$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer File: 75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer (raw, json) Hash identifier: GEB19w6EtZWG3sWMFevdpX8KselgOxrMw8aoPHD9mpM= Subject key identifier: F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D19AD008ED1E82B92C653B300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Mar 2026 12:45:21 +0000 Certificate not after: Sat 10 Jun 2028 12:45:21 +0000 Subordinate resources: AS: 64240 IP: 140.235.124.0/23 IP: 2602:f779::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:ad:00:8e:d1:e8:2b:92:c6:53:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 8 12:45:21 2026 GMT Not After : Jun 10 12:45:21 2028 GMT Subject: CN=75f477ee-4cd7-4d8f-9517-9cf25b239fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:61:94:08:0b:ee:39:a4:9e:55:51:07:e0:ab: a3:fb:4e:c2:e4:51:8b:bc:31:eb:ec:61:ca:86:03: 40:06:9d:a3:a0:90:d7:4f:f8:13:1e:94:f1:b7:06: 98:58:68:5d:6e:df:81:34:1e:8b:ac:27:6b:a2:72: af:31:87:e4:e5:95:95:9d:16:9b:8b:ae:17:98:f4: 99:b5:1c:42:cd:10:67:c1:c8:32:51:b2:78:e9:5a: 4b:2c:38:c6:af:3f:04:82:fe:6e:fa:8a:ea:dc:00: c8:ae:ad:d0:ec:f2:18:74:cd:84:05:52:3e:e8:b7: 6b:05:33:1d:18:20:f6:27:e0:3d:46:63:15:a7:2d: d3:a3:a4:2a:22:94:e0:0e:bd:cb:32:44:35:00:81: a5:32:a6:eb:8d:b9:ff:b8:6a:3b:81:77:8e:3a:c9: fc:a4:b6:b2:c6:ea:8a:10:48:18:86:54:5b:89:4c: 5d:9b:24:14:41:0a:47:ed:2d:99:50:79:b6:fc:22: 25:9b:cc:27:68:e2:c0:e7:da:ab:75:bc:c9:41:1e: ca:7d:e0:82:39:e7:42:87:b5:cb:53:a0:65:6e:b0: 22:38:42:03:a0:78:c2:2e:d8:0b:46:57:13:ea:4d: 13:a4:93:42:2b:11:f3:90:14:b3:52:66:97:15:72: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 140.235.124.0/23 IPv6: 2602:f779::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64240 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8e:3b:8a:7f:c1:7b:d6:12:e3:29:9d:10:80:18:6a:e6:aa: 89:86:67:7b:62:93:38:8b:4a:ec:47:e4:78:13:16:f6:f7:8e: 9d:28:a6:d6:98:40:d0:43:15:92:22:f8:8e:28:64:72:b1:5c: 73:7d:ab:ec:14:d8:bf:fe:8a:3c:d6:fa:59:16:b1:42:38:39: 84:d7:a3:08:eb:e5:2c:2f:6d:59:64:41:69:d7:b3:bb:cc:a5: b4:6b:5d:af:6b:83:51:a5:7c:82:b9:48:d0:d7:88:ff:da:70: 10:b0:86:7e:fa:74:fe:d9:40:86:e1:e7:e4:9f:b1:d2:ae:57: 17:11:d3:e7:48:da:8d:09:3d:a4:7d:ec:f9:ec:61:43:91:d0: 07:b5:43:dc:62:8d:d6:d2:6b:0b:b9:23:e2:ac:34:20:87:b7: 0b:a9:fc:9a:98:6c:2b:43:aa:e4:5b:63:de:c8:0b:07:eb:82: 91:09:d0:fc:5f:a9:d5:da:b5:14:e5:1f:51:98:2e:6f:ab:c9: 08:77:c4:1e:5d:0b:46:96:cd:6b:4e:52:2e:05:af:75:5e:0d: 9e:87:16:b5:b2:4d:44:16:ef:b4:1d:af:2a:9f:fa:b6:62:47: 32:d0:37:87:1c:82:5f:21:b2:a1:51:56:24:bd:b0:f8:b7:06: 56:c7:34:f3 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0ZrQCO0egrksZTswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwODEyNDUyMVoXDTI4MDYxMDEyNDUyMVowLzEtMCsGA1UEAxMk NzVmNDc3ZWUtNGNkNy00ZDhmLTk1MTctOWNmMjViMjM5ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2GUCAvuOaSeVVEH4Kuj+07C5FGLvDHr7GHK hgNABp2joJDXT/gTHpTxtwaYWGhdbt+BNB6LrCdronKvMYfk5ZWVnRabi64XmPSZ tRxCzRBnwcgyUbJ46VpLLDjGrz8Egv5u+orq3ADIrq3Q7PIYdM2EBVI+6LdrBTMd GCD2J+A9RmMVpy3To6QqIpTgDr3LMkQ1AIGlMqbrjbn/uGo7gXeOOsn8pLayxuqK EEgYhlRbiUxdmyQUQQpH7S2ZUHm2/CIlm8wnaOLA59qrdbzJQR7KfeCCOedCh7XL U6BlbrAiOEIDoHjCLtgLRlcT6k0TpJNCKxHzkBSzUmaXFXIQ9QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPfPCWmfOMbQeQhaqLULNmnODr44MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 NWY0NzdlZS00Y2Q3LTRkOGYtOTUxNy05Y2YyNWIyMzlmY2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc1ZjQ3N2VlLTRjZDctNGQ4Zi05 NTE3LTljZjI1YjIzOWZjZC83NWY0NzdlZS00Y2Q3LTRkOGYtOTUxNy05Y2YyNWIy MzlmY2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAGM63wwDgQCAAIwCAMGBCYC93kAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD68DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkjjuKf8F71hLjKZ0QgBhq5qqJ hmd7YpM4i0rsR+R4Exb2946dKKbWmEDQQxWSIviOKGRysVxzfavsFNi//oo81vpZ FrFCODmE16MI6+UsL21ZZEFp17O7zKW0a12va4NRpXyCuUjQ14j/2nAQsIZ++nT+ 2UCG4efkn7HSrlcXEdPnSNqNCT2kfez57GFDkdAHtUPcYo3W0msLuSPirDQgh7cL qfyamGwrQ6rkW2PeyAsH64KRCdD8X6nV2rUU5R9RmC5vq8kId8QeXQtGls1rTlIu Ba91Xg2ehxa1sk1EFu+0Ha8qn/q2Ykcy0DeHHIJfIbKhUVYkvbD4twZWxzTz -----END CERTIFICATE-----Generated at Thu Mar 26 07:45:02 2026 by rpki-client