$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.cer File: 0f24a760-0a44-48c2-ad3f-8326d01b1ac5.cer (raw, json) Hash identifier: o0y7+B218A+v+08JHN5/9MC2BNa5ZAY0fjEqp6E104s= Subject key identifier: BD:9E:60:8F:1B:CB:AC:89:03:06:00:60:52:31:09:62:40:01:E8:6C Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F3FA5B04611C1B28D2A1C6F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Sep 2026 12:45:13 +0000 Certificate not after: Sun 24 Dec 2028 13:45:13 +0000 Subordinate resources: AS: 399760 IP: 45.45.148.0/24 IP: 2602:fc62::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:a5:b0:46:11:c1:b2:8d:2a:1c:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 21 12:45:13 2026 GMT Not After : Dec 24 13:45:13 2028 GMT Subject: CN=0f24a760-0a44-48c2-ad3f-8326d01b1ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6a:3d:0c:75:42:d1:b5:4a:09:70:1b:6a:b0: de:8c:72:61:75:65:9f:c4:ad:e5:04:62:03:ad:43: 15:6a:20:80:ff:6c:a4:bf:79:87:50:ef:9b:c9:c4: fa:34:05:62:06:91:c3:da:11:0b:4c:47:f2:5c:1b: 2e:73:10:cc:ca:53:0a:8e:c6:03:9b:2d:d5:af:6f: c2:07:19:eb:5f:08:3e:99:c7:fb:1d:65:24:47:21: 64:57:eb:13:41:3f:47:4d:dc:5e:49:17:f3:b0:5c: 7f:49:9a:3d:81:ff:67:79:e0:b4:93:78:7d:df:a2: 5f:a4:8f:13:9e:8c:b6:a3:e2:1f:bd:2f:93:89:6a: 51:3a:a6:9c:e2:0b:46:15:bf:85:41:67:30:fc:c5: 95:c6:2d:d5:53:cf:85:c9:3d:07:33:48:b3:94:5c: 32:35:ee:b8:f4:a0:a4:3f:2b:bc:f5:c5:49:8a:bb: d1:fa:9d:03:32:10:a9:7b:f8:46:ae:71:90:9a:a8: fa:a6:31:01:3e:1f:6f:9a:41:b9:88:fe:30:fb:b3: 39:7a:0e:19:ee:89:14:1a:c4:ed:48:9e:69:56:d7: 6f:24:34:28:fd:b2:64:f4:0f:eb:dd:db:29:6f:69: 4d:a9:6b:8b:fb:a8:24:2c:ca:02:01:67:76:f7:0d: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9E:60:8F:1B:CB:AC:89:03:06:00:60:52:31:09:62:40:01:E8:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.45.148.0/24 IPv6: 2602:fc62::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399760 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a7:1b:8e:62:22:8b:c4:68:c5:62:14:0b:9a:2c:51:35:fc: c1:bc:27:c4:ad:4e:59:6f:3e:87:91:39:d3:4d:c5:03:3c:c8: 82:59:46:13:c9:d0:1d:5e:8e:ce:96:06:f7:d7:8e:4f:06:54: 00:fd:69:fa:f1:9d:2a:73:64:de:5f:79:15:6b:c7:59:59:f4: 39:11:89:45:29:50:3f:e4:fb:25:9c:50:94:82:2d:2b:9b:7b: 91:9f:8b:15:a4:59:a0:12:fc:37:c4:70:a5:f0:f9:71:aa:73: a2:3a:9d:b4:95:fe:52:d1:0d:26:23:00:61:43:49:8c:87:2b: c4:95:f4:c7:0b:60:3b:52:43:de:53:7d:e3:ea:ec:4d:39:a5: 6f:2a:43:90:2c:0e:c2:30:9c:97:58:a9:fe:66:54:5c:6d:1f: 58:aa:61:54:94:5b:68:4c:d7:f9:97:a6:d2:2a:a0:86:3b:00: c0:5e:c4:eb:5e:d1:55:1c:d7:80:3a:07:52:97:4f:19:6e:c7: bb:f4:60:78:9d:63:90:44:e0:cb:14:3d:fc:bc:39:25:1b:f8: 7e:3a:25:12:cc:4d:4b:61:eb:fb:2a:7a:20:c5:b9:8b:8d:ae: 05:b1:42:84:e5:5f:46:0c:78:cd:83:61:5b:4f:cd:3e:63:42: da:d5:ec:ba -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE8/pbBGEcGyjSocbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDkyMTEyNDUxM1oXDTI4MTIyNDEzNDUxM1owLzEtMCsGA1UEAxMk MGYyNGE3NjAtMGE0NC00OGMyLWFkM2YtODMyNmQwMWIxYWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWo9DHVC0bVKCXAbarDejHJhdWWfxK3lBGID rUMVaiCA/2ykv3mHUO+bycT6NAViBpHD2hELTEfyXBsucxDMylMKjsYDmy3Vr2/C BxnrXwg+mcf7HWUkRyFkV+sTQT9HTdxeSRfzsFx/SZo9gf9neeC0k3h936JfpI8T noy2o+IfvS+TiWpROqac4gtGFb+FQWcw/MWVxi3VU8+FyT0HM0izlFwyNe649KCk Pyu89cVJirvR+p0DMhCpe/hGrnGQmqj6pjEBPh9vmkG5iP4w+7M5eg4Z7okUGsTt SJ5pVtdvJDQo/bJk9A/r3dspb2lNqWuL+6gkLMoCAWd29w1IOwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFL2eYI8by6yJAwYAYFIxCWJAAehsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w ZjI0YTc2MC0wYTQ0LTQ4YzItYWQzZi04MzI2ZDAxYjFhYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzBmMjRhNzYwLTBhNDQtNDhjMi1h ZDNmLTgzMjZkMDFiMWFjNS8wZjI0YTc2MC0wYTQ0LTQ4YzItYWQzZi04MzI2ZDAx YjFhYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAtLZQwDgQCAAIwCAMGACYC/GIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYZkDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxpxuOYiKLxGjFYhQLmixRNfzB vCfErU5Zbz6HkTnTTcUDPMiCWUYTydAdXo7Olgb3145PBlQA/Wn68Z0qc2TeX3kV a8dZWfQ5EYlFKVA/5PslnFCUgi0rm3uRn4sVpFmgEvw3xHCl8PlxqnOiOp20lf5S 0Q0mIwBhQ0mMhyvElfTHC2A7UkPeU33j6uxNOaVvKkOQLA7CMJyXWKn+ZlRcbR9Y qmFUlFtoTNf5l6bSKqCGOwDAXsTrXtFVHNeAOgdSl08Zbse79GB4nWOQRODLFD38 vDklG/h+OiUSzE1LYev7KnogxbmLja4FsUKE5V9GDHjNg2FbT80+Y0La1ey6 -----END CERTIFICATE-----Generated at Thu Sep 24 09:28:13 2026 by rpki-client