$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92.cer File: 221fa56a-4e00-462c-9583-3f6493cb4c92.cer (raw, json) Hash identifier: b52l/qkhFxZFbNMvGD68HLwP/ywytbISnpX6yDWHJ8s= Subject key identifier: 59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584BC268A724D95D12D24F1D2D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Nov 2025 13:45:23 +0000 Certificate not after: Tue 08 Feb 2028 13:45:23 +0000 Subordinate resources: AS: 15020 IP: 216.73.160.0/22 IP: 2602:fc2a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:68:a7:24:d9:5d:12:d2:4f:1d:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 5 13:45:23 2025 GMT Not After : Feb 8 13:45:23 2028 GMT Subject: CN=221fa56a-4e00-462c-9583-3f6493cb4c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:36:e1:55:93:f4:33:c2:f6:39:45:5b:f9: cd:12:c9:6e:1e:96:7f:65:3a:c8:0a:30:b8:75:bd: 6b:a3:eb:97:e8:a6:2d:5c:e8:5f:f5:5b:9c:18:f3: bf:a8:4f:55:2f:9c:8f:bb:c0:82:8b:22:b9:cf:25: d0:b0:e7:4c:c8:21:78:88:2f:3b:6f:f9:46:cc:01: f9:cc:b2:bd:b3:3e:c5:bb:9d:af:0a:de:bd:9f:a7: 6f:c2:3a:bd:7f:f0:64:e4:63:a4:40:5d:ea:e3:4d: 3f:c8:cc:0f:b6:8c:70:0d:7a:60:9f:8d:7f:63:26: 67:c4:f5:c0:9d:7b:4a:26:47:9d:c9:68:7e:3f:03: 56:d8:00:1d:e8:3b:9d:fb:34:2e:6e:bc:ce:d1:8a: 3a:70:1b:4b:8b:13:45:17:70:86:c8:01:4d:85:cd: 75:a0:8e:57:3e:fc:f5:23:a0:bb:8b:72:da:9d:d1: 4e:56:cb:83:d5:5c:5d:a5:fe:92:ec:f9:41:99:4c: 6f:79:11:27:72:fc:7e:15:67:cd:f3:b5:10:bf:47: 42:4f:91:90:4c:fc:33:7d:2f:61:f6:bc:70:bc:ba: 75:ce:d9:8b:b5:13:cb:02:63:62:a3:5c:74:b6:c4: 14:f8:1a:55:43:18:f5:83:79:88:62:f4:66:fe:c2: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 216.73.160.0/22 IPv6: 2602:fc2a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15020 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:31:66:ae:1a:a2:d0:4a:45:33:01:52:11:b5:e8:9c:19:92: ba:8a:70:75:64:8e:cd:19:86:ef:c5:3d:af:6d:7a:42:af:ac: 2d:67:10:3c:31:cb:36:18:80:32:f8:54:64:05:6e:26:dd:9d: 31:6c:ee:9d:60:c9:e2:78:17:03:c4:83:0a:ab:22:ce:b4:03: 3a:69:f8:3f:02:3b:22:d6:24:3a:9b:60:78:2e:7e:06:cd:86: aa:06:72:0b:88:7e:d6:16:33:ec:42:3f:be:4d:ca:24:87:2c: fa:c1:61:c0:53:ec:69:b6:ae:e9:1b:7d:cb:f5:01:4c:46:3e: 7e:f3:e4:fa:60:e2:db:7f:0d:85:f0:4a:bc:dd:1f:ad:fe:2d: 5c:ad:f7:ed:18:56:8b:91:59:b2:59:45:c9:46:3b:1a:e1:10: 76:cd:95:94:4d:95:e0:40:cd:be:a7:a9:78:b5:76:39:5b:36: fd:71:5e:eb:d9:d3:a9:9f:58:55:7e:f9:c3:bc:d7:d2:a1:07: 81:4d:7a:35:cf:b7:cd:1f:db:ac:d9:c2:3a:29:d6:54:48:b2: 4d:d1:cd:09:4c:b9:b7:e9:ea:0e:0a:80:80:49:ae:1f:77:3e: fe:6b:1f:af:2c:85:ef:89:48:da:d7:7f:08:fa:b6:a7:c6:14: c9:84:3a:ff -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEvCaKck2V0S0k8dLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTEwNTEzNDUyM1oXDTI4MDIwODEzNDUyM1owLzEtMCsGA1UEAxMk MjIxZmE1NmEtNGUwMC00NjJjLTk1ODMtM2Y2NDkzY2I0YzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqow24VWT9DPC9jlFW/nNEsluHpZ/ZTrICjC4 db1ro+uX6KYtXOhf9VucGPO/qE9VL5yPu8CCiyK5zyXQsOdMyCF4iC87b/lGzAH5 zLK9sz7Fu52vCt69n6dvwjq9f/Bk5GOkQF3q400/yMwPtoxwDXpgn41/YyZnxPXA nXtKJkedyWh+PwNW2AAd6Dud+zQubrzO0Yo6cBtLixNFF3CGyAFNhc11oI5XPvz1 I6C7i3LandFOVsuD1Vxdpf6S7PlBmUxveREncvx+FWfN87UQv0dCT5GQTPwzfS9h 9rxwvLp1ztmLtRPLAmNio1x0tsQU+BpVQxj1g3mIYvRm/sKyYwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFnMtQ0FVzbSpcxE8VrIIP0Sj7drMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y MjFmYTU2YS00ZTAwLTQ2MmMtOTU4My0zZjY0OTNjYjRjOTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzIyMWZhNTZhLTRlMDAtNDYyYy05 NTgzLTNmNjQ5M2NiNGM5Mi8yMjFmYTU2YS00ZTAwLTQ2MmMtOTU4My0zZjY0OTNj YjRjOTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALYSaAwDgQCAAIwCAMGBCYC/CoAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjqsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIExZq4aotBKRTMBUhG16JwZkrqK cHVkjs0Zhu/FPa9tekKvrC1nEDwxyzYYgDL4VGQFbibdnTFs7p1gyeJ4FwPEgwqr Is60Azpp+D8COyLWJDqbYHgufgbNhqoGcguIftYWM+xCP75NyiSHLPrBYcBT7Gm2 rukbfcv1AUxGPn7z5Ppg4tt/DYXwSrzdH63+LVyt9+0YVouRWbJZRclGOxrhEHbN lZRNleBAzb6nqXi1djlbNv1xXuvZ06mfWFV++cO819KhB4FNejXPt80f26zZwjop 1lRIsk3RzQlMubfp6g4KgIBJrh93Pv5rH68she+JSNrXfwj6tqfGFMmEOv8= -----END CERTIFICATE-----Generated at Wed Nov 5 22:14:53 2025 by rpki-client