69:35:03:54: 73:2a:45:de:0b:76:04:29:84:91:49:0a:bd:b1:2a:f3:41:9a: f2:20:c3:17:75:28:8a:43:c1:ca:8e:1f:f2:65:c9:ed:91:f6: 52:42:0f:ca:74:1c:d1:ff:69:0c:2c:8d:73:4f:68:56:75:54: 05:62:1f:66:e6:62:7f:f7:ca:0f:79:b2:8a:ad:a2:35:20:47: d3:fa:2b:f9:e3:02:88:2b:19:3e:d8:c0:41:7b:30:ea:60:b3: c1:72:ae:5f -----BEGIN CERTIFICATE----- MIIHuTCCBqGgAwIBAgIUAQ0Mn0MoWE5MsNPvuGuosxdlV2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDYyNjEyMDYxNFoXDTI4MDExNzAxNDUyM1owLzEtMCsGA1UEAxMk NDI3OWRkZjgtM2U2Ni00NWNmLTg5NTUtNDUyZmJlNjUyYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+UuGa4xD2/MHFIL4ZWBN9ia60dDElXpJDJA 13s53Ci/+bl1im6nryM3vvyRPFzoQp5aBnBTawmRHzBYNsckEQpLMeXUWAFgwjvd 3FTB23UhT1IN8dfLpZlUtUDG6Wtlki9dbUhhltdwsgb5aiomcyOC8P/rQ4hMSc2M QdLxkgoKl6pvdI/AAAmwceoPRkktGxG6MEcDFAnTF3QCsx40A0r4VkE6WMk6xjbq YRTgEeRln9Q0zk3KrAApfD+mflqxt3dsN/o1engbYl3qwUvX8VtwV5gU/3RrrU55 1NzgcPGhXcHtIhHZmRVXQ99M71KKNQ41iMJewfoAKJIa7RAn+wIDAQABo4IEyzCC BMcwHQYDVR0OBBYEFMqiZBunt0x+imCDTw5Cu3ikUPCEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80 Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2NTJjMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzQyNzlkZGY4LTNlNjYtNDVjZi04 OTU1LTQ1MmZiZTY1MmMwYy80Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2 NTJjMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgcIGCCsGAQUF BwEHAQH/BIGyMIGvMIGdBAIAATCBlgMEAUAgJgMEAULyMgMEAmgkWAMEAmjMOAME AqLVpAMEAqL6zAMEBaiVwAMEBLEB4AMEAcbLzAMEAMbxMQMEAMbxPgMEA8ctqAME AswJGAMEAMxr2AMEA8yQmAMEBc+yYDAMAwQC0YnEAwQB0YnIMAwDBADRicsDBATR icAwDAMEANGJ0QMEAtGJ2AMEAdGJ3gMEANWqkjANBAIAAjAHAwUEJgYmADAmBggr BgEFBQcBCAEB/wQXMBWgEzARAgI4PwICT5gCAmshAgMGDvowVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUjZ8 dafBOEuMN6yJSDwBO+soJ1dnrZFyqA9xkXx+22+YqKhtGg2OeEZ6YS0CZ+LYQuFC yO3ykdTXa59DR/Pyz+1lhQStuL6SKjqijLFhmkSn57aoS0//pK9R43uNNmVW1xhh RbWSs60zaIE6tRVj1YjsqzVzb9PI9/tYb/ptd32cMw8ekFCapFFyyp5FcXSKLlW6 BYNAxOLrAZj8ajxpNQNUcypF3gt2BCmEkUkKvbEq80Ga8iDDF3UoikPByo4f8mXJ 7ZH2UkIPynQc0f9pDCyNc09oVnVUBWIfZuZif/fKD3myiq2iNSBH0/or+eMCiCsZ PtjAQXsw6mCzwXKuXw== -----END CERTIFICATE-----Generated at Thu Jul 23 20:21:08 2026 by rpki-client