$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer File: 6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer (raw, json) Hash identifier: 1X8DTbve1O0REErXNUFIBg/mE163jNbxPrhlJTHpLvI= Subject key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F7FF4C12FF358B4BCB50A2A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Oct 2026 13:36:16 +0000 Certificate not after: Sat 28 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 6253 IP: 48.0.0.0 -- 48.43.255.255 IP: 48.48.0.0 -- 48.79.255.255 IP: 48.96.0.0 -- 48.101.255.255 IP: 48.104.0.0 -- 48.127.255.255 IP: 161.151.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:f4:c1:2f:f3:58:b4:bc:b5:0a:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 14 13:36:16 2026 GMT Not After : Oct 28 08:45:11 2028 GMT Subject: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:04:31:0b:90:01:d5:14:8f:bf:50:c4:16:b8: 78:cd:d9:3e:4f:e2:2b:75:a0:00:89:e7:a7:b2:13: 19:8e:0a:a4:b6:6a:fe:f2:57:ae:8d:b3:2a:48:52: b9:46:37:59:75:4d:b3:b1:53:07:42:3b:e8:18:8c: 13:8d:56:87:ac:58:fe:9d:cb:f8:35:26:57:60:ac: 7f:9c:27:f9:5b:7d:f4:20:f1:a6:60:91:2b:0a:0e: e8:1c:dd:84:d8:9a:f6:31:a9:df:b0:9c:5f:73:dd: 4d:d4:82:fd:22:ee:94:eb:1c:57:e2:d8:30:ee:d6: 6f:ed:b9:84:dd:78:21:45:78:fe:4c:c0:81:6b:be: 3e:bd:45:e9:f4:4e:96:37:21:45:e3:f6:b7:75:b1: 61:18:8f:ad:04:19:3e:6b:dc:b3:8a:55:a2:5c:f4: 19:3b:0b:a3:10:5d:4f:89:b4:70:e2:11:09:90:68: a9:38:43:87:82:4d:ed:9c:5e:18:9b:90:a0:b1:75: 0a:c4:80:37:c4:db:91:32:7c:74:25:b8:5d:09:d8: bc:6c:6b:f1:67:95:e6:2a:44:77:d7:8c:f0:3a:72: 7f:d3:64:e3:52:5e:ca:86:ac:bf:aa:5f:75:37:7e: b4:08:99:ee:d8:5d:1b:62:86:8b:fb:5b:05:d9:55: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 48.0.0.0-48.43.255.255 48.48.0.0-48.79.255.255 48.96.0.0-48.101.255.255 48.104.0.0-48.127.255.255 161.151.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6253 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b3:d1:83:88:09:67:b0:15:07:57:b4:a9:d5:b3:ed:09:74: 50:3e:b1:4c:8e:2c:6a:d2:8f:dc:5b:62:86:de:37:dc:b7:68: 98:88:90:07:96:b5:e8:cf:85:15:55:2d:6c:44:cf:79:ba:94: a1:47:e9:fd:49:94:f0:e8:42:a3:26:81:7e:67:25:6d:7b:8c: 1b:d0:8c:b2:6c:85:b8:47:65:53:68:ad:62:d4:4e:c6:3c:fc: f9:ec:0f:36:da:78:a0:af:0c:28:a6:1b:c9:9b:e5:20:9a:ab: 7b:bc:1f:38:8e:8b:73:53:a1:07:35:33:d7:0d:59:41:f7:33: 41:85:6b:44:02:27:bf:1f:8f:88:3b:cc:99:b5:ca:e1:8b:d1: 9d:95:0c:f8:d5:6e:2a:dc:86:68:2d:7c:e4:e4:5c:a0:04:f8: 12:18:9d:48:ed:b2:16:25:b2:43:a7:20:a5:db:5a:0f:92:28: 76:a7:9d:56:67:ab:b8:5a:42:c5:14:eb:72:e4:64:28:97:c9: 22:18:ce:8e:ae:3f:40:f1:59:98:99:02:a8:23:70:b7:1f:dc: 86:f6:4d:84:95:6b:d7:b0:e0:d2:4c:84:4b:8d:15:18:16:03: db:e4:70:68:90:de:31:8b:2c:d7:9e:6d:44:2c:27:cd:25:45: e6:ff:f1:7e -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWE9/9MEv81i0vLUKKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MTAxNDEzMzYxNloXDTI4MTAyODA4NDUxMVowLzEtMCsGA1UEAxMk NmMyYjY0NzAtOTRlNC00Zjc3LTlkNDgtMTNkNWFhYTJiM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAQxC5AB1RSPv1DEFrh4zdk+T+IrdaAAieen shMZjgqktmr+8leujbMqSFK5RjdZdU2zsVMHQjvoGIwTjVaHrFj+ncv4NSZXYKx/ nCf5W330IPGmYJErCg7oHN2E2Jr2ManfsJxfc91N1IL9Iu6U6xxX4tgw7tZv7bmE 3XghRXj+TMCBa74+vUXp9E6WNyFF4/a3dbFhGI+tBBk+a9yzilWiXPQZOwujEF1P ibRw4hEJkGipOEOHgk3tnF4Ym5CgsXUKxIA3xNuRMnx0JbhdCdi8bGvxZ5XmKkR3 14zwOnJ/02TjUl7Khqy/ql91N360CJnu2F0bYoaL+1sF2VWs2wIDAQABo4IESDCC BEQwHQYDVR0OBBYEFHAftb/Qv6trssT32Dce7KNZwW73MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFhMmIzYzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZjMmI2NDcwLTk0ZTQtNGY3Ny05 ZDQ4LTEzZDVhYWEyYjNjMi82YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFh MmIzYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MDoEAgABMDQwCQMCBDADAwIwKDAKAwMEMDADAwQwQDAKAwMFMGAD AwEwZDAKAwMDMGgDAwcwAAMDAKGXMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAhht MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADiz0YOICWewFQdXtKnVs+0JdFA+sUyOLGrSj9xbYobeN9y3aJiI kAeWtejPhRVVLWxEz3m6lKFH6f1JlPDoQqMmgX5nJW17jBvQjLJshbhHZVNorWLU TsY8/PnsDzbaeKCvDCimG8mb5SCaq3u8HziOi3NToQc1M9cNWUH3M0GFa0QCJ78f j4g7zJm1yuGL0Z2VDPjVbirchmgtfOTkXKAE+BIYnUjtshYlskOnIKXbWg+SKHan nVZnq7haQsUU63LkZCiXySIYzo6uP0DxWZiZAqgjcLcf3Ib2TYSVa9ew4NJMhEuN FRgWA9vkcGiQ3jGLLNeebUQsJ80lReb/8X4= -----END CERTIFICATE-----Generated at Sun Oct 25 20:53:58 2026 by rpki-client