$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer File: 3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer (raw, json) Hash identifier: TjAeT775qmdxu+VeJu94zogNoXY7PkULUbLta4tLCy4= Subject key identifier: 1E:1F:F9:04:87:DB:76:48:3A:3D:D0:EF:C1:36:6D:20:B0:3C:42:4B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584E0681F2AE0411B104978B2A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Jun 2026 08:45:11 +0000 Certificate not after: Sun 03 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 30407 IP: 98.142.240.0/20 IP: 104.234.0.0/16 IP: 206.53.48.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:06:81:f2:ae:04:11:b1:04:97:8b:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 1 08:45:11 2026 GMT Not After : Sep 3 08:45:11 2028 GMT Subject: CN=3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:4a:d5:1c:64:df:ee:63:a5:23:9a:e0:7f: 43:84:6b:27:82:4c:53:e5:20:99:a3:78:59:f9:9c: ef:d0:ce:b2:7d:c7:07:ab:bd:19:59:5c:d7:cc:04: ad:27:9b:d1:20:46:5c:89:2c:a3:2a:0d:e5:dd:ae: a4:20:3b:a1:ab:80:c1:f6:c2:29:c1:33:ec:a5:2d: b9:fd:55:b7:62:71:af:74:71:25:5d:f6:ca:b1:49: e5:f4:a1:e7:15:2b:65:a5:4e:9d:e5:9e:c7:d8:53: 88:e7:b7:0a:7e:c7:90:72:39:a5:52:99:53:1a:a5: a7:66:69:e3:17:b8:0b:e3:a9:17:c4:7a:2f:c1:5e: d3:6c:4f:fa:22:59:de:05:1c:91:de:f6:9a:dc:65: 88:81:94:8b:44:1e:c1:40:18:25:d9:70:b9:00:ae: 35:fb:e5:d0:9c:f5:05:09:74:86:0d:77:1e:c0:a6: 19:d3:c5:57:34:ab:6c:ee:66:c4:16:6e:46:7e:d0: 49:35:ed:4d:19:e7:b1:57:c2:9d:0e:33:3a:6a:f9: 12:af:92:a2:5a:62:6e:52:4f:6a:7b:e1:59:bb:26: a0:bf:ee:d1:dc:bd:cc:72:5d:03:38:38:47:6d:24: 47:a2:83:f3:2b:7a:98:af:6b:7d:36:f3:cf:bb:bc: 30:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1F:F9:04:87:DB:76:48:3A:3D:D0:EF:C1:36:6D:20:B0:3C:42:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 98.142.240.0/20 104.234.0.0/16 206.53.48.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30407 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d9:d0:a1:3f:3a:22:11:07:10:10:d9:ed:b0:af:cc:b6:3c: ff:1b:23:47:e6:74:b6:0a:38:3d:6a:40:f9:a0:92:0f:01:56: 4f:64:a8:87:bf:ae:d9:73:09:ec:b2:12:4a:ce:26:7e:9b:9b: fe:92:94:5a:6c:d1:f1:9c:80:eb:15:f0:87:da:f8:f5:9a:95: 95:2b:78:d2:c3:9d:59:a0:99:69:33:f0:6f:f9:2f:36:ba:15: f7:18:44:f7:e6:96:c7:27:86:03:2c:d2:b1:25:02:b7:4b:f9: 4a:3c:37:e1:e4:98:3a:b9:93:fa:f4:9e:9d:52:f4:0a:fb:09: 5f:db:93:ed:b7:18:c7:68:86:27:af:55:0e:b4:71:be:a3:70: ba:1c:3d:74:dc:1d:63:de:9e:e6:21:d9:ec:2e:31:ab:67:90: 2e:20:93:77:6e:ea:b8:2f:13:de:f3:f3:f6:ff:eb:36:02:4e: 57:29:1d:e7:87:41:eb:f7:54:a3:36:52:e4:9e:6d:ae:d0:a9: bf:60:05:4a:ff:76:fa:71:0e:3a:92:10:cb:4e:fe:fe:89:77: 0c:b4:81:93:8a:65:74:03:46:d0:03:4a:f1:87:70:34:38:36: 3b:35:7c:60:9c:f5:df:e2:69:cd:0b:be:7b:89:04:bb:b2:8d: 39:fd:fc:ae -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWE4GgfKuBBGxBJeLKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDYwMTA4NDUxMVoXDTI4MDkwMzA4NDUxMVowLzEtMCsGA1UEAxMk M2Y1ZTJlNWItYzczMS00ZGI4LTliODctYWY5ZjhlNThhMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+hK1Rxk3+5jpSOa4H9DhGsngkxT5SCZo3hZ +Zzv0M6yfccHq70ZWVzXzAStJ5vRIEZciSyjKg3l3a6kIDuhq4DB9sIpwTPspS25 /VW3YnGvdHElXfbKsUnl9KHnFStlpU6d5Z7H2FOI57cKfseQcjmlUplTGqWnZmnj F7gL46kXxHovwV7TbE/6IlneBRyR3vaa3GWIgZSLRB7BQBgl2XC5AK41++XQnPUF CXSGDXcewKYZ08VXNKts7mbEFm5GftBJNe1NGeexV8KdDjM6avkSr5KiWmJuUk9q e+FZuyagv+7R3L3Mcl0DODhHbSRHooPzK3qYr2t9NvPPu7wwRwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFB4f+QSH23ZIOj3Q78E2bSCwPEJLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z ZjVlMmU1Yi1jNzMxLTRkYjgtOWI4Ny1hZjlmOGU1OGExYzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05 Yjg3LWFmOWY4ZTU4YTFjNi8zZjVlMmU1Yi1jNzMxLTRkYjgtOWI4Ny1hZjlmOGU1 OGExYzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDBARijvADAwBo6gMEBM41MDAZBggrBgEFBQcBCAEB /wQKMAigBjAEAgJ2xzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAC2dChPzoiEQcQENntsK/Mtjz/GyNH5nS2 Cjg9akD5oJIPAVZPZKiHv67ZcwnsshJKziZ+m5v+kpRabNHxnIDrFfCH2vj1mpWV K3jSw51ZoJlpM/Bv+S82uhX3GET35pbHJ4YDLNKxJQK3S/lKPDfh5Jg6uZP69J6d UvQK+wlf25PttxjHaIYnr1UOtHG+o3C6HD103B1j3p7mIdnsLjGrZ5AuIJN3buq4 LxPe8/P2/+s2Ak5XKR3nh0Hr91SjNlLknm2u0Km/YAVK/3b6cQ46khDLTv7+iXcM tIGTimV0A0bQA0rxh3A0ODY7NXxgnPXf4mnNC757iQS7so05/fyu -----END CERTIFICATE-----Generated at Sat Jun 13 08:10:20 2026 by rpki-client