$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer File: b267d832-cb05-4c68-a5ce-ba4645db35e0.cer (raw, json) Hash identifier: kxeZoZ8FDGGXRYsaa3ZIkZKkdg4q9NPU6vYGIzOK5bE= Subject key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D9CE31DCC1FBC018FC500CD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Apr 2026 12:45:17 +0000 Certificate not after: Thu 27 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 10929 AS: 13845 AS: 19122 AS: 55066 IP: 64.15.64.0/20 IP: 66.51.16.0/21 IP: 67.212.64.0/19 IP: 68.71.32.0/19 IP: 69.165.80.0/20 IP: 148.66.241.0/24 IP: 148.66.252.0/22 IP: 184.170.128.0/20 IP: 192.154.136.0/21 IP: 199.193.52.0/22 IP: 204.147.76.0/22 IP: 205.204.64.0/19 IP: 208.82.120.0/22 IP: 209.44.96.0/19 IP: 2605:9000::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9c:e3:1d:cc:1f:bc:01:8f:c5:00:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 24 12:45:17 2026 GMT Not After : Jul 27 12:45:17 2028 GMT Subject: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5b:c5:d0:ba:7a:4b:92:b8:a2:05:8e:8a:a0: ff:b0:5c:29:a7:8a:a2:0c:97:81:60:68:78:6c:61: dd:56:de:2c:a6:d1:2d:8b:f5:73:7d:02:7e:9b:39: ce:74:2c:4a:37:36:74:b1:4f:79:2c:ad:9d:9c:4e: bc:f7:81:a4:3d:0a:45:22:77:9b:e4:4b:bc:9e:01: e3:74:fb:df:00:e8:08:e0:53:f5:af:d6:82:c7:3c: f0:3d:52:c6:43:8b:2e:d6:66:ce:a9:f1:be:c9:a6: 6f:97:e6:1d:c5:8a:25:35:2a:a9:bc:fc:64:a7:0d: 47:fa:43:db:fb:af:8d:df:e7:c1:e0:2a:db:cf:04: 06:e2:22:b3:84:e6:bb:96:27:f2:41:98:e6:39:ba: 8e:cc:59:e2:e6:5c:78:43:90:85:fb:51:14:a7:4f: e7:a3:a6:6b:1c:0e:c0:bc:81:3b:e8:de:b2:de:d3: be:51:f4:69:94:bc:6d:e0:99:13:e5:f3:34:49:37: cb:c2:8a:83:d0:df:d5:15:eb:2d:35:d1:bd:ae:35: 32:3c:f5:6d:fe:53:9d:a0:84:83:68:96:19:a2:82: 1e:33:13:35:32:16:56:e7:0b:30:a2:5c:17:f8:f7: 57:bf:e3:f6:e6:7a:21:b5:9f:c8:a4:ac:89:d1:c3: 9d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.15.64.0/20 66.51.16.0/21 67.212.64.0/19 68.71.32.0/19 69.165.80.0/20 148.66.241.0/24 148.66.252.0/22 184.170.128.0/20 192.154.136.0/21 199.193.52.0/22 204.147.76.0/22 205.204.64.0/19 208.82.120.0/22 209.44.96.0/19 IPv6: 2605:9000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10929 13845 19122 55066 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f5:d7:22:3f:5b:3f:df:fe:b9:53:ad:2c:1e:34:be:94:b5: d6:aa:20:89:70:b9:1e:90:10:ad:bb:58:8a:af:cf:8c:b0:ec: 95:ac:e6:d0:92:f2:17:1a:0d:54:5a:d3:0a:74:ad:4e:f4:6d: 