$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497.cer File: b04e46d2-7952-4fd4-ae9f-045de0e84497.cer (raw, json) Hash identifier: XJnbU22l8xQW5Cc/ueoSGcM2M+6UHAwFu7mXJ3sRnZ0= Subject key identifier: F9:4D:A4:40:5C:D5:22:D0:43:E1:5F:4A:EB:D3:0C:1D:17:D5:03:5F Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584AECB99049F2EFBBB751A8DD40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/b04e46d2-7952-4fd4-ae9f-045de0e84497.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Aug 2025 00:45:25 +0000 Certificate not after: Wed 24 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 31764 IP: 104.192.8.0/21 IP: 2606:6140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:b9:90:49:f2:ef:bb:b7:51:a8:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 21 00:45:25 2025 GMT Not After : Nov 24 01:45:25 2027 GMT Subject: CN=b04e46d2-7952-4fd4-ae9f-045de0e84497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6f:e7:bd:42:0e:fc:70:e6:ad:5a:15:39:d7: 2c:6f:96:13:49:b5:61:ba:25:5c:34:e9:90:18:2b: 7e:85:5a:29:c6:31:02:1a:43:18:4d:85:da:ef:85: b3:a8:4a:42:66:8c:8f:4e:fc:06:43:a1:9a:44:40: 70:98:a0:72:89:bc:8f:fc:25:9f:52:16:b0:78:4f: d7:80:a9:71:49:2e:f1:33:65:62:9c:5e:6c:6c:3f: 41:dd:9c:7a:eb:26:c0:bf:5d:65:1d:cf:df:34:40: 9f:c7:98:8c:4e:cf:ad:50:a5:60:5e:5d:66:5f:87: 12:e0:05:bd:d5:4d:32:89:fc:80:43:5e:8b:e6:5f: 91:35:11:0b:09:13:5e:8e:51:8d:55:7b:10:07:88: 43:9c:2e:ef:4b:41:73:f7:fd:be:19:b4:4e:3a:96: 57:79:26:4f:79:15:3c:f6:97:a5:d5:77:52:51:fd: d3:6d:0f:58:7d:9e:34:ca:2e:c0:f5:8f:20:20:02: 66:15:9b:13:ca:29:f8:af:cf:9b:0e:4c:27:bd:39: f1:32:4c:7c:4f:7e:f5:b5:e0:25:30:bf:01:c2:4f: be:42:4a:8e:27:83:ed:17:b8:0b:66:71:d7:47:24: 55:e1:76:90:95:ca:4a:57:cc:85:ba:ca:28:bc:32: 0f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4D:A4:40:5C:D5:22:D0:43:E1:5F:4A:EB:D3:0C:1D:17:D5:03:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b04e46d2-7952-4fd4-ae9f-045de0e84497/b04e46d2-7952-4fd4-ae9f-045de0e84497.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.192.8.0/21 IPv6: 2606:6140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31764 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3c:54:56:80:54:20:31:56:c5:86:f8:57:17:04:94:fa:c6: 8b:84:be:c2:f5:d2:36:4a:3a:1a:1c:45:e7:8d:2c:9c:47:c0: 44:c4:19:ef:8a:24:80:40:d9:41:bf:3f:02:59:fa:6d:34:fb: 8a:3d:e3:e4:00:96:fe:21:35:22:be:62:08:72:b1:ea:d9:26: b5:59:e1:4f:86:33:4f:1d:2e:5d:20:1d:4d:4e:d4:20:04:56: f8:d9:3d:57:c3:fc:40:39:4e:2d:b3:4b:00:bb:31:b6:27:76: 9e:e4:58:b1:0f:37:0d:ef:72:a2:ba:09:1a:2b:b7:32:c6:99: b9:55:c4:6e:50:9d:b3:30:22:a0:8a:f3:08:df:4c:38:d3:c2: 23:52:20:79:36:81:da:f1:66:e8:8d:63:c6:36:bd:08:fa:bd: 9b:f2:6f:83:97:35:f9:84:b3:fa:44:e9:74:1e:02:e4:87:ff: 67:04:89:79:0b:b2:7b:05:f1:80:5b:c0:4a:48:5f:87:ac:d7: 9b:e7:4b:9b:5f:10:e9:e1:8e:3a:55:c3:16:6c:06:9f:87:aa: 38:1e:d3:92:95:2e:07:68:09:04:fc:d4:01:b5:8e:e5:9d:48: b1:58:17:66:b1:2d:fa:d0:b8:1a:e3:97:2d:d6:ae:54:cb:7b: 30:7b:60:58 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWErsuZBJ8u+7t1Go3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDgyMTAwNDUyNVoXDTI3MTEyNDAxNDUyNVowLzEtMCsGA1UEAxMk YjA0ZTQ2ZDItNzk1Mi00ZmQ0LWFlOWYtMDQ1ZGUwZTg0NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG/nvUIO/HDmrVoVOdcsb5YTSbVhuiVcNOmQ GCt+hVopxjECGkMYTYXa74WzqEpCZoyPTvwGQ6GaREBwmKByibyP/CWfUhaweE/X gKlxSS7xM2VinF5sbD9B3Zx66ybAv11lHc/fNECfx5iMTs+tUKVgXl1mX4cS4AW9 1U0yifyAQ16L5l+RNRELCRNejlGNVXsQB4hDnC7vS0Fz9/2+GbROOpZXeSZPeRU8 9pel1XdSUf3TbQ9YfZ40yi7A9Y8gIAJmFZsTyin4r8+bDkwnvTnxMkx8T371teAl ML8Bwk++QkqOJ4PtF7gLZnHXRyRV4XaQlcpKV8yFusoovDIPuQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFPlNpEBc1SLQQ+FfSuvTDB0X1QNfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i MDRlNDZkMi03OTUyLTRmZDQtYWU5Zi0wNDVkZTBlODQ0OTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2IwNGU0NmQyLTc5NTItNGZkNC1h ZTlmLTA0NWRlMGU4NDQ5Ny9iMDRlNDZkMi03OTUyLTRmZDQtYWU5Zi0wNDVkZTBl ODQ0OTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBANowAgwDQQCAAIwBwMFACYGYUAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICfBQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKDxUVoBUIDFWxYb4VxcElPrGi4S+ wvXSNko6GhxF540snEfARMQZ74okgEDZQb8/Aln6bTT7ij3j5ACW/iE1Ir5iCHKx 6tkmtVnhT4YzTx0uXSAdTU7UIARW+Nk9V8P8QDlOLbNLALsxtid2nuRYsQ83De9y oroJGiu3MsaZuVXEblCdszAioIrzCN9MONPCI1IgeTaB2vFm6I1jxja9CPq9m/Jv g5c1+YSz+kTpdB4C5If/ZwSJeQuyewXxgFvASkhfh6zXm+dLm18Q6eGOOlXDFmwG n4eqOB7TkpUuB2gJBPzUAbWO5Z1IsVgXZrEt+tC4GuOXLdauVMt7MHtgWA== -----END CERTIFICATE-----Generated at Wed Nov 5 10:36:42 2025 by rpki-client