$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer File: ba584605-7948-4c75-be73-29a89eca8940.cer (raw, json) Hash identifier: 4tTssMcrUoCbqXX9ImmS91ERh+YSPL0LPVjkYntZTOg= Subject key identifier: EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D037550A7EA779D6AA4153D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Feb 2026 13:45:22 +0000 Certificate not after: Fri 02 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 139.102.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:75:50:a7:ea:77:9d:6a:a4:15:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 28 13:45:22 2026 GMT Not After : Jun 2 12:45:22 2028 GMT Subject: CN=ba584605-7948-4c75-be73-29a89eca8940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9e:ef:31:7d:42:96:a2:f6:89:2f:62:c2:6d: 37:aa:cc:d3:78:59:2a:ae:96:7d:11:bd:7d:f5:03: c1:04:32:32:d6:ed:0e:e3:0e:44:f0:2c:00:5e:8b: 4b:ba:66:a1:fd:f6:72:56:f0:ef:c9:e3:5e:0e:44: d3:83:f9:c4:14:5a:b5:2e:74:5a:ad:35:37:b6:f0: 0d:c4:85:a6:33:70:14:e9:20:08:0d:99:df:2b:a9: 00:70:2d:ae:6b:f3:06:9d:f3:71:ad:73:c6:74:64: 10:6a:67:1c:d1:29:2c:b7:c6:b8:c4:94:90:9e:4b: 87:df:1f:c0:4e:8d:db:e4:49:d8:bf:81:d4:ff:9b: 49:b5:5a:46:19:e6:c0:05:3d:4f:f5:53:eb:2c:21: 43:f8:40:df:42:6f:60:8f:59:c6:20:d1:a7:09:27: 1a:dd:db:c6:57:2c:59:5a:10:93:e9:2b:61:72:74: 45:46:ce:cb:8e:b9:bc:d4:87:17:c7:70:57:12:ce: ab:54:6a:48:2d:ef:aa:be:ec:1f:cc:b8:36:f4:1c: ec:56:82:c7:c2:a9:cf:64:c2:21:e1:9c:ae:06:a6: 11:b1:57:db:4a:c8:48:d9:5e:60:d9:7c:cc:96:8b: ce:7c:40:ec:76:f8:f0:fb:48:e8:e2:86:63:e4:66: fb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 139.102.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c4:73:09:31:cd:e1:e8:70:ee:89:b1:a0:8f:c1:54:53:89: 6e:77:53:1d:2f:2d:2b:83:17:13:65:1f:a3:ce:e0:bc:06:4c: a0:aa:ba:30:bd:d6:f0:b4:fe:9d:4e:12:8f:02:c2:fa:93:19: ac:59:a2:e1:bf:43:54:9b:c2:4e:e3:99:1c:43:ec:d2:c3:be: b4:6a:17:05:65:61:af:7e:69:22:11:9c:74:ba:a3:74:9f:9b: e7:f5:03:34:e0:bc:e7:17:14:e6:b9:be:bf:42:c0:fd:93:ba: 6e:5a:93:ac:48:58:9d:7c:17:47:31:af:50:89:6a:bd:2c:42: a2:b5:8e:94:0d:a2:30:87:9a:c8:97:fe:92:66:86:18:71:c5: a9:43:02:22:6f:42:5c:2e:5b:50:0f:f4:43:68:d1:e7:17:a7: ea:61:78:61:00:5c:11:b5:8b:c5:70:7a:4b:2d:12:a4:af:ef: 5b:38:bc:eb:e5:40:8e:91:18:52:a3:34:cb:31:e4:7a:0b:99: 5e:e9:00:5b:f8:7a:57:02:37:ae:bd:0e:78:e4:29:8a:2c:39: 9a:3b:66:bb:a1:a4:24:7f:08:33:91:3e:55:b5:5c:45:f4:a8: 26:eb:9f:07:25:50:1f:eb:96:06:36:10:71:55:d7:d2:dc:65: 03:a7:ae:25 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE0DdVCn6nedaqQVPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDIyODEzNDUyMloXDTI4MDYwMjEyNDUyMlowLzEtMCsGA1UEAxMk YmE1ODQ2MDUtNzk0OC00Yzc1LWJlNzMtMjlhODllY2E4OTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8J7vMX1ClqL2iS9iwm03qszTeFkqrpZ9Eb19 9QPBBDIy1u0O4w5E8CwAXotLumah/fZyVvDvyeNeDkTTg/nEFFq1LnRarTU3tvAN xIWmM3AU6SAIDZnfK6kAcC2ua/MGnfNxrXPGdGQQamcc0Skst8a4xJSQnkuH3x/A To3b5EnYv4HU/5tJtVpGGebABT1P9VPrLCFD+EDfQm9gj1nGINGnCSca3dvGVyxZ WhCT6SthcnRFRs7Ljrm81IcXx3BXEs6rVGpILe+qvuwfzLg29BzsVoLHwqnPZMIh 4ZyuBqYRsVfbSshI2V5g2XzMlovOfEDsdvjw+0jo4oZj5Gb7dQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFOr/113SwQ9PCTpTMfyMz5/+ThQmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i YTU4NDYwNS03OTQ4LTRjNzUtYmU3My0yOWE4OWVjYTg5NDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2JhNTg0NjA1LTc5NDgtNGM3NS1i ZTczLTI5YTg5ZWNhODk0MC9iYTU4NDYwNS03OTQ4LTRjNzUtYmU3My0yOWE4OWVj YTg5NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCLZjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8xHMJMc3h6HDuibGgj8FU U4lud1MdLy0rgxcTZR+jzuC8BkygqrowvdbwtP6dThKPAsL6kxmsWaLhv0NUm8JO 45kcQ+zSw760ahcFZWGvfmkiEZx0uqN0n5vn9QM04LznFxTmub6/QsD9k7puWpOs SFidfBdHMa9QiWq9LEKitY6UDaIwh5rIl/6SZoYYccWpQwIib0JcLltQD/RDaNHn F6fqYXhhAFwRtYvFcHpLLRKkr+9bOLzr5UCOkRhSozTLMeR6C5le6QBb+HpXAjeu vQ545CmKLDmaO2a7oaQkfwgzkT5VtVxF9Kgm658HJVAf65YGNhBxVdfS3GUDp64l -----END CERTIFICATE-----Generated at Mon Mar 2 05:38:47 2026 by rpki-client