$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer File: 9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer (raw, json) Hash identifier: ydgiBXdrlK9vvf4bYmuaCMa0+tTmgsYycQPkONMGK3g= Subject key identifier: 32:78:9B:CC:41:A0:8F:2A:23:FC:EB:EC:5B:AD:AE:FC:9A:56:C2:67 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B513A2F9B1A3310BEC04F0B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Sep 2025 00:45:25 +0000 Certificate not after: Thu 30 Dec 2027 01:45:25 +0000 Subordinate resources: IP: 23.152.224.0 -- 23.152.226.255 IP: 2620:13a:c000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:3a:2f:9b:1a:33:10:be:c0:4f:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 26 00:45:25 2025 GMT Not After : Dec 30 01:45:25 2027 GMT Subject: CN=9aeaefa1-9009-4d41-9090-b27ec04ef7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2a:0a:39:28:65:e7:56:b4:eb:10:6f:2f:97: 25:04:72:35:14:60:84:7a:12:21:f8:68:77:00:52: 13:b5:96:76:8b:0d:1d:d7:f5:78:ef:b9:a0:e5:c9: 30:5d:15:38:74:76:ca:4d:d7:7a:0f:bd:75:b3:21: d6:85:62:c0:6f:68:42:b9:37:29:9c:96:1f:37:77: 9f:b3:24:b3:3f:15:e1:41:bc:ad:9c:c7:69:78:06: 32:6c:3c:2a:7b:28:b1:51:aa:57:f5:31:ec:33:86: 08:0f:e4:44:f6:1c:bc:58:eb:db:71:eb:74:96:ad: 96:c1:a2:02:29:93:a7:b3:81:24:fc:3f:94:f8:35: 21:ca:1e:58:80:3e:47:0d:28:d3:89:15:3e:57:a8: 38:a9:f4:b2:3d:76:ea:3c:17:52:ee:a5:7b:cc:31: 2b:b4:c2:ba:61:e6:3d:ea:b6:dd:38:c3:8e:4c:7d: e3:45:af:01:92:ca:72:37:43:7e:f5:d3:d1:56:d1: 24:86:08:f9:29:94:2b:64:d8:b9:cc:40:3c:70:82: 72:65:55:76:c6:9a:33:e4:c4:89:aa:a6:8a:43:85: 66:ff:b9:ac:ea:e4:a3:52:3f:c7:d9:9b:92:e0:97: ea:1b:67:f6:6f:2f:bc:a2:60:18:96:67:c0:cc:b8: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:78:9B:CC:41:A0:8F:2A:23:FC:EB:EC:5B:AD:AE:FC:9A:56:C2:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.152.224.0-23.152.226.255 IPv6: 2620:13a:c000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:41:81:98:78:38:03:dc:c5:86:21:10:27:84:02:d3:cf:ba: c9:3f:60:8d:22:27:c5:d8:29:1d:e0:5d:2f:50:ac:d7:17:87: ec:71:61:fc:ed:01:e8:8e:e2:21:29:3f:b8:50:ee:c5:2d:54: e6:a4:32:c4:52:0e:47:a8:ca:20:e3:38:3d:7d:ae:6e:5f:a0: 3e:37:49:50:61:ee:fc:bf:71:27:f8:2d:df:fd:e9:7b:71:36: a1:50:56:54:ea:f4:a2:54:8c:05:d9:8a:8a:db:85:73:d7:9b: 0f:1f:8d:0d:e5:4b:8d:a8:d2:ff:d1:7b:79:3e:83:ed:c2:13: f8:b0:65:18:d1:47:55:25:15:d7:9e:5a:36:a9:6f:5e:ca:a3: fd:58:70:af:ec:e4:c3:0c:38:67:f6:22:7c:74:af:45:02:ce: d8:f3:c2:89:f8:f7:16:71:6e:ce:c8:98:12:f4:2b:aa:07:92: 28:7c:86:4d:7e:1e:66:42:c9:45:0d:b3:28:73:a5:bc:a9:e8: 5a:19:73:b1:fe:b2:4e:4c:81:4b:77:03:6d:41:22:76:11:5b: 3b:4f:df:43:65:2c:42:2d:01:f0:71:40:c6:b9:cb:02:45:a1: d0:4e:8b:90:a4:94:cb:43:31:e1:34:19:b3:b3:93:97:89:f6: d0:bb:4f:e1 -----BEGIN CERTIFICATE----- MIIHBTCCBe2gAwIBAgIUAQ0Mn0MoWEtROi+bGjMQvsBPCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDkyNjAwNDUyNVoXDTI3MTIzMDAxNDUyNVowLzEtMCsGA1UEAxMk OWFlYWVmYTEtOTAwOS00ZDQxLTkwOTAtYjI3ZWMwNGVmN2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyoKOShl51a06xBvL5clBHI1FGCEehIh+Gh3 AFITtZZ2iw0d1/V477mg5ckwXRU4dHbKTdd6D711syHWhWLAb2hCuTcpnJYfN3ef sySzPxXhQbytnMdpeAYybDwqeyixUapX9THsM4YID+RE9hy8WOvbcet0lq2WwaIC KZOns4Ek/D+U+DUhyh5YgD5HDSjTiRU+V6g4qfSyPXbqPBdS7qV7zDErtMK6YeY9 6rbdOMOOTH3jRa8BkspyN0N+9dPRVtEkhgj5KZQrZNi5zEA8cIJyZVV2xpoz5MSJ qqaKQ4Vm/7ms6uSjUj/H2ZuS4JfqG2f2by+8omAYlmfAzLjeFwIDAQABo4IEFzCC BBMwHQYDVR0OBBYEFDJ4m8xBoI8qI/zr7FutrvyaVsJnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 YWVhZWZhMS05MDA5LTRkNDEtOTA5MC1iMjdlYzA0ZWY3ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzlhZWFlZmExLTkwMDktNGQ0MS05 MDkwLWIyN2VjMDRlZjdlZi85YWVhZWZhMS05MDA5LTRkNDEtOTA5MC1iMjdlYzA0 ZWY3ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMBQEAgABMA4wDAMEBReY4AMEABeY4jAOBAIAAjAIAwYAJiABOsAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfkGBmHg4A9zFhiEQJ4QC08+6yT9gjSInxdgpHeBdL1Cs1xeH7HFh /O0B6I7iISk/uFDuxS1U5qQyxFIOR6jKIOM4PX2ubl+gPjdJUGHu/L9xJ/gt3/3p e3E2oVBWVOr0olSMBdmKituFc9ebDx+NDeVLjajS/9F7eT6D7cIT+LBlGNFHVSUV 155aNqlvXsqj/Vhwr+zkwww4Z/YifHSvRQLO2PPCifj3FnFuzsiYEvQrqgeSKHyG TX4eZkLJRQ2zKHOlvKnoWhlzsf6yTkyBS3cDbUEidhFbO0/fQ2UsQi0B8HFAxrnL AkWh0E6LkKSUy0Mx4TQZs7OTl4n20LtP4Q== -----END CERTIFICATE-----Generated at Fri Oct 10 14:44:16 2025 by rpki-client