38:64:d1:72:a8:6e:32:64:37:c6:82:cc:84:58:21:3e:ce:a2: 41:84:ab:8a:e5:a7:58:fd:fe:28:75:7b:87:73:0f:0b:0d:bc: 45:74:c2:90:3c:62:d7:0c:ca:ed:a5:01:fe:30:14:38:c2:7a: 8d:db:dc:b5:c2:67:6d:a4:7c:32:d1:dd:7e:2f:76:1a:9a:fa: e7:b4:99:63:5c:69:1c:ed:81:0a:f7:15:c1:0c:96:9b:38:0f: e0:af:9d:a2:24:37:dc:fc:4e:32:1c:04:73:0b:f1:9f:9a:07: d4:55:b4:28:29:00:17:c1:6d:9f:06:ba:3d:50:3a:de:38:4a: 4c:7e:20:35:69:4c:0d:da:90:65:89:47:f3:23:51:dd:0c:6c: e0:38:15:b3:6c:3a:33:3f:6f:14:fb:9a:5c:78:c3:93:8f:38: a0:ed:01:59:aa:6c:b9:18:56:ef:43:88:35:ff:51:84:35:06: 59:1a:ad:7b:ad:f2:a8:0a:2e:99:98:c5:ad:81:0c:f0:ff:8e: 7e:d9:ea:82 -----BEGIN CERTIFICATE----- MIIHcjCCBlqgAwIBAgIUAQ0Mn0MoWE2c4x3MH7wBj8UAzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDQyNDEyNDUxN1oXDTI4MDcyNzEyNDUxN1owLzEtMCsGA1UEAxMk YjI2N2Q4MzItY2IwNS00YzY4LWE1Y2UtYmE0NjQ1ZGIzNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylvF0Lp6S5K4ogWOiqD/sFwpp4qiDJeBYGh4 bGHdVt4sptEti/VzfQJ+mznOdCxKNzZ0sU95LK2dnE6894GkPQpFIneb5Eu8ngHj dPvfAOgI4FP1r9aCxzzwPVLGQ4su1mbOqfG+yaZvl+YdxYolNSqpvPxkpw1H+kPb +6+N3+fB4CrbzwQG4iKzhOa7lifyQZjmObqOzFni5lx4Q5CF+1EUp0/no6ZrHA7A vIE76N6y3tO+UfRplLxt4JkT5fM0STfLwoqD0N/VFestNdG9rjUyPPVt/lOdoISD aJYZooIeMxM1MhZW5wswolwX+PdXv+P25nohtZ/IpKyJ0cOdhwIDAQABo4IEhDCC BIAwHQYDVR0OBBYEFNq5YgNYSIcv0zLHUJsscQgvXqgmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i MjY3ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2NDVkYjM1ZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2IyNjdkODMyLWNiMDUtNGM2OC1h NWNlLWJhNDY0NWRiMzVlMC9iMjY3ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2NDVk YjM1ZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwfAYIKwYBBQUH AQcBAf8EbTBrMFoEAgABMFQDBARAD0ADBANCMxADBAVD1EADBAVERyADBARFpVAD BACUQvEDBAKUQvwDBAS4qoADBAPAmogDBALHwTQDBALMk0wDBAXNzEADBALQUngD BAXRLGAwDQQCAAIwBwMFACYFkAAwJgYIKwYBBQUHAQgBAf8EFzAVoBMwEQICKrEC AjYVAgJKsgIDANcaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEL11yI/Wz/f/rlTrSweNL6UtdaqIIlwuR6Q EK27WIqvz4yw7JWs5tCS8hcaDVRa0wp0rU70bThk0XKobjJkN8aCzIRYIT7OokGE q4rlp1j9/ih1e4dzDwsNvEV0wpA8YtcMyu2lAf4wFDjCeo3b3LXCZ22kfDLR3X4v dhqa+ue0mWNcaRztgQr3FcEMlps4D+CvnaIkN9z8TjIcBHML8Z+aB9RVtCgpABfB bZ8Guj1QOt44Skx+IDVpTA3akGWJR/MjUd0MbOA4FbNsOjM/bxT7mlx4w5OPOKDt AVmqbLkYVu9DiDX/UYQ1BlkarXut8qgKLpmYxa2BDPD/jn7Z6oI= -----END CERTIFICATE-----Generated at Wed May 13 05:35:25 2026 by rpki-client