$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17420b0f-94a5-461d-b48f-cef231808b8a.cer File: 17420b0f-94a5-461d-b48f-cef231808b8a.cer (raw, json) Hash identifier: z4aGOCNzePGMxq4AmQRdxuQYRiBVfE14wjTfMQHzMUg= Subject key identifier: 97:94:64:67:71:EE:95:8F:39:43:A7:D0:CB:96:62:0E:95:2F:1B:F4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849E0B7FA5AE690E7A06EE05BF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17420b0f-94a5-461d-b48f-cef231808b8a/17420b0f-94a5-461d-b48f-cef231808b8a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17420b0f-94a5-461d-b48f-cef231808b8a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 17 May 2025 00:45:35 +0000 Certificate not after: Fri 20 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 14427 AS: 19893 AS: 26004 AS: 393423 AS: 395368 IP: 74.221.224.0/20 IP: 96.46.144.0/20 IP: 162.210.232.0/22 IP: 162.213.80.0/22 IP: 162.248.20.0/22 IP: 173.254.176.0/20 IP: 174.137.32.0/20 IP: 198.1.28.0/22 IP: 204.10.228.0/22 IP: 2606:9500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:b7:fa:5a:e6:90:e7:a0:6e:e0:5b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 17 00:45:35 2025 GMT Not After : Aug 20 00:45:35 2027 GMT Subject: CN=17420b0f-94a5-461d-b48f-cef231808b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c0:33:55:98:2d:dd:05:9e:51:2e:2d:5e:c2: 1d:c9:d2:61:b2:c2:2c:3b:6b:3f:ed:2c:05:fc:ab: f0:a1:24:16:6b:38:b4:13:5b:60:72:35:0f:d0:d1: 63:10:00:1f:b0:8d:f1:fa:18:48:11:13:d0:82:71: 74:93:1b:cf:0a:3f:f9:ad:11:a0:7e:d9:8f:c7:37: 59:89:a1:7a:2a:ce:0a:e1:f5:6a:7b:49:fa:37:7c: 7f:92:54:e5:6e:1c:ee:1c:4f:b3:4e:c2:29:03:15: 54:59:7a:30:3c:6d:40:1c:16:0b:c7:11:39:26:89: 4b:92:0f:ff:29:dd:d3:85:21:a5:3f:90:94:78:8e: 60:71:bc:4c:c0:ea:f9:76:89:04:0d:9c:96:6d:3c: a5:be:00:18:ab:17:21:a6:84:4c:75:da:13:2e:17: 17:e9:69:d1:ee:35:26:b9:47:6a:9a:8f:cf:4a:eb: c2:f8:6b:bc:bf:65:bf:11:a2:bd:17:8e:25:57:44: 6d:20:19:02:f9:a0:7b:1a:c8:e8:39:d6:a8:38:ca: d6:d4:46:88:e6:70:a7:88:f6:99:f2:5d:08:8b:9a: 8f:c9:46:4d:35:1f:a4:1b:d5:56:00:05:96:49:97: 6b:6d:cc:49:36:04:10:22:c4:97:cb:01:f8:23:9e: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:94:64:67:71:EE:95:8F:39:43:A7:D0:CB:96:62:0E:95:2F:1B:F4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17420b0f-94a5-461d-b48f-cef231808b8a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17420b0f-94a5-461d-b48f-cef231808b8a/17420b0f-94a5-461d-b48f-cef231808b8a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 74.221.224.0/20 96.46.144.0/20 162.210.232.0/22 162.213.80.0/22 162.248.20.0/22 173.254.176.0/20 174.137.32.0/20 198.1.28.0/22 204.10.228.0/22 