$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8.cer File: 98dca76d-defd-4c39-98dc-808a0a0a97d8.cer (raw, json) Hash identifier: Jyar8n66UwktlwS4UkY9qxxGb4HgcxWg1ACKAwsQ+J0= Subject key identifier: 1D:EA:79:FF:BF:40:CE:21:08:A7:B8:BF:32:2D:78:31:DA:D7:18:F0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B236C586376F40981F049F980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8/98dca76d-defd-4c39-98dc-808a0a0a97d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Sep 2025 14:59:18 +0000 Certificate not after: Mon 13 Dec 2027 15:59:18 +0000 Subordinate resources: AS: 25834 IP: 148.59.153.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:6c:58:63:76:f4:09:81:f0:49:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 9 14:59:18 2025 GMT Not After : Dec 13 15:59:18 2027 GMT Subject: CN=98dca76d-defd-4c39-98dc-808a0a0a97d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ff:8d:57:91:1f:07:60:19:60:3b:01:f0:88: 67:29:4d:2b:fd:48:65:ba:25:8a:d1:6a:44:40:4c: 27:83:31:96:c2:0c:52:82:1e:a6:c9:6a:e6:d5:27: 3d:53:43:71:15:16:9d:05:72:ec:b6:d4:63:44:76: 64:f3:f0:41:0d:08:3f:a4:a4:39:6a:61:6c:ae:2a: 06:95:4e:b4:3b:24:74:b3:f4:a6:ea:1f:6b:43:f2: a3:8b:50:e7:a1:95:49:bc:0b:a5:32:71:cc:44:f0: 7d:8c:86:ee:44:a5:bb:54:4c:56:4c:fd:8b:25:71: 02:8b:20:c0:ad:e7:93:2e:b0:aa:96:d6:52:cc:4b: 16:e6:80:88:c8:ef:d2:1a:e8:b7:b9:c8:54:de:47: 07:bd:f8:bc:88:f4:9b:29:2c:34:01:73:f2:84:5b: c5:4e:93:0c:44:3c:a3:60:cb:2b:ab:e7:70:df:02: 0f:da:92:f4:69:26:42:c2:35:6f:52:4c:fe:30:9e: d5:e7:8e:0b:30:4d:7f:1c:9a:0e:47:83:0a:03:31: 1a:ad:66:10:29:ee:0e:4b:5b:a7:cd:8e:c5:e0:82: 64:18:ca:bc:cc:44:b5:a3:32:58:d6:c3:76:2b:68: f5:fa:70:88:92:60:80:13:26:60:23:35:31:0c:33: f0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EA:79:FF:BF:40:CE:21:08:A7:B8:BF:32:2D:78:31:DA:D7:18:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8/98dca76d-defd-4c39-98dc-808a0a0a97d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 148.59.153.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25834 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:31:51:a8:77:5f:f3:f0:c7:67:f7:29:a0:b1:99:f7:7f:ba: 82:ee:01:e3:36:9f:ab:46:a5:4c:ac:4b:de:82:01:88:11:47: a2:df:fc:56:ed:a0:43:fa:05:f4:63:03:fb:64:38:97:c7:c6: 7c:ee:ed:43:a7:be:48:1a:5a:cb:f8:fa:1a:c1:8d:39:55:6f: 19:62:a5:78:bd:fd:b6:94:f2:e8:9f:82:16:7e:ea:50:ab:13: c5:f4:0f:97:26:2c:13:e7:1e:31:b3:0c:b9:47:39:e3:8d:94: 24:78:25:8e:3a:c6:e2:38:a8:80:fc:23:e0:65:1a:6f:a0:55: 20:06:4c:6e:42:13:d3:17:e5:ec:61:a2:41:dd:1e:a5:2e:80: 33:51:4c:d1:62:87:5c:c5:d3:3c:bc:1b:56:64:d8:86:cb:fb: 95:2b:35:bd:ef:7e:a8:6e:ff:25:37:37:a2:c2:07:21:7e:46: 8b:c2:d7:e7:ec:54:b7:47:87:9e:4c:e8:28:f2:9d:8e:39:d7: 47:fc:ed:d1:e4:ec:8d:88:9e:d1:16:ea:5c:f8:6d:ba:3e:6d: d9:13:21:c2:8c:11:4d:77:dd:af:50:c3:98:70:e8:26:10:9a: ea:c2:39:1d:e0:f9:f5:42:73:22:8a:dd:a6:59:0c:4b:95:db: 04:f3:a0:54 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEsjbFhjdvQJgfBJ+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDkwOTE0NTkxOFoXDTI3MTIxMzE1NTkxOFowLzEtMCsGA1UEAxMk OThkY2E3NmQtZGVmZC00YzM5LTk4ZGMtODA4YTBhMGE5N2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP+NV5EfB2AZYDsB8IhnKU0r/UhluiWK0WpE QEwngzGWwgxSgh6myWrm1Sc9U0NxFRadBXLsttRjRHZk8/BBDQg/pKQ5amFsrioG lU60OyR0s/Sm6h9rQ/Kji1DnoZVJvAulMnHMRPB9jIbuRKW7VExWTP2LJXECiyDA reeTLrCqltZSzEsW5oCIyO/SGui3uchU3kcHvfi8iPSbKSw0AXPyhFvFTpMMRDyj YMsrq+dw3wIP2pL0aSZCwjVvUkz+MJ7V544LME1/HJoOR4MKAzEarWYQKe4OS1un zY7F4IJkGMq8zES1ozJY1sN2K2j1+nCIkmCAEyZgIzUxDDPwpwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFB3qef+/QM4hCKe4vzIteDHa1xjwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 OGRjYTc2ZC1kZWZkLTRjMzktOThkYy04MDhhMGEwYTk3ZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzk4ZGNhNzZkLWRlZmQtNGMzOS05 OGRjLTgwOGEwYTBhOTdkOC85OGRjYTc2ZC1kZWZkLTRjMzktOThkYy04MDhhMGEw YTk3ZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACUO5kwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC ZOowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAkjFRqHdf8/DHZ/cpoLGZ93+6gu4B4zafq0alTKxL3oIBiBFH ot/8Vu2gQ/oF9GMD+2Q4l8fGfO7tQ6e+SBpay/j6GsGNOVVvGWKleL39tpTy6J+C Fn7qUKsTxfQPlyYsE+ceMbMMuUc5442UJHgljjrG4jiogPwj4GUab6BVIAZMbkIT 0xfl7GGiQd0epS6AM1FM0WKHXMXTPLwbVmTYhsv7lSs1ve9+qG7/JTc3osIHIX5G i8LX5+xUt0eHnkzoKPKdjjnXR/zt0eTsjYie0RbqXPhtuj5t2RMhwowRTXfdr1DD mHDoJhCa6sI5HeD59UJzIordplkMS5XbBPOgVA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:17:34 2025 by rpki-client