$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer File: 802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer (raw, json) Hash identifier: RvlvjmTvioadq2Zpu2yvUQzHnDPdA8ricWpM5vKIQjs= Subject key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858499131D3FD6CC997FBA1ABFBC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Apr 2025 13:06:26 +0000 Certificate not after: Thu 22 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 11425 IP: 64.38.192.0 -- 64.38.211.255 IP: 64.38.216.0 -- 64.38.239.255 IP: 64.38.244.0 -- 64.38.255.255 IP: 98.143.32.0/20 IP: 2607:fe80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:31:d3:fd:6c:c9:97:fb:a1:ab:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 18 13:06:26 2025 GMT Not After : Jul 22 00:45:34 2027 GMT Subject: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:c6:2d:eb:00:f5:e5:6a:ea:99:00:bc:aa: 90:6b:2e:6c:c1:00:9e:e9:9c:51:d0:88:4d:be:23: 29:97:35:f6:4e:3f:1c:20:fc:12:40:e0:92:0c:67: aa:ab:ae:af:8c:5c:f3:d0:ae:fb:40:30:28:eb:17: 8f:f7:30:d9:97:6c:f4:90:e9:60:b9:f1:8b:00:61: ae:e6:4f:e7:8a:e7:55:cd:6a:f6:77:42:8c:0a:56: ac:3c:a6:7f:94:a7:f1:18:82:b8:9a:03:9c:52:e0: ee:b2:9b:64:b3:4f:a6:99:f3:16:83:42:b9:84:48: 7a:9b:4c:f6:23:26:72:8d:28:9a:18:44:83:b8:36: 4c:8f:6b:4c:14:b6:0d:1c:82:0d:b2:f2:0d:f7:83: 4d:a2:06:27:56:50:07:2c:81:c8:0b:1d:5b:7c:e4: aa:0d:6b:3e:46:d7:d5:c5:d1:ea:a1:8e:0b:12:62: dc:56:88:43:0b:1a:79:b2:b8:d7:99:c4:43:2c:f0: 98:b2:b2:4d:c9:67:e6:1a:56:86:31:da:b7:4c:67: 36:b3:df:ac:7f:8a:22:65:6d:db:d7:36:72:5a:3e: 16:a8:a8:0d:88:62:df:2d:a8:2e:52:90:8b:a5:58: ae:f9:1e:1d:12:1c:ff:06:2a:ed:86:8f:42:bf:05: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.38.192.0-64.38.211.255 64.38.216.0-64.38.239.255 64.38.244.0-64.38.255.255 98.143.32.0/20 IPv6: 2607:fe80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11425 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:23:aa:25:6d:1a:47:56:99:1f:9d:bc:1a:68:c4:d2:2a:4b: ae:4b:ea:6d:3b:e3:75:3f:27:e1:db:85:ef:4a:70:81:0f:d5: fe:18:c6:f1:4e:3b:9f:22:95:bd:14:06:2f:87:f5:71:cf:9a: de:83:aa:2d:95:8c:32:1f:3c:ca:3a:6b:7e:ab:7c:60:ad:3d: 48:dd:a6:c3:81:8c:93:fb:8d:49:2c:11:64:0b:16:28:72:bc: c8:80:06:bf:4a:d8:e6:3e:bb:19:61:f4:68:82:59:ae:8d:03: 2c:89:86:4d:cd:4f:99:46:01:3f:da:3e:14:2a:17:24:3d:08: ca:43:19:e0:69:66:51:a6:90:88:17:76:81:38:bb:bf:d4:eb: 94:f8:b3:81:28:8e:de:9d:3f:fb:65:95:c5:28:c4:29:88:57: d8:13:bb:2e:f4:bd:3b:99:8a:2e:e1:39:3c:04:a4:8a:df:0f: 95:12:2d:90:a0:f8:7e:ab:c9:10:c8:b0:7f:ad:a0:1e:ea:89: 86:a0:a0:27:4f:15:84:17:20:8e:b3:f1:c7:56:81:90:41:f9: 82:dd:e1:8a:e9:28:2d:4e:14:00:ff:7f:ae:f0:81:9c:e8:48: e0:ce:0a:d6:13:aa:ee:84:53:c8:e0:53:cb:61:70:95:46:70: 17:98:d3:e5 -----BEGIN CERTIFICATE----- MIIHQDCCBiigAwIBAgIUAQ0Mn0MoWEmRMdP9bMmX+6Gr+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDQxODEzMDYyNloXDTI3MDcyMjAwNDUzNFowLzEtMCsGA1UEAxMk ODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNiMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo/GLesA9eVq6pkAvKqQay5swQCe6ZxR0IhN viMplzX2Tj8cIPwSQOCSDGeqq66vjFzz0K77QDAo6xeP9zDZl2z0kOlgufGLAGGu 5k/niudVzWr2d0KMClasPKZ/lKfxGIK4mgOcUuDusptks0+mmfMWg0K5hEh6m0z2 IyZyjSiaGESDuDZMj2tMFLYNHIINsvIN94NNogYnVlAHLIHICx1bfOSqDWs+RtfV xdHqoY4LEmLcVohDCxp5srjXmcRDLPCYsrJNyWfmGlaGMdq3TGc2s9+sf4oiZW3b 1zZyWj4WqKgNiGLfLaguUpCLpViu+R4dEhz/Birtho9CvwViiwIDAQABo4IEUjCC BE4wHQYDVR0OBBYEFOjcfMm26ttu4Kz36qzQh2bq1btoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzgwMjMxM2U2LTU2YmYtNGZkOC1h ZTBkLWM5ZTA1N2QzYjM5OC84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdk M2IzOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwVwYIKwYBBQUH AQcBAf8ESDBGMDUEAgABMC8wDAMEBkAmwAMEAkAm0DAMAwQDQCbYAwQEQCbgMAsD BAJAJvQDAwBAJgMEBGKPIDANBAIAAjAHAwUAJgf+gDAZBggrBgEFBQcBCAEB/wQK MAigBjAEAgIsoTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAPI6olbRpHVpkfnbwaaMTSKkuuS+ptO+N1Pyfh 24XvSnCBD9X+GMbxTjufIpW9FAYvh/Vxz5reg6otlYwyHzzKOmt+q3xgrT1I3abD gYyT+41JLBFkCxYocrzIgAa/StjmPrsZYfRoglmujQMsiYZNzU+ZRgE/2j4UKhck PQjKQxngaWZRppCIF3aBOLu/1OuU+LOBKI7enT/7ZZXFKMQpiFfYE7su9L07mYou 4Tk8BKSK3w+VEi2QoPh+q8kQyLB/raAe6omGoKAnTxWEFyCOs/HHVoGQQfmC3eGK 6SgtThQA/3+u8IGc6EjgzgrWE6ruhFPI4FPLYXCVRnAXmNPl -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:40 2025 by rpki-client