$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b618f7d-cc79-4257-b5ed-fbe6ca652a3d.cer File: 1b618f7d-cc79-4257-b5ed-fbe6ca652a3d.cer (raw, json) Hash identifier: yIO3IjVlGR9JKigqc+/2XSn1wr02iymfKlY2FE8yNFk= Subject key identifier: 36:E8:D2:10:38:76:E3:2C:BC:45:CE:81:1A:57:94:19:AE:9C:8A:51 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B72BA5EC3BF5BFA6F22977F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b618f7d-cc79-4257-b5ed-fbe6ca652a3d/1b618f7d-cc79-4257-b5ed-fbe6ca652a3d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b618f7d-cc79-4257-b5ed-fbe6ca652a3d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 00:45:22 +0000 Certificate not after: Tue 11 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 53856 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:ba:5e:c3:bf:5b:fa:6f:22:97:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 8 00:45:22 2025 GMT Not After : Jan 11 01:45:22 2028 GMT Subject: CN=1b618f7d-cc79-4257-b5ed-fbe6ca652a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:8d:b2:d3:c8:04:0c:bb:18:4a:09:81:30: 65:e4:5b:bc:e7:ea:45:dc:aa:46:78:58:cd:a4:5c: 34:97:7c:5a:15:90:3d:f6:08:89:47:a5:c2:d6:c3: 14:16:e2:8e:1c:ee:4c:30:ee:e4:d8:77:20:41:ae: f2:1c:be:55:3f:58:58:a2:90:b4:75:4d:0b:7d:8e: f3:f6:1c:af:00:06:c1:fa:e1:90:cd:cc:59:cf:6b: 06:47:f4:30:c5:26:37:9a:40:30:d6:72:e0:5d:56: 4e:52:05:58:23:a6:b0:79:29:f2:8b:47:39:cc:c3: 2b:2e:f9:3f:80:b9:eb:7c:dd:5e:76:59:92:8e:55: 0c:59:ad:b2:ae:d9:33:ce:ac:d3:6f:b5:73:bb:18: f6:8c:56:7c:2a:cf:65:36:f6:91:c5:2d:7f:b7:f4: ed:65:8c:c9:4d:e3:cd:97:e3:ca:65:53:00:2a:e8: bd:20:86:7a:64:80:10:14:ec:8c:02:7b:84:b6:55: b5:56:4e:76:82:0a:4a:a9:55:29:f6:57:ed:97:0d: af:95:22:6c:19:4e:bd:3f:0e:d2:e3:ec:79:57:28: 4f:b8:63:7c:75:87:cd:a4:1b:24:af:cb:52:23:af: 69:c5:fb:68:a6:55:96:70:1a:fa:e5:46:26:e9:63: 77:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E8:D2:10:38:76:E3:2C:BC:45:CE:81:1A:57:94:19:AE:9C:8A:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b618f7d-cc79-4257-b5ed-fbe6ca652a3d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b618f7d-cc79-4257-b5ed-fbe6ca652a3d/1b618f7d-cc79-4257-b5ed-fbe6ca652a3d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 53856 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:52:64:8b:6e:22:82:fe:09:97:81:5a:83:f1:46:ae:e5:67: 8e:fb:40:a9:11:7b:25:30:5d:e9:2d:46:87:f7:bf:8c:fb:17: 1e:15:f8:23:e5:9f:32:df:e0:f8:03:d0:b8:32:ef:ee:60:5f: fa:d9:35:19:1d:09:0d:73:f8:85:34:c5:df:51:c6:37:80:bb: 28:d9:09:57:ed:e6:a4:d5:4a:14:45:2f:1b:9b:a4:14:3a:13: 81:49:1c:ff:cc:16:f9:d2:b2:3b:62:56:be:b5:dc:f3:ee:c6: 47:b7:7a:a0:29:eb:55:49:13:55:ed:94:43:f9:49:06:8f:e5: e4:14:7a:eb:6e:50:76:61:29:be:6f:2e:12:c8:bd:d2:8e:55: c1:f9:a1:a6:0f:f1:ac:5f:1f:e5:e4:be:63:31:88:6b:e4:71: 31:3f:55:a8:69:96:ab:cd:8b:d5:25:50:cc:27:c9:38:89:d3: a2:d0:3c:b2:07:6c:e2:68:59:c8:0b:5a:e5:62:e9:38:ec:7c: 16:cf:7b:32:58:35:f8:66:cc:84:f4:c2:b2:e8:33:bd:be:8e: a7:bd:f8:0e:7f:dd:05:18:8d:9f:06:ae:12:7e:32:6f:19:3e: cb:84:71:a0:6f:f3:e7:4a:57:52:3c:cd:dc:99:94:d8:e9:d8: 62:49:7e:e3 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEtyul7Dv1v6byKXf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAwODAwNDUyMloXDTI4MDExMTAxNDUyMlowLzEtMCsGA1UEAxMk MWI2MThmN2QtY2M3OS00MjU3LWI1ZWQtZmJlNmNhNjUyYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIeNstPIBAy7GEoJgTBl5Fu85+pF3KpGeFjN pFw0l3xaFZA99giJR6XC1sMUFuKOHO5MMO7k2HcgQa7yHL5VP1hYopC0dU0LfY7z 9hyvAAbB+uGQzcxZz2sGR/QwxSY3mkAw1nLgXVZOUgVYI6aweSnyi0c5zMMrLvk/ gLnrfN1edlmSjlUMWa2yrtkzzqzTb7Vzuxj2jFZ8Ks9lNvaRxS1/t/TtZYzJTePN l+PKZVMAKui9IIZ6ZIAQFOyMAnuEtlW1Vk52ggpKqVUp9lftlw2vlSJsGU69Pw7S 4+x5VyhPuGN8dYfNpBskr8tSI69pxftoplWWcBr65UYm6WN3zQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFDbo0hA4duMsvEXOgRpXlBmunIpRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x YjYxOGY3ZC1jYzc5LTQyNTctYjVlZC1mYmU2Y2E2NTJhM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzFiNjE4ZjdkLWNjNzktNDI1Ny1i NWVkLWZiZTZjYTY1MmEzZC8xYjYxOGY3ZC1jYzc5LTQyNTctYjVlZC1mYmU2Y2E2 NTJhM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANJgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKJSZItuIoL+CZeBWoPxRq7lZ477 QKkReyUwXektRof3v4z7Fx4V+CPlnzLf4PgD0Lgy7+5gX/rZNRkdCQ1z+IU0xd9R xjeAuyjZCVft5qTVShRFLxubpBQ6E4FJHP/MFvnSsjtiVr613PPuxke3eqAp61VJ E1XtlEP5SQaP5eQUeutuUHZhKb5vLhLIvdKOVcH5oaYP8axfH+XkvmMxiGvkcTE/ VahplqvNi9UlUMwnyTiJ06LQPLIHbOJoWcgLWuVi6TjsfBbPezJYNfhmzIT0wrLo M72+jqe9+A5/3QUYjZ8GrhJ+Mm8ZPsuEcaBv8+dKV1I8zdyZlNjp2GJJfuM= -----END CERTIFICATE-----Generated at Fri Oct 10 14:40:12 2025 by rpki-client