$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer File: 04ea0880-2156-4bff-9635-feb716ac6fae.cer (raw, json) Hash identifier: 544DXFyQC2dPsimooOI9HZH3vvCIcuE8NT0cPyc4zgw= Subject key identifier: 6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B64C4F89791E126FEEF81FB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Oct 2025 00:45:24 +0000 Certificate not after: Thu 06 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 398419 IP: 170.39.22.0/24 IP: 2602:fd45::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:c4:f8:97:91:e1:26:fe:ef:81:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 3 00:45:24 2025 GMT Not After : Jan 6 01:45:24 2028 GMT Subject: CN=04ea0880-2156-4bff-9635-feb716ac6fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:71:e4:c2:b9:9c:ce:2e:7b:26:4b:24:5f:ed: c5:da:02:24:8e:93:05:c7:99:0a:7d:b3:0f:99:53: 68:7e:73:c7:49:da:cf:86:83:f6:34:e8:f1:92:b3: 2f:a5:07:fe:63:07:d4:43:39:ce:10:d5:4a:f9:e5: 09:3e:2a:f8:14:75:56:4c:28:ae:6b:1a:0c:af:e5: 52:b0:08:0b:7f:a5:5c:17:5d:98:2a:e6:27:26:b5: 37:03:f5:89:dc:06:7e:75:ab:8f:7f:34:80:26:05: e9:17:e9:42:ef:0b:d2:2e:8e:97:7c:0b:2b:4d:a8: ea:f9:6a:b1:2e:9c:b1:19:2b:22:f4:50:a6:00:96: 65:20:46:00:e5:55:d0:25:b9:d4:14:b6:63:42:fd: ba:df:ec:37:4d:90:59:64:62:f9:33:60:12:20:b0: d2:8e:49:92:fd:d2:c4:2a:1d:0e:3c:9b:98:aa:32: ad:67:c7:47:6a:c3:09:4e:a4:93:c9:f6:df:f7:e1: 60:cf:11:32:dd:c8:0a:37:ac:82:9f:8a:bd:3c:28: 66:26:ad:e7:d6:19:9b:54:03:d4:cc:15:c9:1a:70: c8:06:4e:2d:8e:43:25:9e:b2:c1:28:64:50:d0:eb: ab:37:f3:a7:35:81:2a:a7:4f:cb:4b:a5:83:c5:77: 66:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 170.39.22.0/24 IPv6: 2602:fd45::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398419 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:0b:a5:44:39:d1:42:0d:bb:2d:04:3f:52:09:f5:30:d6:d0: 08:dc:75:4e:89:f1:e2:cf:65:41:3c:56:26:9b:b2:79:a9:95: c3:c7:fc:a0:ef:e9:30:cd:3b:ef:ac:8c:f3:1e:cb:40:cd:92: 91:eb:4e:7a:de:2b:16:43:f0:e5:2c:28:b9:23:f3:79:f4:02: 54:1a:76:76:ac:30:f1:5e:2b:ba:82:3c:82:bb:42:8b:65:08: b1:f4:8c:86:81:e1:47:52:a4:8b:a6:d6:ba:54:e8:8e:62:ed: 1e:c8:b0:58:7e:be:d6:c4:c5:9b:49:da:0c:38:ed:a6:bf:39: 33:20:35:4f:a4:c7:9d:e9:ad:54:c2:79:35:3e:5d:bc:fc:ac: 17:b2:22:45:1b:dd:b2:9d:41:f8:cd:64:86:44:2e:e4:3f:c5: b9:7c:8d:81:08:57:09:c2:f9:38:a6:58:fe:da:4b:a4:e8:a1: 0b:59:f0:9c:5e:4b:91:cd:a3:a0:2f:9b:9d:2c:61:13:ee:34: fa:33:3a:00:a7:9a:a3:f0:8f:f9:38:21:7f:79:73:28:34:10: 2c:59:52:c6:9f:f5:55:a7:f0:37:f1:b6:f8:d9:79:79:4d:b5: d1:ab:63:ca:57:9e:fc:79:06:ca:8f:6c:b1:db:b4:74:78:9b: 09:a0:75:3d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEtkxPiXkeEm/u+B+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAwMzAwNDUyNFoXDTI4MDEwNjAxNDUyNFowLzEtMCsGA1UEAxMk MDRlYTA4ODAtMjE1Ni00YmZmLTk2MzUtZmViNzE2YWM2ZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXHkwrmczi57JkskX+3F2gIkjpMFx5kKfbMP mVNofnPHSdrPhoP2NOjxkrMvpQf+YwfUQznOENVK+eUJPir4FHVWTCiuaxoMr+VS sAgLf6VcF12YKuYnJrU3A/WJ3AZ+dauPfzSAJgXpF+lC7wvSLo6XfAsrTajq+Wqx LpyxGSsi9FCmAJZlIEYA5VXQJbnUFLZjQv263+w3TZBZZGL5M2ASILDSjkmS/dLE Kh0OPJuYqjKtZ8dHasMJTqSTyfbf9+FgzxEy3cgKN6yCn4q9PChmJq3n1hmbVAPU zBXJGnDIBk4tjkMlnrLBKGRQ0OurN/OnNYEqp0/LS6WDxXdmJwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFG46aKuiA2aJr+21yHJaOMT95By/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w NGVhMDg4MC0yMTU2LTRiZmYtOTYzNS1mZWI3MTZhYzZmYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzA0ZWEwODgwLTIxNTYtNGJmZi05 NjM1LWZlYjcxNmFjNmZhZS8wNGVhMDg4MC0yMTU2LTRiZmYtOTYzNS1mZWI3MTZh YzZmYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACqJxYwDgQCAAIwCAMGBCYC/UUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYUUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwC6VEOdFCDbstBD9SCfUw1tAI 3HVOifHiz2VBPFYmm7J5qZXDx/yg7+kwzTvvrIzzHstAzZKR60563isWQ/DlLCi5 I/N59AJUGnZ2rDDxXiu6gjyCu0KLZQix9IyGgeFHUqSLpta6VOiOYu0eyLBYfr7W xMWbSdoMOO2mvzkzIDVPpMed6a1Uwnk1Pl28/KwXsiJFG92ynUH4zWSGRC7kP8W5 fI2BCFcJwvk4plj+2kuk6KELWfCcXkuRzaOgL5udLGET7jT6MzoAp5qj8I/5OCF/ eXMoNBAsWVLGn/VVp/A38bb42Xl5TbXRq2PKV578eQbKj2yx27R0eJsJoHU9 -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:32 2025 by rpki-client