$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.cer File: bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.cer (raw, json) Hash identifier: sBHE3L+8JaVv+s33lhanKy+1CCxYQ0pxS98m3zf1ukQ= Subject key identifier: F4:E9:EE:D1:DC:52:88:37:CF:A1:49:76:C9:6F:19:11:14:63:78:6B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D0A70045D9D16108F7B5BB940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Mar 2026 01:45:21 +0000 Certificate not after: Mon 05 Jun 2028 00:45:21 +0000 Subordinate resources: AS: 11851 IP: 108.174.128.0/20 IP: 204.225.255.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:70:04:5d:9d:16:10:8f:7b:5b:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 3 01:45:21 2026 GMT Not After : Jun 5 00:45:21 2028 GMT Subject: CN=bd75a9a0-01bb-458c-8d2d-56a7b32fefeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:91:57:9c:86:17:67:18:2f:49:9e:55:62:76: 2d:33:10:9a:56:37:14:01:61:31:6d:5e:9e:49:25: 47:f8:72:84:34:8f:22:cb:6a:3f:12:4b:da:0b:e2: 33:5a:19:6a:20:5e:f0:ea:00:11:33:5a:4b:39:27: a0:86:2c:21:2b:15:ec:58:b7:78:a6:b0:8f:af:00: 36:a3:5b:5d:c6:1f:55:86:2c:11:21:fd:3c:92:e0: 2b:18:cb:69:95:b5:91:c1:c4:48:e8:96:05:b9:96: 68:dc:2c:93:b3:1f:27:07:6b:53:c8:d3:77:ea:83: 1e:16:f3:dd:75:60:39:fb:96:b5:33:b3:e3:9f:ce: 55:eb:5c:fd:2b:e4:9e:7a:f2:f9:a6:cd:ee:10:37: b7:8e:38:bf:65:58:79:8a:2d:cc:67:a2:40:99:c3: 1c:90:49:10:31:a1:26:f5:48:b4:cd:47:f4:d4:d6: 1d:50:6d:7d:f1:20:f7:0d:54:df:82:ec:63:3b:51: 12:8a:89:a3:42:08:13:c9:69:c1:59:95:d8:1e:7f: ea:08:2e:bf:45:65:ee:e4:44:1c:bb:9b:25:e8:c6: c9:1d:cf:7e:bb:f3:c2:b7:e7:42:87:fd:41:97:25: de:b8:7b:3d:05:98:b1:6c:d7:ee:20:3c:b6:b5:56: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E9:EE:D1:DC:52:88:37:CF:A1:49:76:C9:6F:19:11:14:63:78:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb/bd75a9a0-01bb-458c-8d2d-56a7b32fefeb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 108.174.128.0/20 204.225.255.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11851 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ee:0a:00:c5:0a:c8:18:64:64:97:47:73:f1:a0:0d:13:33: 1d:a9:75:b5:4b:a3:9a:82:7c:5b:8e:db:46:dd:ef:cd:f2:98: 5d:0c:82:91:2a:b6:05:8f:90:35:8c:98:1d:86:05:5a:18:c8: 79:b9:71:b4:b6:56:a9:ef:f1:ae:18:d8:34:6a:13:34:fa:54: 03:d5:1f:d7:6a:fc:af:cb:56:90:d3:d3:f4:bb:fd:6f:05:de: 94:9f:a6:ea:10:8b:52:76:ed:00:82:0e:88:b2:1e:e4:68:dd: 19:e8:11:6f:f1:4d:ed:ea:e1:27:1b:a6:3e:f0:46:af:26:a0: 4a:45:6c:50:b1:ee:16:c8:5b:f8:72:de:5d:81:09:aa:21:8d: 49:19:bf:24:f4:67:08:db:36:7e:02:d9:d6:f6:a1:68:e8:98: a1:2c:b5:c0:cc:3c:5c:02:e5:8f:58:ea:1b:d9:87:e4:6e:e6: 98:be:7f:77:9b:71:0c:17:1b:ca:be:6f:3e:4a:23:88:63:4a: 53:b7:27:da:05:0b:d1:47:15:2b:27:63:8c:e6:be:7f:1c:f3: 7f:84:a9:36:21:50:d5:79:8c:ac:ba:6f:a8:bc:56:fc:0d:9c: 60:d7:5b:99:ff:cd:78:46:55:34:61:0d:a6:20:dc:f7:96:cf: 6f:47:a7:1a -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE0KcARdnRYQj3tbuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwMzAxNDUyMVoXDTI4MDYwNTAwNDUyMVowLzEtMCsGA1UEAxMk YmQ3NWE5YTAtMDFiYi00NThjLThkMmQtNTZhN2IzMmZlZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5FXnIYXZxgvSZ5VYnYtMxCaVjcUAWExbV6e SSVH+HKENI8iy2o/EkvaC+IzWhlqIF7w6gARM1pLOSeghiwhKxXsWLd4prCPrwA2 o1tdxh9VhiwRIf08kuArGMtplbWRwcRI6JYFuZZo3CyTsx8nB2tTyNN36oMeFvPd dWA5+5a1M7Pjn85V61z9K+SeevL5ps3uEDe3jji/ZVh5ii3MZ6JAmcMckEkQMaEm 9Ui0zUf01NYdUG198SD3DVTfguxjO1ESiomjQggTyWnBWZXYHn/qCC6/RWXu5EQc u5sl6MbJHc9+u/PCt+dCh/1BlyXeuHs9BZixbNfuIDy2tVbclQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFPTp7tHcUog3z6FJdslvGREUY3hrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i ZDc1YTlhMC0wMWJiLTQ1OGMtOGQyZC01NmE3YjMyZmVmZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2JkNzVhOWEwLTAxYmItNDU4Yy04 ZDJkLTU2YTdiMzJmZWZlYi9iZDc1YTlhMC0wMWJiLTQ1OGMtOGQyZC01NmE3YjMy ZmVmZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBARsroADBADM4f8wGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICLkswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAJ+4KAMUKyBhkZJdHc/GgDRMzHal1tUujmoJ8W47b Rt3vzfKYXQyCkSq2BY+QNYyYHYYFWhjIeblxtLZWqe/xrhjYNGoTNPpUA9Uf12r8 r8tWkNPT9Lv9bwXelJ+m6hCLUnbtAIIOiLIe5GjdGegRb/FN7erhJxumPvBGryag SkVsULHuFshb+HLeXYEJqiGNSRm/JPRnCNs2fgLZ1vahaOiYoSy1wMw8XALlj1jq G9mH5G7mmL5/d5txDBcbyr5vPkojiGNKU7cn2gUL0UcVKydjjOa+fxzzf4SpNiFQ 1XmMrLpvqLxW/A2cYNdbmf/NeEZVNGENpiDc95bPb0enGg== -----END CERTIFICATE-----Generated at Tue Mar 3 23:13:42 2026 by rpki-client