$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer File: 8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer (raw, json) Hash identifier: gjLuiDjAE8O/LIXBfX+0OhSsL1eSsn2Rzc49WepV0uY= Subject key identifier: F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A8B03B713311CEC8089717380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Jul 2025 00:45:36 +0000 Certificate not after: Wed 20 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 399218 IP: 172.81.36.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:03:b7:13:31:1c:ec:80:89:71:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 17 00:45:36 2025 GMT Not After : Oct 20 00:45:36 2027 GMT Subject: CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:58:8a:48:28:fe:24:7a:d2:2f:94:dd:3b: cf:4f:1d:c0:06:c4:c6:e4:f6:0e:43:34:42:9e:62: 65:45:ff:ff:c2:33:03:d6:c8:c9:68:f6:7a:25:b2: 8a:d5:94:e6:59:b0:c2:d3:97:73:12:b0:60:eb:92: 1d:89:27:af:28:c4:c2:1b:30:63:8f:ca:1f:13:48: 33:69:c7:e4:5a:99:af:b9:60:32:b4:c8:e0:03:29: 5d:f2:7b:cb:da:38:de:8a:6a:90:52:19:4e:9b:79: 74:eb:b6:5d:d7:95:4f:d3:89:b2:ca:36:56:30:8a: 2d:de:de:c5:bc:b7:6c:a6:e7:72:3f:93:2f:e4:99: c6:12:cf:43:e6:25:eb:d0:99:e2:db:34:8f:1f:6a: a9:70:50:1f:58:67:8a:27:73:a6:32:5f:97:7e:ac: 37:4d:7f:df:de:6b:da:94:f5:03:5d:08:c4:c9:54: 7a:15:8c:0b:38:c5:63:9b:10:39:f4:12:4e:f5:a6: 2b:83:97:2d:bf:da:e7:b3:9d:cb:a3:03:6a:0a:00: 0d:ed:55:18:ce:eb:94:7f:67:96:2b:dc:b4:ca:7e: ba:b4:84:3d:19:3c:3d:e0:07:b0:cc:ba:8d:44:37: 18:04:26:05:d4:ce:5d:0d:9c:41:4d:69:28:fc:85: 4e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 172.81.36.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399218 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:0c:48:61:f9:c2:d3:3a:3d:28:df:1e:96:82:5f:8e:5e:26: 30:86:3a:59:e2:54:36:77:62:35:54:a3:52:bb:66:3d:31:85: 5a:d2:a4:3b:ce:5e:21:98:c0:73:1c:e6:be:a2:0a:1d:ab:c7: df:c3:3d:80:85:34:d3:10:7f:52:84:eb:99:7a:00:48:cb:4d: d2:e6:50:b4:a0:ce:a4:48:4d:66:68:84:e7:cc:a4:ca:47:85: 6c:b1:4d:4e:15:ec:87:7d:e8:5d:4f:20:07:5c:60:db:93:85: 77:76:e4:e0:97:74:e3:88:a4:8d:94:34:e3:08:b6:7b:48:fa: d7:d9:ba:da:c0:a2:37:24:b7:88:d9:94:7e:18:85:43:fe:74: 4d:5d:18:fd:7a:84:9f:7f:23:a7:c5:a1:9b:01:07:fc:52:34: 8a:5b:51:53:7c:83:8c:2b:a0:95:64:68:6d:1f:7e:c5:fa:ec: 7c:41:f1:15:2c:d5:d4:82:6d:c5:82:50:fa:cd:15:be:51:38: 39:a5:34:97:b1:8a:d1:39:0b:35:d2:ec:30:bb:7b:68:fb:17: a2:9b:4f:48:76:31:18:39:56:d1:c0:f0:67:16:9f:95:33:24: 41:a4:1f:35:6c:59:34:45:be:3d:e7:06:9d:da:72:c0:b9:a8: 0c:af:ff:0a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEqLA7cTMRzsgIlxc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDcxNzAwNDUzNloXDTI3MTAyMDAwNDUzNlowLzEtMCsGA1UEAxMk OGI3N2E3ZDEtOTllMS00MWZkLWExZDctOTAxYjZkYjVkNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7lYikgo/iR60i+U3TvPTx3ABsTG5PYOQzRC nmJlRf//wjMD1sjJaPZ6JbKK1ZTmWbDC05dzErBg65IdiSevKMTCGzBjj8ofE0gz acfkWpmvuWAytMjgAyld8nvL2jjeimqQUhlOm3l067Zd15VP04myyjZWMIot3t7F vLdspudyP5Mv5JnGEs9D5iXr0Jni2zSPH2qpcFAfWGeKJ3OmMl+Xfqw3TX/f3mva lPUDXQjEyVR6FYwLOMVjmxA59BJO9aYrg5ctv9rns53LowNqCgAN7VUYzuuUf2eW K9y0yn66tIQ9GTw94AewzLqNRDcYBCYF1M5dDZxBTWko/IVOiwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFPSrjguuco455jGk3nXNreItlTNXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 Yjc3YTdkMS05OWUxLTQxZmQtYTFkNy05MDFiNmRiNWQ0NWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiNzdhN2QxLTk5ZTEtNDFmZC1h MWQ3LTkwMWI2ZGI1ZDQ1Zi84Yjc3YTdkMS05OWUxLTQxZmQtYTFkNy05MDFiNmRi NWQ0NWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACsUSQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhdyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACMMSGH5wtM6PSjfHpaCX45eJjCGOlniVDZ3YjVUo1K7Zj0x hVrSpDvOXiGYwHMc5r6iCh2rx9/DPYCFNNMQf1KE65l6AEjLTdLmULSgzqRITWZo hOfMpMpHhWyxTU4V7Id96F1PIAdcYNuThXd25OCXdOOIpI2UNOMItntI+tfZutrA ojckt4jZlH4YhUP+dE1dGP16hJ9/I6fFoZsBB/xSNIpbUVN8g4wroJVkaG0ffsX6 7HxB8RUs1dSCbcWCUPrNFb5RODmlNJexitE5CzXS7DC7e2j7F6KbT0h2MRg5VtHA 8GcWn5UzJEGkHzVsWTRFvj3nBp3acsC5qAyv/wo= -----END CERTIFICATE-----Generated at Wed Nov 5 08:35:12 2025 by rpki-client