$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer File: 5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer (raw, json) Hash identifier: izsKh4xW/Fayg8CCZtw3TtDkqYRXriLmUp1COdfuba8= Subject key identifier: A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584CB27F7C2FB1F9D23374EA7328 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Jan 2026 13:45:23 +0000 Certificate not after: Thu 04 May 2028 12:45:23 +0000 Subordinate resources: AS: 399213 IP: 104.167.227.0/24 IP: 2602:f8d9::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:7f:7c:2f:b1:f9:d2:33:74:ea:73:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 30 13:45:23 2026 GMT Not After : May 4 12:45:23 2028 GMT Subject: CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6a:95:5f:3b:76:23:b3:58:cc:f0:d1:ef:e1: de:06:0d:38:04:bb:39:4d:49:7f:3c:3e:30:5b:70: f7:98:c4:9a:42:bd:06:84:52:aa:57:ff:55:ba:ed: 96:04:dc:45:a2:a6:a1:ba:df:ab:6f:dc:e2:67:7a: ec:bc:11:36:1b:65:c4:8d:46:94:fb:05:31:ff:7e: 2b:80:b2:27:d6:7f:84:89:76:a2:f4:89:9b:22:c8: b7:7b:9d:37:d7:9c:24:34:c7:35:50:d6:48:46:f2: d0:46:96:16:29:fa:35:59:3b:b5:34:0f:8d:60:52: 5d:01:aa:56:9d:93:89:13:1e:76:20:34:1b:d5:b6: 43:7c:7e:7d:2b:8d:75:4b:7b:9e:46:a7:21:66:b3: 93:97:8e:a0:a0:05:fc:17:23:a0:fe:33:57:26:62: b5:a0:4d:86:d0:8d:49:78:93:ad:98:cb:3f:fb:1e: 00:6d:a3:b2:d1:5c:4d:04:71:ed:b3:b1:5e:b3:f0: fd:6e:e5:c8:ae:14:11:f4:18:5a:dd:2b:1a:c4:2d: a3:5f:96:2a:4a:3c:c8:6d:70:eb:ec:0c:a5:07:a9: 7a:16:16:57:b8:75:66:22:7c:e2:8e:f1:26:e1:1c: 45:9a:c4:8f:33:14:ab:9d:fe:9c:46:a2:43:1d:f1: 5e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.167.227.0/24 IPv6: 2602:f8d9::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399213 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b0:74:08:15:6f:63:df:6e:6f:f8:32:53:8e:8d:e6:ff:9b: 59:c3:18:a4:0a:38:b9:1d:2a:82:60:64:7b:a6:7e:57:dd:5a: fc:3b:96:72:d3:19:98:b3:6e:bb:35:e4:62:42:36:f8:39:f1: 65:6c:30:c4:ca:d7:14:a1:c6:0a:b7:cf:bd:bc:9b:c1:22:f6: aa:7b:ea:28:a6:ec:84:cc:66:1f:e8:5a:63:8d:7d:ce:fb:53: ab:93:cc:b1:01:c8:8a:f7:2d:48:78:f7:88:4b:89:7d:f1:26: 0a:26:c0:c5:fb:4f:15:47:a6:37:31:08:23:8e:25:be:43:ae: 84:5b:e5:d9:3e:f2:33:0c:6e:7a:ab:53:ef:a9:4f:ff:fd:6f: 3b:a8:c4:44:57:56:ac:c4:2a:3d:e8:ff:65:48:ac:08:06:d1: 2a:60:80:2a:a1:22:eb:77:bc:36:5d:33:91:78:c8:46:a6:35: 2c:77:c6:1b:15:7a:b8:5a:37:cd:27:17:80:4e:0b:9f:06:09: 6a:1d:85:95:84:37:a3:8e:47:7d:29:35:81:c4:3c:f0:11:16: fd:6c:00:d6:a4:f7:9d:e5:68:fa:59:6a:21:72:b6:ea:75:90: 17:67:cb:fe:3f:e6:3a:b0:19:23:d7:2f:a6:08:0f:64:e2:60: 27:18:44:ac -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEyyf3wvsfnSM3TqcygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDEzMDEzNDUyM1oXDTI4MDUwNDEyNDUyM1owLzEtMCsGA1UEAxMk NWQ2YTVkN2EtNTFhMi00YTgzLWI1YjUtZDhjMTU0YjhkMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWqVXzt2I7NYzPDR7+HeBg04BLs5TUl/PD4w W3D3mMSaQr0GhFKqV/9Vuu2WBNxFoqahut+rb9ziZ3rsvBE2G2XEjUaU+wUx/34r gLIn1n+EiXai9ImbIsi3e50315wkNMc1UNZIRvLQRpYWKfo1WTu1NA+NYFJdAapW nZOJEx52IDQb1bZDfH59K411S3ueRqchZrOTl46goAX8FyOg/jNXJmK1oE2G0I1J eJOtmMs/+x4AbaOy0VxNBHHts7Fes/D9buXIrhQR9Bha3SsaxC2jX5YqSjzIbXDr 7AylB6l6FhZXuHVmInzijvEm4RxFmsSPMxSrnf6cRqJDHfFegwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKCS2CF8STPk+qfxMQa7dZLGyA9pMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81 ZDZhNWQ3YS01MWEyLTRhODMtYjViNS1kOGMxNTRiOGQzMDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzVkNmE1ZDdhLTUxYTItNGE4My1i NWI1LWQ4YzE1NGI4ZDMwNi81ZDZhNWQ3YS01MWEyLTRhODMtYjViNS1kOGMxNTRi OGQzMDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABop+MwDgQCAAIwCAMGACYC+NkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYXbTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFsHQIFW9j325v+DJTjo3m/5tZ wxikCji5HSqCYGR7pn5X3Vr8O5Zy0xmYs267NeRiQjb4OfFlbDDEytcUocYKt8+9 vJvBIvaqe+oopuyEzGYf6FpjjX3O+1Ork8yxAciK9y1IePeIS4l98SYKJsDF+08V R6Y3MQgjjiW+Q66EW+XZPvIzDG56q1PvqU///W87qMREV1asxCo96P9lSKwIBtEq YIAqoSLrd7w2XTOReMhGpjUsd8YbFXq4WjfNJxeATgufBglqHYWVhDejjkd9KTWB xDzwERb9bADWpPed5Wj6WWohcrbqdZAXZ8v+P+Y6sBkj1y+mCA9k4mAnGESs -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:41 2026 by rpki-client