$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer File: c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer (raw, json) Hash identifier: dJ9GLfl45Uk8t0DMiefjGP2ejl8YgnbduPTT8rDihS4= Subject key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B030F08796CAB435A5CFC2880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 Aug 2025 00:45:25 +0000 Certificate not after: Thu 02 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 25945 IP: 162.253.80.0/21 IP: 198.252.202.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:0f:08:79:6c:ab:43:5a:5c:fc:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 29 00:45:25 2025 GMT Not After : Dec 2 01:45:25 2027 GMT Subject: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b6:11:6a:65:26:f9:c9:13:cc:82:d4:98:29: 9a:44:83:67:40:9d:b8:15:fe:64:64:33:cb:fa:7a: 50:63:cb:89:e2:0d:47:d4:b6:b7:72:0d:89:4f:5f: f2:4a:00:3e:a4:6a:84:f2:53:00:c7:e8:96:7c:1c: ce:e5:60:77:09:1a:17:3a:3b:df:d2:74:82:78:03: 78:16:37:2e:a2:69:ee:e0:9b:b4:53:a3:20:67:4c: 11:a5:c0:b1:c3:dc:80:9e:8d:db:c1:a9:66:ba:1d: 24:01:7e:d2:71:7e:e9:cd:17:09:4e:27:ab:08:e8: 68:13:eb:f8:e1:73:e5:23:75:1a:5b:85:ea:c8:35: 3d:e8:b1:46:a5:e3:ac:22:4e:07:0a:c5:5f:8d:9a: 93:5b:4c:16:69:86:af:53:78:a6:13:36:49:16:4a: a4:8e:f5:b3:76:94:07:56:b8:d0:f1:47:32:76:7d: b6:15:cb:87:da:a4:53:22:31:0c:1e:f1:a7:d6:c6: f3:7d:6a:4d:e5:f6:0b:e2:76:31:28:3f:a7:bd:1b: ca:9d:36:3f:ef:1c:79:71:e9:01:b5:8c:df:a0:d6: 24:c8:0c:6a:2c:4f:7f:43:8a:71:8f:76:19:a2:3a: 6a:34:6f:bc:b7:77:eb:d2:e0:8b:82:9e:65:95:70: 4b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 162.253.80.0/21 198.252.202.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25945 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:4a:98:08:e4:82:f7:43:67:98:02:61:e1:71:0a:1b:a4:f0: 5e:61:5b:e8:34:87:cb:d0:29:d5:4b:40:8b:f9:64:6e:41:23: 4c:69:d6:c3:63:d2:95:aa:80:80:2d:08:4a:f8:63:b8:5e:c2: 76:23:56:0e:39:73:d4:70:0c:92:b0:e5:d4:ce:cf:09:ff:fe: 3f:8c:91:da:a6:46:c2:fd:b5:93:52:bf:04:39:0a:93:2a:70: 4e:54:16:f7:33:37:39:d9:6f:5f:3a:58:8e:8b:87:e0:cf:06: af:2f:95:c4:f5:59:93:57:78:ec:e8:55:cd:49:77:0f:8a:da: d1:88:0a:a8:3f:7d:45:0c:08:80:91:91:60:07:bd:5f:aa:fa: a5:eb:41:8e:df:ef:e3:4c:d4:31:a4:55:28:fc:67:4c:0f:24: eb:b4:53:04:5e:08:e1:ff:e5:0a:99:e3:17:7a:03:50:e6:08: 3f:21:be:4e:31:a7:3e:57:91:4e:eb:5f:27:81:5e:4c:63:ee: 73:d4:25:43:d8:63:d8:63:af:09:53:1b:77:06:6a:48:39:54: ff:11:d6:d6:c6:62:17:c9:6f:82:88:a9:ac:12:4a:97:81:a4: bb:bf:92:ba:d6:07:18:bd:b5:20:6e:06:52:aa:30:f7:47:21: 77:25:a3:27 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEsDDwh5bKtDWlz8KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDgyOTAwNDUyNVoXDTI3MTIwMjAxNDUyNVowLzEtMCsGA1UEAxMk YzhjMzAxYWItN2QyMi00NmMzLTgyMTEtZjYzNzNlYzgyZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rYRamUm+ckTzILUmCmaRINnQJ24Ff5kZDPL +npQY8uJ4g1H1La3cg2JT1/ySgA+pGqE8lMAx+iWfBzO5WB3CRoXOjvf0nSCeAN4 Fjcuomnu4Ju0U6MgZ0wRpcCxw9yAno3bwalmuh0kAX7ScX7pzRcJTierCOhoE+v4 4XPlI3UaW4XqyDU96LFGpeOsIk4HCsVfjZqTW0wWaYavU3imEzZJFkqkjvWzdpQH VrjQ8Ucydn22FcuH2qRTIjEMHvGn1sbzfWpN5fYL4nYxKD+nvRvKnTY/7xx5cekB tYzfoNYkyAxqLE9/Q4pxj3YZojpqNG+8t3fr0uCLgp5llXBLvwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFBsT/MholTtTqPzouUuLBCOXSlLRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j OGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2VjODJkNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M4YzMwMWFiLTdkMjItNDZjMy04 MjExLWY2MzczZWM4MmQ1YS9jOGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2Vj ODJkNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAOi/VADBAHG/MowGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICZVkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAikqYCOSC90NnmAJh4XEKG6TwXmFb6DSHy9Ap1UtA i/lkbkEjTGnWw2PSlaqAgC0ISvhjuF7CdiNWDjlz1HAMkrDl1M7PCf/+P4yR2qZG wv21k1K/BDkKkypwTlQW9zM3OdlvXzpYjouH4M8Gry+VxPVZk1d47OhVzUl3D4ra 0YgKqD99RQwIgJGRYAe9X6r6petBjt/v40zUMaRVKPxnTA8k67RTBF4I4f/lCpnj F3oDUOYIPyG+TjGnPleRTutfJ4FeTGPuc9QlQ9hj2GOvCVMbdwZqSDlU/xHW1sZi F8lvgoiprBJKl4Gku7+SutYHGL21IG4GUqow90chdyWjJw== -----END CERTIFICATE-----Generated at Fri Oct 10 14:41:45 2025 by rpki-client