$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer File: 75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer (raw, json) Hash identifier: gL+xw/U8t49y/kwB34sS70/2ZclGHCo0mgQtsnAW5pE= Subject key identifier: F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584F5ECF6006AAE0508D04119780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 16:39:16 +0000 Certificate not after: Sat 10 Jun 2028 12:45:21 +0000 Subordinate resources: AS: 64240 IP: 140.235.124.0/23 IP: 143.203.36.0/22 IP: 2602:f779::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:cf:60:06:aa:e0:50:8d:04:11:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Oct 2 16:39:16 2026 GMT Not After : Jun 10 12:45:21 2028 GMT Subject: CN=75f477ee-4cd7-4d8f-9517-9cf25b239fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:61:94:08:0b:ee:39:a4:9e:55:51:07:e0:ab: a3:fb:4e:c2:e4:51:8b:bc:31:eb:ec:61:ca:86:03: 40:06:9d:a3:a0:90:d7:4f:f8:13:1e:94:f1:b7:06: 98:58:68:5d:6e:df:81:34:1e:8b:ac:27:6b:a2:72: af:31:87:e4:e5:95:95:9d:16:9b:8b:ae:17:98:f4: 99:b5:1c:42:cd:10:67:c1:c8:32:51:b2:78:e9:5a: 4b:2c:38:c6:af:3f:04:82:fe:6e:fa:8a:ea:dc:00: c8:ae:ad:d0:ec:f2:18:74:cd:84:05:52:3e:e8:b7: 6b:05:33:1d:18:20:f6:27:e0:3d:46:63:15:a7:2d: d3:a3:a4:2a:22:94:e0:0e:bd:cb:32:44:35:00:81: a5:32:a6:eb:8d:b9:ff:b8:6a:3b:81:77:8e:3a:c9: fc:a4:b6:b2:c6:ea:8a:10:48:18:86:54:5b:89:4c: 5d:9b:24:14:41:0a:47:ed:2d:99:50:79:b6:fc:22: 25:9b:cc:27:68:e2:c0:e7:da:ab:75:bc:c9:41:1e: ca:7d:e0:82:39:e7:42:87:b5:cb:53:a0:65:6e:b0: 22:38:42:03:a0:78:c2:2e:d8:0b:46:57:13:ea:4d: 13:a4:93:42:2b:11:f3:90:14:b3:52:66:97:15:72: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 140.235.124.0/23 143.203.36.0/22 IPv6: 2602:f779::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64240 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:32:8a:b2:70:ed:4f:a8:e0:ed:84:85:f8:f0:dd:36:7b:bf: d7:54:ab:6d:00:77:ae:e9:94:62:c9:94:0a:2a:07:e2:94:01: 9b:54:d0:cc:ff:90:fc:db:9e:5b:ac:17:9b:fe:9e:70:b7:3c: 55:7c:9a:eb:00:6f:1c:4a:3d:4b:5a:09:3e:2f:65:6a:93:b5: 92:71:a5:6a:6d:a1:f2:cf:f1:b0:d3:70:ff:a4:f0:01:7f:5a: 4f:0f:99:bc:ff:e7:dc:be:b5:61:5a:b2:a7:cc:03:0f:6a:7b: 02:c0:da:19:9d:5d:eb:15:81:ea:27:69:5d:ae:e8:5b:51:22: 11:e5:68:3d:f8:a2:7a:af:fb:f7:11:6a:e8:67:3b:1b:c6:a3: e5:a5:19:f2:e4:6a:63:b8:ce:fe:3b:4f:15:2b:d8:8f:42:84: 5b:ab:83:22:ab:b9:c2:2b:86:2d:55:ef:5e:ad:15:3b:3a:81: b6:3a:b2:a3:85:72:1c:3a:04:ca:d3:07:ad:14:90:ba:2b:4f: 63:ac:64:5f:9e:9e:81:67:fc:90:b2:78:c5:36:ea:3d:67:60: fc:11:5c:a0:e2:c8:b9:c3:42:43:58:e6:ba:21:ee:b6:5f:1b: 40:03:e4:03:8a:5b:d3:31:33:da:b2:af:76:fa:dd:09:49:fb: 7b:34:b7:e8 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE9ez2AGquBQjQQRl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MTAwMjE2MzkxNloXDTI4MDYxMDEyNDUyMVowLzEtMCsGA1UEAxMk NzVmNDc3ZWUtNGNkNy00ZDhmLTk1MTctOWNmMjViMjM5ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2GUCAvuOaSeVVEH4Kuj+07C5FGLvDHr7GHK hgNABp2joJDXT/gTHpTxtwaYWGhdbt+BNB6LrCdronKvMYfk5ZWVnRabi64XmPSZ tRxCzRBnwcgyUbJ46VpLLDjGrz8Egv5u+orq3ADIrq3Q7PIYdM2EBVI+6LdrBTMd GCD2J+A9RmMVpy3To6QqIpTgDr3LMkQ1AIGlMqbrjbn/uGo7gXeOOsn8pLayxuqK EEgYhlRbiUxdmyQUQQpH7S2ZUHm2/CIlm8wnaOLA59qrdbzJQR7KfeCCOedCh7XL U6BlbrAiOEIDoHjCLtgLRlcT6k0TpJNCKxHzkBSzUmaXFXIQ9QIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFPfPCWmfOMbQeQhaqLULNmnODr44MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 NWY0NzdlZS00Y2Q3LTRkOGYtOTUxNy05Y2YyNWIyMzlmY2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc1ZjQ3N2VlLTRjZDctNGQ4Zi05 NTE3LTljZjI1YjIzOWZjZC83NWY0NzdlZS00Y2Q3LTRkOGYtOTUxNy05Y2YyNWIy MzlmY2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAGM63wDBAKPyyQwDgQCAAIwCAMGBCYC93kAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD68DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvMoqycO1PqODthIX4 8N02e7/XVKttAHeu6ZRiyZQKKgfilAGbVNDM/5D8255brBeb/p5wtzxVfJrrAG8c Sj1LWgk+L2Vqk7WScaVqbaHyz/Gw03D/pPABf1pPD5m8/+fcvrVhWrKnzAMPansC wNoZnV3rFYHqJ2ldruhbUSIR5Wg9+KJ6r/v3EWroZzsbxqPlpRny5GpjuM7+O08V K9iPQoRbq4Miq7nCK4YtVe9erRU7OoG2OrKjhXIcOgTK0wetFJC6K09jrGRfnp6B Z/yQsnjFNuo9Z2D8EVyg4si5w0JDWOa6Ie62XxtAA+QDilvTMTPasq92+t0JSft7 NLfo -----END CERTIFICATE-----Generated at Fri Oct 30 05:08:23 2026 by rpki-client