$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.cer File: f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.cer (raw, json) Hash identifier: Qt/CKJsG6OPjkQ7CwIbZ7a5ByaxSWcr6RSMYuetPPZI= Subject key identifier: 1D:13:81:95:E5:47:0B:3A:81:6A:16:CF:DB:29:D2:1D:E6:DA:C8:C8 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584E43ECFF0F091D1756B03A2BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Jun 2026 08:45:11 +0000 Certificate not after: Mon 25 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 23.92.160.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:43:ec:ff:0f:09:1d:17:56:b0:3a:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 23 08:45:11 2026 GMT Not After : Sep 25 08:45:11 2028 GMT Subject: CN=f57c3c5c-9df4-42aa-92c7-c3f8e77313b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:89:7f:30:88:e5:31:2b:16:33:b8:a3:7c:7d: 46:9c:5d:fe:4a:58:f4:40:2e:30:d9:b2:81:34:4a: ef:1e:c3:61:46:ad:4b:1a:9d:b1:2d:c8:ce:7c:43: 2d:c4:d6:a0:8f:1a:96:45:07:66:7c:9d:e0:68:d5: 5d:67:cc:fb:45:b7:f6:30:e7:58:3d:ee:8c:2f:0f: 9e:27:0b:43:1f:c8:d5:51:a6:05:db:44:83:cb:88: ef:13:d5:b3:6a:f4:e5:ae:cb:75:1b:4c:2a:a5:90: 8c:20:bd:6b:f2:53:f8:0f:2f:16:24:c1:08:2e:49: 8e:c0:4a:0f:3c:9c:9f:12:30:1c:3b:04:a3:4c:f1: 48:4f:66:1b:01:0a:de:76:8e:4b:bb:1c:60:2e:e9: e2:35:ad:4d:be:09:80:49:5f:8b:e3:d5:96:a2:a3: b4:09:65:c6:48:28:f2:f1:ce:87:18:87:88:7c:d5: df:35:f1:ff:52:7d:61:e1:b8:c1:57:e7:8d:7f:23: 59:10:61:aa:b2:b5:d4:6e:af:79:66:91:6e:10:c0: 3c:aa:42:81:83:bb:d2:be:3e:f2:fa:8e:10:2d:21: 11:07:71:da:3d:85:63:df:e6:37:fb:fa:03:f7:0f: 4a:03:d0:9e:b7:84:37:b1:e2:0b:33:7e:11:08:61: e1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:13:81:95:E5:47:0B:3A:81:6A:16:CF:DB:29:D2:1D:E6:DA:C8:C8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.92.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:84:ca:8b:75:48:3c:cb:77:5b:fa:c1:f5:f9:42:c0:7d:2d: a1:37:0c:30:f4:54:c6:e8:44:e8:61:27:28:6a:f5:63:30:d7: 0e:98:3d:4e:a9:2e:f3:2d:2c:42:90:0c:d0:db:86:11:20:f7: 2d:a8:69:8d:07:22:85:97:e6:23:2e:ee:a7:7f:c6:79:68:91: ec:b2:79:18:e0:36:eb:b2:d4:82:56:b9:b9:01:44:53:51:7e: 25:94:76:1a:00:59:de:62:9e:03:34:5b:c9:b4:44:01:c0:51: 08:97:9e:c8:3a:d7:df:12:23:91:74:71:fc:c8:b8:d2:28:85: c8:f1:5a:49:d8:44:94:c3:e9:47:15:ca:43:de:dc:a9:f0:e2: c6:52:b5:2c:81:27:67:8c:fd:32:bc:46:6e:f5:53:9b:83:aa: 60:9f:20:5a:36:ea:e6:b6:8b:3a:41:86:f1:f4:0a:1e:45:93: 43:3f:98:da:dc:52:72:c2:fb:d6:c1:66:00:0f:75:ec:46:08: 13:2b:f7:f5:32:58:6c:10:c5:b2:40:81:c9:05:a8:7b:40:1d: 4f:7b:87:cd:24:33:46:3c:f4:e7:64:6e:14:cf:8f:9b:04:ef: 3f:b7:89:24:b5:68:fb:0d:9b:42:70:16:fa:c7:bd:8f:cb:ca: 7e:65:e0:a8 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5D7P8PCR0XVrA6K8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDYyMzA4NDUxMVoXDTI4MDkyNTA4NDUxMVowLzEtMCsGA1UEAxMk ZjU3YzNjNWMtOWRmNC00MmFhLTkyYzctYzNmOGU3NzMxM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYl/MIjlMSsWM7ijfH1GnF3+Slj0QC4w2bKB NErvHsNhRq1LGp2xLcjOfEMtxNagjxqWRQdmfJ3gaNVdZ8z7Rbf2MOdYPe6MLw+e JwtDH8jVUaYF20SDy4jvE9WzavTlrst1G0wqpZCMIL1r8lP4Dy8WJMEILkmOwEoP PJyfEjAcOwSjTPFIT2YbAQredo5LuxxgLuniNa1NvgmASV+L49WWoqO0CWXGSCjy 8c6HGIeIfNXfNfH/Un1h4bjBV+eNfyNZEGGqsrXUbq95ZpFuEMA8qkKBg7vSvj7y +o4QLSERB3HaPYVj3+Y3+/oD9w9KA9Cet4Q3seILM34RCGHhPQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFB0TgZXlRws6gWoWz9sp0h3m2sjIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m NTdjM2M1Yy05ZGY0LTQyYWEtOTJjNy1jM2Y4ZTc3MzEzYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Y1N2MzYzVjLTlkZjQtNDJhYS05 MmM3LWMzZjhlNzczMTNiNC9mNTdjM2M1Yy05ZGY0LTQyYWEtOTJjNy1jM2Y4ZTc3 MzEzYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAQXXKAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnoTKi3VIPMt3W/rB9flC wH0toTcMMPRUxuhE6GEnKGr1YzDXDpg9Tqku8y0sQpAM0NuGESD3LahpjQcihZfm Iy7up3/GeWiR7LJ5GOA267LUgla5uQFEU1F+JZR2GgBZ3mKeAzRbybREAcBRCJee yDrX3xIjkXRx/Mi40iiFyPFaSdhElMPpRxXKQ97cqfDixlK1LIEnZ4z9MrxGbvVT m4OqYJ8gWjbq5raLOkGG8fQKHkWTQz+Y2txScsL71sFmAA917EYIEyv39TJYbBDF skCByQWoe0AdT3uHzSQzRjz052RuFM+PmwTvP7eJJLVo+w2bQnAW+se9j8vKfmXg qA== -----END CERTIFICATE-----Generated at Wed Jun 24 13:54:24 2026 by rpki-client