$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68.cer File: 47af085d-4107-4581-aabf-ee9ca34b1b68.cer (raw, json) Hash identifier: /3s5GPCyQvgtKQel1IRA5CTE024DYlll+ypIzvG7IIw= Subject key identifier: 00:1C:A0:17:D6:3C:7A:11:91:17:4F:37:39:8C:97:C3:85:48:B8:A5 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F5E5B35925E1EE945815E4AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/47af085d-4107-4581-aabf-ee9ca34b1b68.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 12:45:12 +0000 Certificate not after: Thu 04 Jan 2029 13:45:12 +0000 Subordinate resources: IP: 192.34.70.0/24 IP: 198.163.144.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:5b:35:92:5e:1e:e9:45:81:5e:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 2 12:45:12 2026 GMT Not After : Jan 4 13:45:12 2029 GMT Subject: CN=47af085d-4107-4581-aabf-ee9ca34b1b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a9:f0:8c:6a:bf:08:67:ff:c2:38:3a:f0:79: 28:ff:36:2e:a8:2f:ca:b3:81:80:6c:f2:1d:dd:f2: 92:f2:2b:ae:ad:d8:8c:f6:68:b6:b5:52:c9:69:d7: d6:d5:08:a0:f3:65:0b:9b:43:45:98:82:c4:25:ef: 8d:10:d9:a0:90:4d:b6:80:22:1b:98:bb:1d:ff:b0: 75:e1:77:d1:b0:04:6d:eb:7a:f7:3d:8f:a7:d7:e5: d6:7b:8a:3b:d1:28:78:dc:45:64:eb:6b:4b:a0:af: de:cb:4c:d6:0c:a4:c2:90:09:f8:8b:04:14:43:be: 1c:e5:11:76:f3:eb:36:16:d8:b2:3f:aa:e3:2e:b9: 76:a9:16:16:cb:2f:e2:74:90:98:cd:87:e6:50:2f: 7e:0e:0e:d8:76:0a:a8:e0:6c:ce:71:33:e4:b6:fd: 84:e1:2b:cc:6b:98:ec:79:9b:c5:29:08:59:8f:ca: a7:e8:be:68:db:79:57:41:ce:36:63:58:3a:5a:a6: 39:0c:6f:33:87:74:f1:49:8f:83:38:10:c3:09:ea: f3:e6:a6:92:a8:50:41:87:95:05:1a:ff:80:f7:53: 99:14:ff:7d:98:c0:80:7a:d7:66:8e:75:32:66:d8: 25:cd:34:85:77:1d:af:6e:76:7b:cb:cd:b8:08:0d: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1C:A0:17:D6:3C:7A:11:91:17:4F:37:39:8C:97:C3:85:48:B8:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/47af085d-4107-4581-aabf-ee9ca34b1b68.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.34.70.0/24 198.163.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a6:c3:18:b9:c1:8c:1e:cc:c0:ad:a0:ea:55:bf:05:4d:53: 98:fb:4e:e2:0c:76:55:c9:de:21:82:07:c0:60:63:75:d7:3a: 99:c7:d4:60:a9:96:0c:e6:6f:8b:fe:53:7d:fd:6f:3a:40:cc: 72:87:f2:21:f6:20:0e:a4:17:3b:89:a2:61:bd:29:44:cf:d4: d7:e3:e3:21:bb:03:44:12:21:ad:a4:79:9d:99:9c:46:52:9e: 9c:6d:9e:7a:d0:a0:b8:ba:a9:30:16:53:dc:a5:98:29:fb:cc: d3:ee:1b:fa:c5:d5:54:eb:5b:fe:5c:39:4f:e2:c8:5f:09:0e: 99:48:17:fe:d9:86:3c:bb:e5:5c:92:c3:17:9d:38:d6:88:98: 83:b9:6a:ee:d9:0a:8b:55:fa:b8:92:a5:2f:53:27:dc:be:ef: e2:57:30:30:02:2b:25:95:df:8c:28:25:ea:5f:47:46:23:9d: 6b:54:a9:39:b2:32:13:d2:9f:42:e2:4c:f8:ca:2b:84:a6:a6: f0:4f:4c:e9:35:61:93:c4:69:d8:8b:f2:42:1a:2d:18:02:73: 01:cd:10:b3:f6:80:54:77:0a:70:5a:29:ab:b7:ac:53:99:db: d0:b7:46:b3:ae:d3:ef:c3:c7:df:7c:1d:a4:3a:46:d8:01:15: 57:75:f4:10 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE9eWzWSXh7pRYFeSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MTAwMjEyNDUxMloXDTI5MDEwNDEzNDUxMlowLzEtMCsGA1UEAxMk NDdhZjA4NWQtNDEwNy00NTgxLWFhYmYtZWU5Y2EzNGIxYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qnwjGq/CGf/wjg68Hko/zYuqC/Ks4GAbPId 3fKS8iuurdiM9mi2tVLJadfW1Qig82ULm0NFmILEJe+NENmgkE22gCIbmLsd/7B1 4XfRsARt63r3PY+n1+XWe4o70Sh43EVk62tLoK/ey0zWDKTCkAn4iwQUQ74c5RF2 8+s2FtiyP6rjLrl2qRYWyy/idJCYzYfmUC9+Dg7Ydgqo4GzOcTPktv2E4SvMa5js eZvFKQhZj8qn6L5o23lXQc42Y1g6WqY5DG8zh3TxSY+DOBDDCerz5qaSqFBBh5UF Gv+A91OZFP99mMCAetdmjnUyZtglzTSFdx2vbnZ7y824CA1B1wIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFAAcoBfWPHoRkRdPNzmMl8OFSLilMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 N2FmMDg1ZC00MTA3LTQ1ODEtYWFiZi1lZTljYTM0YjFiNjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQ3YWYwODVkLTQxMDctNDU4MS1h YWJmLWVlOWNhMzRiMWI2OC80N2FmMDg1ZC00MTA3LTQ1ODEtYWFiZi1lZTljYTM0 YjFiNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAIkYDBAPGo5AwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf6bDGLnBjB7M wK2g6lW/BU1TmPtO4gx2VcneIYIHwGBjddc6mcfUYKmWDOZvi/5Tff1vOkDMcofy IfYgDqQXO4miYb0pRM/U1+PjIbsDRBIhraR5nZmcRlKenG2eetCguLqpMBZT3KWY KfvM0+4b+sXVVOtb/lw5T+LIXwkOmUgX/tmGPLvlXJLDF5041oiYg7lq7tkKi1X6 uJKlL1Mn3L7v4lcwMAIrJZXfjCgl6l9HRiOda1SpObIyE9KfQuJM+MorhKam8E9M 6TVhk8Rp2IvyQhotGAJzAc0Qs/aAVHcKcFopq7esU5nb0LdGs67T78PH33wdpDpG 2AEVV3X0EA== -----END CERTIFICATE-----Generated at Thu Oct 8 20:56:16 2026 by rpki-client