$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer File: 451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer (raw, json) Hash identifier: HF+UpTS1KA3tYRgF/vkWdjo/tvxyrjbrvF0VBa66agE= Subject key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584BB5BACD6D809A487E93EC0500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 01 Nov 2025 00:45:23 +0000 Certificate not after: Fri 04 Feb 2028 01:45:23 +0000 Subordinate resources: AS: 63173 AS: 63339 IP: 45.88.216.0/22 IP: 45.89.48.0/22 IP: 45.91.108.0/22 IP: 45.92.16.0/22 IP: 45.126.36.0/22 IP: 107.178.48.0/21 IP: 2602:fc48::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:ba:cd:6d:80:9a:48:7e:93:ec:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 1 00:45:23 2025 GMT Not After : Feb 4 01:45:23 2028 GMT Subject: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9a:52:9d:70:d6:b5:5f:41:eb:9f:38:cc:9f: b8:62:ce:77:46:48:21:c7:fa:f0:3d:6f:c1:7a:a5: 77:3e:1d:38:60:13:e9:b4:8a:c4:1b:ad:47:50:1b: 86:c3:08:b4:7c:f9:a8:2d:07:48:7f:de:20:a3:87: c8:dc:22:22:4e:fe:64:63:5b:15:e4:30:f8:20:91: dd:5c:7b:4f:00:80:af:09:af:a0:60:56:1e:9d:35: 99:6a:2b:74:dc:23:e0:fc:2d:70:7e:cd:bd:35:ff: e0:a3:0d:70:3b:d7:22:6a:7f:62:88:23:1d:cc:62: d4:8d:41:fa:36:e9:e3:a4:f3:e5:49:11:e4:d2:35: dd:e5:55:5d:9a:a9:9f:a6:75:08:9c:6c:94:48:b2: fc:2b:47:13:ee:c8:ad:cb:2d:4b:b7:83:83:d2:7f: 52:11:af:1b:33:ad:d3:4d:0e:09:24:a9:2b:44:0e: fd:fc:23:6d:d4:87:c1:41:ee:34:74:9d:de:ac:9d: dc:f5:43:cb:a6:9d:af:e0:b2:bf:0c:cc:b9:fd:e4: 72:1a:92:79:94:4a:ff:16:f7:b8:ba:00:81:f8:d3: f5:8b:89:ab:92:b9:d9:f0:22:d8:da:34:71:9f:5c: 6c:7f:25:5b:69:0e:99:37:48:d8:b9:70:74:e2:66: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 45.88.216.0/22 45.89.48.0/22 45.91.108.0/22 45.92.16.0/22 45.126.36.0/22 107.178.48.0/21 IPv6: 2602:fc48::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63173 63339 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b1:25:43:55:88:19:3d:1a:f7:cb:8d:20:aa:98:e4:65:5f: f2:a4:e1:20:46:f5:c7:dd:0c:08:f4:16:6f:28:9f:23:6b:1c: b5:4c:28:8b:f5:ba:7c:98:66:1d:49:d4:29:d6:94:a8:79:5d: 72:75:30:a7:79:57:15:d1:ef:81:d1:40:d6:ef:ab:86:e3:15: ea:54:0b:19:ff:b7:59:5f:49:57:65:ff:14:ae:75:12:64:7d: a5:40:68:86:8d:4f:c8:dc:29:93:13:fb:bb:ee:31:54:c0:b9: eb:30:ae:71:f9:30:63:30:93:34:51:2b:be:83:f6:03:71:c0: 9d:d4:40:0a:eb:ec:b0:83:88:22:0a:1c:85:7a:ba:d4:ec:81: 9b:a5:84:bc:34:be:63:64:fa:26:d6:32:6e:b0:ea:8c:73:29: 3e:64:32:6d:a2:00:19:2b:30:2b:90:c9:5c:7f:eb:88:83:f0: 02:96:7f:7c:52:3e:a4:c1:d1:a4:09:dc:f3:ee:bd:4c:10:33: 7d:35:fb:89:84:76:42:86:d5:cd:53:db:c1:12:76:58:01:9b: 98:fc:d3:c0:9b:94:fe:c5:04:c7:19:6d:eb:89:ad:ca:67:a4: 96:cf:e5:73:b0:d9:60:bb:15:f4:2e:c0:a2:8d:ea:fb:1d:5b: a6:13:37:1c -----BEGIN CERTIFICATE----- MIIHPDCCBiSgAwIBAgIUAQ0Mn0MoWEu1us1tgJpIfpPsBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTEwMTAwNDUyM1oXDTI4MDIwNDAxNDUyM1owLzEtMCsGA1UEAxMk NDUxZThkOWYtZDllYS00NWNmLThmYjktMjgxMWU4NmI4MWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgppSnXDWtV9B6584zJ+4Ys53Rkghx/rwPW/B eqV3Ph04YBPptIrEG61HUBuGwwi0fPmoLQdIf94go4fI3CIiTv5kY1sV5DD4IJHd XHtPAICvCa+gYFYenTWZait03CPg/C1wfs29Nf/gow1wO9cian9iiCMdzGLUjUH6 NunjpPPlSRHk0jXd5VVdmqmfpnUInGyUSLL8K0cT7sityy1Lt4OD0n9SEa8bM63T TQ4JJKkrRA79/CNt1IfBQe40dJ3erJ3c9UPLpp2v4LK/DMy5/eRyGpJ5lEr/Fve4 ugCB+NP1i4mrkrnZ8CLY2jRxn1xsfyVbaQ6ZN0jYuXB04mbb4QIDAQABo4IETjCC BEowHQYDVR0OBBYEFPKzKJwRpGoYmQHPm40kPpfQBBfEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2YjgxYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQ1MWU4ZDlmLWQ5ZWEtNDVjZi04 ZmI5LTI4MTFlODZiODFiMi80NTFlOGQ5Zi1kOWVhLTQ1Y2YtOGZiOS0yODExZTg2 YjgxYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCoEAgABMCQDBAItWNgDBAItWTADBAItW2wDBAItXBADBAItfiQD BANrsjAwDgQCAAIwCAMGBCYC/EgAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwD2 xQIDAPdrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAJexJUNViBk9GvfLjSCqmORlX/Kk4SBG9cfdDAj0Fm8o nyNrHLVMKIv1unyYZh1J1CnWlKh5XXJ1MKd5VxXR74HRQNbvq4bjFepUCxn/t1lf SVdl/xSudRJkfaVAaIaNT8jcKZMT+7vuMVTAueswrnH5MGMwkzRRK76D9gNxwJ3U QArr7LCDiCIKHIV6utTsgZulhLw0vmNk+ibWMm6w6oxzKT5kMm2iABkrMCuQyVx/ 64iD8AKWf3xSPqTB0aQJ3PPuvUwQM301+4mEdkKG1c1T28ESdlgBm5j808CblP7F BMcZbeuJrcpnpJbP5XOw2WC7FfQuwKKN6vsdW6YTNxw= -----END CERTIFICATE-----Generated at Wed Nov 5 03:40:21 2025 by rpki-client