$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.cer File: 4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.cer (raw, json) Hash identifier: eKlnrLTR/sfekvjGxrs85c/bqepxDNOdxMFomVl0gPU= Subject key identifier: AE:00:06:1A:E2:3C:4C:D1:26:F3:52:C7:6C:7A:1F:C7:BA:D2:44:5B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B784FBF2D4415E4051E994A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 00:45:22 +0000 Certificate not after: Thu 13 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 19743 IP: 170.39.160.0/22 IP: 185.202.40.0/22 IP: 216.39.228.0/22 IP: 2602:fdbd::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:4f:bf:2d:44:15:e4:05:1e:99:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 10 00:45:22 2025 GMT Not After : Jan 13 01:45:22 2028 GMT Subject: CN=4638d5d1-44fb-4ecc-9e21-685a28c0b0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:59:cf:43:54:77:a8:dd:3f:8d:6c:da:18:20: 3c:7f:c0:2e:d9:91:fd:5b:e2:fb:ac:c5:cc:c8:84: 1b:44:5e:66:89:eb:4e:c8:b7:d6:7f:ca:fd:8c:9a: da:19:d2:4f:e4:10:b8:1a:ac:1b:2b:a6:78:0e:4e: d3:1b:2a:be:e5:e1:5b:b7:22:90:5a:0f:a4:bd:d1: e1:0a:62:ba:8f:96:ba:d9:ea:76:f8:19:4e:6d:45: ab:cb:e7:a8:ed:1a:d9:82:75:a7:35:2b:6d:cb:49: 3f:a7:41:98:e5:98:9d:c1:2e:77:55:e1:af:fa:c8: 04:59:3c:b7:ff:99:52:96:33:6f:e5:54:49:94:5f: e8:ac:f0:07:b6:88:be:e0:f8:f0:bd:9a:1e:f0:6e: c2:d4:5d:6f:90:c0:8d:b7:b9:56:f5:d9:d4:c4:b3: af:62:0f:f5:5b:31:ab:ce:08:c6:2c:1d:10:ec:51: aa:2b:74:ab:1e:82:57:99:f5:bd:47:40:76:95:85: 67:33:f7:28:9a:24:5c:35:d7:08:b6:e4:f2:ce:6f: 0d:49:1e:88:3a:26:55:01:9d:ca:8f:09:48:0e:9a: 0d:65:5d:26:04:26:ff:36:e3:65:6f:b9:69:40:8a: 41:05:f4:ca:69:3a:a1:6b:ab:6d:0c:8f:0b:7b:f0: da:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:00:06:1A:E2:3C:4C:D1:26:F3:52:C7:6C:7A:1F:C7:BA:D2:44:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 170.39.160.0/22 185.202.40.0/22 216.39.228.0/22 IPv6: 2602:fdbd::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19743 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:3f:27:dd:c1:5d:44:4b:76:b5:0c:1a:94:24:56:88:76:f4: 29:28:c2:7f:2d:cf:fd:c4:d6:1e:26:5b:11:88:cd:d1:f7:90: fb:6c:2a:25:bb:7e:0d:46:bc:e0:c4:4e:70:35:6a:52:36:e7: 88:23:6b:47:be:ef:1c:17:c9:d7:3f:68:03:a7:45:7a:4c:83: f8:0d:aa:0f:5d:c2:2e:cf:c2:79:f7:2b:5f:1b:8c:94:bf:09: 34:0c:0a:cf:d7:4b:56:01:1a:03:fd:2b:9a:36:97:6b:48:c8: 0e:84:b4:4c:a6:50:73:16:f1:8a:85:af:00:b5:35:96:d4:ae: 91:43:a0:1f:40:48:07:c0:e4:ae:e3:93:89:b0:0a:b6:71:7e: 2f:66:45:7b:82:be:ff:36:85:04:6c:07:5b:d8:e3:c0:36:45: de:2a:f5:9e:84:e7:a1:43:69:02:23:ec:a8:3e:a4:7c:2b:cb: f0:05:34:63:d0:95:6d:f9:18:15:d6:00:b3:d1:56:d5:76:a1: cb:83:17:31:5e:d4:7a:56:92:2b:73:99:fb:79:5d:35:04:4e: 59:a0:58:a8:d5:e9:79:3b:71:fe:ac:ae:55:a6:d6:e1:ec:bc: 80:ce:c6:8c:8b:40:ff:bb:bd:f0:3e:ea:f4:14:0a:75:d6:7a: 96:05:10:d5 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEt4T78tRBXkBR6ZSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAxMDAwNDUyMloXDTI4MDExMzAxNDUyMlowLzEtMCsGA1UEAxMk NDYzOGQ1ZDEtNDRmYi00ZWNjLTllMjEtNjg1YTI4YzBiMGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlnPQ1R3qN0/jWzaGCA8f8Au2ZH9W+L7rMXM yIQbRF5mietOyLfWf8r9jJraGdJP5BC4GqwbK6Z4Dk7TGyq+5eFbtyKQWg+kvdHh CmK6j5a62ep2+BlObUWry+eo7RrZgnWnNStty0k/p0GY5ZidwS53VeGv+sgEWTy3 /5lSljNv5VRJlF/orPAHtoi+4PjwvZoe8G7C1F1vkMCNt7lW9dnUxLOvYg/1WzGr zgjGLB0Q7FGqK3SrHoJXmfW9R0B2lYVnM/comiRcNdcItuTyzm8NSR6IOiZVAZ3K jwlIDpoNZV0mBCb/NuNlb7lpQIpBBfTKaTqha6ttDI8Le/Da9wIDAQABo4IENjCC BDIwHQYDVR0OBBYEFK4ABhriPEzRJvNSx2x6H8e60kRbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 NjM4ZDVkMS00NGZiLTRlY2MtOWUyMS02ODVhMjhjMGIwYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQ2MzhkNWQxLTQ0ZmItNGVjYy05 ZTIxLTY4NWEyOGMwYjBiNC80NjM4ZDVkMS00NGZiLTRlY2MtOWUyMS02ODVhMjhj MGIwYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAKqJ6ADBAK5yigDBALYJ+QwDgQCAAIwCAMGBCYC /b0AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAk0fMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADY/J93BXURL drUMGpQkVoh29Ckown8tz/3E1h4mWxGIzdH3kPtsKiW7fg1GvODETnA1alI254gj a0e+7xwXydc/aAOnRXpMg/gNqg9dwi7Pwnn3K18bjJS/CTQMCs/XS1YBGgP9K5o2 l2tIyA6EtEymUHMW8YqFrwC1NZbUrpFDoB9ASAfA5K7jk4mwCrZxfi9mRXuCvv82 hQRsB1vY48A2Rd4q9Z6E56FDaQIj7Kg+pHwry/AFNGPQlW35GBXWALPRVtV2ocuD FzFe1HpWkitzmft5XTUETlmgWKjV6Xk7cf6srlWm1uHsvIDOxoyLQP+7vfA+6vQU CnXWepYFENU= -----END CERTIFICATE-----Generated at Fri Oct 10 14:37:52 2025 by rpki-client