$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer File: 8e5312d0-770c-4d40-8042-53d0eadc436b.cer (raw, json) Hash identifier: NqkWdgZ2zY6d99a7pyd44rd/RK6l160VLJQUSBjuuTE= Subject key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F3A104EEAC61173216F1DF700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Sep 2026 12:45:11 +0000 Certificate not after: Fri 22 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 192.135.209.0/24 IP: 192.150.150.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:10:4e:ea:c6:11:73:21:6f:1d:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 19 12:45:11 2026 GMT Not After : Dec 22 13:45:11 2028 GMT Subject: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:dc:f2:4e:15:90:97:3f:4d:8b:90:8f:7d: 98:87:2a:cc:c1:e4:8f:a5:6e:88:dd:c4:1f:20:0b: ee:41:76:c8:61:58:2f:57:f6:cd:37:a6:a5:08:2c: 38:c3:c4:04:0b:c3:ac:36:5f:c0:3c:fe:48:b5:07: b1:a7:e0:89:d6:6b:0e:eb:4d:e3:f7:02:f6:ac:a5: 62:5a:ae:3f:3a:8b:e0:c3:4a:c3:f3:16:79:98:83: 7f:e8:5f:61:cb:50:0a:99:6b:c9:e4:c7:92:ae:3b: 67:f5:d6:cf:ee:c2:37:28:2a:23:ed:96:f9:f9:24: be:37:bc:8b:52:9a:0b:43:ef:a5:63:08:75:75:15: 63:77:23:d8:25:cd:0b:7c:ba:2e:4a:a9:41:6e:20: a0:9a:c3:06:2c:f9:58:b3:b5:cd:dd:64:75:e9:06: 56:fa:c0:a4:25:48:c5:bf:75:ab:e0:bd:7c:47:d1: a4:5c:c0:5e:da:09:7e:4c:55:3d:b9:dc:3a:4d:26: d6:92:70:02:fc:db:90:7a:8d:31:db:ef:89:15:ac: f1:91:8d:a4:9d:15:86:9e:2e:65:ce:6e:fd:37:a3: c7:5e:55:f2:64:ef:ea:7a:de:45:de:32:3e:c3:0b: 0c:98:e3:a1:29:a7:dd:d9:6a:1a:b6:4b:8f:4e:1b: ff:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.135.209.0/24 192.150.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e5:66:3e:51:22:f0:f7:dd:73:fd:90:83:e0:77:bd:e7:96: bf:e1:c7:55:16:90:c5:61:02:a8:9f:31:bd:db:0b:b7:99:58: a9:f5:c0:f0:cd:a9:80:c4:af:9d:48:c4:b7:87:4f:f6:34:2b: 22:46:ed:32:52:d5:fd:67:4b:4f:2a:93:69:95:8b:13:97:5b: 0f:17:ca:d6:e0:00:5f:e1:47:81:15:ea:41:f6:0e:93:b4:41: ec:1b:cf:87:70:97:2e:4d:65:18:8a:46:66:70:d8:0c:e1:99: 78:66:8d:24:50:4f:b7:14:e9:3a:52:50:f8:fd:b1:41:59:d2: 3a:94:dd:f2:07:de:82:02:5c:af:60:34:a3:26:74:9b:ea:f1: 99:31:bb:54:cd:10:38:f6:4f:45:b6:68:70:8f:5b:0d:1a:0b: 26:94:28:6f:b3:af:e1:27:8b:c3:fc:5c:12:a2:03:b7:9e:0c: d2:12:8a:ea:54:c8:2f:2d:d7:05:32:1c:9c:a9:4a:e8:f2:bd: 88:cd:f5:62:61:f8:b7:c9:23:25:ae:7d:0c:f6:50:33:33:68: 34:66:64:39:22:37:8a:aa:94:d6:d0:76:7d:23:bd:ee:c0:51: 24:2f:7b:71:bc:e6:51:17:4c:c3:7f:2f:51:f8:40:81:d8:fe: d7:5e:ea:9c -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE86EE7qxhFzIW8d9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDkxOTEyNDUxMVoXDTI4MTIyMjEzNDUxMVowLzEtMCsGA1UEAxMk OGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0MzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy13c8k4VkJc/TYuQj32YhyrMweSPpW6I3cQf IAvuQXbIYVgvV/bNN6alCCw4w8QEC8OsNl/APP5ItQexp+CJ1msO603j9wL2rKVi Wq4/Oovgw0rD8xZ5mIN/6F9hy1AKmWvJ5MeSrjtn9dbP7sI3KCoj7Zb5+SS+N7yL UpoLQ++lYwh1dRVjdyPYJc0LfLouSqlBbiCgmsMGLPlYs7XN3WR16QZW+sCkJUjF v3Wr4L18R9GkXMBe2gl+TFU9udw6TSbWknAC/NuQeo0x2++JFazxkY2knRWGni5l zm79N6PHXlXyZO/qet5F3jI+wwsMmOOhKafd2WoatkuPThv/zwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFD92ib0MF/djw1MY0om1Ckc31okOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhlNTMxMmQwLTc3MGMtNGQ0MC04 MDQyLTUzZDBlYWRjNDM2Yi84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFk YzQzNmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAh9EDBADAlpYwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAe+VmPlEi8Pfd c/2Qg+B3veeWv+HHVRaQxWECqJ8xvdsLt5lYqfXA8M2pgMSvnUjEt4dP9jQrIkbt MlLV/WdLTyqTaZWLE5dbDxfK1uAAX+FHgRXqQfYOk7RB7BvPh3CXLk1lGIpGZnDY DOGZeGaNJFBPtxTpOlJQ+P2xQVnSOpTd8gfeggJcr2A0oyZ0m+rxmTG7VM0QOPZP RbZocI9bDRoLJpQob7Ov4SeLw/xcEqIDt54M0hKK6lTILy3XBTIcnKlK6PK9iM31 YmH4t8kjJa59DPZQMzNoNGZkOSI3iqqU1tB2fSO97sBRJC97cbzmURdMw38vUfhA gdj+117qnA== -----END CERTIFICATE-----Generated at Thu Sep 24 01:18:22 2026 by rpki-client