$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b.cer File: b2dc77b3-a13a-405a-b7ad-181eab85160b.cer (raw, json) Hash identifier: vh5zcehdA/kygajuJWe5a8qdKgCPViONwN3Pt6j0zBQ= Subject key identifier: FF:76:CB:34:8C:31:D8:B4:5C:24:A1:55:09:55:32:75:64:15:2E:25 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B354F5956748D99A9F57AD200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Sep 2025 00:45:25 +0000 Certificate not after: Mon 20 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 393922 IP: 192.139.132.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:4f:59:56:74:8d:99:a9:f5:7a:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 16 00:45:25 2025 GMT Not After : Dec 20 01:45:25 2027 GMT Subject: CN=b2dc77b3-a13a-405a-b7ad-181eab85160b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0c:45:32:34:21:bf:80:2f:71:59:fb:b0:68: b3:78:e1:eb:64:62:d8:6e:3b:28:6e:02:34:06:47: 8d:0b:cd:bc:43:47:0c:0f:f4:a5:fc:2b:e3:2d:9d: dd:38:91:81:2e:14:8d:57:5a:19:5b:28:b2:e6:4d: 8e:4c:61:64:ad:84:05:5f:a1:d1:bb:7e:54:f2:49: 5f:24:34:85:97:74:f1:79:5f:2a:76:ca:8d:20:fe: bc:1f:b8:46:2c:cf:ce:51:de:79:c7:7e:2b:73:25: 35:15:8a:99:70:a9:69:95:20:99:41:45:2f:e2:01: d8:95:9a:cd:fe:24:d5:70:65:ad:04:24:df:a5:b1: 6f:10:7c:ae:ed:a6:be:01:93:e4:c8:7a:b7:f8:9b: 99:4d:f4:80:c4:07:a3:12:e3:25:8c:08:a1:0f:5e: e5:ca:1b:fc:d3:b9:6e:2d:ab:a1:17:f8:81:f1:cc: b2:f4:a9:f3:2b:e3:7d:02:3d:ed:21:5c:38:5d:d4: 88:14:37:7a:64:eb:8a:4f:62:35:24:ee:b2:e0:b4: 8f:7d:7c:c7:00:dc:4d:d1:9d:c9:1f:5e:c0:00:21: 19:0b:00:77:4e:06:38:23:54:e2:8f:44:02:9a:42: e7:c7:38:e1:68:41:41:c9:0c:8d:dd:2f:ec:2e:65: 53:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:76:CB:34:8C:31:D8:B4:5C:24:A1:55:09:55:32:75:64:15:2E:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.139.132.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393922 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f1:e7:4b:95:d7:7d:44:fa:40:de:9f:f7:3d:f8:52:09:c3: 1b:74:89:05:f5:5a:94:7f:8f:87:6f:e8:67:42:29:65:3d:ef: 33:09:b5:64:4b:94:03:27:07:94:73:0d:5a:41:51:b9:9f:b9: 6c:d5:8a:17:c2:65:1f:39:9b:a5:4a:31:e0:63:49:38:12:a4: 1f:ea:5b:5b:ab:e3:d6:42:1c:ce:7f:d9:2c:00:6a:8a:64:e5: de:2b:a5:ef:3a:27:7f:a6:4d:59:25:fe:32:c3:24:9a:f8:53: 76:74:a2:8e:e4:d8:35:79:3c:6d:77:54:bb:83:6c:89:d4:dd: 95:e0:52:9d:45:1c:8f:32:d6:7d:52:d2:21:3d:68:21:cc:24: 79:15:bb:da:45:f8:ee:74:24:de:70:4e:b4:2e:34:0a:2d:0f: 4e:60:e5:0f:f1:84:f7:2a:16:01:ce:12:3c:13:d7:70:d8:1c: 08:ac:48:7e:53:d3:14:d2:98:41:01:29:69:62:22:09:08:07: e0:a3:7d:68:c7:c2:85:ed:3b:14:d1:57:f2:79:17:56:ec:67: ad:58:fb:c1:98:74:69:ec:bd:d2:65:c5:03:89:b3:b5:e9:db: 65:9f:af:64:7d:d2:8d:ab:d4:2d:1e:b9:f6:a3:8d:1f:a5:37: 0b:c6:e0:7d -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEs1T1lWdI2ZqfV60gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDkxNjAwNDUyNVoXDTI3MTIyMDAxNDUyNVowLzEtMCsGA1UEAxMk YjJkYzc3YjMtYTEzYS00MDVhLWI3YWQtMTgxZWFiODUxNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAxFMjQhv4AvcVn7sGizeOHrZGLYbjsobgI0 BkeNC828Q0cMD/Sl/CvjLZ3dOJGBLhSNV1oZWyiy5k2OTGFkrYQFX6HRu35U8klf JDSFl3TxeV8qdsqNIP68H7hGLM/OUd55x34rcyU1FYqZcKlplSCZQUUv4gHYlZrN /iTVcGWtBCTfpbFvEHyu7aa+AZPkyHq3+JuZTfSAxAejEuMljAihD17lyhv807lu LauhF/iB8cyy9KnzK+N9Aj3tIVw4XdSIFDd6ZOuKT2I1JO6y4LSPfXzHANxN0Z3J H17AACEZCwB3TgY4I1Tij0QCmkLnxzjhaEFByQyN3S/sLmVTmwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFP92yzSMMdi0XCShVQlVMnVkFS4lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i MmRjNzdiMy1hMTNhLTQwNWEtYjdhZC0xODFlYWI4NTE2MGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2IyZGM3N2IzLWExM2EtNDA1YS1i N2FkLTE4MWVhYjg1MTYwYi9iMmRjNzdiMy1hMTNhLTQwNWEtYjdhZC0xODFlYWI4 NTE2MGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAi4QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgLCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADXx50uV131E+kDen/c9+FIJwxt0iQX1WpR/j4dv6GdCKWU9 7zMJtWRLlAMnB5RzDVpBUbmfuWzVihfCZR85m6VKMeBjSTgSpB/qW1ur49ZCHM5/ 2SwAaopk5d4rpe86J3+mTVkl/jLDJJr4U3Z0oo7k2DV5PG13VLuDbInU3ZXgUp1F HI8y1n1S0iE9aCHMJHkVu9pF+O50JN5wTrQuNAotD05g5Q/xhPcqFgHOEjwT13DY HAisSH5T0xTSmEEBKWliIgkIB+CjfWjHwoXtOxTRV/J5F1bsZ61Y+8GYdGnsvdJl xQOJs7Xp22Wfr2R90o2r1C0eufajjR+lNwvG4H0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:11:15 2025 by rpki-client