$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer File: 37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer (raw, json) Hash identifier: tpvwQILGZ5nlxvLoqN70CSwA7u/BtQXbSPM87vVzV7U= Subject key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849928CD152F8812E1AEBD60F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Apr 2025 00:45:34 +0000 Certificate not after: Fri 23 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 13413 AS: 22166 AS: 30269 AS: 36001 AS: 62684 AS: 393429 IP: 97.107.32.0/20 IP: 104.192.244.0/22 IP: 134.195.20.0/22 IP: 139.60.8.0/21 IP: 162.210.60.0/22 IP: 172.98.220.0/22 IP: 173.242.80.0/20 IP: 192.200.136.0/21 IP: 199.167.212.0/22 IP: 206.126.208.0/20 IP: 209.103.224.0/19 IP: 216.127.192.0/19 IP: 2605:bbc0::/32 IP: 2606:3d00::/32 IP: 2606:ab80::/32 IP: 2607:580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:8c:d1:52:f8:81:2e:1a:eb:d6:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 19 00:45:34 2025 GMT Not After : Jul 23 00:45:34 2027 GMT Subject: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:bc:87:75:75:eb:51:1e:7f:d8:4a:23:91: 2d:41:c5:78:26:b9:2a:61:86:2b:07:62:15:6a:c5: 58:69:63:0d:8d:89:58:02:f9:cb:9e:18:04:14:24: 6d:cf:60:11:2b:07:2c:47:c4:6f:c1:ef:e5:d6:9b: b1:3a:c1:8f:aa:17:81:ea:81:a0:c1:46:62:db:5b: 78:da:b2:4a:29:23:3d:ec:3a:76:69:64:a1:3a:22: d5:ee:21:25:e6:d5:d1:74:62:b6:12:da:e7:97:15: 2f:cd:57:9a:aa:03:56:cd:be:96:35:ef:a2:d9:08: 7f:b3:18:62:cc:c9:17:96:f9:d7:01:5f:57:13:d5: f2:f9:6d:04:68:7b:d0:34:a2:6a:d2:05:85:07:14: 5b:aa:cd:8f:4f:00:70:d2:b3:2a:d1:fb:e3:d3:49: 1a:c8:12:8a:de:0d:2c:38:81:d5:36:a6:fd:ac:d3: fc:75:13:c0:84:48:9c:16:50:fa:10:c6:f7:cb:fe: 86:f1:a9:ad:f4:9f:c6:06:bf:ec:54:6d:73:8f:09: b9:82:51:86:9e:6c:57:00:8d:57:6b:a0:8d:22:71: 6f:84:c7:60:e6:e2:55:97:65:05:28:1b:2a:83:69: 49:53:cf:07:3c:1e:a6:95:48:6f:f1:1f:a6:71:54: 4b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 97.107.32.0/20 104.192.244.0/22 134.195.20.0/22 139.60.8.0/21 162.210.60.0/22 172.98.220.0/22 173.242.80.0/20 192.200.136.0/21 199.167.212.0/22 206.126.208.0/20 209.103.224.0/19 216.127.192.0/19 IPv6: 2605:bbc0::/32 2606:3d00::/32 2606:ab80::/32 2607:580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13413 22166 30269 36001 62684 393429 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ef:af:a5:6b:30:f7:72:4e:b6:58:c8:2c:79:43:cc:a7:f5: 4a:67:95:cb:a8:da:c3:c9:c1:f4:33:62:af:21:14:ac:50:ec: 