$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer File: 95e29289-6f1c-4c2f-84f4-c944e9e54940.cer (raw, json) Hash identifier: 0OtLzmIIspRyNt6UFOAAb/94H7jJtNvIsHdB7oIjWmU= Subject key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D5245CF9145BF797FE7E6F9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Mar 2026 19:18:31 +0000 Certificate not after: Fri 30 Jun 2028 19:18:31 +0000 Subordinate resources: AS: 12068 AS: 36329 IP: 64.58.48.0/20 IP: 155.254.144.0/20 IP: 199.36.164.0/22 IP: 2604:7b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:45:cf:91:45:bf:79:7f:e7:e6:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 28 19:18:31 2026 GMT Not After : Jun 30 19:18:31 2028 GMT Subject: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:62:4e:6f:52:1f:41:01:e6:9e:72:fc:26: 5a:8a:45:5e:bc:2b:c1:5c:52:92:0a:1f:30:2a:b4: 2e:b1:1d:01:2f:ac:d5:13:e5:a6:70:83:7a:99:0b: 3c:2b:22:a4:b9:72:83:d4:ae:f1:1f:7b:d2:52:19: 64:3d:34:40:ae:0c:96:70:48:1a:df:0f:6e:d9:6a: 86:ed:9a:5c:81:0a:44:0b:e6:35:35:66:fd:4e:49: db:50:c2:7e:40:77:ba:3b:3b:92:f3:92:d8:b1:60: f4:55:15:b6:6b:01:1b:a9:cd:79:3d:89:e5:56:c8: c8:c8:36:09:81:f7:72:ce:93:ec:79:05:5d:7e:34: 8a:7f:2d:3d:26:3b:f8:02:29:8c:1f:ee:40:29:db: 2c:b6:51:71:6d:29:7a:08:9f:8a:e9:ea:dd:86:86: e8:c9:f8:d9:d4:a5:4d:3a:fb:a7:f5:25:54:98:7b: 4d:76:cb:bb:cf:b8:41:d7:03:d9:48:50:a0:78:a1: ef:35:4c:29:20:e3:af:6e:c3:94:75:df:be:ef:20: 1f:47:e4:65:bd:f8:2c:60:5d:be:22:db:d7:4d:b4: 54:ad:be:f9:ac:55:09:97:4a:25:e6:4a:66:b3:89: 27:69:45:59:a5:50:59:fb:fb:f2:ba:3b:d1:c0:78: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.58.48.0/20 155.254.144.0/20 199.36.164.0/22 IPv6: 2604:7b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12068 36329 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:eb:12:7e:c2:d2:8c:45:bc:08:ac:e9:8a:43:ec:18:52:88: 81:c9:c7:79:6b:bd:82:fa:2a:21:db:5c:5d:1d:c6:4c:63:8f: 73:e2:fc:54:98:82:b8:dd:a4:34:24:a3:5d:67:b1:9b:68:24: e7:59:8b:d2:68:20:a7:21:75:f2:d5:11:a3:14:42:b0:5b:29: 61:1b:f6:c3:90:d6:1b:5c:64:45:61:3a:93:e3:6c:c9:92:42: 76:20:15:f3:af:15:4d:3e:d9:ba:cb:ed:91:5a:10:08:94:33: a7:5c:b1:3e:00:47:5b:70:11:56:3e:6f:35:be:df:2b:4d:2f: bc:ff:d6:51:76:6e:4a:5c:94:54:93:a4:c8:8b:be:3f:54:3d: 65:71:56:04:48:90:79:4c:13:45:34:c7:a7:36:64:a8:a2:25: 5a:60:8f:55:35:a9:05:50:aa:f6:f2:ad:7e:2c:71:c5:80:cc: 00:34:a1:ed:07:34:70:3d:45:27:ca:3b:30:7a:a9:62:b3:3d: f0:c7:0e:43:81:ee:a7:9d:43:b2:b3:06:25:85:8f:d3:19:fb: 38:5a:eb:5f:31:e5:da:65:41:db:35:2d:15:19:b4:70:b7:7b: 3b:b7:41:47:64:cd:1d:d1:d9:db:2c:86:e3:48:38:68:4e:e8: 0b:04:29:f3 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWE1SRc+RRb95f+fm+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDMyODE5MTgzMVoXDTI4MDYzMDE5MTgzMVowLzEtMCsGA1UEAxMk OTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0OTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpliTm9SH0EB5p5y/CZaikVevCvBXFKSCh8w KrQusR0BL6zVE+WmcIN6mQs8KyKkuXKD1K7xH3vSUhlkPTRArgyWcEga3w9u2WqG 7ZpcgQpEC+Y1NWb9TknbUMJ+QHe6OzuS85LYsWD0VRW2awEbqc15PYnlVsjIyDYJ gfdyzpPseQVdfjSKfy09Jjv4AimMH+5AKdsstlFxbSl6CJ+K6erdhoboyfjZ1KVN Ovun9SVUmHtNdsu7z7hB1wPZSFCgeKHvNUwpIOOvbsOUdd++7yAfR+RlvfgsYF2+ ItvXTbRUrb75rFUJl0ol5kpms4knaUVZpVBZ+/vyujvRwHhqmwIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFE26RaqruYdjpeZvswnFbpcwlJqeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzk1ZTI5Mjg5LTZmMWMtNGMyZi04 NGY0LWM5NDRlOWU1NDk0MC85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTll NTQ5NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARAOjADBASb/pADBALHJKQwDQQCAAIwBwMFACYE ewAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICLyQCAwCN6TBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+6xJ+ wtKMRbwIrOmKQ+wYUoiBycd5a72C+ioh21xdHcZMY49z4vxUmIK43aQ0JKNdZ7Gb aCTnWYvSaCCnIXXy1RGjFEKwWylhG/bDkNYbXGRFYTqT42zJkkJ2IBXzrxVNPtm6 y+2RWhAIlDOnXLE+AEdbcBFWPm81vt8rTS+8/9ZRdm5KXJRUk6TIi74/VD1lcVYE SJB5TBNFNMenNmSooiVaYI9VNakFUKr28q1+LHHFgMwANKHtBzRwPUUnyjsweqli sz3wxw5Dge6nnUOyswYlhY/TGfs4WutfMeXaZUHbNS0VGbRwt3s7t0FHZM0d0dnb LIbjSDhoTugLBCnz -----END CERTIFICATE-----Generated at Fri Apr 17 15:49:35 2026 by rpki-client