$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer File: 9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer (raw, json) Hash identifier: HhQ1D+LDH/yPFAE+E74jOYlYnfulbL3JuWPk60qI5/E= Subject key identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D04DAA76C173CD0D36990F780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Mar 2026 01:45:22 +0000 Certificate not after: Sat 03 Jun 2028 00:45:22 +0000 Subordinate resources: IP: 52.119.1.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:da:a7:6c:17:3c:d0:d3:69:90:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 1 01:45:22 2026 GMT Not After : Jun 3 00:45:22 2028 GMT Subject: CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:4c:e6:7e:e0:ac:6a:8e:0e:d8:54:8b:a8: fd:b6:a7:c4:10:15:2d:10:a5:03:73:a5:26:fe:f7: bb:0e:ca:19:80:9e:a1:6f:af:50:fb:49:8e:88:29: 13:72:d5:14:e0:a0:98:24:11:fd:79:d5:8f:68:56: 79:93:54:67:01:9e:96:72:a7:e6:36:8c:a3:eb:84: f9:58:4b:46:fc:3a:f1:69:ca:c6:c7:6e:19:1b:fb: 8b:7a:de:ec:82:54:bc:6c:c7:fd:5f:18:3f:a8:23: 81:ea:06:0a:17:24:f0:af:37:6a:4e:67:40:d5:f3: af:02:7e:8d:03:dc:ce:60:70:a5:53:3d:10:c4:67: 09:92:92:ff:61:08:07:93:e7:f1:d1:86:37:5f:83: 1d:fc:58:14:13:f8:27:46:59:f8:b1:ac:f1:b2:5b: 0f:b5:3e:bf:d5:c7:61:94:96:51:9c:b2:8e:da:13: a1:d8:c7:6f:60:7f:53:8d:5d:18:cd:57:09:c7:a5: fa:93:dd:ea:ec:0b:b5:b4:f0:ce:00:16:55:04:8b: 01:74:94:f7:61:e9:7a:09:49:42:d6:94:66:ad:d6: 6f:05:4b:a0:40:99:66:21:07:40:df:28:cd:a0:a5: f0:64:a1:dd:5d:e4:a4:95:36:db:75:7e:93:36:1f: 57:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 52.119.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ec:28:f1:ab:85:a7:2d:5c:5b:04:ef:ef:0a:6c:71:ea:92: 53:a1:ec:d6:ed:35:cb:6f:5c:d1:a2:3f:0c:13:a7:3d:d4:39: 9a:6f:0f:be:6a:d0:fb:68:07:4c:40:c0:d6:7b:db:80:bc:80: 4c:73:a4:88:e2:02:a5:ac:bd:27:f1:1e:c7:41:aa:2a:83:ce: 9b:d3:ca:31:6b:2e:c6:20:8f:4d:20:e2:3b:3e:df:d2:f8:1b: be:2c:54:8e:a1:c3:09:1e:9c:c6:8c:12:94:ee:a5:25:43:fc: 6d:b5:f5:af:df:7f:4a:51:fe:73:64:7a:a8:4d:f2:26:d1:2f: 9b:87:57:b4:2f:98:ca:3d:8b:8b:29:4b:d3:76:ad:12:1c:56: 8c:b4:45:14:d6:ce:3e:3e:bc:23:37:31:e7:ac:9b:1b:a6:99: 8f:6f:a0:ef:54:92:63:73:04:3d:b0:df:bd:91:51:61:13:0e: 05:0f:d4:c9:bd:72:df:aa:bb:89:07:08:d7:bb:29:ea:03:37: 85:9e:ac:90:20:cc:3d:c0:a6:b9:e8:ab:65:1d:64:28:ad:27: 87:6c:8c:7a:db:25:98:51:11:d6:33:6a:d5:45:ac:d9:b3:44: 0e:90:f0:4f:2d:19:ec:6f:00:8e:bc:a7:2a:c7:59:6d:41:2e: 93:47:d5:95 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0E2qdsFzzQ02mQ94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwMTAxNDUyMloXDTI4MDYwMzAwNDUyMlowLzEtMCsGA1UEAxMk OWY3NWU4ZDctZTQ1Zi00NzY3LTg5MzktYTJjNTM5NGMxZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZBM5n7grGqODthUi6j9tqfEEBUtEKUDc6Um /ve7DsoZgJ6hb69Q+0mOiCkTctUU4KCYJBH9edWPaFZ5k1RnAZ6WcqfmNoyj64T5 WEtG/DrxacrGx24ZG/uLet7sglS8bMf9Xxg/qCOB6gYKFyTwrzdqTmdA1fOvAn6N A9zOYHClUz0QxGcJkpL/YQgHk+fx0YY3X4Md/FgUE/gnRln4sazxslsPtT6/1cdh lJZRnLKO2hOh2MdvYH9TjV0YzVcJx6X6k93q7Au1tPDOABZVBIsBdJT3Yel6CUlC 1pRmrdZvBUugQJlmIQdA3yjNoKXwZKHdXeSklTbbdX6TNh9XIwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMh/M1gIg8LgwgpphJIKJfosvz7vMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0YzFlN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzlmNzVlOGQ3LWU0NWYtNDc2Ny04 OTM5LWEyYzUzOTRjMWU3Yy85Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0 YzFlN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAA0dwEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAP+wo8auFpy1cWwTv7wps ceqSU6Hs1u01y29c0aI/DBOnPdQ5mm8PvmrQ+2gHTEDA1nvbgLyATHOkiOICpay9 J/Eex0GqKoPOm9PKMWsuxiCPTSDiOz7f0vgbvixUjqHDCR6cxowSlO6lJUP8bbX1 r99/SlH+c2R6qE3yJtEvm4dXtC+Yyj2LiylL03atEhxWjLRFFNbOPj68Izcx56yb G6aZj2+g71SSY3MEPbDfvZFRYRMOBQ/Uyb1y36q7iQcI17sp6gM3hZ6skCDMPcCm ueirZR1kKK0nh2yMetslmFER1jNq1UWs2bNEDpDwTy0Z7G8AjrynKsdZbUEuk0fV lQ== -----END CERTIFICATE-----Generated at Mon Mar 2 05:22:59 2026 by rpki-client