$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17b5d03d-e17e-4f78-ac0b-c5a1626900a9.cer File: 17b5d03d-e17e-4f78-ac0b-c5a1626900a9.cer (raw, json) Hash identifier: Cp5DIdkyug6QorBxDUHaGk6KHnQAhLK0TWKxaEme5rs= Subject key identifier: EE:FE:42:F4:19:0A:1F:4B:F4:96:47:F5:9D:3A:14:87:33:CF:D8:99 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B5404DFD1BABDD8E6194CE858 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17b5d03d-e17e-4f78-ac0b-c5a1626900a9/17b5d03d-e17e-4f78-ac0b-c5a1626900a9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17b5d03d-e17e-4f78-ac0b-c5a1626900a9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 27 Sep 2025 00:45:25 +0000 Certificate not after: Fri 31 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 276 AS: 14104 IP: 192.48.134.0/23 IP: 2605:2800::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:04:df:d1:ba:bd:d8:e6:19:4c:e8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 27 00:45:25 2025 GMT Not After : Dec 31 01:45:25 2027 GMT Subject: CN=17b5d03d-e17e-4f78-ac0b-c5a1626900a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:04:92:05:47:b8:59:09:19:b9:64:cf:4b: 80:bb:a3:e6:8b:27:b1:dd:eb:c7:13:04:f7:e1:e1: 19:aa:e4:10:bc:a0:f2:27:72:e0:be:90:30:a5:cc: 98:1b:70:e7:ab:08:6c:bd:13:cb:04:4f:9c:f6:13: a0:b8:73:92:47:a7:6f:5a:60:a9:c0:9b:3f:fa:ca: 08:f2:01:32:12:a0:48:26:fe:89:86:ac:11:bd:dc: 37:2c:63:51:c2:83:7d:6a:ce:2e:b3:ce:1c:18:c9: 26:57:09:5f:15:39:62:7e:ba:b3:9d:67:12:1f:f0: ae:f9:c2:f2:33:d4:de:a8:c4:4f:15:7d:55:a4:43: 62:40:bd:d0:8f:af:3b:38:2b:80:cb:b6:c0:d9:2c: 05:2f:d5:76:0d:58:03:72:70:4a:a7:a5:f5:c0:0c: 8d:6a:9a:4d:e1:43:90:dc:1f:02:31:6c:86:ac:19: 79:6c:ec:c7:25:41:a4:c4:b8:3d:6e:ce:96:2d:cc: 3e:ef:aa:18:07:86:24:80:39:f2:26:09:ca:db:4c: 1e:3d:6b:ef:fa:db:d0:d4:02:f4:f2:6a:fc:f8:04: ff:b7:2c:36:6f:cd:0f:a1:91:73:f2:9a:16:03:af: 92:c1:22:00:9e:3f:6f:96:a8:ec:28:eb:a4:d1:a7: 65:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FE:42:F4:19:0A:1F:4B:F4:96:47:F5:9D:3A:14:87:33:CF:D8:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17b5d03d-e17e-4f78-ac0b-c5a1626900a9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17b5d03d-e17e-4f78-ac0b-c5a1626900a9/17b5d03d-e17e-4f78-ac0b-c5a1626900a9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.48.134.0/23 IPv6: 2605:2800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 276 14104 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:b4:6f:15:6a:4a:c0:ea:8f:50:ff:57:3d:b6:a6:b2:8d:97: d1:f6:21:6b:ed:8c:c3:e7:a8:91:07:e5:29:e4:d1:96:9f:46: d2:b5:7a:10:6d:61:1d:1a:db:d9:de:c9:41:e1:2c:97:3e:94: 3a:90:bd:dc:49:a6:fe:3f:a0:f5:ab:c2:e0:e4:cc:54:19:a4: 2f:f7:6a:f6:3c:fb:50:43:e4:03:6b:30:c1:20:4f:be:8c:81: 20:2b:30:fe:0c:61:82:a1:ab:57:4c:1a:37:7e:eb:57:04:67: 5d:c4:d9:d9:02:44:b0:e7:a9:3f:2a:6b:f7:d7:99:a6:6e:2f: 69:3b:4b:c9:b4:f1:06:38:8e:4f:28:74:e5:0a:f3:02:39:da: 92:06:c1:f0:9c:e0:09:70:b3:13:bc:ec:5b:13:72:3f:8f:0e: 15:45:b5:e7:05:77:b2:21:35:d6:92:19:e9:02:18:da:38:cd: 4a:75:3d:e7:c1:c0:04:8d:e8:c9:24:9c:d8:8e:39:d3:d3:5a: 54:fd:e7:05:f4:87:2c:00:88:a7:c0:cf:d9:70:f9:d2:6e:7f: 1c:ec:a5:56:e0:03:39:91:0d:85:5d:34:67:c2:77:1a:93:cf: 93:61:8b:3c:98:33:dc:4f:c3:ca:06:7d:3d:c1:f0:27:06:8e: 0b:21:8d:63 -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEtUBN/Rur3Y5hlM6FgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDkyNzAwNDUyNVoXDTI3MTIzMTAxNDUyNVowLzEtMCsGA1UEAxMk MTdiNWQwM2QtZTE3ZS00Zjc4LWFjMGItYzVhMTYyNjkwMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjkEkgVHuFkJGblkz0uAu6Pmiyex3evHEwT3 4eEZquQQvKDyJ3LgvpAwpcyYG3DnqwhsvRPLBE+c9hOguHOSR6dvWmCpwJs/+soI 8gEyEqBIJv6JhqwRvdw3LGNRwoN9as4us84cGMkmVwlfFTlifrqznWcSH/Cu+cLy M9TeqMRPFX1VpENiQL3Qj687OCuAy7bA2SwFL9V2DVgDcnBKp6X1wAyNappN4UOQ 3B8CMWyGrBl5bOzHJUGkxLg9bs6WLcw+76oYB4YkgDnyJgnK20wePWvv+tvQ1AL0 8mr8+AT/tyw2b80PoZFz8poWA6+SwSIAnj9vlqjsKOuk0adlPwIDAQABo4IELTCC BCkwHQYDVR0OBBYEFO7+QvQZCh9L9JZH9Z06FIczz9iZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x N2I1ZDAzZC1lMTdlLTRmNzgtYWMwYi1jNWExNjI2OTAwYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzE3YjVkMDNkLWUxN2UtNGY3OC1h YzBiLWM1YTE2MjY5MDBhOS8xN2I1ZDAzZC1lMTdlLTRmNzgtYWMwYi1jNWExNjI2 OTAwYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAHAMIYwDQQCAAIwBwMFACYFKAAwHQYIKwYBBQUH AQgBAf8EDjAMoAowCAICARQCAjcYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJy0bxVqSsDqj1D/Vz22prKN l9H2IWvtjMPnqJEH5Snk0ZafRtK1ehBtYR0a29neyUHhLJc+lDqQvdxJpv4/oPWr wuDkzFQZpC/3avY8+1BD5ANrMMEgT76MgSArMP4MYYKhq1dMGjd+61cEZ13E2dkC RLDnqT8qa/fXmaZuL2k7S8m08QY4jk8odOUK8wI52pIGwfCc4AlwsxO87FsTcj+P DhVFtecFd7IhNdaSGekCGNo4zUp1PefBwASN6MkknNiOOdPTWlT95wX0hywAiKfA z9lw+dJufxzspVbgAzmRDYVdNGfCdxqTz5NhizyYM9xPw8oGfT3B8CcGjgshjWM= -----END CERTIFICATE-----Generated at Fri Oct 10 14:40:17 2025 by rpki-client