$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4.cer File: e30d9f05-c733-4bb6-bc4c-e72705e580d4.cer (raw, json) Hash identifier: rHnmVao4ijC1a2kTzNymDWCBkHorltzsqHgd3AVJShg= Subject key identifier: 4D:A2:1A:A9:DC:2F:C1:FF:6A:6D:BF:A5:A0:E1:0B:F3:52:C7:B1:72 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B21C48EE6A277D85BDA949B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/e30d9f05-c733-4bb6-bc4c-e72705e580d4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Sep 2025 00:45:24 +0000 Certificate not after: Mon 13 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 33385 IP: 23.183.16.0/24 IP: 2602:fc60::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:c4:8e:e6:a2:77:d8:5b:da:94:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 9 00:45:24 2025 GMT Not After : Dec 13 01:45:24 2027 GMT Subject: CN=e30d9f05-c733-4bb6-bc4c-e72705e580d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:39:b7:cf:7b:d9:75:64:ce:e8:e2:22:4b: 18:06:d7:b7:4b:4c:64:48:83:9b:a7:d6:36:bd:c7: 1d:13:03:6b:b0:df:7f:3a:40:dd:24:fb:17:50:bf: 18:a2:ae:06:51:7c:77:23:65:04:ae:d3:c0:ef:97: 63:d3:fe:1b:5d:47:66:f8:cd:c8:5a:78:b9:98:09: bc:25:cd:89:97:bc:29:01:79:09:7a:53:38:0b:68: 19:29:0a:89:5b:d9:8c:d6:70:e3:af:2e:0d:d5:ef: 4a:d0:0a:90:98:9e:65:e5:36:9e:df:bd:f2:61:f2: 0c:eb:cd:9d:76:b3:b3:69:44:54:cc:65:7c:44:4f: 99:ad:19:83:5e:a6:9b:05:47:65:58:e3:67:06:66: da:fb:9f:c0:6d:96:dc:e4:54:c9:44:94:ae:35:8f: 4f:f2:70:54:54:5a:37:11:71:7b:24:b4:14:0b:95: e1:bd:c8:6d:a8:45:18:25:32:6f:23:60:95:90:4c: 16:90:19:fe:0b:09:b0:d7:83:20:c1:cb:46:be:8f: ce:89:65:34:7d:07:c3:7c:f8:c4:d2:0d:47:88:ee: ce:90:82:60:cd:cc:39:24:6e:7c:81:63:43:4d:fa: 32:21:3d:c0:33:ac:5b:e4:8e:c3:b1:64:b1:f2:b1: c5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A2:1A:A9:DC:2F:C1:FF:6A:6D:BF:A5:A0:E1:0B:F3:52:C7:B1:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/e30d9f05-c733-4bb6-bc4c-e72705e580d4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.183.16.0/24 IPv6: 2602:fc60::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33385 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:0e:3e:d8:cd:d8:f5:54:80:23:70:e0:a7:ea:0d:7f:03:c7: 10:4f:7c:88:d9:95:3f:9f:e6:51:fe:fd:58:0a:dc:3e:ac:df: 94:6b:65:f4:d4:32:7e:c2:08:cb:91:d4:7d:92:c6:8d:5e:27: 90:cb:9c:3c:d9:20:70:77:10:e2:50:54:f5:52:96:74:c6:06: e0:c9:bf:1e:75:50:0c:51:d4:89:40:41:f8:16:99:2c:52:ae: bb:1d:a7:44:f1:08:73:8a:92:73:09:1d:55:79:ef:79:e0:91: 8b:bf:66:40:f0:f7:96:7f:83:09:c1:52:9c:6b:98:4f:0f:0f: 8c:31:cc:75:0c:f3:52:c9:12:bd:cc:d1:02:39:b4:2a:a8:c3: 54:95:a4:12:ad:2a:9b:71:c1:19:76:01:d8:3f:32:0b:d3:07: ed:73:ff:8b:a9:d2:60:0c:ca:a6:ce:31:8a:9d:76:e4:d4:51: 70:40:c4:48:b2:79:d7:d1:94:38:c8:17:45:c2:26:0a:c1:ea: 87:22:86:83:e3:f3:c9:58:55:db:98:c2:c0:47:67:30:f1:95: 48:e8:5a:64:20:b5:17:e0:68:f2:7a:82:1e:69:28:56:81:ef: 5a:38:0c:9b:b5:af:3f:17:eb:88:4b:a6:2f:0f:89:30:b2:94: b2:a3:a1:73 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEshxI7monfYW9qUmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDkwOTAwNDUyNFoXDTI3MTIxMzAxNDUyNFowLzEtMCsGA1UEAxMk ZTMwZDlmMDUtYzczMy00YmI2LWJjNGMtZTcyNzA1ZTU4MGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxA5t8972XVkzujiIksYBte3S0xkSIObp9Y2 vccdEwNrsN9/OkDdJPsXUL8Yoq4GUXx3I2UErtPA75dj0/4bXUdm+M3IWni5mAm8 Jc2Jl7wpAXkJelM4C2gZKQqJW9mM1nDjry4N1e9K0AqQmJ5l5Tae373yYfIM682d drOzaURUzGV8RE+ZrRmDXqabBUdlWONnBmba+5/AbZbc5FTJRJSuNY9P8nBUVFo3 EXF7JLQUC5XhvchtqEUYJTJvI2CVkEwWkBn+Cwmw14MgwctGvo/OiWU0fQfDfPjE 0g1HiO7OkIJgzcw5JG58gWNDTfoyIT3AM6xb5I7DsWSx8rHF1QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFE2iGqncL8H/am2/paDhC/NSx7FyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l MzBkOWYwNS1jNzMzLTRiYjYtYmM0Yy1lNzI3MDVlNTgwZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2UzMGQ5ZjA1LWM3MzMtNGJiNi1i YzRjLWU3MjcwNWU1ODBkNC9lMzBkOWYwNS1jNzMzLTRiYjYtYmM0Yy1lNzI3MDVl NTgwZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXtxAwDgQCAAIwCAMGACYC/GAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCCaTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBDj7Yzdj1VIAjcOCn6g1/A8cQ T3yI2ZU/n+ZR/v1YCtw+rN+Ua2X01DJ+wgjLkdR9ksaNXieQy5w82SBwdxDiUFT1 UpZ0xgbgyb8edVAMUdSJQEH4FpksUq67HadE8QhzipJzCR1Vee954JGLv2ZA8PeW f4MJwVKca5hPDw+MMcx1DPNSyRK9zNECObQqqMNUlaQSrSqbccEZdgHYPzIL0wft c/+LqdJgDMqmzjGKnXbk1FFwQMRIsnnX0ZQ4yBdFwiYKweqHIoaD4/PJWFXbmMLA R2cw8ZVI6FpkILUX4GjyeoIeaShWge9aOAybta8/F+uIS6YvD4kwspSyo6Fz -----END CERTIFICATE-----Generated at Fri Oct 10 14:37:25 2025 by rpki-client