$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer File: 1347cdae-54c7-4fcb-9019-0bee16977198.cer (raw, json) Hash identifier: RofOusHA4LNsxrGGc0lYBmkj3VnsHLZh13HNmQ8M0vw= Subject key identifier: 29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584AB2192FE733CB9D61271D4B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 31 Jul 2025 00:45:23 +0000 Certificate not after: Wed 03 Nov 2027 00:45:23 +0000 Subordinate resources: IP: 130.74.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:19:2f:e7:33:cb:9d:61:27:1d:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 31 00:45:23 2025 GMT Not After : Nov 3 00:45:23 2027 GMT Subject: CN=1347cdae-54c7-4fcb-9019-0bee16977198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:06:76:6e:a0:45:83:d6:04:11:de:3f:1b: d7:2f:a4:45:89:6e:96:16:5f:83:5b:50:f7:df:dc: 08:22:66:23:d4:f2:29:d0:e8:a8:c5:19:50:db:08: 91:35:ad:a6:80:5e:84:86:45:16:b0:35:f8:71:52: 8d:bb:e6:9c:d2:45:68:d9:3c:4d:2c:58:ae:57:59: d7:e8:50:a8:a0:24:42:c0:67:7c:47:dc:b3:ea:1d: 3d:62:b4:02:a6:86:0f:13:3a:4b:4a:b0:94:43:a9: f3:01:3c:01:a8:94:e0:ec:be:03:cb:03:f0:54:b0: e0:6e:bc:8e:51:80:ae:ea:2a:c3:cb:bb:3f:d9:f0: c2:37:e3:b3:73:31:60:09:42:7d:d9:0f:74:a5:77: 8d:01:29:47:a0:3f:37:78:40:42:4f:7a:a6:fd:07: dc:9e:17:4d:51:b6:e4:c9:4e:e6:a8:16:bb:d3:9a: cc:e8:8c:f8:30:12:ee:e0:31:ef:db:27:28:fe:3a: d8:fe:74:da:a4:47:92:00:b7:43:c8:5f:59:8c:c8: 94:7b:e8:5c:2a:c3:27:50:0e:8d:09:45:5c:b0:da: 9b:6e:68:8a:6f:81:02:14:24:08:06:24:06:15:bd: ae:8f:51:16:1e:c8:f1:89:43:db:b2:10:d1:ce:dd: 24:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 130.74.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:58:22:8c:8b:51:e1:08:59:5a:b1:be:88:f5:2c:80:53:29: 31:2f:69:a3:d2:dd:37:c9:70:59:63:0c:28:ed:cc:e3:c9:6b: 66:fb:15:31:ea:48:c8:d3:39:7c:b0:a0:65:c3:93:f9:05:5a: 60:d9:c5:fc:f4:37:b6:6a:3c:2c:9e:38:c5:0b:e1:99:be:f1: 47:8c:b1:41:7e:fa:34:ee:7e:90:3a:37:09:fb:cf:61:1a:02: 95:03:68:5b:9f:62:82:43:c2:14:eb:1b:89:d6:fa:b9:aa:27: ec:19:7c:15:18:76:9c:00:87:9a:e4:c6:17:de:1d:d1:53:22: 7f:45:b7:80:f0:c0:d9:ee:8e:17:a2:a1:4f:32:8b:fe:ad:ea: b8:71:35:6c:24:c7:f8:d8:0b:be:5e:c7:a6:97:57:3d:a7:ce: 9a:92:a7:34:c9:80:cb:6b:f4:ed:f2:fe:96:6a:f4:e2:42:1f: 0e:d4:65:b9:5a:0a:c2:7a:16:c5:4c:8a:ae:58:24:83:ea:d7: 73:2a:af:35:44:09:01:0d:87:00:b6:19:4c:e8:43:36:11:9b: f7:0a:71:80:63:2b:f9:32:1e:54:a3:12:a9:33:a0:b6:d1:07: 75:24:79:57:bd:f9:fa:b6:71:4b:a5:0c:2f:cb:1b:66:7f:1f: 47:8b:36:e9 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEqyGS/nM8udYScdSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDczMTAwNDUyM1oXDTI3MTEwMzAwNDUyM1owLzEtMCsGA1UEAxMk MTM0N2NkYWUtNTRjNy00ZmNiLTkwMTktMGJlZTE2OTc3MTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWUGdm6gRYPWBBHePxvXL6RFiW6WFl+DW1D3 39wIImYj1PIp0OioxRlQ2wiRNa2mgF6EhkUWsDX4cVKNu+ac0kVo2TxNLFiuV1nX 6FCooCRCwGd8R9yz6h09YrQCpoYPEzpLSrCUQ6nzATwBqJTg7L4DywPwVLDgbryO UYCu6irDy7s/2fDCN+OzczFgCUJ92Q90pXeNASlHoD83eEBCT3qm/QfcnhdNUbbk yU7mqBa705rM6Iz4MBLu4DHv2yco/jrY/nTapEeSALdDyF9ZjMiUe+hcKsMnUA6N CUVcsNqbbmiKb4ECFCQIBiQGFb2uj1EWHsjxiUPbshDRzt0kcwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFCnJPkG2hvsL6lMXQMuR0LE0sjbwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x MzQ3Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVlMTY5NzcxOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzEzNDdjZGFlLTU0YzctNGZjYi05 MDE5LTBiZWUxNjk3NzE5OC8xMzQ3Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVlMTY5 NzcxOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCCSjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDWCKMi1HhCFlasb6I9SyA UykxL2mj0t03yXBZYwwo7czjyWtm+xUx6kjI0zl8sKBlw5P5BVpg2cX89De2ajws njjFC+GZvvFHjLFBfvo07n6QOjcJ+89hGgKVA2hbn2KCQ8IU6xuJ1vq5qifsGXwV GHacAIea5MYX3h3RUyJ/RbeA8MDZ7o4XoqFPMov+req4cTVsJMf42Au+Xseml1c9 p86akqc0yYDLa/Tt8v6WavTiQh8O1GW5WgrCehbFTIquWCSD6tdzKq81RAkBDYcA thlM6EM2EZv3CnGAYyv5Mh5UoxKpM6C20Qd1JHlXvfn6tnFLpQwvyxtmfx9Hizbp -----END CERTIFICATE-----Generated at Wed Nov 5 04:05:50 2025 by rpki-client