$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db5102d5-46dd-475d-8ea8-349979e119f0.cer File: db5102d5-46dd-475d-8ea8-349979e119f0.cer (raw, json) Hash identifier: gWkoE4ixl3sTcev0eFU6BrfYgVAx9Mk/RE2xHW6AihQ= Subject key identifier: 36:9B:22:A3:81:74:F0:87:05:24:1C:2A:B7:2F:C6:66:06:C3:83:D0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B599A3BCDC0BF7507FC9FC680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db5102d5-46dd-475d-8ea8-349979e119f0/db5102d5-46dd-475d-8ea8-349979e119f0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db5102d5-46dd-475d-8ea8-349979e119f0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Sep 2025 00:45:24 +0000 Certificate not after: Sun 02 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 14978 AS: 396106 IP: 63.249.48.0/20 IP: 64.57.192.0/20 IP: 74.213.224.0/19 IP: 2602:fe82::/36 IP: 2607:ec80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:9a:3b:cd:c0:bf:75:07:fc:9f:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 29 00:45:24 2025 GMT Not After : Jan 2 01:45:24 2028 GMT Subject: CN=db5102d5-46dd-475d-8ea8-349979e119f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fc:3d:30:f2:e3:c4:a8:9f:3d:c1:54:91:7b: a9:db:13:e5:33:7f:3b:18:a2:84:60:89:db:40:43: f4:bc:bb:9e:13:84:a0:f7:bd:80:a1:5b:8b:c5:f9: bf:fd:25:77:fe:11:3e:87:f6:02:fc:b2:fb:9b:7f: fc:43:e8:14:b0:43:fb:67:8a:0e:08:0e:1a:39:a7: b7:37:50:ae:c1:ba:43:b5:91:7b:32:6c:12:c1:f3: 19:a2:ae:e5:e8:4a:14:7a:69:04:e2:42:bb:b2:42: 2c:17:93:ee:1d:e2:68:5b:9a:8e:3f:ef:3b:05:53: 62:37:e9:a7:b5:e7:b8:ba:75:0e:ee:dc:70:ed:a9: 91:77:e3:61:3f:bc:36:d8:8c:ea:e9:fe:2e:bb:63: 6e:ec:55:60:59:f3:38:0b:1f:2d:cf:11:0d:2a:c7: f0:08:7c:aa:f4:b9:28:e7:cf:d9:e5:f5:cf:4c:c0: ce:b4:d6:28:d6:33:91:88:d6:f3:e2:a3:d4:c4:2e: 1c:e2:6f:88:b4:54:09:fd:1f:52:6c:2a:b1:72:2f: 31:fe:46:5f:0e:a3:b3:5f:2c:4b:aa:86:30:42:2b: 0a:d0:f7:f2:a2:c2:8c:dc:6f:09:30:ee:ab:6b:2a: da:0f:43:4e:b6:72:bc:16:90:75:c5:f9:a5:88:c9: b3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9B:22:A3:81:74:F0:87:05:24:1C:2A:B7:2F:C6:66:06:C3:83:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db5102d5-46dd-475d-8ea8-349979e119f0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db5102d5-46dd-475d-8ea8-349979e119f0/db5102d5-46dd-475d-8ea8-349979e119f0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 63.249.48.0/20 64.57.192.0/20 74.213.224.0/19 IPv6: 2602:fe82::/36 2607:ec80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14978 396106 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c4:b7:b5:a3:24:95:f3:59:56:44:ed:86:7b:a4:f7:76:45: 0c:99:bf:44:85:5e:5f:e1:4f:0e:45:f3:ae:79:bd:ba:01:71: 07:2d:f3:07:f9:1d:3a:a6:26:09:5a:ac:ad:54:22:80:b6:70: 17:de:c8:06:74:4e:51:3e:db:d5:ec:3e:78:0d:ea:a4:10:65: 5c:7c:66:83:ef:2b:83:63:23:a4:16:93:60:3c:9c:75:91:fe: 43:ab:3b:35:d2:74:b4:2a:fb:19:b1:46:08:01:56:1e:93:ca: 9c:39:5c:26:13:de:fe:73:da:e5:0a:ca:d1:ce:02:9c:53:db: 89:36:44:78:63:6c:94:00:2e:fd:e2:d9:67:20:4a:7d:05:5b: 32:16:de:14:98:a7:0a:71:1e:f0:0e:b2:63:1b:a7:7e:58:86: 69:db:22:dc:25:be:69:20:6b:26:5d:07:27:a8:d1:d3:d3:4e: 64:b0:57:a8:02:59:73:20:19:83:a8:0c:1d:4b:0e:a8:3f:1a: df:6e:f0:c9:16:05:54:77:26:8f:bc:e8:c3:a9:2e:65:9c:b8: 3b:6c:c9:7d:e8:98:fe:86:36:44:f9:9e:2d:fe:64:cf:d2:fb: 11:3d:da:c0:56:f3:dc:e8:85:59:06:17:27:d2:f4:1e:9b:f4: d2:1b:da:c1 -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWEtZmjvNwL91B/yfxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDkyOTAwNDUyNFoXDTI4MDEwMjAxNDUyNFowLzEtMCsGA1UEAxMk ZGI1MTAyZDUtNDZkZC00NzVkLThlYTgtMzQ5OTc5ZTExOWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfw9MPLjxKifPcFUkXup2xPlM387GKKEYInb QEP0vLueE4Sg972AoVuLxfm//SV3/hE+h/YC/LL7m3/8Q+gUsEP7Z4oOCA4aOae3 N1CuwbpDtZF7MmwSwfMZoq7l6EoUemkE4kK7skIsF5PuHeJoW5qOP+87BVNiN+mn tee4unUO7txw7amRd+NhP7w22Izq6f4uu2Nu7FVgWfM4Cx8tzxENKsfwCHyq9Lko 58/Z5fXPTMDOtNYo1jORiNbz4qPUxC4c4m+ItFQJ/R9SbCqxci8x/kZfDqOzXyxL qoYwQisK0PfyosKM3G8JMO6rayraD0NOtnK8FpB1xfmliMmzKwIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFDabIqOBdPCHBSQcKrcvxmYGw4PQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k YjUxMDJkNS00NmRkLTQ3NWQtOGVhOC0zNDk5NzllMTE5ZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2RiNTEwMmQ1LTQ2ZGQtNDc1ZC04 ZWE4LTM0OTk3OWUxMTlmMC9kYjUxMDJkNS00NmRkLTQ3NWQtOGVhOC0zNDk5Nzll MTE5ZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMBgEAgABMBIDBAQ/+TADBARAOcADBAVK1eAwFQQCAAIwDwMGBCYC /oIAAwUAJgfsgDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgI6ggIDBgtKMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAI/Et7WjJJXzWVZE7YZ7pPd2RQyZv0SFXl/hTw5F8655vboBcQct8wf5HTqm JglarK1UIoC2cBfeyAZ0TlE+29XsPngN6qQQZVx8ZoPvK4NjI6QWk2A8nHWR/kOr OzXSdLQq+xmxRggBVh6Typw5XCYT3v5z2uUKytHOApxT24k2RHhjbJQALv3i2Wcg Sn0FWzIW3hSYpwpxHvAOsmMbp35YhmnbItwlvmkgayZdByeo0dPTTmSwV6gCWXMg GYOoDB1LDqg/Gt9u8MkWBVR3Jo+86MOpLmWcuDtsyX3omP6GNkT5ni3+ZM/S+xE9 2sBW89zohVkGFyfS9B6b9NIb2sE= -----END CERTIFICATE-----Generated at Fri Oct 10 14:42:57 2025 by rpki-client