$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b7251ff-7bfc-4dbb-9342-fd912a6d425b.cer File: 6b7251ff-7bfc-4dbb-9342-fd912a6d425b.cer (raw, json) Hash identifier: 08nCCn95dB/zCDkjqLFGD+udarvtvOZt8y9PfB/Ibj0= Subject key identifier: 7F:88:CD:A7:C5:33:62:D2:02:2C:D3:12:0B:74:DD:17:B3:7A:9C:00 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D650D6F5A563358626E8C9AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b7251ff-7bfc-4dbb-9342-fd912a6d425b/6b7251ff-7bfc-4dbb-9342-fd912a6d425b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b7251ff-7bfc-4dbb-9342-fd912a6d425b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 04 Apr 2026 12:45:17 +0000 Certificate not after: Fri 07 Jul 2028 12:45:17 +0000 Subordinate resources: IP: 136.175.60.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:0d:6f:5a:56:33:58:62:6e:8c:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 4 12:45:17 2026 GMT Not After : Jul 7 12:45:17 2028 GMT Subject: CN=6b7251ff-7bfc-4dbb-9342-fd912a6d425b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:f7:26:24:bb:df:ce:88:cb:95:a3:12:60: 4a:5e:ea:d0:10:ad:39:cf:67:19:14:34:a1:f0:07: 55:e3:3e:a9:6e:0a:49:5a:26:9c:6e:0c:aa:00:5b: 61:82:aa:87:00:61:7e:dd:db:15:9a:0d:3e:b4:a2: b2:38:57:1e:d2:d4:6f:20:e3:8c:3c:08:01:9c:43: 6f:87:93:d4:42:3e:3c:26:b8:85:3b:1b:1f:45:ed: 41:51:03:a3:46:d7:cc:50:31:67:36:f1:55:9d:de: cb:93:31:3c:b3:7d:ef:01:ea:4e:00:f7:c3:4b:54: 8a:45:b9:b0:33:b5:58:bb:75:5c:47:7c:b3:57:ed: 25:00:91:48:d3:d9:05:f2:aa:d4:5a:cb:64:f3:6b: 01:ec:e4:7c:ca:1c:69:89:97:2c:d0:10:88:e3:57: 25:87:33:1c:ca:25:77:cf:06:be:7f:cf:23:16:29: dd:f2:c7:46:49:86:30:9f:96:a0:61:b6:ea:39:fd: 08:82:c2:f8:3b:2b:02:f6:dd:b4:69:8e:12:02:dd: 42:f2:fb:54:e2:a1:10:21:9e:90:2c:c0:e5:bf:fb: cd:ae:5a:7f:99:25:54:15:1b:08:79:62:46:bd:f7: 91:a1:86:cb:f9:3a:e5:6f:65:79:bd:38:1a:1b:2f: 01:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:88:CD:A7:C5:33:62:D2:02:2C:D3:12:0B:74:DD:17:B3:7A:9C:00 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b7251ff-7bfc-4dbb-9342-fd912a6d425b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b7251ff-7bfc-4dbb-9342-fd912a6d425b/6b7251ff-7bfc-4dbb-9342-fd912a6d425b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 136.175.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:52:b7:50:6b:04:dd:a1:4c:a5:b3:6b:57:79:23:21:2b:e0: ad:00:64:45:31:91:f3:3c:11:f1:e1:35:26:57:00:eb:08:fe: 34:6d:6f:38:34:48:81:a0:28:0c:9a:33:c1:87:3b:c9:48:d7: de:e4:2a:fe:f4:45:5e:44:71:69:51:67:34:ad:6e:a5:ce:f1: 96:19:88:d7:7a:cd:91:30:5d:8c:16:dd:f0:27:60:75:4a:7b: 98:25:13:2e:4c:72:2f:26:7c:87:80:0f:2b:9a:8c:f3:4a:9d: ed:40:a5:a0:58:e6:21:01:94:fe:e1:f2:2b:a1:e3:f5:a7:7d: d7:56:fd:42:5a:e7:d7:8f:4b:44:f5:8c:9f:3e:db:8f:05:d6: 27:89:01:39:86:e7:84:34:dd:b9:8f:cf:9c:c6:1a:c7:1e:ec: 86:76:60:c9:e2:6a:8b:87:8a:8a:9d:d7:4b:b6:47:f5:5d:73: 1d:f3:be:d7:12:ee:13:55:3f:dd:22:97:03:77:11:fe:07:1e: 36:c4:b0:37:76:58:d5:38:c4:ab:eb:1f:8b:5d:5c:3f:a3:a2: 67:a1:af:e5:a5:c2:92:f3:cb:ea:3d:ed:5c:93:93:7a:de:95: 09:1d:38:01:94:31:01:24:83:a6:18:a8:50:61:3d:04:3c:d7: 19:30:35:f5 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1lDW9aVjNYYm6MmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDQwNDEyNDUxN1oXDTI4MDcwNzEyNDUxN1owLzEtMCsGA1UEAxMk NmI3MjUxZmYtN2JmYy00ZGJiLTkzNDItZmQ5MTJhNmQ0MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHr3JiS7386Iy5WjEmBKXurQEK05z2cZFDSh 8AdV4z6pbgpJWiacbgyqAFthgqqHAGF+3dsVmg0+tKKyOFce0tRvIOOMPAgBnENv h5PUQj48JriFOxsfRe1BUQOjRtfMUDFnNvFVnd7LkzE8s33vAepOAPfDS1SKRbmw M7VYu3VcR3yzV+0lAJFI09kF8qrUWstk82sB7OR8yhxpiZcs0BCI41clhzMcyiV3 zwa+f88jFind8sdGSYYwn5agYbbqOf0IgsL4OysC9t20aY4SAt1C8vtU4qEQIZ6Q LMDlv/vNrlp/mSVUFRsIeWJGvfeRoYbL+Trlb2V5vTgaGy8BEQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFH+IzafFM2LSAizTEgt03RezepwAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 YjcyNTFmZi03YmZjLTRkYmItOTM0Mi1mZDkxMmE2ZDQyNWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZiNzI1MWZmLTdiZmMtNGRiYi05 MzQyLWZkOTEyYTZkNDI1Yi82YjcyNTFmZi03YmZjLTRkYmItOTM0Mi1mZDkxMmE2 ZDQyNWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGIrzwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZlK3UGsE3aFMpbNrV3kj ISvgrQBkRTGR8zwR8eE1JlcA6wj+NG1vODRIgaAoDJozwYc7yUjX3uQq/vRFXkRx aVFnNK1upc7xlhmI13rNkTBdjBbd8CdgdUp7mCUTLkxyLyZ8h4APK5qM80qd7UCl oFjmIQGU/uHyK6Hj9ad911b9Qlrn149LRPWMnz7bjwXWJ4kBOYbnhDTduY/PnMYa xx7shnZgyeJqi4eKip3XS7ZH9V1zHfO+1xLuE1U/3SKXA3cR/gceNsSwN3ZY1TjE q+sfi11cP6OiZ6Gv5aXCkvPL6j3tXJOTet6VCR04AZQxASSDphioUGE9BDzXGTA1 9Q== -----END CERTIFICATE-----Generated at Thu Apr 9 00:01:36 2026 by rpki-client