$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer File: d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer (raw, json) Hash identifier: A7wweL2ayVmMYCIYs8z7Y3wGQ/bi7ECAQUS1rpkOKMo= Subject key identifier: 02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584D386289DC3579352906C5BD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Mar 2026 12:45:22 +0000 Certificate not after: Wed 21 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 11708 IP: 72.22.208.0/20 IP: 75.98.112.0/20 IP: 2605:b080::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:62:89:dc:35:79:35:29:06:c5:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 19 12:45:22 2026 GMT Not After : Jun 21 12:45:22 2028 GMT Subject: CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:29:69:9c:ed:3b:38:ed:c4:0b:72:de:52: ef:e1:a8:f1:14:5b:67:55:5b:20:48:39:07:f3:2f: 11:26:dd:f3:9b:c7:26:b4:78:ab:be:35:68:c6:d5: 1b:a4:6c:d0:c9:ef:2b:a5:04:e8:50:49:6e:a8:98: b4:3c:3c:66:a8:dd:e0:e4:73:47:1f:c5:ed:51:ea: 12:c3:22:f7:1f:5d:6e:81:26:25:8b:15:c3:96:e8: a8:02:8f:04:26:45:7e:25:32:6c:c6:cb:31:e1:09: a4:dc:5b:16:df:c4:a6:f8:29:a6:b8:bc:36:a2:d9: 0c:7f:43:69:0a:a6:5f:c3:69:dd:61:e8:35:61:78: fe:3a:61:f2:8b:39:fa:e8:4d:5f:38:7e:33:da:01: 25:05:23:27:73:9d:73:e0:97:38:82:62:ca:2e:5d: af:c7:ee:7d:89:87:89:14:a8:33:ae:dc:6a:88:1d: 9a:40:08:d7:a6:6f:80:d2:26:a9:f9:7b:db:ec:6e: 51:39:b5:c7:16:dc:b0:06:7f:07:03:2e:d8:a4:6e: 73:9a:72:6a:36:13:1b:46:e5:5c:41:60:83:04:12: 68:dd:e0:6c:dc:19:31:52:30:43:e9:a0:b4:c6:ca: 35:2d:c1:02:df:fd:6f:ea:d6:97:89:ff:9f:cf:d5: 6d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 72.22.208.0/20 75.98.112.0/20 IPv6: 2605:b080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11708 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1c:84:4d:1b:d2:ed:12:57:f4:16:72:a9:be:06:db:1c:43: 05:7a:34:e4:29:a5:34:ed:6c:a7:c3:7a:8b:b5:8f:5a:36:87: d9:45:df:51:f1:f6:75:23:83:00:61:27:65:28:73:a3:29:d3: 63:bd:79:74:f7:52:09:8c:e7:0f:00:83:af:68:ad:36:9f:fe: 3c:8b:9c:ed:ba:fb:8a:d8:4f:f5:a8:9a:f4:93:e0:e5:17:40: 39:1f:5d:4d:93:e8:92:33:bc:40:89:cb:7a:20:2a:65:f1:24: a7:f0:60:a6:44:1e:f0:42:0d:37:ad:0e:d7:04:f0:d5:36:3a: d9:d0:e6:56:3a:a1:3b:78:a7:63:2b:04:1d:9f:8e:31:19:fa: 97:a5:1c:4d:37:97:da:5f:96:86:ce:6e:bf:5b:fc:8f:4e:9d: 60:2a:1d:68:f7:47:11:a7:e8:60:f8:f2:1f:a5:1d:5e:f3:43: a8:10:9d:b9:a7:62:4a:c0:42:b1:48:5d:41:a7:af:0d:f7:c9: d0:3e:68:84:de:6e:9f:e1:4d:4c:9f:25:df:04:bf:ce:c3:90: b3:ac:80:47:d3:a2:a5:7b:23:af:48:e7:57:4b:af:b5:60:58: 06:f6:c4:ca:0a:5f:46:d2:94:86:d3:79:4c:59:d9:db:3b:a8: 4b:36:5f:e7 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE04YoncNXk1KQbFvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDMxOTEyNDUyMloXDTI4MDYyMTEyNDUyMlowLzEtMCsGA1UEAxMk ZDA3ZThjNzUtNzVlNC00NjRjLTg4YzAtMGY4YzZkODc1N2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSEpaZztOzjtxAty3lLv4ajxFFtnVVsgSDkH 8y8RJt3zm8cmtHirvjVoxtUbpGzQye8rpQToUEluqJi0PDxmqN3g5HNHH8XtUeoS wyL3H11ugSYlixXDluioAo8EJkV+JTJsxssx4Qmk3FsW38Sm+CmmuLw2otkMf0Np CqZfw2ndYeg1YXj+OmHyizn66E1fOH4z2gElBSMnc51z4Jc4gmLKLl2vx+59iYeJ FKgzrtxqiB2aQAjXpm+A0iap+Xvb7G5RObXHFtywBn8HAy7YpG5zmnJqNhMbRuVc QWCDBBJo3eBs3BkxUjBD6aC0xso1LcEC3/1v6taXif+fz9VtBQIDAQABo4IELzCC BCswHQYDVR0OBBYEFAI8B0hmAw9AIPYEeKZ/WSgUyPToMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k MDdlOGM3NS03NWU0LTQ2NGMtODhjMC0wZjhjNmQ4NzU3YTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2QwN2U4Yzc1LTc1ZTQtNDY0Yy04 OGMwLTBmOGM2ZDg3NTdhMy9kMDdlOGM3NS03NWU0LTQ2NGMtODhjMC0wZjhjNmQ4 NzU3YTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARIFtADBARLYnAwDQQCAAIwBwMFACYFsIAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICLbwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAghyETRvS7RJX9BZyqb4G 2xxDBXo05CmlNO1sp8N6i7WPWjaH2UXfUfH2dSODAGEnZShzoynTY715dPdSCYzn DwCDr2itNp/+PIuc7br7ithP9aia9JPg5RdAOR9dTZPokjO8QInLeiAqZfEkp/Bg pkQe8EINN60O1wTw1TY62dDmVjqhO3inYysEHZ+OMRn6l6UcTTeX2l+Whs5uv1v8 j06dYCodaPdHEafoYPjyH6UdXvNDqBCduadiSsBCsUhdQaevDffJ0D5ohN5un+FN TJ8l3wS/zsOQs6yAR9OipXsjr0jnV0uvtWBYBvbEygpfRtKUhtN5TFnZ2zuoSzZf 5w== -----END CERTIFICATE-----Generated at Wed Mar 25 22:39:23 2026 by rpki-client