$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0.cer File: 0d810a50-f853-4d35-a6cd-a6ec483a37d0.cer (raw, json) Hash identifier: Hiy0+ZwF23F9ewCOEQ7U5csvLMsnP+47fmbCGjldvb8= Subject key identifier: 1A:5C:D1:C5:20:BB:F6:4F:1F:2E:0D:62:6F:1B:18:69:6C:04:0E:B8 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F5BA0EF2BC383B4AB6332C048 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0/0d810a50-f853-4d35-a6cd-a6ec483a37d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 13:18:16 +0000 Certificate not after: Wed 30 Aug 2028 08:45:11 +0000 Subordinate resources: AS: 953 AS: 1020 AS: 13347 IP: 199.7.248.0/22 IP: 199.204.120.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:a0:ef:2b:c3:83:b4:ab:63:32:c0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 1 13:18:16 2026 GMT Not After : Aug 30 08:45:11 2028 GMT Subject: CN=0d810a50-f853-4d35-a6cd-a6ec483a37d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:46:84:18:19:67:67:dc:f5:66:ca:fd:25:e3: cb:96:e3:ec:d1:e8:a5:79:1f:f1:39:e5:c0:4d:c5: 5a:4e:7e:4c:cd:1c:92:44:26:81:b3:8e:d9:25:7a: ee:8e:08:83:17:24:00:81:a1:fa:9e:bf:49:04:12: c7:3a:8b:cd:e3:1a:23:18:69:91:00:9c:3c:bd:a4: d3:c3:b8:cd:b3:e4:70:94:d8:1c:41:6c:12:50:f8: f2:d0:6b:c2:b5:bc:fd:af:c0:bb:03:7c:ca:27:75: d2:53:15:7c:82:0a:25:c5:24:dc:59:8c:e2:1c:83: f4:53:cc:3f:95:8c:66:ec:7d:29:a5:de:62:3b:a4: 7e:7f:63:23:c3:a8:1a:29:a6:ab:b2:c7:1c:0a:43: f1:70:2a:d9:62:9c:86:8e:73:d7:5f:a5:2f:f8:5c: e1:25:fc:de:80:39:6e:f6:fd:88:04:63:51:8e:a5: 88:0d:06:2c:a9:0f:a3:7b:fc:e0:8d:ed:f5:11:1d: 5f:e8:64:d0:79:db:df:9d:ae:38:09:3a:24:cc:2e: 37:b9:43:ff:e2:52:c4:88:3d:8d:80:8e:27:a6:ce: 08:03:7e:84:e1:35:bc:5e:cf:0b:76:a3:a0:40:77: be:e5:da:59:f3:26:f9:6c:02:02:65:84:05:01:cc: 02:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5C:D1:C5:20:BB:F6:4F:1F:2E:0D:62:6F:1B:18:69:6C:04:0E:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0/0d810a50-f853-4d35-a6cd-a6ec483a37d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.7.248.0/22 199.204.120.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 953 1020 13347 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b7:38:cf:2a:94:50:12:c6:2b:f7:ba:8a:06:71:58:2f:63: 95:f7:f2:34:af:3c:d2:18:34:fd:76:0d:5f:87:f0:0e:28:26: c0:64:45:de:49:11:d1:88:d6:04:35:b4:65:1d:41:2f:98:ca: e9:43:5e:60:e6:dc:f7:f7:19:53:bf:74:4b:c1:ba:dc:99:13: 72:1d:a3:5f:39:e8:7a:e0:d9:9d:e0:d3:1a:07:9d:da:51:ab: 91:e9:6a:7d:44:39:fd:4a:73:04:4a:8f:49:fd:4c:b3:bf:03: a7:ae:50:51:a1:6a:8d:63:ce:e8:7d:d4:c2:02:89:a6:c0:75: ba:cf:b7:14:af:24:7d:ec:05:db:df:32:e7:74:05:47:ce:56: 89:eb:39:03:c0:ba:e7:d8:1a:13:f3:5e:2a:45:fe:10:62:15: ee:8a:a6:03:1f:b0:97:46:57:4c:8f:bc:8c:e2:9a:af:f1:14: 58:3c:b6:c0:ce:19:60:fe:43:93:25:c0:7c:1d:e4:46:9c:5a: a7:72:01:bc:e4:b4:2a:55:82:6d:f9:8a:3b:9b:92:71:99:60: 6c:9b:91:7b:3f:d9:c6:f8:c0:25:2a:62:d3:1c:ec:90:02:50: 46:f9:bc:68:b3:84:ef:51:1f:d2:b2:fb:eb:e2:db:0a:88:5e: e2:85:26:b8 -----BEGIN CERTIFICATE----- MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWE9boO8rw4O0q2MywEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MTAwMTEzMTgxNloXDTI4MDgzMDA4NDUxMVowLzEtMCsGA1UEAxMk MGQ4MTBhNTAtZjg1My00ZDM1LWE2Y2QtYTZlYzQ4M2EzN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUaEGBlnZ9z1Zsr9JePLluPs0eileR/xOeXA TcVaTn5MzRySRCaBs47ZJXrujgiDFyQAgaH6nr9JBBLHOovN4xojGGmRAJw8vaTT w7jNs+RwlNgcQWwSUPjy0GvCtbz9r8C7A3zKJ3XSUxV8ggolxSTcWYziHIP0U8w/ lYxm7H0ppd5iO6R+f2Mjw6gaKaarssccCkPxcCrZYpyGjnPXX6Uv+FzhJfzegDlu 9v2IBGNRjqWIDQYsqQ+je/zgje31ER1f6GTQedvfna44CTokzC43uUP/4lLEiD2N gI4nps4IA36E4TW8Xs8LdqOgQHe+5dpZ8yb5bAICZYQFAcwCHQIDAQABo4IEKDCC BCQwHQYDVR0OBBYEFBpc0cUgu/ZPHy4NYm8bGGlsBA64MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w ZDgxMGE1MC1mODUzLTRkMzUtYTZjZC1hNmVjNDgzYTM3ZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzBkODEwYTUwLWY4NTMtNGQzNS1h NmNkLWE2ZWM0ODNhMzdkMC8wZDgxMGE1MC1mODUzLTRkMzUtYTZjZC1hNmVjNDgz YTM3ZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHB/gDBALHzHgwIQYIKwYBBQUHAQgBAf8EEjAQ oA4wDAICA7kCAgP8AgI0IzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAStzjPKpRQEsYr97qKBnFYL2OV9/I0 rzzSGDT9dg1fh/AOKCbAZEXeSRHRiNYENbRlHUEvmMrpQ15g5tz39xlTv3RLwbrc mRNyHaNfOeh64Nmd4NMaB53aUauR6Wp9RDn9SnMESo9J/UyzvwOnrlBRoWqNY87o fdTCAommwHW6z7cUryR97AXb3zLndAVHzlaJ6zkDwLrn2BoT814qRf4QYhXuiqYD H7CXRldMj7yM4pqv8RRYPLbAzhlg/kOTJcB8HeRGnFqncgG85LQqVYJt+Yo7m5Jx mWBsm5F7P9nG+MAlKmLTHOyQAlBG+bxos4TvUR/Ssvvr4tsKiF7ihSa4 -----END CERTIFICATE-----Generated at Thu Oct 22 16:08:03 2026 by rpki-client