$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer File: 81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer (raw, json) Hash identifier: AFpC+I5iGUDkqdED501Hbr0Mv6fcf/O0mJK95TZiXz0= Subject key identifier: A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849B6D7B7A68CA57DF999A9EB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 May 2025 00:45:35 +0000 Certificate not after: Thu 05 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 33196 IP: 136.175.141.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:d7:b7:a6:8c:a5:7d:f9:99:a9:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 2 00:45:35 2025 GMT Not After : Aug 5 00:45:35 2027 GMT Subject: CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d8:37:62:11:80:a1:64:2b:0b:2f:ca:ea:57: e0:8a:bd:1e:22:56:92:b7:34:97:d9:4b:af:d8:11: 59:c7:a3:35:34:f8:93:fa:ac:21:f5:29:ff:2a:00: 25:a8:a0:43:43:bd:05:4d:89:80:cc:7f:5a:48:19: c9:23:1c:e7:49:ee:ca:c9:d2:96:cd:90:47:65:53: c7:30:c7:38:8d:e9:d6:be:b8:03:f2:a3:50:84:b8: a5:45:0b:7d:47:2c:c9:ad:3c:54:7f:fd:4d:59:05: 50:6e:cc:ec:b7:2b:9a:19:3d:fe:0b:bf:6e:55:7c: d7:74:fd:2d:34:64:88:37:6f:03:a6:6b:9f:e1:ef: 59:1c:b9:55:24:3f:93:da:3e:f5:bf:10:17:d0:45: 74:25:bd:f8:96:96:26:b1:4d:69:80:48:c6:f6:b9: 79:5e:f1:56:67:32:9e:6a:01:f6:b1:87:6c:3d:a4: 88:eb:aa:91:93:c5:e7:cf:8a:63:f3:68:c5:80:26: d8:54:1c:2c:69:89:1f:2f:17:35:63:26:50:da:2e: 3d:7c:fc:8f:8c:ae:74:2a:e0:19:b3:cf:42:24:23: b2:75:b1:d4:c3:54:f1:c1:2d:4d:0c:66:36:4d:e5: 0f:24:d0:b3:da:38:14:ea:bf:53:8f:eb:aa:c5:8d: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 136.175.141.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33196 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d9:45:a2:52:e7:a5:92:db:0c:a7:b6:c1:fb:41:94:37:00: 45:26:62:5c:2f:f1:02:4e:74:48:0f:c5:16:e3:94:f5:c1:f8: b1:fe:67:1c:6f:11:eb:84:c7:d2:6a:dd:81:16:a4:04:fe:3c: 4a:92:ce:81:9c:cb:36:13:9b:dc:b9:07:50:90:a2:dd:10:e0: 0d:eb:91:9d:48:9a:c3:91:bf:01:24:f4:12:45:39:1d:8f:a4: 64:2e:81:34:cd:1f:de:29:80:48:d6:cf:58:27:05:9e:fc:23: d7:11:c3:d4:cd:fe:1f:13:72:22:db:8b:0b:93:54:1f:a4:b9: be:01:8a:a1:f3:1c:8a:7d:54:f3:83:41:95:3c:33:e1:ab:56: 0b:c6:58:4b:8f:df:f7:0f:56:d8:8e:bb:f1:8d:bc:bd:1a:0e: 87:ff:cd:dc:38:89:a0:af:84:7d:24:df:64:ec:ac:48:e7:73: db:2d:2b:a0:af:1a:b4:6b:92:20:af:fb:c9:6b:d8:27:26:78: c4:ed:5c:dd:94:59:e9:7a:80:34:1e:44:89:44:07:4c:20:b9: 81:c3:f3:f8:d7:1c:ac:5e:2e:e1:4c:8f:d7:54:65:54:d2:8c: 36:65:50:2c:01:6d:7e:13:8d:d6:e0:bc:2b:c4:2e:2a:07:4c: ff:b2:55:d2 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEm217emjKV9+Zmp6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDUwMjAwNDUzNVoXDTI3MDgwNTAwNDUzNVowLzEtMCsGA1UEAxMk ODFlYWYwNDEtYzlmOS00ZDY3LTgwYzItNDNiZDUxYWY2Yjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtg3YhGAoWQrCy/K6lfgir0eIlaStzSX2Uuv 2BFZx6M1NPiT+qwh9Sn/KgAlqKBDQ70FTYmAzH9aSBnJIxznSe7KydKWzZBHZVPH MMc4jenWvrgD8qNQhLilRQt9RyzJrTxUf/1NWQVQbszstyuaGT3+C79uVXzXdP0t NGSIN28Dpmuf4e9ZHLlVJD+T2j71vxAX0EV0Jb34lpYmsU1pgEjG9rl5XvFWZzKe agH2sYdsPaSI66qRk8Xnz4pj82jFgCbYVBwsaYkfLxc1YyZQ2i49fPyPjK50KuAZ s89CJCOydbHUw1TxwS1NDGY2TeUPJNCz2jgU6r9Tj+uqxY3V9QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKHcKeMwwi9+p9igZcRIT1nFVwZEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 MWVhZjA0MS1jOWY5LTRkNjctODBjMi00M2JkNTFhZjZiODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzgxZWFmMDQxLWM5ZjktNGQ2Ny04 MGMyLTQzYmQ1MWFmNmI4NC84MWVhZjA0MS1jOWY5LTRkNjctODBjMi00M2JkNTFh ZjZiODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACIr40wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIGsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAATZRaJS56WS2wyntsH7QZQ3AEUmYlwv8QJOdEgPxRbjlPXB +LH+ZxxvEeuEx9Jq3YEWpAT+PEqSzoGcyzYTm9y5B1CQot0Q4A3rkZ1ImsORvwEk 9BJFOR2PpGQugTTNH94pgEjWz1gnBZ78I9cRw9TN/h8TciLbiwuTVB+kub4BiqHz HIp9VPODQZU8M+GrVgvGWEuP3/cPVtiOu/GNvL0aDof/zdw4iaCvhH0k32TsrEjn c9stK6CvGrRrkiCv+8lr2CcmeMTtXN2UWel6gDQeRIlEB0wguYHD8/jXHKxeLuFM j9dUZVTSjDZlUCwBbX4TjdbgvCvELioHTP+yVdI= -----END CERTIFICATE-----Generated at Wed Nov 5 06:51:56 2025 by rpki-client