$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer File: b9b79447-da88-4528-8ff7-0d367d2d76e8.cer (raw, json) Hash identifier: RgSbItQc/JdkqGEEJhJKgkILbGI8tcg2E0tz3yQexME= Subject key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584DA2787CAA73D5F5A5527AEE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Apr 2026 12:45:17 +0000 Certificate not after: Sat 29 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 397960 IP: 161.199.128.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:78:7c:aa:73:d5:f5:a5:52:7a:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 26 12:45:17 2026 GMT Not After : Jul 29 12:45:17 2028 GMT Subject: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c4:ce:55:1a:2b:29:23:e1:66:6d:b3:67:61: f1:ee:55:7d:1a:c0:5d:c4:74:af:33:b6:10:08:87: 61:bb:29:77:ab:e7:37:59:8a:44:e1:61:30:06:27: 4f:22:86:c7:a3:b3:75:b8:b6:13:6a:4b:d1:a9:42: df:3c:45:bc:ae:15:0f:eb:2b:c4:0b:89:fe:8f:ac: e6:fb:e6:25:fe:bd:fe:98:00:ea:f9:16:6a:ed:34: 8a:41:27:99:5e:b6:42:d6:71:56:1e:f7:23:0f:a6: 2b:7c:09:52:c9:ff:b8:21:05:e1:c2:f0:fd:c5:61: c4:e7:ed:65:3f:a4:40:90:b6:d7:27:3b:19:73:2a: 81:d2:ae:ac:2a:e9:ff:0f:ec:1a:03:80:a7:f3:60: df:c5:e1:ef:6d:25:4c:a3:94:79:d2:76:a9:35:20: 26:3b:d2:5d:42:6e:ea:cc:b5:61:a9:0a:6a:47:45: 0d:63:70:a1:e0:e7:cc:6b:73:63:c0:6e:5c:63:44: d3:83:2d:5f:ed:05:9b:a2:ad:b6:b1:4c:e2:3d:42: 21:f8:a7:35:55:7d:0d:87:7e:0d:9f:3c:c1:ba:c3: f0:ba:22:a6:1b:3c:67:11:5a:c7:db:ef:9c:6b:23: 06:d2:3c:19:c2:1f:ec:56:eb:38:85:fd:50:a1:00: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 161.199.128.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397960 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:78:c7:1b:bb:cd:32:41:23:5e:58:db:7e:53:87:1b:cc:4f: 6f:41:6b:a5:b0:51:92:08:d6:30:f9:03:34:62:f9:1f:66:ce: ab:ce:04:e6:9f:28:44:03:21:ae:25:8d:b6:07:39:1e:2b:f9: bb:cf:2e:d0:76:d6:26:21:14:e5:f2:2a:fd:e6:dd:34:ef:e8: 10:60:ad:2e:bf:29:3d:03:6f:f3:63:ea:fb:8b:ba:2b:c1:16: ad:d4:62:ba:df:0e:37:6e:ae:e2:ca:b3:03:82:44:c7:1e:0d: 76:5e:1c:96:67:0c:fb:d9:a0:63:24:db:41:63:0d:0f:b2:ba: 2b:fa:3c:62:a1:c6:3d:83:ed:9c:55:d5:e4:8e:80:d9:8f:a5: 40:5c:59:0f:a1:9d:fe:b1:f9:72:77:25:73:ad:7f:77:b4:17: 70:be:3e:87:92:29:72:3b:bb:72:5f:af:b4:75:da:dc:4a:3a: db:4c:c2:b8:9d:0a:8c:56:2b:1c:ff:e1:b8:c3:7b:6b:bc:53: a1:89:7c:45:cf:6b:24:5c:f9:13:ae:53:b2:23:a5:26:69:00: a4:77:a8:a5:26:16:22:9e:74:56:b9:a0:03:5d:26:59:b7:3d: 0b:f1:96:93:2f:d8:54:c7:de:cb:18:d0:14:cf:65:02:07:00: 82:bb:7a:f5 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE2ieHyqc9X1pVJ67oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDQyNjEyNDUxN1oXDTI4MDcyOTEyNDUxN1owLzEtMCsGA1UEAxMk YjliNzk0NDctZGE4OC00NTI4LThmZjctMGQzNjdkMmQ3NmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8TOVRorKSPhZm2zZ2Hx7lV9GsBdxHSvM7YQ CIdhuyl3q+c3WYpE4WEwBidPIobHo7N1uLYTakvRqULfPEW8rhUP6yvEC4n+j6zm ++Yl/r3+mADq+RZq7TSKQSeZXrZC1nFWHvcjD6YrfAlSyf+4IQXhwvD9xWHE5+1l P6RAkLbXJzsZcyqB0q6sKun/D+waA4Cn82DfxeHvbSVMo5R50napNSAmO9JdQm7q zLVhqQpqR0UNY3Ch4OfMa3NjwG5cY0TTgy1f7QWboq22sUziPUIh+Kc1VX0Nh34N nzzBusPwuiKmGzxnEVrH2++cayMG0jwZwh/sVus4hf1QoQAowwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFB4sJDPZTKZEWgPzTkdOw0DtiyKCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i OWI3OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2N2QyZDc2ZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2I5Yjc5NDQ3LWRhODgtNDUyOC04 ZmY3LTBkMzY3ZDJkNzZlOC9iOWI3OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2N2Qy ZDc2ZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGhx4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhKIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHp4xxu7zTJBI15Y235ThxvMT29Ba6WwUZII1jD5AzRi+R9m zqvOBOafKEQDIa4ljbYHOR4r+bvPLtB21iYhFOXyKv3m3TTv6BBgrS6/KT0Db/Nj 6vuLuivBFq3UYrrfDjduruLKswOCRMceDXZeHJZnDPvZoGMk20FjDQ+yuiv6PGKh xj2D7ZxV1eSOgNmPpUBcWQ+hnf6x+XJ3JXOtf3e0F3C+PoeSKXI7u3Jfr7R12txK OttMwridCoxWKxz/4bjDe2u8U6GJfEXPayRc+ROuU7IjpSZpAKR3qKUmFiKedFa5 oANdJlm3PQvxlpMv2FTH3ssY0BTPZQIHAIK7evU= -----END CERTIFICATE-----Generated at Sun May 3 17:07:14 2026 by rpki-client