$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc.cer File: a45f8c7b-223d-4018-88a7-ac0de71fddbc.cer (raw, json) Hash identifier: W3Ro1nsHqvMyAZ4pYozcIR7zxYT7gKtD6LTfkirctwY= Subject key identifier: 55:E5:25:B7:50:08:8E:31:0D:E5:3C:33:39:FD:0E:67:E6:BB:A0:A0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F6788C0C670A2FB4E65071560 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/a45f8c7b-223d-4018-88a7-ac0de71fddbc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 19:39:15 +0000 Certificate not after: Fri 12 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 961 IP: 199.242.146.0/23 IP: 205.166.179.0/24 IP: 2602:fa6f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:88:c0:c6:70:a2:fb:4e:65:07:15:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 5 19:39:15 2026 GMT Not After : Nov 12 01:45:24 2027 GMT Subject: CN=a45f8c7b-223d-4018-88a7-ac0de71fddbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:40:ad:47:23:29:7b:fd:02:c4:47:41:66:58: e4:0e:7d:5a:7b:e1:ed:ad:6a:ba:0e:65:6a:5a:9e: 6b:78:3f:d1:16:98:b6:bb:a3:12:32:90:35:d8:dd: 9d:6b:2b:25:56:53:97:d9:08:70:eb:4e:62:1d:0f: df:4c:bf:e1:75:9f:9f:53:f8:0d:6a:6a:3b:18:27: ba:66:80:c5:f9:88:33:9a:4e:16:ef:b7:b7:5b:27: 49:fb:03:03:4e:0e:ca:82:1b:2b:a8:95:11:07:d7: ea:29:72:87:71:a6:eb:87:a6:73:b1:f1:df:1f:b8: 53:86:b6:c2:f6:e4:f3:9b:12:e0:9f:95:c9:e4:b8: 98:95:59:33:15:46:b3:b6:f4:91:fa:36:08:2b:be: ad:98:ad:7b:8a:0f:39:f6:05:24:78:4e:17:01:0b: 84:a1:6d:d3:5c:6b:70:dd:c6:33:51:b1:72:ba:21: 78:b0:85:00:61:12:00:47:59:0e:58:c4:b2:2e:e9: 3d:50:71:6e:cc:d5:87:e8:73:40:2a:65:d6:c1:26: 1f:33:e2:25:97:df:ca:b6:ec:00:75:7e:55:51:eb: 2e:95:05:7a:c7:a0:0e:4c:a7:db:36:a5:7c:be:a9: c6:b2:7f:b1:71:7e:46:ef:51:85:00:44:65:b4:11: cc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E5:25:B7:50:08:8E:31:0D:E5:3C:33:39:FD:0E:67:E6:BB:A0:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/a45f8c7b-223d-4018-88a7-ac0de71fddbc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 199.242.146.0/23 205.166.179.0/24 IPv6: 2602:fa6f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 961 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:9d:25:17:38:1f:3b:a6:9e:a2:84:a0:b7:b4:87:45:04:78: 58:91:05:3c:d0:5f:a1:9d:70:b6:b4:3f:36:79:50:7b:51:1a: bb:e5:68:1e:2d:95:7d:4c:3c:ba:b9:fe:81:26:9d:b7:08:4c: 60:7f:e5:24:84:c3:23:0f:72:d4:27:2e:23:18:47:e9:e3:2a: 2d:4d:2a:1e:9f:b8:9b:a7:0b:e4:e2:ee:14:ff:d3:d4:74:03: da:0a:78:57:dd:54:2c:db:01:99:0c:85:dd:bb:ec:b7:8c:1b: 18:29:c9:4d:a6:ff:bd:69:19:7f:c5:7d:0d:d9:eb:c3:9a:2a: e1:f1:54:e3:a1:7e:eb:80:1b:73:75:f2:55:13:bc:05:f9:9b: c0:5d:4c:ee:f6:96:0e:c0:48:44:7c:c3:ff:0e:be:14:51:6d: 9f:2d:4e:7e:50:03:c8:3a:ed:6b:fa:e4:e2:36:82:64:05:94: 68:db:b1:3c:c4:8b:79:1b:2d:db:e3:7e:19:41:cd:ac:2d:ce: 4b:52:dc:c1:3f:72:0b:3e:a8:94:b0:4a:a4:b3:62:c9:ae:3e: 8b:0a:19:b8:37:54:52:f1:99:a8:45:18:4c:11:c9:ce:a1:3a: 54:e3:de:65:18:38:83:be:83:6b:16:a2:eb:3f:85:71:c3:9c: e0:77:1c:b9 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE9niMDGcKL7TmUHFWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MTAwNTE5MzkxNVoXDTI3MTExMjAxNDUyNFowLzEtMCsGA1UEAxMk YTQ1ZjhjN2ItMjIzZC00MDE4LTg4YTctYWMwZGU3MWZkZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkCtRyMpe/0CxEdBZljkDn1ae+HtrWq6DmVq Wp5reD/RFpi2u6MSMpA12N2dayslVlOX2Qhw605iHQ/fTL/hdZ+fU/gNamo7GCe6 ZoDF+Ygzmk4W77e3WydJ+wMDTg7KghsrqJURB9fqKXKHcabrh6ZzsfHfH7hThrbC 9uTzmxLgn5XJ5LiYlVkzFUaztvSR+jYIK76tmK17ig859gUkeE4XAQuEoW3TXGtw 3cYzUbFyuiF4sIUAYRIAR1kOWMSyLuk9UHFuzNWH6HNAKmXWwSYfM+Ill9/KtuwA dX5VUesulQV6x6AOTKfbNqV8vqnGsn+xcX5G71GFAERltBHMgwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFXlJbdQCI4xDeU8Mzn9Dmfmu6CgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9h NDVmOGM3Yi0yMjNkLTQwMTgtODhhNy1hYzBkZTcxZmRkYmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2E0NWY4YzdiLTIyM2QtNDAxOC04 OGE3LWFjMGRlNzFmZGRiYy9hNDVmOGM3Yi0yMjNkLTQwMTgtODhhNy1hYzBkZTcx ZmRkYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAHH8pIDBADNprMwDgQCAAIwCAMGBCYC+m8AMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAgPBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC6dJRc4HzumnqKEoLe0 h0UEeFiRBTzQX6GdcLa0PzZ5UHtRGrvlaB4tlX1MPLq5/oEmnbcITGB/5SSEwyMP ctQnLiMYR+njKi1NKh6fuJunC+Ti7hT/09R0A9oKeFfdVCzbAZkMhd277LeMGxgp yU2m/71pGX/FfQ3Z68OaKuHxVOOhfuuAG3N18lUTvAX5m8BdTO72lg7ASER8w/8O vhRRbZ8tTn5QA8g67Wv65OI2gmQFlGjbsTzEi3kbLdvjfhlBzawtzktS3ME/cgs+ qJSwSqSzYsmuPosKGbg3VFLxmahFGEwRyc6hOlTj3mUYOIO+g2sWous/hXHDnOB3 HLk= -----END CERTIFICATE-----Generated at Thu Oct 8 20:56:48 2026 by rpki-client