$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer File: 1b14096a-f8aa-4856-9b09-db3034f885a7.cer (raw, json) Hash identifier: T1YrY4P45+aUg3x4gxrkYZVhkzEcXpXTtAhbTS8qODs= Subject key identifier: A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584CE4BFCC7585E97975C754D900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Feb 2026 13:45:23 +0000 Certificate not after: Mon 22 May 2028 12:45:23 +0000 Subordinate resources: AS: 399446 IP: 209.151.104.0/22 IP: 209.209.100.0/22 IP: 2606:30c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e4:bf:cc:75:85:e9:79:75:c7:54:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 17 13:45:23 2026 GMT Not After : May 22 12:45:23 2028 GMT Subject: CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b5:9e:03:f1:87:9f:8c:c5:17:e7:1a:4a:b3: 18:3d:99:4c:6c:5b:d9:9a:6a:38:0d:0d:0a:e0:7a: 59:e4:60:f5:44:6b:10:78:1a:7f:de:db:ed:53:35: 51:af:c9:47:c8:c8:d4:27:00:b4:ca:a0:8a:f0:74: d9:c6:d0:16:a8:b2:e3:71:00:7e:f5:03:df:c6:4a: ad:04:b0:ea:51:93:66:27:66:be:f2:cf:91:60:4f: 6c:c3:6a:73:73:5a:3a:31:a5:6e:98:b0:36:0a:b3: 93:dc:77:61:04:33:d7:62:ee:02:70:ff:d7:6a:8a: 22:9a:1d:24:11:3c:44:f9:02:b3:63:5b:1b:27:f0: a2:6c:4a:91:15:d6:30:83:5d:c4:4f:dc:a1:e3:10: 3b:47:83:dc:4c:94:ee:a8:55:d2:04:31:c7:71:be: 72:35:46:86:e1:36:6b:1b:97:6a:e6:b5:27:09:1b: 48:c2:2e:56:57:19:48:1e:f2:de:84:f6:de:a3:e7: 9b:78:b0:3c:7a:b1:10:e7:0b:79:85:6e:b4:70:34: 2f:f6:59:38:a8:29:38:17:f3:96:f9:78:61:1f:f3: 4d:6b:63:ed:f2:32:ab:53:e8:35:55:f1:0e:b4:6e: 07:c5:15:d5:b4:4e:5f:b1:fe:8c:88:f3:86:32:02: 1e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 209.151.104.0/22 209.209.100.0/22 IPv6: 2606:30c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399446 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:11:af:02:a1:d9:7b:5a:ec:c4:fc:01:51:cc:b2:2c:31:a5: ff:9d:4d:dd:9e:8f:ab:62:3c:c5:ca:2c:11:a2:74:40:41:0f: 29:07:c7:89:35:10:01:38:ef:56:e4:7a:49:bf:d7:4b:25:e4: a7:fa:71:fe:47:da:65:cb:c8:42:f3:8c:00:3e:ed:8e:2d:28: c9:0b:ed:5d:c2:16:1e:5b:04:85:00:40:62:73:f8:ee:19:97: 8e:8b:cf:e7:4c:5e:df:de:9f:cd:1d:c6:ac:39:4a:5f:47:66: 5f:83:54:01:88:84:c3:38:82:9d:94:66:34:49:a7:ce:45:50: f0:b2:1e:81:94:48:2f:22:3f:65:cb:19:1f:6b:7a:d6:a0:2a: e1:43:51:37:82:f9:56:30:24:20:a3:94:72:98:dd:3d:d6:33: c3:c1:b2:ce:9b:14:38:16:67:68:b8:88:81:9c:9a:79:58:b5: 69:3a:5a:42:b3:ac:94:82:36:3b:62:f8:aa:41:05:31:b7:7a: 12:2e:91:96:d1:43:11:59:33:e0:ed:e8:a0:71:2b:51:3b:f0: 6c:4a:e6:c1:58:57:b7:d2:08:c1:f8:1a:9d:70:1e:fc:70:e0: e8:70:cd:e2:b4:8c:47:da:e2:dd:65:5e:ef:fa:b3:7b:61:ee: 1e:c9:06:ae -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEzkv8x1hel5dcdU2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDIxNzEzNDUyM1oXDTI4MDUyMjEyNDUyM1owLzEtMCsGA1UEAxMk MWIxNDA5NmEtZjhhYS00ODU2LTliMDktZGIzMDM0Zjg4NWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLWeA/GHn4zFF+caSrMYPZlMbFvZmmo4DQ0K 4HpZ5GD1RGsQeBp/3tvtUzVRr8lHyMjUJwC0yqCK8HTZxtAWqLLjcQB+9QPfxkqt BLDqUZNmJ2a+8s+RYE9sw2pzc1o6MaVumLA2CrOT3HdhBDPXYu4CcP/Xaooimh0k ETxE+QKzY1sbJ/CibEqRFdYwg13ET9yh4xA7R4PcTJTuqFXSBDHHcb5yNUaG4TZr G5dq5rUnCRtIwi5WVxlIHvLehPbeo+ebeLA8erEQ5wt5hW60cDQv9lk4qCk4F/OW +XhhH/NNa2Pt8jKrU+g1VfEOtG4HxRXVtE5fsf6MiPOGMgIerQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFKjMF02Hzpchxm8a2YZnt8pBgu8fMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x YjE0MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMwMzRmODg1YTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzFiMTQwOTZhLWY4YWEtNDg1Ni05 YjA5LWRiMzAzNGY4ODVhNy8xYjE0MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMwMzRm ODg1YTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALRl2gDBALR0WQwDQQCAAIwBwMFACYGMMAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhhWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAURrwKh2Xta7MT8AVHM siwxpf+dTd2ej6tiPMXKLBGidEBBDykHx4k1EAE471bkekm/10sl5Kf6cf5H2mXL yELzjAA+7Y4tKMkL7V3CFh5bBIUAQGJz+O4Zl46Lz+dMXt/en80dxqw5Sl9HZl+D VAGIhMM4gp2UZjRJp85FUPCyHoGUSC8iP2XLGR9retagKuFDUTeC+VYwJCCjlHKY 3T3WM8PBss6bFDgWZ2i4iIGcmnlYtWk6WkKzrJSCNjti+KpBBTG3ehIukZbRQxFZ M+Dt6KBxK1E78GxK5sFYV7fSCMH4Gp1wHvxw4OhwzeK0jEfa4t1lXu/6s3th7h7J Bq4= -----END CERTIFICATE-----Generated at Sun Mar 1 23:17:34 2026 by rpki-client