$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer File: 7225b415-8ae0-4523-b37f-74ed780676aa.cer (raw, json) Hash identifier: UPv8gYB0zCf9TWxnJwqetRusRfIc0sx5UpAW/Q7WWM0= Subject key identifier: 76:B4:1B:8B:B1:61:19:B3:96:9C:98:E5:0B:47:AF:B6:C5:FF:82:73 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584AF5199C420DBB575A4371D380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 24 Aug 2025 00:45:24 +0000 Certificate not after: Sat 27 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 63262 IP: 66.118.244.0/22 IP: 172.82.88.0/22 IP: 2602:fc68::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:19:9c:42:0d:bb:57:5a:43:71:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 24 00:45:24 2025 GMT Not After : Nov 27 01:45:24 2027 GMT Subject: CN=7225b415-8ae0-4523-b37f-74ed780676aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:18:99:58:b0:76:d8:d8:b2:a5:43:21:be: d7:5b:f2:01:8f:c4:b7:69:e2:bc:44:22:be:9a:9c: d7:66:5f:82:70:36:53:03:e0:b4:4b:cd:21:32:12: d6:64:94:83:47:8e:da:da:23:a6:05:13:b5:9c:d3: 46:02:11:15:43:98:79:b9:f7:36:fa:70:34:de:39: 12:a3:28:d0:f1:b3:47:5e:51:0d:af:82:6d:14:89: c9:d0:56:ab:a4:8d:e2:a9:f2:45:b8:72:21:3f:f4: e2:f7:60:b7:6a:fe:cd:c2:3f:22:3a:61:34:19:52: 39:6d:02:7b:ce:a6:11:ab:a7:e1:41:10:19:b5:b1: cb:85:07:b7:73:89:48:c6:7a:c3:0d:94:27:71:3e: 1b:1c:95:62:d1:64:f6:99:9d:b3:7f:82:ab:1f:0a: bb:ec:32:69:a1:32:72:24:48:96:d2:7c:a3:e6:46: cf:2a:22:cd:f4:a2:0c:4d:aa:70:cc:af:47:50:dc: b9:85:8c:bb:7a:44:40:a0:55:de:f1:a2:ee:bb:e0: 28:6b:cf:bb:ec:72:cd:e9:22:92:f7:33:37:67:aa: 4e:9c:b2:63:a1:60:17:0e:78:b5:30:b8:c5:77:5f: 1e:5d:54:f1:aa:43:e2:41:b6:66:35:23:1d:38:37: 52:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B4:1B:8B:B1:61:19:B3:96:9C:98:E5:0B:47:AF:B6:C5:FF:82:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 66.118.244.0/22 172.82.88.0/22 IPv6: 2602:fc68::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63262 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:65:b6:21:cc:0d:15:4c:e0:45:a1:69:51:05:50:36:6b:8a: c1:61:3e:b2:05:a6:7d:3c:ed:98:4e:99:35:9b:4b:9f:a2:07: 8b:9c:2f:6f:67:39:cf:66:b9:18:9d:c0:19:3d:23:b2:67:ec: 20:41:37:39:e6:47:33:7b:11:a2:2c:14:7d:ff:7e:b2:3a:26: a9:0d:28:19:cf:eb:5e:25:ae:31:44:14:62:b7:ab:c7:00:1f: 31:aa:7d:d8:c3:68:eb:22:ce:a5:77:0f:6d:74:4f:0e:ed:eb: 19:52:e4:dc:b2:c6:86:ff:c5:fb:35:94:c4:59:78:79:3d:a9: d9:6d:47:12:a6:98:3a:15:1a:8c:aa:c4:44:68:75:93:c9:35: dd:4b:55:8d:53:31:59:7e:a0:d2:a7:3a:0b:e8:a7:45:36:f0: 50:6b:b8:b0:cd:82:7d:87:76:fa:95:0c:cb:36:95:82:25:ff: 8b:11:b4:7c:e4:dc:e6:10:1b:97:5f:75:77:c1:04:f5:c6:37: 40:54:ec:b0:02:55:be:8c:c2:ec:f3:45:6e:61:65:35:3d:4b: 81:dc:a5:cf:93:2a:ce:1d:09:8a:80:d5:50:ad:17:7a:ba:a4: 8c:12:d7:11:96:83:78:37:79:8e:72:ac:90:1e:7e:56:ba:52: 0b:18:60:80 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEr1GZxCDbtXWkNx04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDgyNDAwNDUyNFoXDTI3MTEyNzAxNDUyNFowLzEtMCsGA1UEAxMk NzIyNWI0MTUtOGFlMC00NTIzLWIzN2YtNzRlZDc4MDY3NmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok8YmViwdtjYsqVDIb7XW/IBj8S3aeK8RCK+ mpzXZl+CcDZTA+C0S80hMhLWZJSDR47a2iOmBRO1nNNGAhEVQ5h5ufc2+nA03jkS oyjQ8bNHXlENr4JtFInJ0FarpI3iqfJFuHIhP/Ti92C3av7Nwj8iOmE0GVI5bQJ7 zqYRq6fhQRAZtbHLhQe3c4lIxnrDDZQncT4bHJVi0WT2mZ2zf4KrHwq77DJpoTJy JEiW0nyj5kbPKiLN9KIMTapwzK9HUNy5hYy7ekRAoFXe8aLuu+Aoa8+77HLN6SKS 9zM3Z6pOnLJjoWAXDni1MLjFd18eXVTxqkPiQbZmNSMdODdSUwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFHa0G4uxYRmzlpyY5QtHr7bF/4JzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83 MjI1YjQxNS04YWUwLTQ1MjMtYjM3Zi03NGVkNzgwNjc2YWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1i MzdmLTc0ZWQ3ODA2NzZhYS83MjI1YjQxNS04YWUwLTQ1MjMtYjM3Zi03NGVkNzgw Njc2YWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAJCdvQDBAKsUlgwDgQCAAIwCAMGBCYC/GgAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD3HjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEZbYhzA0VTOBFoWlR BVA2a4rBYT6yBaZ9PO2YTpk1m0ufogeLnC9vZznPZrkYncAZPSOyZ+wgQTc55kcz exGiLBR9/36yOiapDSgZz+teJa4xRBRit6vHAB8xqn3Yw2jrIs6ldw9tdE8O7esZ UuTcssaG/8X7NZTEWXh5PanZbUcSppg6FRqMqsREaHWTyTXdS1WNUzFZfqDSpzoL 6KdFNvBQa7iwzYJ9h3b6lQzLNpWCJf+LEbR85NzmEBuXX3V3wQT1xjdAVOywAlW+ jMLs80VuYWU1PUuB3KXPkyrOHQmKgNVQrRd6uqSMEtcRloN4N3mOcqyQHn5WulIL GGCA -----END CERTIFICATE-----Generated at Tue Aug 26 06:03:41 2025 by rpki-client