$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer File: 4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer (raw, json) Hash identifier: l/M2TMKuQA+TmBeRlSp7fuf3vLMmb0O/r6XqGv2JFu8= Subject key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F5C6E64FBFAE6F7EB04680980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 20:12:15 +0000 Certificate not after: Thu 22 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 63072 IP: 23.135.176.0/24 IP: 162.253.244.0/22 IP: 204.154.156.0/22 IP: 2605:1740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:6e:64:fb:fa:e6:f7:eb:04:68:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 1 20:12:15 2026 GMT Not After : Jun 22 12:45:22 2028 GMT Subject: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:30:10:1d:6c:30:dd:7f:c7:86:bc:77:77: f6:3f:ae:d5:30:07:43:c7:ab:8b:bc:b8:22:e8:3c: 41:c8:6d:3b:eb:0d:bf:ea:47:a5:1c:1e:f6:c8:f0: 99:49:f3:6a:fb:c0:0a:de:16:9e:52:5a:c1:4d:b2: da:bc:fa:0d:d4:86:be:e0:1e:d3:96:02:39:b3:16: 74:56:c5:0c:60:0a:79:d6:0a:7c:63:b9:15:7c:ce: 66:97:72:95:11:3d:3d:50:10:4b:6e:34:68:ed:6d: 82:fa:40:92:e6:37:6d:4b:90:6c:1d:28:7e:63:e7: c8:98:3a:ab:e7:03:56:5b:b6:a0:f1:7b:06:1a:66: 30:19:7f:99:38:4c:51:12:0c:e7:eb:5e:bd:b8:3c: e5:b5:80:ab:c5:fe:e1:fb:e3:8c:ec:cc:0e:d6:86: 06:3d:a7:ba:78:cc:e6:75:21:1d:7e:85:5d:d8:ac: cd:30:d9:17:4f:fc:64:48:34:47:e5:a5:ed:84:59: 93:52:38:5f:4c:3f:b6:85:04:4c:ba:bf:7b:f6:02: 68:04:ca:53:99:d2:5f:e1:49:9a:0d:40:6e:17:bb: 2e:08:e5:5e:61:4d:b3:84:a8:7f:29:41:02:13:87: 64:60:f5:52:d6:fc:29:47:b4:8a:9c:b2:68:72:7d: 74:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.135.176.0/24 162.253.244.0/22 204.154.156.0/22 IPv6: 2605:1740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63072 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:52:c2:1b:d7:c4:62:25:54:5c:cf:c5:e0:88:7d:41:a3:96: 85:99:b6:37:86:69:54:e2:46:cb:c0:a3:25:df:dc:da:cd:d6: c9:7b:8a:0e:33:75:5e:f0:98:89:09:b2:1b:b7:9f:63:75:18: bd:1f:87:37:52:05:93:62:d6:7f:3c:a6:d1:06:60:b4:dc:d4: 12:57:52:55:84:42:70:b8:8d:1f:1d:39:76:9f:f4:d9:fd:c6: 56:8f:5c:32:60:45:95:7c:9f:5f:8b:d7:70:76:58:d7:62:6f: 16:ac:52:91:f2:18:71:3e:a0:c1:77:da:08:95:5c:4b:64:f5: e7:e5:e3:dc:d9:c3:73:86:f6:05:0d:29:f0:5f:d9:f8:ac:fc: ce:c7:9a:4f:74:67:90:c6:0c:47:d3:7b:0c:69:3b:2b:15:e7: ca:66:0f:74:4d:f9:0a:da:e8:3f:f0:03:db:9a:ab:dd:a9:08: e2:f3:74:65:0c:e3:b6:cf:a9:26:5e:a5:a7:70:39:86:8f:12: 2b:d5:88:4e:a8:37:d0:0c:7d:5b:82:fa:b3:7b:6e:99:36:5f: bf:c6:1f:d6:40:70:bd:22:57:e1:f7:b2:f8:21:3f:09:90:36: 7f:41:5d:6b:20:65:fd:a9:ca:0f:0b:6c:2e:91:06:d6:55:1b: b8:dc:93:bd -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE9cbmT7+ub36wRoCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MTAwMTIwMTIxNVoXDTI4MDYyMjEyNDUyMlowLzEtMCsGA1UEAxMk NDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThjM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P0wEB1sMN1/x4a8d3f2P67VMAdDx6uLvLgi 6DxByG076w2/6kelHB72yPCZSfNq+8AK3haeUlrBTbLavPoN1Ia+4B7TlgI5sxZ0 VsUMYAp51gp8Y7kVfM5ml3KVET09UBBLbjRo7W2C+kCS5jdtS5BsHSh+Y+fImDqr 5wNWW7ag8XsGGmYwGX+ZOExREgzn6169uDzltYCrxf7h++OM7MwO1oYGPae6eMzm dSEdfoVd2KzNMNkXT/xkSDRH5aXthFmTUjhfTD+2hQRMur979gJoBMpTmdJf4Uma DUBuF7suCOVeYU2zhKh/KUECE4dkYPVS1vwpR7SKnLJocn10RwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFNkpuObM1CNDRkeJM5dKJHaZjKtyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQwMDlkOTNhLWQ5ZTctNGViNy05 NGNkLWZmZWMwNjE4YzNlYy80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYx OGMzZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXh7ADBAKi/fQDBALMmpwwDQQCAAIwBwMFACYF F0AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPZgMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADdSwhvXxGIl VFzPxeCIfUGjloWZtjeGaVTiRsvAoyXf3NrN1sl7ig4zdV7wmIkJshu3n2N1GL0f hzdSBZNi1n88ptEGYLTc1BJXUlWEQnC4jR8dOXaf9Nn9xlaPXDJgRZV8n1+L13B2 WNdibxasUpHyGHE+oMF32giVXEtk9efl49zZw3OG9gUNKfBf2fis/M7Hmk90Z5DG DEfTewxpOysV58pmD3RN+Qra6D/wA9uaq92pCOLzdGUM47bPqSZepadwOYaPEivV iE6oN9AMfVuC+rN7bpk2X7/GH9ZAcL0iV+H3svghPwmQNn9BXWsgZf2pyg8LbC6R BtZVG7jck70= -----END CERTIFICATE-----Generated at Thu Oct 8 10:42:25 2026 by rpki-client