$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer File: 9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer (raw, json) Hash identifier: 7Va9dzZ+RwtDR0lsQnoPDNvY0WGhUbismnCQr3d6Nvg= Subject key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A66B8D44C2B2139C411149B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 04 Jul 2025 00:45:37 +0000 Certificate not after: Thu 07 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 399141 IP: 45.42.172.0/22 IP: 2602:fcd8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:b8:d4:4c:2b:21:39:c4:11:14:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 4 00:45:37 2025 GMT Not After : Oct 7 00:45:37 2027 GMT Subject: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:ab:30:cc:69:44:9d:ec:7f:9a:45:f8:5b: 59:ff:f7:e8:6b:79:e8:d6:97:97:fe:a0:03:6e:92: 6a:dd:14:25:33:f2:2f:db:20:88:ea:2c:68:33:3a: f5:3c:4e:ec:f2:80:c0:a9:7d:63:48:6e:54:fc:e4: e8:60:4b:22:b7:27:9d:49:89:33:9c:cd:f0:ef:b7: 67:bb:78:e8:23:e1:41:37:a3:48:d8:2a:8b:1f:0a: cc:a3:ff:8e:d4:33:3b:30:25:71:32:8b:84:78:95: 2d:b4:8f:70:c6:72:12:49:8e:00:a0:22:91:77:4d: 7e:ae:81:1c:7c:18:af:bf:ee:f0:96:72:29:f6:f0: e1:30:27:23:90:d1:1e:a9:ed:59:3c:9a:81:3a:90: c6:06:60:5d:90:f2:14:d1:97:02:51:a6:3c:e5:6b: 03:2d:3f:b9:27:d2:0a:34:fd:d2:9d:07:56:b1:c2: 1d:2c:83:7e:27:f8:74:30:20:4d:eb:8f:05:66:18: 29:07:72:56:eb:b2:0d:6e:f4:37:1c:73:d0:54:20: 9b:04:78:86:a4:92:95:f1:6a:05:8c:13:f4:fe:19: 41:02:5f:91:36:3f:1e:a4:4b:28:e1:69:05:12:fe: fc:7d:63:89:db:16:58:dd:e0:14:1c:1a:53:99:eb: 59:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.42.172.0/22 IPv6: 2602:fcd8::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399141 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9d:63:ac:c4:28:7b:e5:c7:6e:b2:c3:b6:0b:fd:df:d1:05: 2c:00:28:28:93:86:9f:72:ef:25:23:bc:a6:4a:b1:52:0f:1f: 14:d1:d2:2a:05:b7:1e:35:3e:fa:05:82:b6:96:5c:fc:5b:42: e5:a4:3a:bc:20:aa:8f:ab:40:a9:f3:30:98:5c:40:2b:ed:ca: 0e:71:c5:db:48:28:01:41:28:c1:cc:5e:6c:47:7e:f6:8f:66: 94:1e:6b:75:73:7e:8b:df:63:ee:19:fc:50:05:f2:b8:52:95: ee:28:b3:66:0f:03:de:45:44:e2:82:1f:b5:da:bb:96:18:ca: 3a:d0:95:94:cc:11:55:5e:f8:06:c7:32:86:14:99:ef:06:6c: db:b8:59:e1:27:7e:fb:88:ca:22:02:fe:b0:93:04:de:ef:7a: c1:1b:b6:96:fd:0d:c4:93:06:95:30:d1:bb:ea:5e:36:7e:f8: 99:93:6a:24:af:d4:78:a8:96:84:b1:1d:5c:b3:64:d0:9d:79: 81:f9:05:ab:10:47:62:2b:56:14:da:31:f8:41:ce:33:cb:e0: e5:4f:76:50:22:31:eb:85:8c:a6:b7:51:76:50:9b:4d:ec:53: 88:ae:6a:8d:7f:7d:88:df:da:b9:9e:52:65:04:bd:fd:0d:0d: e5:71:34:df -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEpmuNRMKyE5xBEUmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDcwNDAwNDUzN1oXDTI3MTAwNzAwNDUzN1owLzEtMCsGA1UEAxMk OWU4ZWQ5NTAtNDQ4OC00OWIxLThkMzktYmI4YzcxYTc2N2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/qrMMxpRJ3sf5pF+FtZ//foa3no1peX/qAD bpJq3RQlM/Iv2yCI6ixoMzr1PE7s8oDAqX1jSG5U/OToYEsityedSYkznM3w77dn u3joI+FBN6NI2CqLHwrMo/+O1DM7MCVxMouEeJUttI9wxnISSY4AoCKRd01+roEc fBivv+7wlnIp9vDhMCcjkNEeqe1ZPJqBOpDGBmBdkPIU0ZcCUaY85WsDLT+5J9IK NP3SnQdWscIdLIN+J/h0MCBN648FZhgpB3JW67INbvQ3HHPQVCCbBHiGpJKV8WoF jBP0/hlBAl+RNj8epEso4WkFEv78fWOJ2xZY3eAUHBpTmetZwQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCYW24WQfRQPpgiRWvOMSLfc89QfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFhNzY3ZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzllOGVkOTUwLTQ0ODgtNDliMS04 ZDM5LWJiOGM3MWE3NjdkMi85ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFh NzY3ZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAItKqwwDgQCAAIwCAMGBCYC/NgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYXJTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0nWOsxCh75cdussO2C/3f0QUs ACgok4afcu8lI7ymSrFSDx8U0dIqBbceNT76BYK2llz8W0LlpDq8IKqPq0Cp8zCY XEAr7coOccXbSCgBQSjBzF5sR372j2aUHmt1c36L32PuGfxQBfK4UpXuKLNmDwPe RUTigh+12ruWGMo60JWUzBFVXvgGxzKGFJnvBmzbuFnhJ377iMoiAv6wkwTe73rB G7aW/Q3EkwaVMNG76l42fviZk2okr9R4qJaEsR1cs2TQnXmB+QWrEEdiK1YU2jH4 Qc4zy+DlT3ZQIjHrhYymt1F2UJtN7FOIrmqNf32I39q5nlJlBL39DQ3lcTTf -----END CERTIFICATE-----Generated at Wed Jul 9 06:55:14 2025 by rpki-client