$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862.cer File: 44b5f84d-3917-4ce9-99a1-9bded53bb862.cer (raw, json) Hash identifier: 4kKqgKO1KeB+SrKbWnGaIljb7qI/P+7MQnVCR/wcerI= Subject key identifier: F6:34:8E:21:9E:BD:32:34:08:9F:F6:DA:D3:D3:89:90:5B:84:AE:81 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D090AAFDFAAC97DBB2DD399C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Mar 2026 13:45:22 +0000 Certificate not after: Sun 04 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 398841 IP: 64.190.206.0/24 IP: 66.179.103.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:0a:af:df:aa:c9:7d:bb:2d:d3:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 2 13:45:22 2026 GMT Not After : Jun 4 12:45:22 2028 GMT Subject: CN=44b5f84d-3917-4ce9-99a1-9bded53bb862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4b:bf:ac:34:ee:e9:c7:84:40:3e:01:06:cc: d3:d4:73:a4:cc:c9:ac:cc:ae:87:4f:c9:7e:8c:38: 12:69:b6:17:57:6a:3b:07:34:fb:b8:a2:60:ff:ef: 43:1e:fb:26:ba:17:89:66:a1:bf:84:70:9b:b2:ff: 63:1d:bc:e2:f8:b1:b0:76:d0:0d:db:04:52:47:29: 8c:b5:02:25:b5:68:c8:1e:40:1b:0e:c6:e4:e0:4d: 21:68:ca:93:b0:46:6c:7a:2b:76:79:fd:f5:bf:26: 16:7f:e5:0d:9a:02:9f:c5:fd:05:45:ba:96:43:90: b6:54:52:12:1e:d8:37:0e:73:1b:49:45:26:13:7d: 94:1d:3b:cf:5c:63:78:fc:cb:54:d0:a5:6f:47:c5: db:88:c2:e9:84:fc:53:a8:96:97:bd:8f:78:ca:6d: e8:00:d0:44:b2:ca:aa:64:e2:76:af:24:d5:4c:62: a8:d6:d2:05:0a:b2:40:05:d2:b0:26:08:46:ce:0f: ab:83:00:4b:53:9b:d3:5d:98:e7:cd:c1:6d:72:55: ff:ea:6e:2b:f9:51:a9:25:9f:da:21:03:81:cd:1d: 86:c5:1d:5f:52:ac:59:f2:0e:7f:b9:bb:9b:d0:38: eb:dd:5e:2a:67:84:3f:50:1d:ff:92:f0:c2:fa:ca: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:34:8E:21:9E:BD:32:34:08:9F:F6:DA:D3:D3:89:90:5B:84:AE:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.190.206.0/24 66.179.103.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398841 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:41:81:31:3a:95:c9:40:df:8e:b9:58:4f:db:c4:2f:8c:d2: 4d:1a:2e:b8:e9:ba:2f:dd:fa:3e:6f:5d:0e:48:f8:b4:67:ed: 9a:ea:3e:66:a4:13:89:6f:70:50:75:5c:79:a1:5c:33:54:e3: f3:0f:e9:86:c1:eb:d4:1c:a3:5e:e8:e7:73:7d:91:50:48:f5: f1:ef:16:4a:bf:42:3a:37:1c:81:0f:4b:56:9d:27:3a:ab:f7: 7a:38:d7:60:a3:51:51:55:d3:33:3f:b9:06:73:a1:5b:05:f1: a3:47:f8:1d:18:fe:d1:87:8c:24:f7:1e:7e:18:bd:7b:0d:f4: db:46:fd:eb:a7:43:08:9d:3b:c4:c9:81:52:a6:5e:ff:5f:ea: c2:f6:23:a1:68:c3:37:dd:36:85:b3:d2:4d:03:88:f5:a4:ad: 47:0c:95:53:9c:d6:61:7a:8e:e4:e1:f5:4e:3b:e0:94:b4:28: 04:58:bc:10:60:38:11:33:a1:1f:7a:1a:26:89:22:ff:c6:cd: c7:51:9f:aa:f8:2b:e7:47:28:9e:ce:5d:da:1d:ff:c2:33:c1: 3e:b8:07:90:1e:3c:9c:18:17:d7:4a:c4:ef:92:4e:69:fe:7e: 6a:0a:1c:5d:78:04:5d:bc:da:d2:b7:79:27:33:23:dc:f6:31: cd:c6:27:fb -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE0JCq/fqsl9uy3TmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDMwMjEzNDUyMloXDTI4MDYwNDEyNDUyMlowLzEtMCsGA1UEAxMk NDRiNWY4NGQtMzkxNy00Y2U5LTk5YTEtOWJkZWQ1M2JiODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Eu/rDTu6ceEQD4BBszT1HOkzMmszK6HT8l+ jDgSabYXV2o7BzT7uKJg/+9DHvsmuheJZqG/hHCbsv9jHbzi+LGwdtAN2wRSRymM tQIltWjIHkAbDsbk4E0haMqTsEZseit2ef31vyYWf+UNmgKfxf0FRbqWQ5C2VFIS Htg3DnMbSUUmE32UHTvPXGN4/MtU0KVvR8XbiMLphPxTqJaXvY94ym3oANBEssqq ZOJ2ryTVTGKo1tIFCrJABdKwJghGzg+rgwBLU5vTXZjnzcFtclX/6m4r+VGpJZ/a IQOBzR2GxR1fUqxZ8g5/ubub0Djr3V4qZ4Q/UB3/kvDC+spRnQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFPY0jiGevTI0CJ/22tPTiZBbhK6BMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 NGI1Zjg0ZC0zOTE3LTRjZTktOTlhMS05YmRlZDUzYmI4NjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQ0YjVmODRkLTM5MTctNGNlOS05 OWExLTliZGVkNTNiYjg2Mi80NGI1Zjg0ZC0zOTE3LTRjZTktOTlhMS05YmRlZDUz YmI4NjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABAvs4DBABCs2cwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhX5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFhBgTE6lclA3465WE/bxC+M0k0aLrjpui/d+j5v XQ5I+LRn7ZrqPmakE4lvcFB1XHmhXDNU4/MP6YbB69Qco17o53N9kVBI9fHvFkq/ Qjo3HIEPS1adJzqr93o412CjUVFV0zM/uQZzoVsF8aNH+B0Y/tGHjCT3Hn4YvXsN 9NtG/eunQwidO8TJgVKmXv9f6sL2I6FowzfdNoWz0k0DiPWkrUcMlVOc1mF6juTh 9U474JS0KARYvBBgOBEzoR96GiaJIv/GzcdRn6r4K+dHKJ7OXdod/8IzwT64B5Ae PJwYF9dKxO+STmn+fmoKHF14BF282tK3eSczI9z2Mc3GJ/s= -----END CERTIFICATE-----Generated at Tue Mar 24 23:51:40 2026 by rpki-client