$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.cer File: 92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.cer (raw, json) Hash identifier: rf+XgGr7AtPzXUjBDLf2l2fLkzvTkfdN9fcf2PRdQZg= Subject key identifier: 07:87:FA:92:98:BE:2A:9F:63:FE:83:73:16:30:D5:DE:8F:CE:41:D3 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584AC86EAC7A6C63DCB52DB32800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Aug 2025 00:45:25 +0000 Certificate not after: Thu 11 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 63428 IP: 104.255.200.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:6e:ac:7a:6c:63:dc:b5:2d:b3:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 8 00:45:25 2025 GMT Not After : Nov 11 01:45:25 2027 GMT Subject: CN=92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:74:bd:b7:6d:ff:d8:30:63:c0:c6:85:aa: d7:f4:4d:6f:4d:b7:e7:88:dc:69:89:d2:57:c9:19: 33:55:57:26:54:9c:19:92:60:5d:98:c0:3e:5b:86: ba:18:72:00:df:96:a9:da:da:6a:aa:b8:11:cb:82: db:dd:98:b6:55:3d:f4:b4:94:4c:b5:40:e0:72:24: 07:6a:ff:bd:c6:5e:7b:91:36:59:a8:c1:08:a1:98: 78:c8:6d:68:00:cc:c3:4b:a0:b2:66:b7:c6:4b:6d: e9:92:94:16:15:41:e7:55:bc:f7:27:fd:0d:5e:de: 45:e5:6c:6e:1f:be:a5:03:6b:66:ca:f0:9e:f7:64: b2:88:62:42:02:a2:fc:60:0d:45:27:13:37:ef:18: 84:36:f7:60:b1:d6:5a:bb:57:24:f8:e7:d7:15:46: b5:41:c0:5c:af:cd:47:3b:dd:05:1a:84:6d:38:ca: 4e:ec:98:c6:84:cd:8f:26:8f:ac:be:38:05:2b:ed: a9:35:a7:de:43:91:d5:43:8d:46:7c:0f:44:d5:93: 02:1a:5a:0e:bf:68:8c:bb:25:58:dd:7f:b0:a4:2d: e3:da:30:2e:75:66:fc:14:c8:cb:8c:ed:04:cf:69: e1:5b:50:d6:9a:be:00:23:b3:d9:3d:61:b8:ec:e1: 8a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:87:FA:92:98:BE:2A:9F:63:FE:83:73:16:30:D5:DE:8F:CE:41:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.255.200.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63428 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:68:a1:a5:b2:a5:64:09:30:f9:1e:65:2d:f0:ae:17:fa:03: 35:81:6a:9c:26:66:1b:52:57:d9:d4:fa:4d:62:57:4e:8f:60: 1b:83:f7:14:a4:6f:a8:29:dc:59:3a:b4:4c:09:de:28:49:f8: 5d:ec:f4:a9:7d:6d:ff:77:6a:6c:0c:ea:01:14:5c:a1:75:d9: 80:0f:32:89:23:8e:4e:82:72:c1:bd:01:dc:f6:e7:38:67:55: 16:53:79:13:c6:0f:1d:02:47:02:73:41:3b:ce:32:8b:30:0f: 6b:9f:80:0c:39:b0:11:0b:df:c5:c2:83:cf:7a:bd:5e:cd:c7: 87:4e:3a:4b:73:a7:79:4d:e9:68:17:5e:ac:8b:c8:e9:d8:c5: 07:25:f7:89:c0:d9:5e:06:5e:70:86:a4:1d:26:7d:9f:f8:c7: 08:1a:dc:bb:5e:8f:fe:5e:1b:84:32:da:9d:50:08:94:e4:94: 7c:ae:50:d9:e5:c0:0d:db:7a:44:a9:18:74:3c:ed:51:aa:79: fc:49:a4:d6:12:51:0d:73:20:24:9f:98:49:de:53:00:72:35: 90:99:ef:4a:87:37:89:72:97:f3:b5:42:d8:37:82:16:0a:15: ab:2f:c2:d6:38:1f:4c:af:98:f4:0d:e4:98:19:c5:a8:c8:1d: 75:16:e7:3c -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWErIbqx6bGPctS2zKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDgwODAwNDUyNVoXDTI3MTExMTAxNDUyNVowLzEtMCsGA1UEAxMk OTJlYmM2ZjktNTY0OS00YzEwLTkxZTYtZTdlNGY0NGQ2ZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2Z0vbdt/9gwY8DGharX9E1vTbfniNxpidJX yRkzVVcmVJwZkmBdmMA+W4a6GHIA35ap2tpqqrgRy4Lb3Zi2VT30tJRMtUDgciQH av+9xl57kTZZqMEIoZh4yG1oAMzDS6CyZrfGS23pkpQWFUHnVbz3J/0NXt5F5Wxu H76lA2tmyvCe92SyiGJCAqL8YA1FJxM37xiENvdgsdZau1ck+OfXFUa1QcBcr81H O90FGoRtOMpO7JjGhM2PJo+svjgFK+2pNafeQ5HVQ41GfA9E1ZMCGloOv2iMuyVY 3X+wpC3j2jAudWb8FMjLjO0Ez2nhW1DWmr4AI7PZPWG47OGKewIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAeH+pKYviqfY/6DcxYw1d6PzkHTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 MmViYzZmOS01NjQ5LTRjMTAtOTFlNi1lN2U0ZjQ0ZDZmZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzkyZWJjNmY5LTU2NDktNGMxMC05 MWU2LWU3ZTRmNDRkNmZkMS85MmViYzZmOS01NjQ5LTRjMTAtOTFlNi1lN2U0ZjQ0 ZDZmZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJo/8gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID APfEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFlooaWypWQJMPkeZS3wrhf6AzWBapwmZhtSV9nU+k1iV06P YBuD9xSkb6gp3Fk6tEwJ3ihJ+F3s9Kl9bf93amwM6gEUXKF12YAPMokjjk6CcsG9 Adz25zhnVRZTeRPGDx0CRwJzQTvOMoswD2ufgAw5sBEL38XCg896vV7Nx4dOOktz p3lN6WgXXqyLyOnYxQcl94nA2V4GXnCGpB0mfZ/4xwga3Ltej/5eG4Qy2p1QCJTk lHyuUNnlwA3bekSpGHQ87VGqefxJpNYSUQ1zICSfmEneUwByNZCZ70qHN4lyl/O1 Qtg3ghYKFasvwtY4H0yvmPQN5JgZxajIHXUW5zw= -----END CERTIFICATE-----Generated at Wed Nov 5 06:52:16 2025 by rpki-client