$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer File: 86b35f71-51ac-43ff-b604-cba3552c4c8c.cer (raw, json) Hash identifier: yon7mIJL7emAXDe0KtUr/uN/kU1GBv3tNZeENt1wM/s= Subject key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D3DF7E6921E8526B15AFB8B2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Mar 2026 12:45:22 +0000 Certificate not after: Fri 23 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 46841 IP: 23.179.96.0/24 IP: 100.42.16.0/20 IP: 104.153.148.0/22 IP: 104.193.144.0/21 IP: 162.210.172.0/22 IP: 162.218.64.0/21 IP: 199.30.64.0/22 IP: 199.87.228.0/22 IP: 2604:b480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:f7:e6:92:1e:85:26:b1:5a:fb:8b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 21 12:45:22 2026 GMT Not After : Jun 23 12:45:22 2028 GMT Subject: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:9b:a3:7e:e6:5d:e1:81:e7:2d:57:e2:bf:e3: eb:73:65:46:dd:cf:28:51:65:cb:49:d3:94:c9:c1: bf:7b:4d:56:9d:c2:6c:80:b4:cb:7a:2c:a0:3c:39: 90:a6:66:3b:84:ff:22:1f:08:ca:ee:cb:73:cd:ef: 10:13:58:c5:dd:ca:eb:50:b0:9e:a5:b6:b6:40:d2: 86:f6:bc:46:6a:24:4e:b7:da:77:72:5a:d1:a6:2d: f5:a4:20:66:55:6f:ed:a1:08:e3:59:a7:84:c9:98: 66:9b:b8:aa:d7:05:8b:3a:b4:73:8d:90:76:e1:81: be:5d:1e:9c:97:e3:24:8a:14:42:9c:df:3d:71:b9: d6:f5:52:c5:b3:dc:04:9b:8c:3c:4f:b4:01:e3:ee: 99:94:83:f9:0d:f3:8e:09:29:75:f7:12:e0:a7:27: 96:86:6c:d6:00:c6:37:77:48:6b:12:02:d1:1a:98: 0a:db:65:46:a6:16:85:81:fd:47:b5:92:7e:78:ec: ca:c5:82:81:6b:35:5e:84:7c:c5:12:99:a3:7e:69: fa:42:02:bc:5e:1a:4b:ff:50:90:bd:e5:a1:6a:ba: 26:a5:24:8b:4f:32:95:c3:b2:23:a3:54:1c:47:52: da:56:e3:c1:db:be:5e:1a:da:aa:35:15:66:9f:a9: 8a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.179.96.0/24 100.42.16.0/20 104.153.148.0/22 104.193.144.0/21 162.210.172.0/22 162.218.64.0/21 199.30.64.0/22 199.87.228.0/22 IPv6: 2604:b480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46841 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:fe:1e:cf:fa:77:71:e9:41:eb:15:56:53:8e:0c:81:20:de: d2:e2:75:90:d8:cd:dc:22:37:29:17:80:5c:f5:ec:2e:00:58: f7:33:6a:11:56:be:85:40:35:bd:6c:eb:96:a7:fe:37:f9:a0: 77:b3:79:17:5b:71:eb:d3:09:7b:e8:81:b3:cd:54:37:ba:98: 81:df:bb:ae:ea:9c:da:c9:ac:4a:98:d7:84:38:22:f0:48:35: af:19:fa:02:e5:e1:47:5f:d2:31:32:0f:6f:a0:f9:d0:a6:d5: a0:90:3d:24:6a:79:d7:ed:be:fa:af:83:d6:77:56:c4:16:13: 84:b8:ca:07:8e:b5:c8:75:a0:40:b1:23:e0:88:61:f3:5c:2a: a0:13:59:6c:e3:fc:3b:23:4f:ca:c0:8f:7a:ea:1c:0f:82:b2: 1f:36:5b:84:b1:c7:73:b0:28:5f:45:61:86:67:2e:81:9a:b8: d9:6c:f5:b8:3f:94:6e:6b:f5:14:0b:f0:49:8c:a4:9e:6a:d0: 9f:6e:68:6f:1b:c7:ec:01:93:6d:f6:c2:8e:6f:9a:34:4d:d0: 95:3f:d4:e7:a2:79:03:f8:41:df:e6:f3:d4:48:6e:d6:eb:3c: 72:20:65:04:d1:80:3e:77:c7:c9:b1:e5:08:be:71:29:aa:97: 66:48:62:5f -----BEGIN CERTIFICATE----- MIIHQjCCBiqgAwIBAgIUAQ0Mn0MoWE099+aSHoUmsVr7iy0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDMyMTEyNDUyMloXDTI4MDYyMzEyNDUyMlowLzEtMCsGA1UEAxMk ODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0YzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pujfuZd4YHnLVfiv+Prc2VG3c8oUWXLSdOU ycG/e01WncJsgLTLeiygPDmQpmY7hP8iHwjK7stzze8QE1jF3crrULCepba2QNKG 9rxGaiROt9p3clrRpi31pCBmVW/toQjjWaeEyZhmm7iq1wWLOrRzjZB24YG+XR6c l+MkihRCnN89cbnW9VLFs9wEm4w8T7QB4+6ZlIP5DfOOCSl19xLgpyeWhmzWAMY3 d0hrEgLRGpgK22VGphaFgf1HtZJ+eOzKxYKBazVehHzFEpmjfmn6QgK8XhpL/1CQ veWharompSSLTzKVw7Ijo1QcR1LaVuPB275eGtqqNRVmn6mKcwIDAQABo4IEVDCC BFAwHQYDVR0OBBYEFGScPf7T3z1rZ7xtvOkFvMBs5hzXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzg2YjM1ZjcxLTUxYWMtNDNmZi1i NjA0LWNiYTM1NTJjNGM4Yy84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUy YzRjOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAAXs2ADBARkKhADBAJomZQDBANowZADBAKi0qwD BAOi2kADBALHHkADBALHV+QwDQQCAAIwBwMFACYEtIAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDALb5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHX+Hs/6d3HpQesVVlOODIEg3tLidZDYzdwi NykXgFz17C4AWPczahFWvoVANb1s65an/jf5oHezeRdbcevTCXvogbPNVDe6mIHf u67qnNrJrEqY14Q4IvBINa8Z+gLl4Udf0jEyD2+g+dCm1aCQPSRqedftvvqvg9Z3 VsQWE4S4ygeOtch1oECxI+CIYfNcKqATWWzj/DsjT8rAj3rqHA+Csh82W4Sxx3Ow KF9FYYZnLoGauNls9bg/lG5r9RQL8EmMpJ5q0J9uaG8bx+wBk232wo5vmjRN0JU/ 1OeieQP4Qd/m89RIbtbrPHIgZQTRgD53x8mx5Qi+cSmql2ZIYl8= -----END CERTIFICATE-----Generated at Wed Mar 25 23:17:02 2026 by rpki-client