$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer File: 2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer (raw, json) Hash identifier: goUVLll8h5Ml9xZCrpwcJdUp90cmc5wZHJvbq83TRSE= Subject key identifier: 9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584BAA900E99A70C00CDBED09800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Oct 2025 00:45:22 +0000 Certificate not after: Mon 31 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 33194 IP: 2620:10:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:90:0e:99:a7:0c:00:cd:be:d0:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 28 00:45:22 2025 GMT Not After : Jan 31 01:45:22 2028 GMT Subject: CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7c:91:90:bb:86:db:95:43:78:ad:c8:36:e9: 69:a1:e2:e0:a0:dc:df:b7:2f:bc:e6:33:f1:14:0f: b6:0e:46:0e:79:31:90:e2:b4:94:4d:e6:df:07:87: 66:05:ad:4d:32:24:24:f9:8c:ad:c1:75:d8:d5:de: c2:cd:37:25:4b:7c:c1:bc:8f:e9:88:5a:15:eb:da: df:01:0d:e6:56:5f:7e:9f:95:fa:e1:fe:09:9b:cd: af:67:8a:fb:1c:45:d8:30:97:a5:af:f9:1a:46:1f: 93:61:fa:fd:16:d5:e8:3a:f1:af:f4:42:a3:04:86: f3:17:40:fa:f8:05:18:f3:47:ad:55:f3:6c:b5:83: 63:a8:ee:c0:78:e7:7d:af:54:d5:5d:9e:2b:74:60: b2:bc:3e:c4:f4:0c:f4:33:f0:fe:ea:3b:53:88:0b: 9e:c1:1d:7e:10:d0:4d:7e:96:e0:02:8e:3e:12:df: 66:d6:b3:f5:0d:e9:82:5f:4d:bf:b1:9b:2d:ff:28: 23:d7:16:b4:1e:3a:e4:ff:dc:33:8a:fa:4d:2c:c6: b3:3b:4c:bc:7d:6c:b5:87:47:83:f3:3e:a2:af:1c: eb:00:7e:d3:2e:90:7c:91:cf:9e:e5:a4:d4:94:38: 36:79:8e:53:4e:55:8c:c2:48:ba:7c:a4:ae:04:84: b6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv6: 2620:10:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33194 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:95:5c:f1:b3:25:ce:e3:23:be:46:a5:a4:a7:f3:fc:93:52: 9d:36:a1:f2:67:e6:59:d1:f1:31:ba:6f:ae:22:ea:2c:fb:93: a3:5f:21:78:5c:59:b1:17:f4:4a:b2:ac:0d:70:eb:52:75:9b: bb:81:79:15:db:17:98:31:f1:c7:e4:49:ab:85:c3:03:47:cf: 79:ff:f8:92:e2:46:63:30:f9:2d:8d:b2:dc:47:8a:eb:81:54: 3f:48:d1:53:d7:5a:f1:08:a9:94:e2:32:9b:1f:fd:f7:9a:b0: 9f:1b:dc:a6:7b:d6:21:19:28:38:2b:2f:cf:66:a1:93:b3:65: ee:6a:a9:ca:47:08:a9:86:9b:23:b5:98:a0:15:ff:61:23:26: d4:3d:bc:bd:dd:a8:56:49:aa:2a:d4:e3:e0:3c:68:0e:7a:f0: aa:ea:57:fd:6a:c5:32:47:2b:26:58:df:30:c9:7b:84:89:1a: 15:7a:c7:95:47:d8:e2:dd:71:9e:f5:34:5e:28:79:55:26:3d: 46:8e:1f:b4:61:b8:41:38:f3:f6:a5:22:a3:81:91:8c:69:b5: 95:84:62:00:eb:0f:01:74:66:8f:28:cb:79:08:ae:5e:30:e8: 67:bd:30:bd:4d:1e:f8:3b:f2:53:b8:43:9b:b7:91:e9:fd:d4: 8f:f0:11:b6 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEuqkA6ZpwwAzb7QmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAyODAwNDUyMloXDTI4MDEzMTAxNDUyMlowLzEtMCsGA1UEAxMk MmZiNDk1ZmEtYjViMi00ZDQ3LWFhYjAtYmI0NzZjYTYxOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33yRkLuG25VDeK3INulpoeLgoNzfty+85jPx FA+2DkYOeTGQ4rSUTebfB4dmBa1NMiQk+YytwXXY1d7CzTclS3zBvI/piFoV69rf AQ3mVl9+n5X64f4Jm82vZ4r7HEXYMJelr/kaRh+TYfr9FtXoOvGv9EKjBIbzF0D6 +AUY80etVfNstYNjqO7AeOd9r1TVXZ4rdGCyvD7E9Az0M/D+6jtTiAuewR1+ENBN fpbgAo4+Et9m1rP1DemCX02/sZst/ygj1xa0Hjrk/9wzivpNLMazO0y8fWy1h0eD 8z6irxzrAH7TLpB8kc+e5aTUlDg2eY5TTlWMwki6fKSuBIS2qwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFJwnQoVY1NaqfffFi5JsNp2khX+UMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y ZmI0OTVmYS1iNWIyLTRkNDctYWFiMC1iYjQ3NmNhNjE5NjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzJmYjQ5NWZhLWI1YjItNGQ0Ny1h YWIwLWJiNDc2Y2E2MTk2My8yZmI0OTVmYS1iNWIyLTRkNDctYWFiMC1iYjQ3NmNh NjE5NjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAAQoAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDAIGqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBADyVXPGzJc7jI75GpaSn8/yTUp02ofJn5lnR8TG6b64i 6iz7k6NfIXhcWbEX9EqyrA1w61J1m7uBeRXbF5gx8cfkSauFwwNHz3n/+JLiRmMw +S2NstxHiuuBVD9I0VPXWvEIqZTiMpsf/feasJ8b3KZ71iEZKDgrL89moZOzZe5q qcpHCKmGmyO1mKAV/2EjJtQ9vL3dqFZJqirU4+A8aA568KrqV/1qxTJHKyZY3zDJ e4SJGhV6x5VH2OLdcZ71NF4oeVUmPUaOH7RhuEE48/alIqOBkYxptZWEYgDrDwF0 Zo8oy3kIrl4w6Ge9ML1NHvg78lO4Q5u3ken91I/wEbY= -----END CERTIFICATE-----Generated at Wed Nov 5 14:23:23 2025 by rpki-client