$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer File: f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer (raw, json) Hash identifier: 0Y20krXngO5Fx5VHqt0Bb87IzGYrAw6GImUSFBy3EE0= Subject key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584CF2B5340E841976D56A9D5AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Feb 2026 13:45:21 +0000 Certificate not after: Sat 27 May 2028 12:45:21 +0000 Subordinate resources: IP: 64.89.208.0/20 IP: 72.250.128.0/19 IP: 108.59.112.0/20 IP: 144.86.208.0/20 IP: 216.228.32.0/19 IP: 2607:8380::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:b5:34:0e:84:19:76:d5:6a:9d:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 22 13:45:21 2026 GMT Not After : May 27 12:45:21 2028 GMT Subject: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:f2:2b:75:2d:3f:6f:a9:a8:8f:de:99:e7:cf: f2:05:34:22:d1:65:12:91:d0:1e:7d:e3:c0:a8:8c: b3:d5:e7:1b:71:63:e2:6c:37:6e:71:ee:dd:f8:52: 16:5c:2e:3f:38:38:f1:3c:ac:6c:54:91:3a:fb:da: ed:95:91:e8:94:99:19:4e:c0:35:6e:b1:9c:dc:d5: a0:7e:6a:11:33:ce:45:66:9b:f5:92:c2:e8:50:bd: 39:a3:1c:a9:e4:da:7f:6e:7c:f3:3e:62:51:b5:df: 08:88:5d:86:e5:eb:77:86:db:b8:8d:9f:f5:e7:8d: cd:0e:4c:e0:aa:20:11:88:2c:0a:c9:07:c3:54:0b: c9:4a:33:26:0a:63:e6:ed:41:59:e8:ee:bb:43:9d: 63:6a:9e:f6:22:3c:77:a5:e3:09:50:10:a9:a5:61: fc:9d:6f:7b:e8:4d:71:92:b3:38:ee:67:5c:20:57: 60:ef:aa:3b:75:7f:1a:c2:96:84:de:32:e2:b0:1a: 8f:b0:50:2b:57:36:51:46:0c:40:cf:fc:1e:dd:aa: 94:b3:48:bf:e5:23:1f:d2:52:7d:24:0a:52:4f:6e: 0e:fe:56:51:ce:35:82:d3:4e:4b:a8:6f:37:f0:ad: 94:00:24:7b:6a:7a:24:1c:ae:64:43:ce:dd:b6:89: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.89.208.0/20 72.250.128.0/19 108.59.112.0/20 144.86.208.0/20 216.228.32.0/19 IPv6: 2607:8380::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:54:81:c9:1e:c0:49:f5:c7:37:b2:f9:4b:30:8d:1c:fc:0d: 94:19:a5:6f:91:11:e9:79:ed:13:eb:32:e5:d1:0d:4c:61:24: ab:51:e5:49:f0:2b:f5:0f:70:d5:8d:2d:74:49:c5:04:0c:06: 44:98:52:aa:3f:b8:72:35:5f:fb:13:bb:78:6c:8f:47:fc:d8: a6:cf:70:30:23:ca:e2:0a:49:ae:a0:da:e5:2e:6b:ca:f5:f6: 23:e4:72:d7:4b:31:3d:9f:57:10:39:26:86:3c:ec:3c:d7:9e: c4:f3:b0:5b:44:ca:f4:0e:52:02:a4:ba:f0:b0:52:ab:34:e3: 12:f9:a5:f4:fa:d2:35:12:45:d3:b8:ac:a7:cb:c2:03:ec:9d: 6f:eb:c4:8d:db:81:0d:20:f5:2d:eb:61:63:23:f7:24:e0:29: 56:c3:d7:cc:be:de:53:2b:a8:c3:f4:fd:9a:65:e8:d0:28:09: 8c:0e:2e:cd:9b:17:d8:15:1e:03:e9:75:68:09:90:e3:60:a6: db:bf:92:35:57:14:80:d9:c5:f5:2d:51:46:3c:06:72:ce:07: c0:13:63:04:2b:64:43:c6:e3:b3:86:75:ba:45:8d:e1:17:b0: 01:9e:f0:04:48:96:d1:2b:15:95:50:95:14:de:ba:fd:c5:1d: 06:32:ba:e4 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEzytTQOhBl21WqdWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDIyMjEzNDUyMVoXDTI4MDUyNzEyNDUyMVowLzEtMCsGA1UEAxMk ZjVkZDJmM2ItZDU0NC00YTkwLTg0YTUtNThhZjBkYjg0ZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/IrdS0/b6moj96Z58/yBTQi0WUSkdAefePA qIyz1ecbcWPibDduce7d+FIWXC4/ODjxPKxsVJE6+9rtlZHolJkZTsA1brGc3NWg fmoRM85FZpv1ksLoUL05oxyp5Np/bnzzPmJRtd8IiF2G5et3htu4jZ/1543NDkzg qiARiCwKyQfDVAvJSjMmCmPm7UFZ6O67Q51jap72Ijx3peMJUBCppWH8nW976E1x krM47mdcIFdg76o7dX8awpaE3jLisBqPsFArVzZRRgxAz/we3aqUs0i/5SMf0lJ9 JApST24O/lZRzjWC005LqG838K2UACR7anokHK5kQ87dtolWcwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFCohftgoOtJB/s/l6R0yP8C3ivcLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m NWRkMmYzYi1kNTQ0LTRhOTAtODRhNS01OGFmMGRiODRkYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Y1ZGQyZjNiLWQ1NDQtNGE5MC04 NGE1LTU4YWYwZGI4NGRhYi9mNWRkMmYzYi1kNTQ0LTRhOTAtODRhNS01OGFmMGRi ODRkYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBARAWdADBAVI+oADBARsO3ADBASQVtADBAXY5CAw DQQCAAIwBwMFACYHg4AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAh1SByR7ASfXHN7L5SzCNHPwNlBmlb5ER 6XntE+sy5dENTGEkq1HlSfAr9Q9w1Y0tdEnFBAwGRJhSqj+4cjVf+xO7eGyPR/zY ps9wMCPK4gpJrqDa5S5ryvX2I+Ry10sxPZ9XEDkmhjzsPNeexPOwW0TK9A5SAqS6 8LBSqzTjEvml9PrSNRJF07isp8vCA+ydb+vEjduBDSD1LethYyP3JOApVsPXzL7e Uyuow/T9mmXo0CgJjA4uzZsX2BUeA+l1aAmQ42Cm27+SNVcUgNnF9S1RRjwGcs4H wBNjBCtkQ8bjs4Z1ukWN4RewAZ7wBEiW0SsVlVCVFN66/cUdBjK65A== -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:49 2026 by rpki-client