$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer File: 6aa8cf92-6ed1-444d-b120-4e622c110d10.cer (raw, json) Hash identifier: urpbxmkZtt/JhnEAuuAe90vrZ6Q4RZjBAX7oeV+LUuY= Subject key identifier: BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A856E57D5FB3D028AF807A040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Jul 2025 00:45:35 +0000 Certificate not after: Mon 18 Oct 2027 00:45:35 +0000 Subordinate resources: AS: 398712 IP: 23.165.240.0/24 IP: 45.4.196.0/22 IP: 2605:f540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:6e:57:d5:fb:3d:02:8a:f8:07:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 15 00:45:35 2025 GMT Not After : Oct 18 00:45:35 2027 GMT Subject: CN=6aa8cf92-6ed1-444d-b120-4e622c110d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:44:bf:38:76:16:3f:88:85:ec:a0:80:75: 43:9c:6d:06:14:9b:40:a0:ad:91:81:da:99:3e:36: 46:46:e4:51:f2:1f:45:93:3e:19:08:a1:98:be:99: 49:53:9b:5d:ac:20:cf:47:72:a8:1a:60:b8:e5:ad: 49:e8:6c:8a:99:66:e7:d6:68:ce:2b:aa:2d:b6:8d: aa:ab:7f:70:7e:94:40:b2:39:4e:20:8a:02:04:71: d2:ed:1b:05:1f:d2:08:5d:88:62:29:54:c4:e8:ee: 0e:bd:8f:11:97:c6:96:c5:27:4e:de:c0:99:c5:38: 64:79:98:24:f9:6d:e0:5e:23:fa:4f:3c:88:7f:cc: eb:7f:47:60:4f:1e:f6:c5:71:8b:d8:a6:04:c3:55: e9:ae:5a:3a:e7:be:51:f0:ec:ee:ba:56:3e:46:7f: ed:19:ee:16:49:13:7e:0f:01:59:25:9c:7a:65:2a: 45:73:11:6d:aa:3d:a0:b3:5b:90:44:ae:98:b8:61: c1:2b:93:91:4f:6f:44:40:f7:41:53:46:34:18:8b: ed:aa:58:48:44:c4:24:7d:95:f4:76:11:54:a1:08: a4:3a:ce:da:c6:ce:d9:20:bb:e2:eb:0b:8d:b8:ec: d3:3c:a4:b5:ce:fc:e1:d0:f1:7e:bc:d1:17:c3:82: d2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.165.240.0/24 45.4.196.0/22 IPv6: 2605:f540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398712 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a9:71:61:cc:6b:15:63:d1:9f:3b:83:d7:ff:03:51:9d:a7: 63:6a:a8:fb:0b:71:86:49:f4:86:67:f3:73:38:6b:7e:26:f1: 27:e6:ab:9a:83:cc:e4:10:b7:09:95:78:de:c4:af:3f:a4:ff: 3a:6d:08:7b:6a:3e:96:0e:da:32:da:02:ee:7c:24:6b:8c:9a: a3:52:7d:5f:b0:be:84:70:34:7a:fc:36:c8:18:2e:6e:01:47: b0:bf:94:fa:3e:32:8f:4f:bc:29:2d:4d:60:5a:85:8d:ac:6d: d5:e5:14:9f:bd:24:81:bd:b6:20:1d:d7:b7:80:2e:82:c9:ab: f4:b8:58:5f:6d:f3:f2:bc:ca:b3:3c:10:1f:07:84:d3:60:ec: 57:72:d2:fc:f9:c5:c5:32:ee:30:4d:c8:4a:3d:7e:4b:1d:db: 16:c3:64:cf:2b:e7:b8:fc:be:34:6e:d3:c9:89:e3:cd:b5:cb: f6:f9:cf:90:79:d8:d9:99:70:5a:74:93:7e:2f:ed:84:58:3f: 09:03:07:7f:9a:bc:0b:d6:1d:f8:30:29:5c:0b:e2:e1:ea:67: 2a:d9:2d:33:ec:d3:ba:3a:ed:9b:69:d3:5c:a4:87:cf:f8:12: 5b:02:53:22:14:fd:38:56:51:b5:3f:ae:32:12:ad:17:5a:37: 3a:af:a7:d4 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEqFblfV+z0CivgHoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDcxNTAwNDUzNVoXDTI3MTAxODAwNDUzNVowLzEtMCsGA1UEAxMk NmFhOGNmOTItNmVkMS00NDRkLWIxMjAtNGU2MjJjMTEwZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxZEvzh2Fj+IheyggHVDnG0GFJtAoK2RgdqZ PjZGRuRR8h9Fkz4ZCKGYvplJU5tdrCDPR3KoGmC45a1J6GyKmWbn1mjOK6otto2q q39wfpRAsjlOIIoCBHHS7RsFH9IIXYhiKVTE6O4OvY8Rl8aWxSdO3sCZxThkeZgk +W3gXiP6TzyIf8zrf0dgTx72xXGL2KYEw1Xprlo6575R8OzuulY+Rn/tGe4WSRN+ DwFZJZx6ZSpFcxFtqj2gs1uQRK6YuGHBK5ORT29EQPdBU0Y0GIvtqlhIRMQkfZX0 dhFUoQikOs7axs7ZILvi6wuNuOzTPKS1zvzh0PF+vNEXw4LSkwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFL0yYbZEIHjFgSurLatMDY0KBexzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 YWE4Y2Y5Mi02ZWQxLTQ0NGQtYjEyMC00ZTYyMmMxMTBkMTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZhYThjZjkyLTZlZDEtNDQ0ZC1i MTIwLTRlNjIyYzExMGQxMC82YWE4Y2Y5Mi02ZWQxLTQ0NGQtYjEyMC00ZTYyMmMx MTBkMTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXpfADBAItBMQwDQQCAAIwBwMFACYF9UAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhV4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAISpcWHMaxVj0Z87g9f/ A1Gdp2NqqPsLcYZJ9IZn83M4a34m8Sfmq5qDzOQQtwmVeN7Erz+k/zptCHtqPpYO 2jLaAu58JGuMmqNSfV+wvoRwNHr8NsgYLm4BR7C/lPo+Mo9PvCktTWBahY2sbdXl FJ+9JIG9tiAd17eALoLJq/S4WF9t8/K8yrM8EB8HhNNg7Fdy0vz5xcUy7jBNyEo9 fksd2xbDZM8r57j8vjRu08mJ4821y/b5z5B52NmZcFp0k34v7YRYPwkDB3+avAvW HfgwKVwL4uHqZyrZLTPs07o67Ztp01ykh8/4ElsCUyIU/ThWUbU/rjISrRdaNzqv p9Q= -----END CERTIFICATE-----Generated at Mon Aug 4 07:44:40 2025 by rpki-client