$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer File: 3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer (raw, json) Hash identifier: ajQj5Hzh/Fr3dJH5EaPX4QuACVkwosSgEb7r5z1kTaI= Subject key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584BB0256F89A1A6DB510324BC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Oct 2025 00:45:24 +0000 Certificate not after: Wed 02 Feb 2028 01:45:24 +0000 Subordinate resources: AS: 6977 IP: 23.188.16.0/21 IP: 172.98.32.0/22 IP: 2602:fc4b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:25:6f:89:a1:a6:db:51:03:24:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 30 00:45:24 2025 GMT Not After : Feb 2 01:45:24 2028 GMT Subject: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5c:10:0a:45:94:64:fb:cf:1f:47:9c:c4:fb: 77:72:fc:60:0d:6e:3d:97:a9:09:57:9c:ae:f3:af: 3f:71:95:a9:8b:c1:23:2d:4b:b4:43:3f:47:ed:2d: f1:45:89:68:6c:5b:3d:01:e6:93:43:50:e7:37:1f: df:2f:3d:8d:c0:6b:69:c4:6c:99:0d:3f:9f:4f:50: ac:de:06:c8:55:88:0e:e8:1f:95:53:03:26:10:a7: 05:8e:5d:5b:f4:15:c5:b7:70:3b:79:ea:06:a2:fb: 8a:2e:32:76:62:85:20:82:51:69:e8:57:f6:09:98: d7:79:d1:0d:cd:5b:6c:12:ad:bc:5f:0e:04:2e:59: 6e:6b:a6:d9:20:c5:3a:d5:39:65:c0:b1:ff:bc:19: 3e:95:19:a9:c0:7f:f0:c4:26:00:9e:3b:7b:b6:6a: 07:82:2e:f9:78:9e:ab:ac:46:90:f1:0f:bb:69:4b: df:18:84:cf:3e:20:11:a6:3c:9b:f6:69:0e:d1:7f: 17:eb:6e:eb:07:f9:71:40:a9:37:68:e7:1b:18:d0: ad:a6:9f:d3:23:05:74:85:ac:53:1e:d0:22:e1:e0: 8a:27:55:4d:14:a7:01:af:55:9c:3d:c5:71:8d:14: 6f:c8:11:84:57:18:94:e6:43:26:d5:c8:21:55:79: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.188.16.0/21 172.98.32.0/22 IPv6: 2602:fc4b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6977 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:9d:6e:ee:f1:80:93:af:fb:19:41:a5:a4:6b:cc:8f:51:f5: 32:8a:92:49:b8:f6:23:b4:7d:3f:7d:2f:27:b4:0b:06:9b:a1: 83:b1:d2:f3:11:e5:64:e8:4e:89:cc:2a:75:3e:a5:53:e1:ce: 74:a7:0b:d7:66:0a:5f:6e:d2:a5:d3:6b:5d:05:89:67:37:ec: 1e:87:37:51:f0:d0:3f:f7:4a:e6:ef:b6:6c:59:7a:c8:2a:86: 41:c6:da:cf:e1:91:a5:2c:91:f9:6e:c5:e2:9e:37:18:7f:8c: 23:4b:25:dc:12:38:09:e1:e0:98:4f:30:3e:e8:8c:23:e9:af: 63:5b:37:79:c3:54:d2:dd:6f:22:35:fc:dc:12:04:92:9e:3c: b0:9d:54:5a:79:66:f7:90:1d:c3:3e:92:c8:f5:8d:47:84:ee: 05:f6:f0:ad:e1:2c:52:1f:04:57:19:35:80:d9:d5:f7:b9:c6: 08:95:a3:6a:20:e6:87:ff:44:5c:92:e4:bd:5a:ae:1d:9a:27: bb:f9:8d:2d:88:92:16:a4:bc:05:20:0c:65:e4:ef:d7:c1:f0: e8:ab:58:17:32:d9:fc:05:1a:1b:0f:7d:71:bf:c3:1b:f8:4a: 99:50:26:cb:f7:6b:d5:ae:b1:ae:d0:74:96:e0:e8:0d:9a:3e: dd:6c:6f:8b -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEuwJW+JoabbUQMkvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAzMDAwNDUyNFoXDTI4MDIwMjAxNDUyNFowLzEtMCsGA1UEAxMk M2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5YjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFwQCkWUZPvPH0ecxPt3cvxgDW49l6kJV5yu 868/cZWpi8EjLUu0Qz9H7S3xRYlobFs9AeaTQ1DnNx/fLz2NwGtpxGyZDT+fT1Cs 3gbIVYgO6B+VUwMmEKcFjl1b9BXFt3A7eeoGovuKLjJ2YoUgglFp6Ff2CZjXedEN zVtsEq28Xw4ELllua6bZIMU61TllwLH/vBk+lRmpwH/wxCYAnjt7tmoHgi75eJ6r rEaQ8Q+7aUvfGITPPiARpjyb9mkO0X8X627rB/lxQKk3aOcbGNCtpp/TIwV0haxT HtAi4eCKJ1VNFKcBr1WcPcVxjRRvyBGEVxiU5kMm1cghVXnmxwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFPYpvfjWUMpDhTEFJ4EgY0g6SlhbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z ZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzNlYjYwMjUzLWYwMmQtNDcyMy05 OTlmLWUyZTNlMGZkOWIxMi8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBm ZDliMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAMXvBADBAKsYiAwDgQCAAIwCAMGBCYC/EsAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAhtBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH2dbu7xgJOv+xlBpaRr zI9R9TKKkkm49iO0fT99Lye0CwaboYOx0vMR5WToTonMKnU+pVPhznSnC9dmCl9u 0qXTa10FiWc37B6HN1Hw0D/3SubvtmxZesgqhkHG2s/hkaUskfluxeKeNxh/jCNL JdwSOAnh4JhPMD7ojCPpr2NbN3nDVNLdbyI1/NwSBJKePLCdVFp5ZveQHcM+ksj1 jUeE7gX28K3hLFIfBFcZNYDZ1fe5xgiVo2og5of/RFyS5L1arh2aJ7v5jS2Ikhak vAUgDGXk79fB8OirWBcy2fwFGhsPfXG/wxv4SplQJsv3a9Wusa7QdJbg6A2aPt1s b4s= -----END CERTIFICATE-----Generated at Wed Nov 5 04:05:21 2025 by rpki-client