$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer File: 6d91ccc1-4217-4cde-9687-260a5f00361b.cer (raw, json) Hash identifier: BsNyBVxrBQMNQuxGv/4d7Qhl9K4P8NreYTVfhiJIYjw= Subject key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584EA8E4BCCBDFDEC5C36EFFAA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jul 2026 12:45:12 +0000 Certificate not after: Tue 31 Oct 2028 12:45:12 +0000 Subordinate resources: IP: 64.255.224.0/22 IP: 66.43.4.0 -- 66.43.11.255 IP: 69.30.64.0/20 IP: 69.30.84.0/24 IP: 69.30.86.0/23 IP: 72.46.136.0/22 IP: 104.238.248.0/22 IP: 198.145.48.0/20 IP: 198.145.66.0 -- 198.145.103.255 IP: 198.145.105.0 -- 198.145.106.255 IP: 198.145.110.0/23 IP: 198.145.128.0 -- 198.145.175.255 IP: 198.145.224.0/20 IP: 207.32.128.0/19 IP: 208.66.72.0/21 IP: 209.20.132.0/22 IP: 209.20.192.0/18 IP: 216.65.128.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:e4:bc:cb:df:de:c5:c3:6e:ff:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 29 12:45:12 2026 GMT Not After : Oct 31 12:45:12 2028 GMT Subject: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6b:26:08:a2:ee:ce:d5:3b:8c:4e:2b:8d:df: 7a:7f:29:02:f1:12:04:fb:f9:cb:72:95:f9:40:fc: 23:88:9d:a1:e5:b2:3a:6c:60:c2:31:29:7b:e2:4c: 5e:b2:17:e9:ab:65:a5:ba:a1:09:55:b0:b7:94:8b: 45:7d:da:2a:c2:58:15:75:aa:ad:5e:31:7b:bf:12: 23:c4:95:92:b6:ca:6d:ee:f4:59:8b:65:c4:9a:44: 65:f1:63:ce:f8:3c:79:e2:91:d7:b0:2f:60:36:62: ef:17:7f:16:06:dd:02:c8:46:dd:45:4d:e7:1b:b1: eb:54:bf:b0:32:b2:39:45:68:d2:15:6d:8d:21:c3: f7:10:b7:5e:9a:aa:86:19:81:b9:e7:35:cc:1d:08: d5:64:1f:88:21:c8:6f:53:62:9b:45:11:e0:d2:f4: 4b:b6:48:6d:7e:e4:0a:60:20:0c:9b:39:1e:0c:e2: 66:80:03:16:54:26:55:b7:e3:89:c9:71:6b:91:64: 1f:89:2f:c4:b2:b8:0d:fa:45:54:05:06:5a:52:dc: 9f:96:fe:c7:0b:8d:f5:e2:95:cc:bd:85:d4:0b:d6: f1:52:ec:b5:de:39:81:cd:58:ed:e8:2b:fe:23:87: 40:0a:fe:50:25:87:af:98:9e:f6:3e:81:31:8e:25: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.255.224.0/22 66.43.4.0-66.43.11.255 69.30.64.0/20 69.30.84.0/24 69.30.86.0/23 72.46.136.0/22 104.238.248.0/22 198.145.48.0/20 198.145.66.0-198.145.103.255 198.145.105.0-198.145.106.255 198.145.110.0/23 198.145.128.0-198.145.175.255 198.145.224.0/20 207.32.128.0/19 208.66.72.0/21 209.20.132.0/22 209.20.192.0/18 216.65.