$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer File: d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer (raw, json) Hash identifier: Dea4TsK6E7aFkHKD3UVegqZWEbxlbN8DiCKqFFrwhOM= Subject key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B460F73FF40FC88E5D0F20980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Sep 2025 00:45:25 +0000 Certificate not after: Sun 26 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 23522 AS: 32181 AS: 54674 IP: 66.252.0.0/19 IP: 69.39.224.0/20 IP: 69.65.0.0/18 IP: 70.32.0.0/20 IP: 199.168.112.0/21 IP: 209.212.144.0/20 IP: 216.38.0.0/19 IP: 2001:1850::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:0f:73:ff:40:fc:88:e5:d0:f2:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 22 00:45:25 2025 GMT Not After : Dec 26 01:45:25 2027 GMT Subject: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:f8:45:55:80:0d:f0:87:7c:e6:47:34:66: 2f:f0:50:ee:29:04:e5:db:01:48:28:84:24:63:55: 38:69:98:e5:05:d3:bc:d1:86:c9:23:c5:1d:32:dc: 53:8b:85:e5:44:02:d5:80:2c:65:07:94:fb:32:c3: 0d:a4:78:da:02:7e:34:85:13:c7:b6:c9:b7:9a:1e: 16:b0:bf:c4:9c:97:29:2e:ae:84:66:c4:80:e8:fb: 64:cf:8b:ee:cb:5d:4e:18:79:77:99:4a:7a:4e:61: 20:8e:e7:0e:24:3d:33:58:64:82:d9:07:0f:52:f1: 93:e8:de:bb:15:23:b2:c7:e9:c0:65:9f:d1:89:93: c7:ee:92:14:36:b5:c2:2b:da:96:30:d1:d4:83:81: 38:3b:51:c7:6a:5b:c6:56:00:5a:64:9a:de:76:13: 4c:7c:e2:aa:99:88:75:d7:c7:01:0d:df:2a:a0:2e: 64:54:65:94:89:e0:a5:53:86:e5:27:78:3d:c7:78: 46:ef:47:43:57:d4:00:d4:8b:d8:ff:a7:42:26:fa: 51:69:66:1c:6c:00:77:97:e8:34:1f:93:97:b2:72: 26:b3:93:d4:a6:31:64:f7:55:61:e6:c9:bb:c1:37: 7f:ff:b6:97:ab:d6:21:ad:a5:1d:1f:1e:39:5a:9f: 40:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 66.252.0.0/19 69.39.224.0/20 69.65.0.0/18 70.32.0.0/20 199.168.112.0/21 209.212.144.0/20 216.38.0.0/19 IPv6: 2001:1850::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23522 32181 54674 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:51:42:c6:7f:59:ae:22:dd:9a:91:53:93:0a:89:93:7c:20: a7:c8:24:14:9f:23:a4:fe:a2:a4:aa:4c:2d:ac:f5:43:23:26: c8:2d:90:ea:eb:70:69:03:d6:f5:c8:4d:74:20:0f:d7:4d:31: 40:a2:8c:56:50:42:74:3d:1e:c1:ec:0d:0b:ba:50:bb:42:2e: 67:9d:5b:de:9c:d2:f5:59:28:64:df:09:08:8d:58:aa:7c:1f: fb:cf:d4:fc:93:ff:c0:87:09:4f:96:ee:dc:8f:8d:ad:bb:4d: 26:fd:d4:62:0d:b6:4b:ce:30:6d:73:8b:fa:c1:2a:c8:a3:56: 82:97:07:28:50:a6:c5:d0:c6:75:0b:e4:94:bc:4e:a3:d5:36: ca:6e:86:08:95:fc:7a:e9:6b:89:06:6d:16:2d:ba:89:a6:c4: 34:60:b5:04:31:a0:24:60:5b:f0:7a:9b:2e:6d:23:60:e1:de: 02:2f:f1:67:0d:70:89:8f:e8:91:52:66:b8:57:b4:d4:b9:a3: 7b:bd:09:69:88:44:ea:1a:42:68:27:46:8b:5a:e4:51:ec:1e: 14:d6:0b:b9:62:6d:37:e1:15:02:f1:60:c4:f3:e3:c3:8c:d4: a6:0a:63:65:8a:fc:9d:b2:e9:c4:f8:32:36:a2:00:34:e0:53: ed:dd:9a:41 -----BEGIN CERTIFICATE----- MIIHRDCCBiygAwIBAgIUAQ0Mn0MoWEtGD3P/QPyI5dDyCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDkyMjAwNDUyNVoXDTI3MTIyNjAxNDUyNVowLzEtMCsGA1UEAxMk ZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIyMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg/4RVWADfCHfOZHNGYv8FDuKQTl2wFIKIQk Y1U4aZjlBdO80YbJI8UdMtxTi4XlRALVgCxlB5T7MsMNpHjaAn40hRPHtsm3mh4W sL/EnJcpLq6EZsSA6Ptkz4vuy11OGHl3mUp6TmEgjucOJD0zWGSC2QcPUvGT6N67 FSOyx+nAZZ/RiZPH7pIUNrXCK9qWMNHUg4E4O1HHalvGVgBaZJredhNMfOKqmYh1 18cBDd8qoC5kVGWUieClU4blJ3g9x3hG70dDV9QA1IvY/6dCJvpRaWYcbAB3l+g0 H5OXsnIms5PUpjFk91Vh5sm7wTd//7aXq9YhraUdHx45Wp9A4wIDAQABo4IEVjCC BFIwHQYDVR0OBBYEFNK5JLG9IdHZ//LHXqN6jEidkLkWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k NDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05 N2M5LWRiYzExYzEyMjEwYy9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMx MjIxMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBAVC/AADBARFJ+ADBAZFQQADBARGIAADBAPHqHAD BATR1JADBAXYJgAwDQQCAAIwBwMFACABGFAwIgYIKwYBBQUHAQgBAf8EEzARoA8w DQICW+ICAn21AgMA1ZIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUFFCxn9ZriLdmpFTkwqJk3wgp8gkFJ8j pP6ipKpMLaz1QyMmyC2Q6utwaQPW9chNdCAP100xQKKMVlBCdD0ewewNC7pQu0Iu Z51b3pzS9VkoZN8JCI1Yqnwf+8/U/JP/wIcJT5bu3I+NrbtNJv3UYg22S84wbXOL +sEqyKNWgpcHKFCmxdDGdQvklLxOo9U2ym6GCJX8eulriQZtFi26iabENGC1BDGg JGBb8HqbLm0jYOHeAi/xZw1wiY/okVJmuFe01Lmje70JaYhE6hpCaCdGi1rkUewe FNYLuWJtN+EVAvFgxPPjw4zUpgpjZYr8nbLpxPgyNqIANOBT7d2aQQ== -----END CERTIFICATE-----Generated at Fri Oct 10 14:37:31 2025 by rpki-client