$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf.cer File: 0712b41c-9270-4741-84b8-3aaaa15afdcf.cer (raw, json) Hash identifier: g5aCpUvwUZCT0gkkEGmnbVnPddbbsvKA5+wbC07yL7Y= Subject key identifier: 2C:7F:77:DE:EB:4F:52:A2:A4:A2:F4:75:31:89:B5:A2:D3:14:99:22 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B13CF22BAB3CA727297BD9280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf/0712b41c-9270-4741-84b8-3aaaa15afdcf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Sep 2025 00:45:24 +0000 Certificate not after: Wed 08 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 22412 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:cf:22:ba:b3:ca:72:72:97:bd:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 4 00:45:24 2025 GMT Not After : Dec 8 01:45:24 2027 GMT Subject: CN=0712b41c-9270-4741-84b8-3aaaa15afdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c0:e3:ee:5d:30:6e:57:f0:05:93:7b:46:dd: f6:48:1c:ea:24:ae:ec:a5:f9:4e:d2:31:e4:20:0e: 3c:47:02:46:0c:72:aa:77:a2:27:65:48:4b:3d:57: 3c:3d:a5:07:67:5e:8f:11:4d:0f:0e:04:d3:f5:08: 56:d4:75:0c:9f:20:86:77:d0:9b:d6:19:81:9e:72: ca:28:5f:d0:e2:33:d5:da:af:50:e8:fd:ef:32:4b: e3:f0:be:49:c2:84:29:5c:2c:b2:53:b9:b2:c4:b3: 3d:f7:f8:6a:3a:7f:a6:29:7c:d8:f2:35:74:fd:7f: 12:d5:a0:aa:f6:fa:87:6d:0b:bb:7d:0a:22:1a:a6: bd:9b:20:8f:ab:3f:d5:19:e7:eb:0e:b9:80:2a:06: a8:4d:fa:68:18:b4:6d:1e:06:f9:a8:53:6c:dd:df: 21:4a:70:bb:b2:b0:ed:1b:92:c5:ce:d2:73:a6:d0: b4:f8:25:ee:2f:a3:47:f5:54:fe:b1:a8:21:3f:49: 67:88:ba:3a:31:d8:52:eb:e2:06:e5:a9:3c:d4:d5: 2f:26:8b:6f:07:7d:3c:4b:a9:ad:26:56:4e:ae:29: b9:ea:3d:f2:52:2e:32:d3:d0:54:50:c8:1f:f4:1d: dd:56:3e:a8:09:46:8a:eb:3e:02:08:c3:b1:46:31: de:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7F:77:DE:EB:4F:52:A2:A4:A2:F4:75:31:89:B5:A2:D3:14:99:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf/0712b41c-9270-4741-84b8-3aaaa15afdcf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 22412 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:99:a6:82:0d:2a:a8:9e:02:a2:f7:ab:ca:d1:a3:2f:af:dd: df:fe:13:fb:cd:e4:47:26:78:ee:f3:3f:f9:37:69:03:ee:7d: ca:fb:11:a1:c8:7b:95:d6:63:54:8e:41:8e:4d:83:9c:6b:27: ba:9c:f8:4e:b5:6f:fb:61:2a:02:c4:0d:ea:02:1a:1d:e2:47: 3e:e6:ce:5b:68:43:11:50:64:4a:e6:49:50:5b:8b:12:38:2c: df:76:08:d3:8b:f7:2c:3d:f6:7f:dd:68:0f:bf:14:de:0c:ac: 7f:10:da:69:ba:f6:81:06:4e:60:ef:73:47:c2:c2:3c:7c:ab: 33:37:a6:08:a6:6d:38:8e:52:91:90:f9:59:8d:e8:f3:5f:cd: 9f:05:4b:21:86:7e:47:ea:d3:46:53:b5:8f:ca:64:53:47:34: d4:68:1a:3a:92:00:6b:7d:fc:07:28:d4:a9:11:15:df:fb:58: 2c:c1:68:66:6f:14:66:24:91:3a:b8:e4:ce:14:93:74:47:fb: 67:84:cf:c9:87:f6:c1:d2:29:d6:2c:2f:eb:7d:dd:b6:5e:8a: 88:d0:6a:5e:b1:f9:60:a0:1f:c1:70:5e:75:44:86:d8:f6:c8: 65:d2:92:9a:4f:40:78:f0:6b:07:43:88:2f:36:18:d9:bc:20: 20:d7:04:54 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEsTzyK6s8pycpe9koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDkwNDAwNDUyNFoXDTI3MTIwODAxNDUyNFowLzEtMCsGA1UEAxMk MDcxMmI0MWMtOTI3MC00NzQxLTg0YjgtM2FhYWExNWFmZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcDj7l0wblfwBZN7Rt32SBzqJK7spflO0jHk IA48RwJGDHKqd6InZUhLPVc8PaUHZ16PEU0PDgTT9QhW1HUMnyCGd9Cb1hmBnnLK KF/Q4jPV2q9Q6P3vMkvj8L5JwoQpXCyyU7myxLM99/hqOn+mKXzY8jV0/X8S1aCq 9vqHbQu7fQoiGqa9myCPqz/VGefrDrmAKgaoTfpoGLRtHgb5qFNs3d8hSnC7srDt G5LFztJzptC0+CXuL6NH9VT+saghP0lniLo6MdhS6+IG5ak81NUvJotvB308S6mt JlZOrim56j3yUi4y09BUUMgf9B3dVj6oCUaK6z4CCMOxRjHe4QIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFCx/d97rT1KipKL0dTGJtaLTFJkiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w NzEyYjQxYy05MjcwLTQ3NDEtODRiOC0zYWFhYTE1YWZkY2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzA3MTJiNDFjLTkyNzAtNDc0MS04 NGI4LTNhYWFhMTVhZmRjZi8wNzEyYjQxYy05MjcwLTQ3NDEtODRiOC0zYWFhYTE1 YWZkY2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICV4wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKJmmgg0qqJ4CoverytGjL6/d3/4T +83kRyZ47vM/+TdpA+59yvsRoch7ldZjVI5Bjk2DnGsnupz4TrVv+2EqAsQN6gIa HeJHPubOW2hDEVBkSuZJUFuLEjgs33YI04v3LD32f91oD78U3gysfxDaabr2gQZO YO9zR8LCPHyrMzemCKZtOI5SkZD5WY3o81/NnwVLIYZ+R+rTRlO1j8pkU0c01Gga OpIAa338ByjUqREV3/tYLMFoZm8UZiSROrjkzhSTdEf7Z4TPyYf2wdIp1iwv633d tl6KiNBqXrH5YKAfwXBedUSG2PbIZdKSmk9AePBrB0OILzYY2bwgINcEVA== -----END CERTIFICATE-----Generated at Fri Oct 10 14:44:16 2025 by rpki-client