$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer File: f2eccad3-9416-4755-b75e-5a77a272beb3.cer (raw, json) Hash identifier: qwRhY+UfY6XGmn9yyLtSK32G252oUi4LfcfX90QAOgc= Subject key identifier: 4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B6FEFB08DEEA4DB12E73FE380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 00:45:22 +0000 Certificate not after: Mon 10 Jan 2028 01:45:22 +0000 Subordinate resources: IP: 23.188.240.0/24 IP: 2602:fc59::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:ef:b0:8d:ee:a4:db:12:e7:3f:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 7 00:45:22 2025 GMT Not After : Jan 10 01:45:22 2028 GMT Subject: CN=f2eccad3-9416-4755-b75e-5a77a272beb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:83:5b:9b:ab:4e:fe:84:f7:52:da:ba:98:69: 88:6a:7c:ee:13:4b:84:5d:ce:9f:07:86:54:4d:66: 57:0d:53:4f:d5:15:0a:66:5b:41:83:e5:ff:64:ee: 28:48:11:c3:c7:0d:05:f6:e5:4d:a7:07:5b:3d:bd: 61:06:bd:c1:cb:91:98:bf:8e:6f:8a:a0:3b:aa:69: 9f:27:95:26:ea:15:3e:1a:c3:1a:17:ff:3a:04:25: 37:93:65:10:de:a7:20:7d:f2:24:ac:ab:83:58:9a: a6:40:35:aa:40:23:8c:c9:44:81:08:b9:5b:aa:b0: 86:5c:cd:ea:2c:ac:f1:62:b8:3c:1b:39:c3:cd:e2: 78:f7:bb:d7:f8:01:19:23:32:1a:5d:10:1b:3b:15: 85:f8:46:71:af:e3:9d:00:ba:4c:6d:cd:af:2b:78: 50:d2:20:f9:8d:8b:76:50:76:95:c2:48:d6:df:99: 02:b4:d0:9a:e8:85:ad:d5:52:19:84:8d:38:9a:19: 68:a9:a8:4a:8f:a5:80:e8:b1:0b:59:b1:cc:ed:57: 43:51:29:6f:3b:5b:3a:e9:ec:ed:bb:fe:68:87:f6: 29:8b:fc:aa:ee:a3:ed:ca:0a:90:b2:80:b1:d4:d0: d4:7a:d7:b6:e5:ef:a4:5f:dc:ef:48:a2:a4:a6:ff: f5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.188.240.0/24 IPv6: 2602:fc59::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:83:2f:75:12:8c:61:0e:78:17:a3:8c:2e:e5:d5:70:5c:a6: 82:2a:15:77:bf:98:c3:52:aa:6b:f4:19:0d:31:19:05:37:73: fd:39:e6:75:47:5b:ec:84:4d:6b:1b:f3:d5:11:2f:68:b6:45: e9:19:33:f4:e4:19:cf:79:ae:42:32:02:af:6c:70:3c:25:30: b6:82:67:c7:75:ff:30:b6:95:68:1f:2c:2b:99:ed:fa:8d:78: 0b:41:a3:6a:31:4c:c1:02:2d:50:6d:50:82:bf:4e:93:ce:0e: df:43:14:4e:70:2a:28:65:4c:39:ab:96:2f:6c:0e:0f:1f:76: 6d:9f:58:6a:2c:27:21:5b:71:46:db:d1:de:75:ba:fb:fd:d4: 61:79:6d:65:16:c0:22:05:33:0a:22:7b:0f:89:7f:cd:b3:1e: 47:76:29:8d:bd:bd:ca:42:be:13:ee:53:74:34:61:55:7a:41: 8e:a4:04:f2:62:8c:53:71:a3:88:dc:f1:0a:c4:69:a1:a8:1c: 01:7f:f2:d8:da:94:23:12:0f:92:52:bc:f5:05:97:82:4a:72: 3c:f3:7d:94:75:83:7e:b5:a2:40:73:42:73:14:fd:dd:2f:10: ec:d3:c0:b2:89:f2:c0:9f:cc:45:25:78:8c:d1:a8:3d:a2:cd: 72:5c:15:92 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEtv77CN7qTbEuc/44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAwNzAwNDUyMloXDTI4MDExMDAxNDUyMlowLzEtMCsGA1UEAxMk ZjJlY2NhZDMtOTQxNi00NzU1LWI3NWUtNWE3N2EyNzJiZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3INbm6tO/oT3Utq6mGmIanzuE0uEXc6fB4ZU TWZXDVNP1RUKZltBg+X/ZO4oSBHDxw0F9uVNpwdbPb1hBr3By5GYv45viqA7qmmf J5Um6hU+GsMaF/86BCU3k2UQ3qcgffIkrKuDWJqmQDWqQCOMyUSBCLlbqrCGXM3q LKzxYrg8GznDzeJ497vX+AEZIzIaXRAbOxWF+EZxr+OdALpMbc2vK3hQ0iD5jYt2 UHaVwkjW35kCtNCa6IWt1VIZhI04mhloqahKj6WA6LELWbHM7VdDUSlvO1s66ezt u/5oh/Ypi/yq7qPtygqQsoCx1NDUete25e+kX9zvSKKkpv/13QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFE8r4P9iC+ohJEzW4pnAQtirOuYOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m MmVjY2FkMy05NDE2LTQ3NTUtYjc1ZS01YTc3YTI3MmJlYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2YyZWNjYWQzLTk0MTYtNDc1NS1i NzVlLTVhNzdhMjcyYmViMy9mMmVjY2FkMy05NDE2LTQ3NTUtYjc1ZS01YTc3YTI3 MmJlYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXvPAwDgQCAAIwCAMGACYC/FkAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIGDL3USjGEOeBejjC7l1XBcpoIqFXe/mMNSqmv0GQ0xGQU3c/055nVHW+yETWsb 89URL2i2RekZM/TkGc95rkIyAq9scDwlMLaCZ8d1/zC2lWgfLCuZ7fqNeAtBo2ox TMECLVBtUIK/TpPODt9DFE5wKihlTDmrli9sDg8fdm2fWGosJyFbcUbb0d51uvv9 1GF5bWUWwCIFMwoiew+Jf82zHkd2KY29vcpCvhPuU3Q0YVV6QY6kBPJijFNxo4jc 8QrEaaGoHAF/8tjalCMSD5JSvPUFl4JKcjzzfZR1g361okBzQnMU/d0vEOzTwLKJ 8sCfzEUleIzRqD2izXJcFZI= -----END CERTIFICATE-----Generated at Fri Oct 10 14:44:52 2025 by rpki-client