$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76de56ab-2af2-47e5-a9d0-8975ba26a488.cer File: 76de56ab-2af2-47e5-a9d0-8975ba26a488.cer (raw, json) Hash identifier: +eUwrkpj8OIgnimkO4fs2fy2TskWFOIA3MwgNl2RyO4= Subject key identifier: D7:BF:91:DF:76:04:E5:86:98:DD:4E:59:22:C8:EC:FF:3A:15:17:47 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584EF445351C2AE510CC8BC49580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76de56ab-2af2-47e5-a9d0-8975ba26a488/76de56ab-2af2-47e5-a9d0-8975ba26a488.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76de56ab-2af2-47e5-a9d0-8975ba26a488/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Aug 2026 12:45:11 +0000 Certificate not after: Mon 27 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 144.37.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:45:35:1c:2a:e5:10:cc:8b:c4:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 25 12:45:11 2026 GMT Not After : Nov 27 13:45:11 2028 GMT Subject: CN=76de56ab-2af2-47e5-a9d0-8975ba26a488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:52:6d:a1:5c:9b:83:fb:89:20:2f:36:69: 78:76:6d:4c:f7:4f:06:c3:07:b1:d4:c6:ad:a1:e1: 23:85:86:ed:78:91:9b:6f:71:d3:70:b7:2e:79:12: bf:40:75:db:83:ea:52:7a:04:f2:43:4e:b0:64:4e: f2:9d:40:89:2e:1b:2e:40:95:50:be:9e:27:91:e9: 85:28:33:26:0c:7a:05:5b:cb:5f:8f:49:51:c0:99: b1:82:25:3e:29:c5:41:e7:e7:85:43:a2:e8:00:99: 79:e2:05:60:17:65:56:c0:69:1b:bd:cb:66:38:11: a9:51:f5:95:d2:93:6a:7a:80:64:58:bb:31:25:29: e8:46:bb:2f:67:b8:95:12:7b:c1:cc:1a:cc:3e:19: ab:f2:f9:f2:26:ba:72:fa:82:bd:76:e8:4e:2b:35: 58:c6:2f:36:ce:3a:e0:97:45:97:b9:db:33:78:f8: 46:c8:9a:5a:3c:5a:a9:00:c3:90:b2:93:7c:72:72: 42:f4:22:c5:01:69:7e:24:23:e1:fc:fe:3b:c1:8c: 2d:59:57:4e:ea:f8:9c:bf:5b:3a:ad:15:82:77:ae: b5:20:f7:05:d3:aa:34:93:24:5e:e6:05:da:46:20: 4c:66:df:50:e4:c8:8c:71:4d:3a:1f:56:41:c2:0e: a9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BF:91:DF:76:04:E5:86:98:DD:4E:59:22:C8:EC:FF:3A:15:17:47 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76de56ab-2af2-47e5-a9d0-8975ba26a488/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76de56ab-2af2-47e5-a9d0-8975ba26a488/76de56ab-2af2-47e5-a9d0-8975ba26a488.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 144.37.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:22:c0:10:42:99:a6:df:b0:86:04:07:46:4c:ea:cc:2f:dd: 15:24:fc:c9:a2:72:92:32:64:85:82:ac:fb:42:53:6d:fd:5d: 66:ae:e0:4e:d5:a2:d6:7f:b4:93:0c:08:34:b2:c8:fb:d7:b3: 82:1c:4e:2c:71:d3:ed:35:6e:05:4a:fe:ae:c4:9f:fd:25:c3: d5:17:2b:46:9c:fd:61:55:02:6a:f5:c7:ea:72:d0:db:7b:cb: 5a:ea:f1:bd:a0:5f:2a:a7:dd:df:18:59:5c:ea:fb:0f:5d:0b: 8b:da:f0:4a:55:88:5a:6b:1d:11:ed:3c:2a:9b:28:90:cb:8e: ab:69:90:cc:48:8a:fd:6b:2c:bc:4a:6d:e7:f3:e4:36:5e:9e: 67:0e:7a:91:29:e6:5b:80:f2:c2:a7:4a:3c:db:a0:73:60:2d: 29:68:cc:32:47:b0:12:d8:b1:f4:ce:ea:b0:e4:d8:0f:48:47: da:46:3e:a2:36:bc:ac:8c:f7:66:c6:b6:9d:cd:82:3d:34:46: 62:e1:4e:67:56:d3:78:a0:f3:7f:72:24:be:5c:94:8f:d2:9c: f8:9f:d6:34:ef:75:0b:f4:da:b2:3c:0c:b1:e5:2a:2f:10:75: 2e:ab:a9:e4:ba:46:bf:be:a1:cc:8d:61:fc:84:23:f1:7e:83: 54:3f:fd:1d -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE70RTUcKuUQzIvElYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDgyNTEyNDUxMVoXDTI4MTEyNzEzNDUxMVowLzEtMCsGA1UEAxMk NzZkZTU2YWItMmFmMi00N2U1LWE5ZDAtODk3NWJhMjZhNDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFRSbaFcm4P7iSAvNml4dm1M908Gwwex1Mat oeEjhYbteJGbb3HTcLcueRK/QHXbg+pSegTyQ06wZE7ynUCJLhsuQJVQvp4nkemF KDMmDHoFW8tfj0lRwJmxgiU+KcVB5+eFQ6LoAJl54gVgF2VWwGkbvctmOBGpUfWV 0pNqeoBkWLsxJSnoRrsvZ7iVEnvBzBrMPhmr8vnyJrpy+oK9duhOKzVYxi82zjrg l0WXudszePhGyJpaPFqpAMOQspN8cnJC9CLFAWl+JCPh/P47wYwtWVdO6vicv1s6 rRWCd661IPcF06o0kyRe5gXaRiBMZt9Q5MiMcU06H1ZBwg6pSQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFNe/kd92BOWGmN1OWSLI7P86FRdHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83 NmRlNTZhYi0yYWYyLTQ3ZTUtYTlkMC04OTc1YmEyNmE0ODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzc2ZGU1NmFiLTJhZjItNDdlNS1h OWQwLTg5NzViYTI2YTQ4OC83NmRlNTZhYi0yYWYyLTQ3ZTUtYTlkMC04OTc1YmEy NmE0ODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCQJTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANIsAQQpmm37CGBAdGTOrM L90VJPzJonKSMmSFgqz7QlNt/V1mruBO1aLWf7STDAg0ssj717OCHE4scdPtNW4F Sv6uxJ/9JcPVFytGnP1hVQJq9cfqctDbe8ta6vG9oF8qp93fGFlc6vsPXQuL2vBK VYhaax0R7TwqmyiQy46raZDMSIr9ayy8Sm3n8+Q2Xp5nDnqRKeZbgPLCp0o826Bz YC0paMwyR7AS2LH0zuqw5NgPSEfaRj6iNrysjPdmxradzYI9NEZi4U5nVtN4oPN/ ciS+XJSP0pz4n9Y073UL9NqyPAyx5SovEHUuq6nkuka/vqHMjWH8hCPxfoNUP/0d -----END CERTIFICATE-----Generated at Thu Sep 24 14:30:39 2026 by rpki-client