$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer File: 871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer (raw, json) Hash identifier: eJdnH/DhoxX1B3vt6u1Evk6lImalTQbHv3P4NWgyVYQ= Subject key identifier: DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B9F6554A5BEFC7C42DBD8A080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Oct 2025 00:45:24 +0000 Certificate not after: Thu 27 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 399833 IP: 104.250.248.0/22 IP: 204.144.124.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:65:54:a5:be:fc:7c:42:db:d8:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 24 00:45:24 2025 GMT Not After : Jan 27 01:45:24 2028 GMT Subject: CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:68:2a:ec:09:69:63:7e:17:46:f5:39:b5: 3e:36:c4:00:d5:54:64:3e:61:45:4b:6d:71:88:22: bc:2c:8d:51:98:72:a5:52:3a:3a:90:df:9a:63:5c: f4:d5:cf:fa:24:3c:9e:35:1d:b4:26:f2:19:b0:1b: 56:ea:db:e4:b2:41:da:30:fa:e5:8e:67:bf:02:86: af:3e:f0:2d:ef:17:7d:a4:f1:9c:21:18:30:04:6c: 52:42:8a:94:b1:b2:f1:ff:76:ba:2e:09:e4:5b:ea: 1b:f2:e4:41:fc:8f:6d:fa:7a:68:79:76:12:63:89: 8c:8a:10:ee:d5:ce:5b:4c:24:77:e5:2d:6a:8d:34: ae:d6:22:6c:e0:77:6e:5e:60:ea:a9:8a:57:d2:f6: 09:8e:58:5d:f9:43:88:d2:e5:fe:6c:c6:49:9c:91: c1:8d:66:45:45:f1:9a:54:c4:a5:d4:b9:78:e1:73: 86:ae:0f:49:1e:92:d0:bc:04:f5:1a:81:07:3a:7b: d4:24:81:13:ea:ad:b1:71:36:f6:ca:1a:e5:6e:08: 3f:d5:e9:7a:98:da:40:45:db:f4:2a:ee:4c:f6:b5: c1:8b:84:91:ce:5c:a7:52:5e:74:d2:76:a0:86:01: e0:7d:80:5e:d4:74:43:39:1c:98:3b:55:68:c6:18: 76:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.250.248.0/22 204.144.124.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399833 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:6f:6a:48:7b:16:7a:e6:87:37:e2:33:51:86:f9:39:ee:1b: 60:9e:f2:bb:8b:03:67:f9:89:a3:61:d5:5f:e8:98:4c:1f:10: d2:f2:33:5f:a0:76:49:c6:cc:9f:3b:fa:dc:8e:9c:7d:ed:a5: 27:88:24:e1:06:47:6b:24:c3:30:b9:0f:b7:1d:0b:19:1b:7e: fb:77:e3:19:12:c4:2e:72:c6:80:01:49:6c:a0:47:7b:d6:b0: 8f:87:87:c4:04:7b:fb:18:e4:d8:d6:7a:f2:06:08:08:82:ad: 81:05:72:d1:b3:9d:f5:ad:c4:f5:70:a8:d2:c8:05:13:35:7d: 7c:7d:d9:60:04:2d:b8:28:d8:8c:b1:ec:4d:52:48:11:62:84: 0a:2f:dd:92:fd:58:72:3a:9b:13:3f:55:e6:70:fd:dd:74:9e: c8:61:f2:06:b7:eb:6c:c5:b3:df:3b:1b:30:b0:74:2a:f8:ba: 94:f3:0b:7e:ef:f5:00:50:52:27:4a:ab:07:3e:75:ca:03:3e: 3e:01:9e:9f:24:50:ce:4b:54:dd:70:fc:b1:46:a0:a1:9e:19: af:d7:da:10:99:b1:84:fd:2d:e9:85:74:bc:d3:d5:65:80:9f: 22:56:a1:49:04:4d:90:38:ab:1e:bd:ee:ff:83:aa:fa:78:46: 31:bc:24:1f -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEufZVSlvvx8QtvYoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAyNDAwNDUyNFoXDTI4MDEyNzAxNDUyNFowLzEtMCsGA1UEAxMk ODcxY2U2YjAtMTc5MS00NGRkLWI3ZjctZjBiMzhiYjMwYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgBoKuwJaWN+F0b1ObU+NsQA1VRkPmFFS21x iCK8LI1RmHKlUjo6kN+aY1z01c/6JDyeNR20JvIZsBtW6tvkskHaMPrljme/Aoav PvAt7xd9pPGcIRgwBGxSQoqUsbLx/3a6LgnkW+ob8uRB/I9t+npoeXYSY4mMihDu 1c5bTCR35S1qjTSu1iJs4HduXmDqqYpX0vYJjlhd+UOI0uX+bMZJnJHBjWZFRfGa VMSl1Ll44XOGrg9JHpLQvAT1GoEHOnvUJIET6q2xcTb2yhrlbgg/1el6mNpARdv0 Ku5M9rXBi4SRzlynUl500naghgHgfYBe1HRDORyYO1Voxhh2cwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFN8/x9dSBCCceyblD37AGNs6jHZ7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 NzFjZTZiMC0xNzkxLTQ0ZGQtYjdmNy1mMGIzOGJiMzBjMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzg3MWNlNmIwLTE3OTEtNDRkZC1i N2Y3LWYwYjM4YmIzMGMwOS84NzFjZTZiMC0xNzkxLTQ0ZGQtYjdmNy1mMGIzOGJi MzBjMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJo+vgDBALMkHwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhnZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKFvakh7FnrmhzfiM1GG+TnuG2Ce8ruLA2f5iaNh 1V/omEwfENLyM1+gdknGzJ87+tyOnH3tpSeIJOEGR2skwzC5D7cdCxkbfvt34xkS xC5yxoABSWygR3vWsI+Hh8QEe/sY5NjWevIGCAiCrYEFctGznfWtxPVwqNLIBRM1 fXx92WAELbgo2Iyx7E1SSBFihAov3ZL9WHI6mxM/VeZw/d10nshh8ga362zFs987 GzCwdCr4upTzC37v9QBQUidKqwc+dcoDPj4Bnp8kUM5LVN1w/LFGoKGeGa/X2hCZ sYT9LemFdLzT1WWAnyJWoUkETZA4qx697v+Dqvp4RjG8JB8= -----END CERTIFICATE-----Generated at Wed Nov 5 06:52:13 2025 by rpki-client