$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer File: 9ff9bceb-e14b-4417-b9b7-c51352d95416.cer (raw, json) Hash identifier: WHbD8Xt/u/TJJ3KRAwTvao1vE0lNfWEki4YLUi6Te24= Subject key identifier: 00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D7B62E93C8EBFD5F9A7E8BA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Apr 2026 12:45:18 +0000 Certificate not after: Sat 15 Jul 2028 12:45:18 +0000 Subordinate resources: IP: 192.206.9.0 -- 192.206.11.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:62:e9:3c:8e:bf:d5:f9:a7:e8:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 12 12:45:18 2026 GMT Not After : Jul 15 12:45:18 2028 GMT Subject: CN=9ff9bceb-e14b-4417-b9b7-c51352d95416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:73:5e:da:63:e9:3b:f3:ff:32:0c:e1:a1:58: 7a:f4:cb:5d:1e:1b:5f:fe:bb:f6:75:c0:4c:96:e2: 6d:fc:20:79:d7:1c:34:da:c3:89:3b:f1:29:72:0d: fb:a1:2b:92:3e:d2:93:ab:99:40:e5:33:54:f0:57: d5:65:02:0d:1e:4a:cb:25:b6:01:67:fd:79:09:81: 3d:c6:80:06:ae:86:c1:1f:ee:b6:96:aa:df:65:97: 89:22:a6:a4:1a:31:e6:99:a5:a0:10:5a:f3:1f:d3: 5e:81:04:9b:d6:95:2c:bf:db:e3:64:c8:57:f9:23: fa:2f:b7:90:70:2d:bc:d7:0c:1a:ed:05:c2:d0:a0: db:61:18:f1:70:be:ef:b2:c7:7a:3f:b6:0f:e9:4f: e9:46:d0:3b:b2:e9:ea:e0:03:28:13:17:84:05:7a: 28:50:a8:50:d7:9b:24:67:0f:d9:f6:be:19:ff:3f: d2:91:25:3f:2b:5a:20:ec:75:3e:31:be:5e:a7:e2: 26:1c:62:7b:8c:bf:7c:7e:90:de:09:e1:f8:95:d5: b1:a6:76:e3:4c:7a:a5:9f:cc:59:1c:9b:c7:17:33: 7d:6f:6b:85:1a:80:c9:5c:c3:7e:fb:e3:a6:4c:59: f3:93:5a:32:da:6f:7f:d1:d3:f9:45:94:7e:50:f9: ac:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.206.9.0-192.206.11.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:17:f6:df:78:51:f8:84:7b:d1:02:fd:14:41:07:8f:2a:25: 49:22:e5:97:7a:fa:9e:39:c4:e3:87:bb:00:00:4c:a5:42:d4: 59:d5:c0:50:c7:b8:11:76:00:5c:dc:b1:93:93:78:dc:d1:29: bb:78:a2:79:64:84:0c:f2:15:fe:9a:6e:e3:de:67:83:eb:43: 28:05:c4:c5:09:5c:78:5a:b5:44:01:c4:05:73:4a:af:0e:16: 25:01:69:7d:56:70:41:0d:70:8c:82:4b:18:89:23:fb:fc:4a: 0a:cb:a9:a2:cb:79:08:d4:d1:ae:b3:18:03:33:06:95:25:3a: e4:d7:21:1b:5b:7a:c1:40:04:29:f2:f0:4a:bc:a1:a0:ad:78: d7:a7:d9:d0:95:b6:f0:64:56:fe:08:77:ab:f3:13:5c:2d:53: 73:29:a7:a5:4b:aa:1c:f6:86:f0:17:24:e6:dd:49:fc:8f:3b: a0:b2:32:0a:49:cb:82:ac:1a:c8:f8:b3:26:4a:4b:83:a1:0d: 86:8a:9b:6c:81:c0:4d:78:92:81:a4:23:78:3a:2a:32:1b:c9: c0:a5:4b:f6:b7:47:86:48:b0:7d:c7:9f:56:2e:88:fa:7d:5f: 55:8b:47:21:c5:61:f3:45:cb:fd:16:bf:eb:52:cd:3f:ba:e4: 4e:56:90:a3 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWE17Yuk8jr/V+afougAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDQxMjEyNDUxOFoXDTI4MDcxNTEyNDUxOFowLzEtMCsGA1UEAxMk OWZmOWJjZWItZTE0Yi00NDE3LWI5YjctYzUxMzUyZDk1NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHNe2mPpO/P/MgzhoVh69MtdHhtf/rv2dcBM luJt/CB51xw02sOJO/Epcg37oSuSPtKTq5lA5TNU8FfVZQINHkrLJbYBZ/15CYE9 xoAGrobBH+62lqrfZZeJIqakGjHmmaWgEFrzH9NegQSb1pUsv9vjZMhX+SP6L7eQ cC281wwa7QXC0KDbYRjxcL7vssd6P7YP6U/pRtA7sunq4AMoExeEBXooUKhQ15sk Zw/Z9r4Z/z/SkSU/K1og7HU+Mb5ep+ImHGJ7jL98fpDeCeH4ldWxpnbjTHqln8xZ HJvHFzN9b2uFGoDJXMN+++OmTFnzk1oy2m9/0dP5RZR+UPmsfwIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFAAOT1FBWW04u/oA66UkxmiMX6DfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85 ZmY5YmNlYi1lMTRiLTQ0MTctYjliNy1jNTEzNTJkOTU0MTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzlmZjliY2ViLWUxNGItNDQxNy1i OWI3LWM1MTM1MmQ5NTQxNi85ZmY5YmNlYi1lMTRiLTQ0MTctYjliNy1jNTEzNTJk OTU0MTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMDOCQMEAsDOCDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwF/bfeFH4 hHvRAv0UQQePKiVJIuWXevqeOcTjh7sAAEylQtRZ1cBQx7gRdgBc3LGTk3jc0Sm7 eKJ5ZIQM8hX+mm7j3meD60MoBcTFCVx4WrVEAcQFc0qvDhYlAWl9VnBBDXCMgksY iSP7/EoKy6miy3kI1NGusxgDMwaVJTrk1yEbW3rBQAQp8vBKvKGgrXjXp9nQlbbw ZFb+CHer8xNcLVNzKaelS6oc9obwFyTm3Un8jzugsjIKScuCrBrI+LMmSkuDoQ2G iptsgcBNeJKBpCN4OioyG8nApUv2t0eGSLB9x59WLoj6fV9Vi0chxWHzRcv9Fr/r Us0/uuROVpCj -----END CERTIFICATE-----Generated at Fri Apr 17 13:12:24 2026 by rpki-client