$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer File: 75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer (raw, json) Hash identifier: Unp0GBGgn30CqIFjm8pmq4CoWTuyIwDyg/aKnGJIxo4= Subject key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584CB814D8253A604FFC65B44180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Feb 2026 13:45:21 +0000 Certificate not after: Sat 06 May 2028 12:45:21 +0000 Subordinate resources: AS: 399533 IP: 23.151.16.0/23 IP: 64.112.76.0/22 IP: 142.248.96.0/22 IP: 208.64.216.0/22 IP: 208.86.32.0/22 IP: 209.142.68.0/22 IP: 2602:fd91::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:14:d8:25:3a:60:4f:fc:65:b4:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 1 13:45:21 2026 GMT Not After : May 6 12:45:21 2028 GMT Subject: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:df:72:62:99:9f:f5:15:47:08:2a:fc:94:cd: 66:d3:dd:de:0b:63:40:8a:86:e0:8a:1c:85:a9:60: e2:1e:67:10:86:20:de:5c:6e:06:9e:dd:32:03:a4: 37:d7:b9:84:6b:74:79:77:d1:8f:10:33:8f:76:a6: 6c:a4:e9:0a:6a:20:93:98:70:b7:e3:fc:db:0b:60: 7b:ba:42:50:29:41:29:b6:b2:ed:cf:8b:98:d8:f0: 62:d0:5d:6e:08:a7:55:b7:14:54:df:3c:97:93:93: 5b:b5:5b:4c:e8:52:33:8b:64:17:57:d8:7e:57:42: 27:2f:54:be:ed:3d:65:0c:df:ca:48:80:59:98:ac: 7c:2a:50:c0:6a:d8:43:ca:ee:58:30:09:05:a4:3d: 12:7e:35:7b:fe:0d:78:92:88:6d:75:63:69:bf:67: 90:29:04:8b:25:ae:59:02:6f:6e:9d:db:02:2f:92: 2c:4e:1e:a1:92:fe:21:98:38:3b:11:33:0d:04:64: a7:1b:a8:aa:0a:e8:de:ac:5a:90:f2:68:ad:91:0d: ef:a2:0e:1b:6e:0f:dd:3a:bb:41:6e:ec:ee:b2:4c: 12:68:a2:6b:3a:47:0e:fa:07:3b:bb:05:00:cf:d3: e5:0d:c4:73:64:66:59:e7:85:5c:30:38:ca:9e:d4: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.151.16.0/23 64.112.76.0/22 142.248.96.0/22 208.64.216.0/22 208.86.32.0/22 209.142.68.0/22 IPv6: 2602:fd91::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399533 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e1:67:92:e7:27:a9:7d:47:12:fc:bb:ee:d3:1e:04:e8:c4: b7:62:bb:71:ba:1e:58:7c:07:61:29:d9:28:af:6c:fe:ad:2e: 29:18:c9:fc:89:9e:76:9c:4c:54:83:f6:53:f1:ef:19:8d:2a: 56:a9:20:8b:0c:1a:d0:be:73:96:85:35:67:20:57:3a:55:f3: de:6d:36:4c:cb:d2:d7:d8:ec:39:27:0d:24:aa:8f:8f:45:f0: 27:48:91:bd:c2:8f:17:f9:5d:f9:3a:d2:f4:da:c2:a9:18:07: 41:24:85:6b:75:67:de:c5:7e:70:71:c7:68:67:17:60:82:39: 20:91:da:68:5d:c6:83:7b:75:7c:75:b4:13:ec:62:51:0d:74: 10:c3:c1:36:8b:c8:e0:3d:fe:0f:42:19:dd:99:2a:3f:a1:67: f6:39:e5:cf:0d:f2:d0:2e:81:ee:14:6f:83:c0:64:2c:56:b5: 4b:cb:27:68:c2:b1:a7:3f:7f:19:29:51:cb:65:33:78:5c:10: 99:46:4f:38:ed:95:57:ff:29:8a:11:8d:28:5e:77:8f:33:45: 04:44:fa:87:83:7e:3a:98:a5:47:61:ce:54:14:eb:50:d0:ba: fe:4c:df:ed:6d:ee:4f:b0:02:4a:ce:49:31:18:5c:2c:fa:95: 93:dd:aa:d4 -----BEGIN CERTIFICATE----- MIIHNzCCBh+gAwIBAgIUAQ0Mn0MoWEy4FNglOmBP/GW0QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDIwMTEzNDUyMVoXDTI4MDUwNjEyNDUyMVowLzEtMCsGA1UEAxMk NzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcyMDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN9yYpmf9RVHCCr8lM1m093eC2NAiobgihyF qWDiHmcQhiDeXG4Gnt0yA6Q317mEa3R5d9GPEDOPdqZspOkKaiCTmHC34/zbC2B7 ukJQKUEptrLtz4uY2PBi0F1uCKdVtxRU3zyXk5NbtVtM6FIzi2QXV9h+V0InL1S+ 7T1lDN/KSIBZmKx8KlDAathDyu5YMAkFpD0SfjV7/g14kohtdWNpv2eQKQSLJa5Z Am9undsCL5IsTh6hkv4hmDg7ETMNBGSnG6iqCujerFqQ8mitkQ3vog4bbg/dOrtB buzuskwSaKJrOkcO+gc7uwUAz9PlDcRzZGZZ54VcMDjKntRFvwIDAQABo4IESTCC BEUwHQYDVR0OBBYEFFAlyeKwfHtlWqpC4kPY7qD8WOSiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83 NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzc1YjljYjhlLTdhNzctNDA4ZS04 MWQ5LTA3NWY4ZWY3MjAwZS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVm NzIwMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCoEAgABMCQDBAEXlxADBAJAcEwDBAKO+GADBALQQNgDBALQViAD BALRjkQwDgQCAAIwCAMGBCYC/ZEAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYY rTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAa4WeS5yepfUcS/Lvu0x4E6MS3Yrtxuh5YfAdhKdkor2z+rS4p GMn8iZ52nExUg/ZT8e8ZjSpWqSCLDBrQvnOWhTVnIFc6VfPebTZMy9LX2Ow5Jw0k qo+PRfAnSJG9wo8X+V35OtL02sKpGAdBJIVrdWfexX5wccdoZxdggjkgkdpoXcaD e3V8dbQT7GJRDXQQw8E2i8jgPf4PQhndmSo/oWf2OeXPDfLQLoHuFG+DwGQsVrVL yydowrGnP38ZKVHLZTN4XBCZRk847ZVX/ymKEY0oXnePM0UERPqHg346mKVHYc5U FOtQ0Lr+TN/tbe5PsAJKzkkxGFws+pWT3arU -----END CERTIFICATE-----Generated at Sun Mar 1 18:24:39 2026 by rpki-client