$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer File: cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer (raw, json) Hash identifier: oFMxQqeuspTtqbB7+/qmqnoZwHOMh3utmh0CDXY7zU8= Subject key identifier: 96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F71E5FF2C0B2841D20D08F100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Oct 2026 12:45:12 +0000 Certificate not after: Thu 11 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 14772 AS: 17021 IP: 199.30.144.0/22 IP: 204.10.80.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:e5:ff:2c:0b:28:41:d2:0d:08:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 9 12:45:12 2026 GMT Not After : Jan 11 13:45:12 2029 GMT Subject: CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:32:67:dd:8a:98:07:35:3d:85:6f:9a:47:32: 4b:e0:82:d5:d7:3f:59:54:82:2a:ea:37:45:73:7f: 6c:de:72:41:e2:bc:13:00:e3:58:97:d3:ec:46:81: 64:08:4a:1b:f8:c6:09:88:72:5e:8f:58:e4:eb:05: ef:04:6d:f6:91:96:b3:64:80:f8:a9:b7:5b:9b:5d: 4b:eb:ca:bf:69:89:eb:3b:a9:81:47:02:9f:c8:d9: 7a:73:ea:39:db:22:be:d0:98:cb:72:14:39:25:10: 5e:83:93:1b:a4:3d:a1:f0:5a:f0:40:e9:ff:d2:36: bb:59:85:69:b8:3d:06:62:3b:f1:e4:26:2b:f6:fd: b8:6b:44:7f:33:17:72:d2:b7:71:c9:eb:9a:9b:fb: 9e:33:2e:47:53:d3:23:60:ab:38:c7:45:a9:1c:b4: 99:d6:0d:84:45:c7:f0:9d:74:aa:a8:3e:c8:f0:24: ae:a0:fd:af:cc:70:c2:8a:c0:06:a6:f0:7a:75:4a: 04:0a:4b:de:da:fe:95:93:2d:56:94:e0:e6:aa:ca: 01:76:21:4f:f4:3d:02:51:be:07:0c:cd:a1:76:1c: 7e:0b:48:3f:11:cc:74:3f:f7:9f:dd:d6:91:e6:bd: 38:df:38:b6:60:bf:8a:b3:e0:06:a1:61:82:04:52: 97:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.30.144.0/22 204.10.80.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14772 17021 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:33:0e:1e:77:1c:2b:a1:06:e3:bb:53:05:df:9c:ed:55:ea: be:60:d2:21:0f:f6:af:30:39:67:09:9e:c1:70:57:7e:60:74: 33:71:55:66:ed:12:c4:5b:5d:fe:2f:91:2c:a7:14:47:0e:83: 84:7b:1e:93:6b:71:d1:a6:44:74:82:6c:47:f1:53:37:0c:47: cb:ef:3d:50:82:17:70:9c:e5:84:c7:26:aa:f3:91:5e:0c:6d: c8:1e:65:b0:d2:c1:60:cb:bc:b2:e7:6a:f4:9e:e6:92:7d:01: 2a:e1:f6:83:8a:c8:b1:11:aa:11:d6:d6:e0:7b:b0:85:fc:53: c1:6c:f3:c2:1d:66:82:de:0a:b6:55:98:06:16:b5:ae:77:d1: fa:53:11:e8:91:53:22:27:a9:cc:ad:35:bf:b6:cc:b4:0c:cf: 94:99:4f:89:49:b3:f6:8f:f1:e1:6d:3e:dc:7e:29:40:73:ed: 80:84:d2:3f:51:17:f5:9f:23:6c:ec:19:af:55:0f:c3:d6:5f: 95:91:55:bb:81:ec:17:85:ee:4d:d9:3f:c1:5a:11:84:85:a2: 61:3e:23:c0:62:db:2f:dd:ae:a6:08:4d:d1:be:12:52:86:3e: f6:1b:63:b9:fd:dd:8c:48:ff:ef:4a:4a:86:e2:b4:44:9b:50: d2:2c:71:8a -----BEGIN CERTIFICATE----- MIIHEjCCBfqgAwIBAgIUAQ0Mn0MoWE9x5f8sCyhB0g0I8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MTAwOTEyNDUxMloXDTI5MDExMTEzNDUxMlowLzEtMCsGA1UEAxMk Y2MxMWU1ZGQtYzJiMy00OTNjLTg1MzQtNDMxZmE0ODc4YWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjJn3YqYBzU9hW+aRzJL4ILV1z9ZVIIq6jdF c39s3nJB4rwTAONYl9PsRoFkCEob+MYJiHJej1jk6wXvBG32kZazZID4qbdbm11L 68q/aYnrO6mBRwKfyNl6c+o52yK+0JjLchQ5JRBeg5MbpD2h8FrwQOn/0ja7WYVp uD0GYjvx5CYr9v24a0R/Mxdy0rdxyeuam/ueMy5HU9MjYKs4x0WpHLSZ1g2ERcfw nXSqqD7I8CSuoP2vzHDCisAGpvB6dUoECkve2v6Vky1WlODmqsoBdiFP9D0CUb4H DM2hdhx+C0g/Ecx0P/ef3daR5r043zi2YL+Ks+AGoWGCBFKXjwIDAQABo4IEJDCC BCAwHQYDVR0OBBYEFJawiFyrUB96oXet7Xb/kVeJnvXGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j YzExZTVkZC1jMmIzLTQ5M2MtODUzNC00MzFmYTQ4NzhhYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2NjMTFlNWRkLWMyYjMtNDkzYy04 NTM0LTQzMWZhNDg3OGFhOS9jYzExZTVkZC1jMmIzLTQ5M2MtODUzNC00MzFmYTQ4 NzhhYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHHpADBALMClAwHQYIKwYBBQUHAQgBAf8EDjAM oAowCAICObQCAkJ9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAJIzDh53HCuhBuO7UwXfnO1V6r5g0iEP9q8w OWcJnsFwV35gdDNxVWbtEsRbXf4vkSynFEcOg4R7HpNrcdGmRHSCbEfxUzcMR8vv PVCCF3Cc5YTHJqrzkV4MbcgeZbDSwWDLvLLnavSe5pJ9ASrh9oOKyLERqhHW1uB7 sIX8U8Fs88IdZoLeCrZVmAYWta530fpTEeiRUyInqcytNb+2zLQMz5SZT4lJs/aP 8eFtPtx+KUBz7YCE0j9RF/WfI2zsGa9VD8PWX5WRVbuB7BeF7k3ZP8FaEYSFomE+ I8Bi2y/drqYITdG+ElKGPvYbY7n93YxI/+9KSobitESbUNIscYo= -----END CERTIFICATE-----Generated at Mon Oct 19 01:00:17 2026 by rpki-client