$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0.cer File: 0d810a50-f853-4d35-a6cd-a6ec483a37d0.cer (raw, json) Hash identifier: ugBfOYyuiAjxGfILYEDs7HgBxFw4/Soqm4ppolQaRb0= Subject key identifier: 1A:5C:D1:C5:20:BB:F6:4F:1F:2E:0D:62:6F:1B:18:69:6C:04:0E:B8 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584DFB57352114010B4396E94580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0/0d810a50-f853-4d35-a6cd-a6ec483a37d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 May 2026 08:45:11 +0000 Certificate not after: Wed 30 Aug 2028 08:45:11 +0000 Subordinate resources: AS: 953 AS: 1020 AS: 13347 IP: 199.7.248.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:57:35:21:14:01:0b:43:96:e9:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 28 08:45:11 2026 GMT Not After : Aug 30 08:45:11 2028 GMT Subject: CN=0d810a50-f853-4d35-a6cd-a6ec483a37d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:46:84:18:19:67:67:dc:f5:66:ca:fd:25:e3: cb:96:e3:ec:d1:e8:a5:79:1f:f1:39:e5:c0:4d:c5: 5a:4e:7e:4c:cd:1c:92:44:26:81:b3:8e:d9:25:7a: ee:8e:08:83:17:24:00:81:a1:fa:9e:bf:49:04:12: c7:3a:8b:cd:e3:1a:23:18:69:91:00:9c:3c:bd:a4: d3:c3:b8:cd:b3:e4:70:94:d8:1c:41:6c:12:50:f8: f2:d0:6b:c2:b5:bc:fd:af:c0:bb:03:7c:ca:27:75: d2:53:15:7c:82:0a:25:c5:24:dc:59:8c:e2:1c:83: f4:53:cc:3f:95:8c:66:ec:7d:29:a5:de:62:3b:a4: 7e:7f:63:23:c3:a8:1a:29:a6:ab:b2:c7:1c:0a:43: f1:70:2a:d9:62:9c:86:8e:73:d7:5f:a5:2f:f8:5c: e1:25:fc:de:80:39:6e:f6:fd:88:04:63:51:8e:a5: 88:0d:06:2c:a9:0f:a3:7b:fc:e0:8d:ed:f5:11:1d: 5f:e8:64:d0:79:db:df:9d:ae:38:09:3a:24:cc:2e: 37:b9:43:ff:e2:52:c4:88:3d:8d:80:8e:27:a6:ce: 08:03:7e:84:e1:35:bc:5e:cf:0b:76:a3:a0:40:77: be:e5:da:59:f3:26:f9:6c:02:02:65:84:05:01:cc: 02:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5C:D1:C5:20:BB:F6:4F:1F:2E:0D:62:6F:1B:18:69:6C:04:0E:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d810a50-f853-4d35-a6cd-a6ec483a37d0/0d810a50-f853-4d35-a6cd-a6ec483a37d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.7.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 953 1020 13347 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e0:e6:6f:1f:db:34:6f:db:f6:d5:65:91:d5:0a:6a:05:b2: 74:3f:9d:3f:a2:3f:e8:0e:ab:8a:68:91:3e:7f:82:f5:1c:4e: 78:91:69:3b:01:20:4c:09:e5:44:ed:cb:92:13:b5:d5:f5:03: 49:d7:24:39:a0:b5:45:ad:68:36:f4:90:2e:9a:20:fc:2e:ed: 5f:94:15:cc:c4:e6:53:96:e2:40:f1:9b:36:1d:66:ba:06:84: 80:e0:7e:bb:e6:14:a7:4b:86:7e:5c:c2:ee:68:99:bb:a2:66: 4f:97:67:43:69:86:89:c4:a2:30:c8:01:f8:5c:98:3a:30:a0: e5:e8:02:f4:8b:c6:b1:81:9b:bc:20:fc:4c:90:4a:92:1a:5e: 49:4a:b6:d4:f4:77:47:d4:77:82:21:a5:a9:72:02:9c:b5:65: 70:4e:c1:af:0e:dc:30:d9:4d:1d:86:bb:48:48:9e:01:64:88: ae:2b:94:99:2a:42:55:79:d8:bd:af:84:0d:c0:de:94:78:84: db:60:39:f9:d1:ed:f8:16:cb:44:b0:18:dd:69:ee:7e:b0:71: f3:97:c3:72:2e:8d:26:59:84:0f:61:12:39:bb:a5:5d:dc:a8: 76:53:d9:eb:43:14:9c:de:6c:52:bb:68:dc:fd:90:7a:8f:96: ab:35:0f:1d -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWE37VzUhFAELQ5bpRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDUyODA4NDUxMVoXDTI4MDgzMDA4NDUxMVowLzEtMCsGA1UEAxMk MGQ4MTBhNTAtZjg1My00ZDM1LWE2Y2QtYTZlYzQ4M2EzN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUaEGBlnZ9z1Zsr9JePLluPs0eileR/xOeXA TcVaTn5MzRySRCaBs47ZJXrujgiDFyQAgaH6nr9JBBLHOovN4xojGGmRAJw8vaTT w7jNs+RwlNgcQWwSUPjy0GvCtbz9r8C7A3zKJ3XSUxV8ggolxSTcWYziHIP0U8w/ lYxm7H0ppd5iO6R+f2Mjw6gaKaarssccCkPxcCrZYpyGjnPXX6Uv+FzhJfzegDlu 9v2IBGNRjqWIDQYsqQ+je/zgje31ER1f6GTQedvfna44CTokzC43uUP/4lLEiD2N gI4nps4IA36E4TW8Xs8LdqOgQHe+5dpZ8yb5bAICZYQFAcwCHQIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFBpc0cUgu/ZPHy4NYm8bGGlsBA64MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w ZDgxMGE1MC1mODUzLTRkMzUtYTZjZC1hNmVjNDgzYTM3ZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzBkODEwYTUwLWY4NTMtNGQzNS1h NmNkLWE2ZWM0ODNhMzdkMC8wZDgxMGE1MC1mODUzLTRkMzUtYTZjZC1hNmVjNDgz YTM3ZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHB/gwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAIC A7kCAgP8AgI0IzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBW4OZvH9s0b9v21WWR1QpqBbJ0P50/oj/oDquK aJE+f4L1HE54kWk7ASBMCeVE7cuSE7XV9QNJ1yQ5oLVFrWg29JAumiD8Lu1flBXM xOZTluJA8Zs2HWa6BoSA4H675hSnS4Z+XMLuaJm7omZPl2dDaYaJxKIwyAH4XJg6 MKDl6AL0i8axgZu8IPxMkEqSGl5JSrbU9HdH1HeCIaWpcgKctWVwTsGvDtww2U0d hrtISJ4BZIiuK5SZKkJVedi9r4QNwN6UeITbYDn50e34FstEsBjdae5+sHHzl8Ny Lo0mWYQPYRI5u6Vd3Kh2U9nrQxSc3mxSu2jc/ZB6j5arNQ8d -----END CERTIFICATE-----Generated at Wed Jun 3 08:25:19 2026 by rpki-client