IPv6: 2606:9500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14427 19893 26004 393423 395368 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:f5:fa:8f:88:c3:e4:3a:5d:17:57:dc:3a:d9:6a:c0:29:ea: 03:9a:0b:42:23:2f:d1:c1:2d:40:d5:ae:99:ed:57:89:a3:d1: 09:32:a4:37:31:24:60:76:b4:99:97:d1:9c:89:9f:03:ca:7f: f6:d1:6c:66:aa:80:51:28:50:05:c4:27:8e:a1:62:87:fa:a5: 19:c1:22:f6:2e:ea:aa:37:a1:94:41:62:0b:0c:b2:6a:f8:90: 71:62:5f:12:36:22:11:c0:e4:f2:99:6f:10:f9:11:16:42:d7: 87:6e:77:29:7c:72:85:b9:2a:02:34:4a:4f:23:9e:6f:50:5b: b4:14:77:a2:7c:90:12:26:f6:32:6e:d2:e2:90:3f:5c:a1:7b: 32:f1:34:c4:9d:31:39:d1:0c:dc:ba:d7:40:c1:bf:b8:bd:e1: b1:84:bb:b0:76:db:4a:53:17:c2:1f:55:a9:7c:2c:a9:1b:7d: 74:9a:f6:8b:c1:75:f1:20:4d:3e:98:7d:6f:d2:40:d4:cc:7f: e5:14:1e:0f:78:07:a8:b4:a1:ac:04:1e:30:a1:13:5a:2d:63: e2:e7:2c:88:43:52:48:76:16:09:b1:b3:d7:56:f5:05:d0:83: f1:ff:ec:71:da:d3:69:1f:9e:87:af:63:d4:b6:7f:51:7c:99: e8:17:27:8b -----BEGIN CERTIFICATE----- MIIHWTCCBkGgAwIBAgIUAQ0Mn0MoWEngt/pa5pDnoG7gW/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDUxNzAwNDUzNVoXDTI3MDgyMDAwNDUzNVowLzEtMCsGA1UEAxMk MTc0MjBiMGYtOTRhNS00NjFkLWI0OGYtY2VmMjMxODA4YjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsAzVZgt3QWeUS4tXsIdydJhssIsO2s/7SwF /KvwoSQWazi0E1tgcjUP0NFjEAAfsI3x+hhIERPQgnF0kxvPCj/5rRGgftmPxzdZ iaF6Ks4K4fVqe0n6N3x/klTlbhzuHE+zTsIpAxVUWXowPG1AHBYLxxE5JolLkg// Kd3ThSGlP5CUeI5gcbxMwOr5dokEDZyWbTylvgAYqxchpoRMddoTLhcX6WnR7jUm uUdqmo/PSuvC+Gu8v2W/EaK9F44lV0RtIBkC+aB7GsjoOdaoOMrW1EaI5nCniPaZ 8l0Ii5qPyUZNNR+kG9VWAAWWSZdrbcxJNgQQIsSXywH4I56J7wIDAQABo4IEazCC BGcwHQYDVR0OBBYEFJeUZGdx7pWPOUOn0MuWYg6VLxv0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x NzQyMGIwZi05NGE1LTQ2MWQtYjQ4Zi1jZWYyMzE4MDhiOGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzE3NDIwYjBmLTk0YTUtNDYxZC1i NDhmLWNlZjIzMTgwOGI4YS8xNzQyMGIwZi05NGE1LTQ2MWQtYjQ4Zi1jZWYyMzE4 MDhiOGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwXgYIKwYBBQUH AQcBAf8ETzBNMDwEAgABMDYDBARK3eADBARgLpADBAKi0ugDBAKi1VADBAKi+BQD BASt/rADBASuiSADBALGARwDBALMCuQwDQQCAAIwBwMFACYGlQAwKwYIKwYBBQUH AQgBAf8EHDAaoBgwFgICOFsCAk21AgJllAIDBgDPAgMGCGgwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnvX6 j4jD5DpdF1fcOtlqwCnqA5oLQiMv0cEtQNWume1XiaPRCTKkNzEkYHa0mZfRnImf A8p/9tFsZqqAUShQBcQnjqFih/qlGcEi9i7qqjehlEFiCwyyaviQcWJfEjYiEcDk 8plvEPkRFkLXh253KXxyhbkqAjRKTyOeb1BbtBR3onyQEib2Mm7S4pA/XKF7MvE0 xJ0xOdEM3LrXQMG/uL3hsYS7sHbbSlMXwh9VqXwsqRt9dJr2i8F18SBNPph9b9JA 1Mx/5RQeD3gHqLShrAQeMKETWi1j4ucsiENSSHYWCbGz11b1BdCD8f/scdrTaR+e h69j1LZ/UXyZ6Bcniw== -----END CERTIFICATE-----Generated at Wed Nov 5 06:51:52 2025 by rpki-client