$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer File: 4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer (raw, json) Hash identifier: 5z4HgA9sxbFKw8uokUbLwu/gUMIT+4IZwRgB4oGEFF0= Subject key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B05D9B8E0E1DE715AAD9EC880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 30 Aug 2025 00:45:25 +0000 Certificate not after: Fri 03 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 15128 IP: 104.250.64.0/19 IP: 147.194.0.0/16 IP: 192.235.128.0/17 IP: 209.163.64.0/19 IP: 2604:fb80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:d9:b8:e0:e1:de:71:5a:ad:9e:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 30 00:45:25 2025 GMT Not After : Dec 3 01:45:25 2027 GMT Subject: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:08:99:4d:e5:43:01:85:a6:39:a6:48:ef:03: e5:2f:b1:09:b3:38:fc:15:9a:8e:15:8b:c7:98:01: a5:1d:85:d9:83:38:13:bc:d1:f9:ae:cb:84:06:8c: 39:6d:06:a5:90:93:74:5c:99:1d:10:48:78:97:80: d1:ae:15:b5:c6:3d:6e:b7:f3:fb:51:0d:64:9a:a7: db:4a:16:62:51:6c:a8:0a:9b:ee:fe:90:9a:e3:29: 04:b2:e9:01:44:56:4b:bf:88:d0:a4:28:a6:80:68: 28:7d:72:6f:92:7f:29:08:09:4a:b8:af:41:0d:c2: f2:a3:1d:d0:d8:dd:5b:97:f6:c3:28:2a:93:09:f6: a8:e0:b1:c9:3f:89:c9:84:67:5c:c9:32:64:24:a3: 0d:f5:34:33:e1:f5:42:d8:c7:58:cf:94:59:2d:69: db:b1:b9:dc:a7:43:83:2f:ae:8e:46:ce:6c:f6:c9: c1:35:46:1c:29:28:af:ba:17:d9:6b:e5:99:3e:e0: c7:55:1f:f7:24:68:54:18:26:7c:b8:f1:b8:d3:ca: e3:90:8e:0f:ca:47:2d:c1:c3:f8:55:9b:6d:03:6e: e9:b2:42:76:d1:46:ae:17:25:01:0c:d5:1e:91:af: a8:5a:ab:9e:08:3a:04:ba:71:6d:24:1c:fa:41:6d: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.250.64.0/19 147.194.0.0/16 192.235.128.0/17 209.163.64.0/19 IPv6: 2604:fb80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:75:0b:af:ec:7d:bc:70:87:a1:d8:91:bf:bc:d7:7f:07:bb: 14:cd:ca:26:8b:10:70:e8:5d:37:a0:47:31:7b:7d:de:e7:56: 2f:83:6d:12:64:4f:58:18:59:3d:a1:90:db:27:98:9b:07:4b: b1:86:9c:a9:f0:e7:26:97:6f:38:db:76:a1:df:45:3c:75:db: 5b:87:2c:9b:d1:4b:98:e8:a0:39:c0:10:ac:fa:55:f5:f5:22: 47:21:95:ed:d4:73:05:ef:7e:36:ae:4e:4c:11:7e:75:42:94: ff:29:ba:37:49:cf:ec:db:c9:61:ee:b9:7d:5f:5b:e9:e4:51: 59:fe:ec:18:b9:72:ac:09:d2:a1:5b:69:28:57:a4:13:56:40: b6:18:cf:e8:60:90:be:d4:32:ce:3c:13:af:e2:05:d2:95:28: 63:59:22:be:8e:87:53:1b:c6:2b:77:bd:5d:d2:0b:d5:de:dc: dc:b5:05:98:2d:97:0d:7a:c5:b5:36:1b:99:78:36:59:e6:ef: a1:13:ad:8e:95:f6:6e:2c:16:1c:8e:02:dc:56:e8:2d:81:d7: 34:b3:51:7d:eb:f8:0e:33:3a:20:2a:09:d5:15:35:70:75:e2: 39:b3:08:eb:50:ef:47:21:0f:8b:0a:d1:9d:64:e1:b5:c6:51: 8e:85:b9:a2 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEsF2bjg4d5xWq2eyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDgzMDAwNDUyNVoXDTI3MTIwMzAxNDUyNVowLzEtMCsGA1UEAxMk NGU2NTNmMzctNGIyMi00MGEzLWE4YmQtZTcwZjIwOGMwZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QiZTeVDAYWmOaZI7wPlL7EJszj8FZqOFYvH mAGlHYXZgzgTvNH5rsuEBow5bQalkJN0XJkdEEh4l4DRrhW1xj1ut/P7UQ1kmqfb ShZiUWyoCpvu/pCa4ykEsukBRFZLv4jQpCimgGgofXJvkn8pCAlKuK9BDcLyox3Q 2N1bl/bDKCqTCfao4LHJP4nJhGdcyTJkJKMN9TQz4fVC2MdYz5RZLWnbsbncp0OD L66ORs5s9snBNUYcKSivuhfZa+WZPuDHVR/3JGhUGCZ8uPG408rjkI4PykctwcP4 VZttA27pskJ20UauFyUBDNUeka+oWqueCDoEunFtJBz6QW3FqQIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFCIjlv8NF9Vg6wvjkXpWmnSSgMEYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4YzBlZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzRlNjUzZjM3LTRiMjItNDBhMy1h OGJkLWU3MGYyMDhjMGVmYi80ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4 YzBlZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwPwYIKwYBBQUH AQcBAf8EMDAuMB0EAgABMBcDBAVo+kADAwCTwgMEB8DrgAMEBdGjQDANBAIAAjAH AwUAJgT7gDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI7GDBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtdQuv 7H28cIeh2JG/vNd/B7sUzcomixBw6F03oEcxe33e51Yvg20SZE9YGFk9oZDbJ5ib B0uxhpyp8Ocml28423ah30U8ddtbhyyb0UuY6KA5wBCs+lX19SJHIZXt1HMF7342 rk5MEX51QpT/Kbo3Sc/s28lh7rl9X1vp5FFZ/uwYuXKsCdKhW2koV6QTVkC2GM/o YJC+1DLOPBOv4gXSlShjWSK+jodTG8Yrd71d0gvV3tzctQWYLZcNesW1NhuZeDZZ 5u+hE62OlfZuLBYcjgLcVugtgdc0s1F96/gOMzogKgnVFTVwdeI5swjrUO9HIQ+L CtGdZOG1xlGOhbmi -----END CERTIFICATE-----Generated at Tue Nov 4 19:54:31 2025 by rpki-client