$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer File: 85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer (raw, json) Hash identifier: 8hyFWkmSFJsqthbXw/IrHalV6PBzUqIyT9v6nKnKkDY= Subject key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584BBA0899796C750FE6B16D02C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Nov 2025 13:45:23 +0000 Certificate not after: Sat 05 Feb 2028 13:45:23 +0000 Subordinate resources: AS: 13903 AS: 23342 IP: 64.29.128.0/20 IP: 67.221.160.0/20 IP: 207.7.128.0/19 IP: 209.237.224.0/19 IP: 2607:f3a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:08:99:79:6c:75:0f:e6:b1:6d:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 2 13:45:23 2025 GMT Not After : Feb 5 13:45:23 2028 GMT Subject: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:32:81:5c:7d:8c:f0:71:ca:4a:79:00:81:f2: e9:b6:bd:1d:c2:44:2e:5f:72:4a:d0:e0:85:0e:1c: 49:d9:9e:01:4e:b3:95:22:be:a2:22:b1:06:c9:c0: 74:1d:a3:b8:ed:63:5b:81:36:30:a0:e2:1a:de:d3: 48:91:60:a9:e2:be:3a:15:4d:00:4d:77:7d:54:6a: f6:5b:7c:20:2d:7e:98:c7:4c:0c:35:50:86:f7:7e: 2e:2b:56:a0:3e:e6:0f:33:34:24:b1:f8:7b:67:e1: ec:7d:58:87:7f:94:26:3a:85:37:aa:52:6e:28:0c: c5:31:80:44:67:56:be:89:a0:ae:e6:ae:58:60:40: 3f:bf:79:d1:0e:78:1d:5b:51:fe:94:86:e9:16:1a: 4f:f9:e9:4c:88:99:2f:bf:e0:bd:11:18:e7:f8:d7: 6f:b5:27:4c:c8:3b:7a:d8:2a:5e:80:92:cf:fb:58: 68:5d:5e:7c:92:a6:64:00:77:ab:46:e0:d9:e8:b2: 75:f9:8c:ee:bd:53:a6:9d:af:8f:80:09:2c:4b:86: 1c:9e:fc:26:37:4a:97:8c:02:f8:10:b8:26:63:89: 4c:83:a0:4d:73:e5:90:c8:4e:08:fa:bf:1f:fc:70: ad:90:2f:6f:54:23:f0:91:5e:dd:05:5b:0d:1b:6e: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.29.128.0/20 67.221.160.0/20 207.7.128.0/19 209.237.224.0/19 IPv6: 2607:f3a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13903 23342 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:4b:ee:8a:fa:31:28:9c:b7:f4:56:55:04:0b:2f:80:65:ab: 3e:32:5a:7e:60:c0:7c:93:2d:1d:83:27:64:67:18:f2:80:05: 92:cd:2e:70:a7:f5:5e:48:cc:9b:08:4c:91:3b:21:dc:a9:37: d3:39:5a:af:5a:df:8b:ae:09:7a:41:bc:31:45:42:1c:c4:b6: fe:3e:44:3c:8b:4d:39:5b:8f:65:cd:f6:bc:97:80:c5:88:9b: 76:b3:2b:05:90:a4:54:5c:a4:21:d2:5c:2e:db:60:9f:81:84: cc:3c:21:7a:23:7c:39:e2:4f:2f:5b:2d:85:de:d9:0d:41:3f: 5c:95:e7:5a:fd:ec:aa:2d:b5:37:59:83:2e:2e:bf:b1:a8:43: ad:e1:20:60:67:92:74:4b:c9:90:ce:53:7f:2a:2c:40:68:c5: 8e:ac:a4:b3:c5:66:62:ad:ed:a5:b1:51:a2:e4:13:37:17:8a: bd:51:5c:66:a8:89:b7:04:f8:67:c3:00:da:b7:f2:e9:58:a8: dd:d1:8b:f3:73:d2:04:9d:02:7f:e9:12:9e:fe:3a:f0:b0:88: c9:73:e2:91:5d:43:4f:ac:e5:07:d3:e4:0f:ef:4d:29:2b:5e: 67:ec:44:12:f9:9b:75:13:47:ce:56:4c:1f:bd:c0:45:3c:ce: 2e:40:d4:8e -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEu6CJl5bHUP5rFtAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTEwMjEzNDUyM1oXDTI4MDIwNTEzNDUyM1owLzEtMCsGA1UEAxMk ODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0YjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDKBXH2M8HHKSnkAgfLptr0dwkQuX3JK0OCF DhxJ2Z4BTrOVIr6iIrEGycB0HaO47WNbgTYwoOIa3tNIkWCp4r46FU0ATXd9VGr2 W3wgLX6Yx0wMNVCG934uK1agPuYPMzQksfh7Z+HsfViHf5QmOoU3qlJuKAzFMYBE Z1a+iaCu5q5YYEA/v3nRDngdW1H+lIbpFhpP+elMiJkvv+C9ERjn+NdvtSdMyDt6 2CpegJLP+1hoXV58kqZkAHerRuDZ6LJ1+YzuvVOmna+PgAksS4YcnvwmN0qXjAL4 ELgmY4lMg6BNc+WQyE4I+r8f/HCtkC9vVCPwkV7dBVsNG24w5wIDAQABo4IEPzCC BDswHQYDVR0OBBYEFIOaHQH7yQZDkXi+pNPUF6R8lJvUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzg1ZjczNWI2LTBhZTItNGMyYS04 MjZiLTdlOGIxMjZhNGI3My84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2 YTRiNzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBARAHYADBARD3aADBAXPB4ADBAXR7eAwDQQCAAIw BwMFACYH86AwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICNk8CAlsuMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGxL7or6MSict/RWVQQLL4Blqz4yWn5gwHyTLR2DJ2RnGPKABZLNLnCn9V5IzJsI TJE7IdypN9M5Wq9a34uuCXpBvDFFQhzEtv4+RDyLTTlbj2XN9ryXgMWIm3azKwWQ pFRcpCHSXC7bYJ+BhMw8IXojfDniTy9bLYXe2Q1BP1yV51r97KottTdZgy4uv7Go Q63hIGBnknRLyZDOU38qLEBoxY6spLPFZmKt7aWxUaLkEzcXir1RXGaoibcE+GfD ANq38ulYqN3Ri/Nz0gSdAn/pEp7+OvCwiMlz4pFdQ0+s5QfT5A/vTSkrXmfsRBL5 m3UTR85WTB+9wEU8zi5A1I4= -----END CERTIFICATE-----Generated at Wed Nov 5 15:13:45 2025 by rpki-client