$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer File: 30d537f2-f871-4f81-b20b-ae04610c521d.cer (raw, json) Hash identifier: gBOKsDFWSXetJURqZWvQP/2QSl2z+4PORGKG1kLYFS4= Subject key identifier: 0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B1104730FE22FA5DA6A2F2980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Sep 2025 00:45:24 +0000 Certificate not after: Tue 07 Dec 2027 01:45:24 +0000 Subordinate resources: IP: 45.41.240.0/22 IP: 216.146.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:04:73:0f:e2:2f:a5:da:6a:2f:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 3 00:45:24 2025 GMT Not After : Dec 7 01:45:24 2027 GMT Subject: CN=30d537f2-f871-4f81-b20b-ae04610c521d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:da:e2:41:92:07:f6:3e:c5:d1:3a:78:cb: df:dd:32:ab:cf:36:4c:79:00:2b:e5:24:d8:71:83: 81:e8:7d:b0:16:28:ce:5b:cc:4c:ab:25:57:eb:3a: 74:83:3e:89:5e:35:16:16:11:25:8e:a0:c8:9e:7e: fc:d0:33:98:ec:08:1e:b2:f2:78:7b:53:3f:a4:43: d6:44:73:65:12:ab:af:6d:e0:65:3d:50:31:d5:4a: d6:41:cb:fd:fb:b3:95:6d:bd:d4:17:4f:2e:ee:b3: e8:b2:90:cd:40:54:26:bb:dc:21:a7:6b:f5:b8:0f: df:df:e3:57:0f:b0:c6:88:8d:7a:d2:88:68:5c:4f: 14:70:b2:d7:d3:00:76:97:47:6d:6e:e9:e3:02:93: e0:b7:8e:d3:b3:e3:d9:6b:19:93:0d:f6:bd:5e:d8: c3:bc:2a:52:84:b1:a0:b5:cb:e2:ce:71:24:b6:61: 94:b4:dd:48:02:fe:a2:1e:56:8f:d5:ca:ca:d0:64: 83:8e:97:17:8d:6c:ac:d6:9b:83:03:4f:cb:33:11: ae:fe:cd:bd:6a:a6:fa:84:da:4d:84:d3:6c:8d:1c: dc:97:c8:d7:39:85:39:30:9f:4d:cc:3b:56:04:ea: 76:f5:5a:35:53:c1:e3:12:e8:c3:3b:78:a8:93:13: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.41.240.0/22 216.146.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3a:0c:5a:66:6d:3f:22:88:47:98:24:d9:b8:e9:94:88:91: 0f:54:61:51:af:64:61:89:57:0e:ff:11:23:11:30:33:26:24: 32:6d:cb:98:fd:83:65:4e:d9:14:7a:b1:55:23:e6:d9:ac:f9: 22:e9:c6:1d:0a:1c:04:16:33:64:a1:12:4d:b8:2a:72:fc:28: b9:36:1f:2b:cc:5d:65:d3:2c:dc:3f:b9:a9:bb:94:36:a1:41: 4f:da:53:e8:94:ed:3b:8d:5d:07:79:5d:32:7a:c0:43:e0:ae: 56:fc:24:b6:c8:e7:d4:26:a6:96:69:05:c7:80:1c:c0:dc:c2: 45:f3:95:d6:ac:f3:06:e0:dd:ed:b2:23:cc:dc:2e:08:fc:75: 82:d0:9f:01:44:6f:0c:16:b2:cb:8d:5b:8c:a8:49:68:81:9c: 68:c5:09:43:91:05:ce:e4:41:c3:12:3a:f4:af:ea:ae:92:db: 28:f6:d6:09:77:ff:51:ff:1c:8a:68:6c:25:e5:75:f2:1a:a3: 0c:09:7c:0c:a4:95:03:7a:6c:6b:c9:40:8d:83:44:04:55:3b: b0:83:0b:7f:98:25:43:0e:65:f8:12:49:65:3d:99:50:03:8a: 09:b0:cb:6a:6f:71:56:4c:7d:38:45:f2:80:fa:87:a7:98:68: cf:19:d6:79 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEsRBHMP4i+l2movKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDkwMzAwNDUyNFoXDTI3MTIwNzAxNDUyNFowLzEtMCsGA1UEAxMk MzBkNTM3ZjItZjg3MS00ZjgxLWIyMGItYWUwNDYxMGM1MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZna4kGSB/Y+xdE6eMvf3TKrzzZMeQAr5STY cYOB6H2wFijOW8xMqyVX6zp0gz6JXjUWFhEljqDInn780DOY7AgesvJ4e1M/pEPW RHNlEquvbeBlPVAx1UrWQcv9+7OVbb3UF08u7rPospDNQFQmu9whp2v1uA/f3+NX D7DGiI160ohoXE8UcLLX0wB2l0dtbunjApPgt47Ts+PZaxmTDfa9XtjDvCpShLGg tcviznEktmGUtN1IAv6iHlaP1crK0GSDjpcXjWys1puDA0/LMxGu/s29aqb6hNpN hNNsjRzcl8jXOYU5MJ9NzDtWBOp29Vo1U8HjEujDO3iokxMlfQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFA7QxKI5lfblYgoGyivJhKIF5OSEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z MGQ1MzdmMi1mODcxLTRmODEtYjIwYi1hZTA0NjEwYzUyMWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzMwZDUzN2YyLWY4NzEtNGY4MS1i MjBiLWFlMDQ2MTBjNTIxZC8zMGQ1MzdmMi1mODcxLTRmODEtYjIwYi1hZTA0NjEw YzUyMWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAItKfADBALYkhQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdDoMWmZtPyKI R5gk2bjplIiRD1RhUa9kYYlXDv8RIxEwMyYkMm3LmP2DZU7ZFHqxVSPm2az5IunG HQocBBYzZKESTbgqcvwouTYfK8xdZdMs3D+5qbuUNqFBT9pT6JTtO41dB3ldMnrA Q+CuVvwktsjn1CamlmkFx4AcwNzCRfOV1qzzBuDd7bIjzNwuCPx1gtCfAURvDBay y41bjKhJaIGcaMUJQ5EFzuRBwxI69K/qrpLbKPbWCXf/Uf8cimhsJeV18hqjDAl8 DKSVA3psa8lAjYNEBFU7sIMLf5glQw5l+BJJZT2ZUAOKCbDLam9xVkx9OEXygPqH p5hozxnWeQ== -----END CERTIFICATE-----Generated at Fri Oct 10 14:40:41 2025 by rpki-client