14:3a:97:d4:ef:99:35:0a:67:f7:c8:59:0a:58:a3:a8:fe:9f: 28:f1:79:86:77:4b:71:f8:ee:6b:be:ba:08:e3:ee:44:a3:25: f6:ed:d2:13:8e:fe:90:7a:e1:f9:00:e0:5e:a6:fd:a3:e0:c4: 5e:ca:af:67:91:80:3c:7c:aa:84:b8:9f:6e:c4:58:52:6e:02: e6:75:a0:98:b5:61:af:0a:e0:33:50:41:15:61:f4:43:18:db: 7e:27:0d:62:5a:c9:f2:76:63:eb:cf:00:ec:3f:72:ec:00:dd: a0:63:a7:b4:7a:48:8b:ff:52:fd:b6:19:e4:fa:53:a4:8f:2b: bb:1a:ec:78:ff:c0:31:18:c0:96:4d:40:f4:69:66:55:1f:87: 31:22:93:14:77:51:e9:3d:b1:3a:b6:30:66:aa:cf:ab:13:4b: 93:9e:1e:a0:67:bc:89:ea:5a:e4:65:9c:ca:ca:a4:b0:94:da: 89:6b:d4:d1:b3:ee:42:a6:90:a0:b9:e8:cb:13:46:f0:d8:63: ca:5f:bd:e8:44:91:a5:77:09:32:47:2f:f3:a6:3e:17:25:64: ea:a4:48:b8 -----BEGIN CERTIFICATE----- MIIHhjCCBm6gAwIBAgIUAQ0Mn0MoWEmSjNFS+IEuGuvWD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDQxOTAwNDUzNFoXDTI3MDcyMzAwNDUzNFowLzEtMCsGA1UEAxMk MzdhMWJmZjMtY2ZmMi00MWY4LWExZDItOGExMGNhZDdlMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+C8h3V161Eef9hKI5EtQcV4JrkqYYYrB2IV asVYaWMNjYlYAvnLnhgEFCRtz2ARKwcsR8Rvwe/l1puxOsGPqheB6oGgwUZi21t4 2rJKKSM97Dp2aWShOiLV7iEl5tXRdGK2EtrnlxUvzVeaqgNWzb6WNe+i2Qh/sxhi zMkXlvnXAV9XE9Xy+W0EaHvQNKJq0gWFBxRbqs2PTwBw0rMq0fvj00kayBKK3g0s OIHVNqb9rNP8dRPAhEicFlD6EMb3y/6G8amt9J/GBr/sVG1zjwm5glGGnmxXAI1X a6CNInFvhMdg5uJVl2UFKBsqg2lJU88HPB6mlUhv8R+mcVRLGwIDAQABo4IEmDCC BJQwHQYDVR0OBBYEFAyMoEFuINBVpTNFd7F+UTYzIhFwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z N2ExYmZmMy1jZmYyLTQxZjgtYTFkMi04YTEwY2FkN2UzNDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzM3YTFiZmYzLWNmZjItNDFmOC1h MWQyLThhMTBjYWQ3ZTM0MC8zN2ExYmZmMy1jZmYyLTQxZjgtYTFkMi04YTEwY2Fk N2UzNDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgYUGCCsGAQUF BwEHAQH/BHYwdDBOBAIAATBIAwQEYWsgAwQCaMD0AwQChsMUAwQDizwIAwQCotI8 AwQCrGLcAwQErfJQAwQDwMiIAwQCx6fUAwQEzn7QAwQF0WfgAwQF2H/AMCIEAgAC MBwDBQAmBbvAAwUAJgY9AAMFACYGq4ADBQAmBwWAMDAGCCsGAQUFBwEIAQH/BCEw H6AdMBsCAjRlAgJWlgICdj0CAwCMoQIDAPTcAgMGANUwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAme+vpWsw 93JOtljILHlDzKf1SmeVy6jaw8nB9DNiryEUrFDsFDqX1O+ZNQpn98hZClijqP6f KPF5hndLcfjua766COPuRKMl9u3SE47+kHrh+QDgXqb9o+DEXsqvZ5GAPHyqhLif bsRYUm4C5nWgmLVhrwrgM1BBFWH0QxjbficNYlrJ8nZj688A7D9y7ADdoGOntHpI i/9S/bYZ5PpTpI8ruxrseP/AMRjAlk1A9GlmVR+HMSKTFHdR6T2xOrYwZqrPqxNL k54eoGe8iepa5GWcysqksJTaiWvU0bPuQqaQoLnoyxNG8Nhjyl+96ESRpXcJMkcv 86Y+FyVk6qRIuA== -----END CERTIFICATE-----Generated at Wed Nov 5 06:45:56 2025 by rpki-client