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:59:78:17:6c:da:11:2e:80:e0:67:f8:78:55:0e:5d:85:0d: e3:13:a2:ae:d8:45:24:90:90:80:5b:08:f4:5a:9a:66:b9:8c: 0b:c1:3d:ef:3c:34:dd:34:bf:64:68:0b:34:aa:e1:07:c3:22: 34:2d:c5:6f:38:24:05:4f:d2:12:b1:e3:88:87:5e:c5:78:eb: 5f:47:9b:9a:da:62:a8:2f:85:7b:9f:58:d1:69:49:8b:74:3f: 4d:20:29:b7:09:6b:c7:b3:95:75:7b:71:1b:fd:ee:ee:61:20: d2:94:ee:4a:5f:3f:48:6a:da:5b:73:87:87:a9:ec:9f:b6:37: 65:63:e0:ab:2d:b5:30:4b:5e:dd:76:43:5c:b5:a6:68:f8:84: ff:e7:c8:af:1f:a1:14:3c:23:e6:32:ae:73:44:5d:d7:50:d5: c7:db:4f:6a:06:ac:ac:35:48:90:d4:89:7a:51:c4:b2:c4:b5: 03:89:cb:3c:37:ae:5b:dc:c6:11:6c:9b:ad:b6:d3:1f:be:4c: a4:d6:f1:8b:50:38:1e:49:b7:83:1d:58:8a:aa:22:c4:14:e5: a6:c2:5c:1a:d8:81:aa:d0:d6:79:78:ec:bb:fb:8a:14:d4:1a: 22:47:24:55:d3:57:95:3f:f4:24:b4:d1:35:71:35:81:9e:12: 9b:c9:dc:d2 -----BEGIN CERTIFICATE----- MIIHeDCCBmCgAwIBAgIUAQ0Mn0MoWE6o5LzL397Fw27/qgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDcyOTEyNDUxMloXDTI4MTAzMTEyNDUxMlowLzEtMCsGA1UEAxMk NmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAzNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5msmCKLuztU7jE4rjd96fykC8RIE+/nLcpX5 QPwjiJ2h5bI6bGDCMSl74kxeshfpq2WluqEJVbC3lItFfdoqwlgVdaqtXjF7vxIj xJWStspt7vRZi2XEmkRl8WPO+Dx54pHXsC9gNmLvF38WBt0CyEbdRU3nG7HrVL+w MrI5RWjSFW2NIcP3ELdemqqGGYG55zXMHQjVZB+IIchvU2KbRRHg0vRLtkhtfuQK YCAMmzkeDOJmgAMWVCZVt+OJyXFrkWQfiS/EsrgN+kVUBQZaUtyflv7HC4314pXM vYXUC9bxUuy13jmBzVjt6Cv+I4dACv5QJYevmJ72PoExjiVLZwIDAQABo4IEijCC BIYwHQYDVR0OBBYEFHZsb3wo7DYmlFG/0np+mVYpIpr8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZkOTFjY2MxLTQyMTctNGNkZS05 Njg3LTI2MGE1ZjAwMzYxYi82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYw MDM2MWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgakGCCsGAQUF BwEHAQH/BIGZMIGWMIGTBAIAATCBjAMEAkD/4DAMAwQCQisEAwQCQisIAwQERR5A AwQARR5UAwQBRR5WAwQCSC6IAwQCaO74AwQExpEwMAwDBAHGkUIDBAPGkWAwDAME AMaRaQMEAMaRagMEAcaRbjAMAwQHxpGAAwQExpGgAwQExpHgAwQFzyCAAwQD0EJI AwQC0RSEAwQG0RTAAwQF2EGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHNZeBds2hEugOBn+HhVDl2FDeMT oq7YRSSQkIBbCPRamma5jAvBPe88NN00v2RoCzSq4QfDIjQtxW84JAVP0hKx44iH XsV4619Hm5raYqgvhXufWNFpSYt0P00gKbcJa8ezlXV7cRv97u5hINKU7kpfP0hq 2ltzh4ep7J+2N2Vj4KsttTBLXt12Q1y1pmj4hP/nyK8foRQ8I+YyrnNEXddQ1cfb T2oGrKw1SJDUiXpRxLLEtQOJyzw3rlvcxhFsm6220x++TKTW8YtQOB5Jt4MdWIqq IsQU5abCXBrYgarQ1nl47Lv7ihTUGiJHJFXTV5U/9CS00TVxNYGeEpvJ3NI= -----END CERTIFICATE-----Generated at Fri Aug 28 18:22:03 2026 by rpki-client