$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer File: 5a060f48-6584-4864-ba80-2bac55c51550.cer (raw, json) Hash identifier: YuDHcd60FP+kWJim3b6toXz4v7J4Ohf89IqD6BJZjfM= Subject key identifier: 3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584AA9B93FCF53227749DDD1C900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Jul 2025 00:45:37 +0000 Certificate not after: Sun 31 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 11697 IP: 216.168.0.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:b9:3f:cf:53:22:77:49:dd:d1:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 28 00:45:37 2025 GMT Not After : Oct 31 00:45:37 2027 GMT Subject: CN=5a060f48-6584-4864-ba80-2bac55c51550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4a:2d:04:a0:a4:bc:5d:ba:10:08:44:f3:2d: 6d:56:14:35:17:cb:eb:72:61:85:a4:6e:e1:72:ab: fd:c3:57:41:22:65:bd:98:c9:a5:4c:71:dc:92:ab: 37:23:88:7b:04:ab:66:79:5f:ee:4d:c4:17:eb:87: 8d:e7:67:ae:b6:47:ff:b4:6c:c4:b9:5e:e0:d5:1e: 9f:80:76:30:69:ce:7d:da:b5:37:3d:19:6e:26:18: 42:7b:54:b7:f2:7f:96:54:95:3a:96:39:9d:ea:ed: e6:9e:4d:c3:95:a1:07:46:6c:7f:da:75:7e:fc:bd: a3:4e:6c:55:b3:d7:e9:3b:e4:c6:09:7d:5a:26:64: 53:cf:79:fc:26:82:54:4e:f4:f4:3d:75:bc:93:95: f0:7e:d3:a2:47:92:98:3c:f1:25:d0:21:d9:0e:fb: 98:7d:38:b7:bf:56:81:d6:bf:ef:00:0b:8e:1d:62: ff:37:9b:67:5d:03:26:48:6f:7b:da:c7:9a:52:e7: d3:1c:85:05:3f:d9:92:5e:ef:e7:33:36:85:ad:a8: 02:bc:e3:d0:af:6f:2c:e2:89:5a:ef:78:d0:0e:0b: 0b:ff:bc:38:58:8b:f5:59:e7:7f:b0:67:c2:a4:32: 33:5a:3d:a3:2a:73:2f:dd:e6:7a:35:60:9b:a0:42: a0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 216.168.0.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11697 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f2:42:de:be:9b:87:26:d4:d0:a5:d6:40:f3:22:14:45:ba: 8f:d4:18:27:c6:32:8c:db:4a:04:6c:4e:57:02:2d:99:81:81: 1b:34:aa:2d:73:50:f8:93:d5:5e:c9:3a:ab:00:f0:bb:12:79: 4e:1e:bf:1c:eb:65:a8:90:1f:85:a3:c5:f4:1d:63:cc:9d:e3: 24:7b:3f:59:b4:80:64:40:bc:7a:fa:59:0b:6d:f8:7a:6a:56: 09:78:23:61:44:d4:1a:19:2c:45:8b:93:85:22:71:1e:e0:ae: 0e:43:c0:bd:ee:f9:86:ae:58:54:e5:f1:5d:a8:30:ed:e8:53: 7d:6a:ff:fd:47:60:3b:24:09:12:63:3b:12:ce:5f:3f:b6:60: fb:bb:9a:7f:dc:b5:e0:43:7b:00:0b:35:80:5d:d0:96:5c:91: 6b:de:6f:99:c1:b7:e0:a2:8f:fa:0b:d8:f0:33:ca:5a:e9:3d: 46:e6:72:93:86:8b:97:37:82:3e:71:c0:52:b3:4c:37:57:8d: ef:57:30:a9:f8:52:7b:72:86:89:f8:27:84:a6:d5:71:bf:8e: 10:50:76:e9:e9:06:0f:42:9b:a9:ca:40:0b:e7:11:1d:7d:53: e8:32:35:09:c6:0d:03:87:5b:26:57:6f:8f:b5:20:c1:38:ff: 44:16:a3:cc -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEqpuT/PUyJ3Sd3RyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDcyODAwNDUzN1oXDTI3MTAzMTAwNDUzN1owLzEtMCsGA1UEAxMk NWEwNjBmNDgtNjU4NC00ODY0LWJhODAtMmJhYzU1YzUxNTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokotBKCkvF26EAhE8y1tVhQ1F8vrcmGFpG7h cqv9w1dBImW9mMmlTHHckqs3I4h7BKtmeV/uTcQX64eN52eutkf/tGzEuV7g1R6f gHYwac592rU3PRluJhhCe1S38n+WVJU6ljmd6u3mnk3DlaEHRmx/2nV+/L2jTmxV s9fpO+TGCX1aJmRTz3n8JoJUTvT0PXW8k5XwftOiR5KYPPEl0CHZDvuYfTi3v1aB 1r/vAAuOHWL/N5tnXQMmSG972seaUufTHIUFP9mSXu/nMzaFragCvOPQr28s4ola 73jQDgsL/7w4WIv1Wed/sGfCpDIzWj2jKnMv3eZ6NWCboEKg4QIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFD8X0l2Od3YyOoaJCd2kZ43nTO8MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81 YTA2MGY0OC02NTg0LTQ4NjQtYmE4MC0yYmFjNTVjNTE1NTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzVhMDYwZjQ4LTY1ODQtNDg2NC1i YTgwLTJiYWM1NWM1MTU1MC81YTA2MGY0OC02NTg0LTQ4NjQtYmE4MC0yYmFjNTVj NTE1NTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXYqAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC LbEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEABvJC3r6bhybU0KXWQPMiFEW6j9QYJ8YyjNtKBGxOVwItmYGB GzSqLXNQ+JPVXsk6qwDwuxJ5Th6/HOtlqJAfhaPF9B1jzJ3jJHs/WbSAZEC8evpZ C234empWCXgjYUTUGhksRYuThSJxHuCuDkPAve75hq5YVOXxXagw7ehTfWr//Udg OyQJEmM7Es5fP7Zg+7uaf9y14EN7AAs1gF3QllyRa95vmcG34KKP+gvY8DPKWuk9 RuZyk4aLlzeCPnHAUrNMN1eN71cwqfhSe3KGifgnhKbVcb+OEFB26ekGD0KbqcpA C+cRHX1T6DI1CcYNA4dbJldvj7UgwTj/RBajzA== -----END CERTIFICATE-----Generated at Mon Aug 4 08:32:07 2025 by rpki-client