$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer File: b32217e1-2473-49a5-919e-08e1896c5019.cer (raw, json) Hash identifier: vcHf1GdSirItfDiR5wzolPut465hfdjD52HK3k3SOX0= Subject key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F42705D16AF2EDC5471947F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Sep 2026 12:45:12 +0000 Certificate not after: Mon 25 Dec 2028 13:45:12 +0000 Subordinate resources: AS: 22191 IP: 130.45.128.0/17 IP: 2604:1dc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:70:5d:16:af:2e:dc:54:71:94:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 22 12:45:12 2026 GMT Not After : Dec 25 13:45:12 2028 GMT Subject: CN=b32217e1-2473-49a5-919e-08e1896c5019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:26:e2:0a:1d:54:35:88:bb:0e:48:68:b2: 0f:2d:54:0c:cf:b9:cd:14:02:44:27:63:f2:98:9f: f3:f4:a1:68:1c:74:7b:12:7c:85:9d:24:6d:dd:d6: 99:1b:00:32:27:df:8e:4a:d3:cf:00:0b:d1:90:18: 3d:84:0c:76:8f:7b:65:d1:fe:68:ea:3a:8b:73:7f: 1d:7f:97:71:56:44:be:88:29:2c:d9:09:ce:29:3a: 24:a8:94:d4:17:30:ea:04:56:c3:74:b4:ea:51:35: d8:ec:32:ec:20:5b:c8:9a:ec:57:da:76:23:31:57: 97:ff:d4:27:5b:ce:58:b5:32:2b:65:1c:aa:5a:16: 06:b6:dc:5a:33:32:5d:e9:8b:f5:d5:88:08:78:f1: 6d:68:1f:fc:c3:c1:f4:4c:c8:16:a8:fb:43:01:fc: f9:9c:b3:2f:44:ff:44:8d:d6:59:b2:bd:d7:21:9d: 15:91:14:59:75:73:a5:15:ae:07:5e:7d:c1:c0:cb: e6:ff:f8:7e:7b:7c:87:7b:9f:4b:c6:a9:4e:b9:99: 5b:af:59:40:cb:60:d6:93:fc:30:5e:df:47:c1:95: 54:fc:ec:0b:bc:af:d7:23:f8:fa:f7:fb:10:62:25: 60:82:6f:4c:f0:ce:66:8e:e8:fe:48:00:8a:97:c0: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 130.45.128.0/17 IPv6: 2604:1dc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22191 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:90:9c:ea:68:92:58:c9:1e:66:ff:a5:4b:4d:3e:14:c7:1d: 0d:88:29:01:73:40:c8:56:0b:c7:26:ec:97:04:50:8d:85:45: 8c:bc:aa:0f:b9:0f:af:da:d2:9d:bd:6a:4f:2f:e1:5e:5a:fd: c8:9b:ac:3e:90:16:ab:6d:20:9f:07:9f:dd:fb:94:be:90:16: c8:eb:57:6d:f5:e1:6f:64:42:41:dc:62:7e:87:74:3f:88:a0: c6:bb:40:25:3c:e0:25:ce:8b:8b:be:b2:35:99:45:0b:69:37: 66:2b:c5:47:f8:be:54:3a:e6:7d:32:dd:a5:36:16:7c:8b:36: bf:15:b2:19:34:b9:d0:46:0b:88:1e:d1:0f:31:9b:30:fa:2c: 3e:97:55:bc:e9:4c:b1:f4:0a:ef:4c:aa:42:4b:63:e4:c5:41: fb:1c:f2:fc:8a:2d:20:06:42:52:93:72:54:81:39:76:c4:8a: 77:cd:86:52:3e:e1:3b:b0:7e:55:7a:cc:e3:62:df:40:82:7c: 6e:4a:22:d5:99:ad:38:82:7f:d4:85:1b:a4:6a:54:15:78:9b: a0:d0:79:24:5e:6b:51:e8:a6:32:95:ba:0c:c7:63:18:80:5d: c1:ae:ae:6c:c1:7a:42:93:97:22:bb:23:e5:ba:1f:6f:ab:8d: 5e:c9:a7:9c -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE9CcF0Wry7cVHGUf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDkyMjEyNDUxMloXDTI4MTIyNTEzNDUxMlowLzEtMCsGA1UEAxMk YjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1MDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrwm4godVDWIuw5IaLIPLVQMz7nNFAJEJ2Py mJ/z9KFoHHR7EnyFnSRt3daZGwAyJ9+OStPPAAvRkBg9hAx2j3tl0f5o6jqLc38d f5dxVkS+iCks2QnOKTokqJTUFzDqBFbDdLTqUTXY7DLsIFvImuxX2nYjMVeX/9Qn W85YtTIrZRyqWhYGttxaMzJd6Yv11YgIePFtaB/8w8H0TMgWqPtDAfz5nLMvRP9E jdZZsr3XIZ0VkRRZdXOlFa4HXn3BwMvm//h+e3yHe59LxqlOuZlbr1lAy2DWk/ww Xt9HwZVU/OwLvK/XI/j69/sQYiVggm9M8M5mjuj+SACKl8AYZQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFEiuDfig13SQWKRatSOmbrexwHe2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i MzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2IzMjIxN2UxLTI0NzMtNDlhNS05 MTllLTA4ZTE4OTZjNTAxOS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2 YzUwMTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAeCLYAwDQQCAAIwBwMFACYEHcAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICVq8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAX5Cc6miSWMkeZv+lS00+FMcdDYgp AXNAyFYLxybslwRQjYVFjLyqD7kPr9rSnb1qTy/hXlr9yJusPpAWq20gnwef3fuU vpAWyOtXbfXhb2RCQdxifod0P4igxrtAJTzgJc6Li76yNZlFC2k3ZivFR/i+VDrm fTLdpTYWfIs2vxWyGTS50EYLiB7RDzGbMPosPpdVvOlMsfQK70yqQktj5MVB+xzy /IotIAZCUpNyVIE5dsSKd82GUj7hO7B+VXrM42LfQIJ8bkoi1ZmtOIJ/1IUbpGpU FXiboNB5JF5rUeimMpW6DMdjGIBdwa6ubMF6QpOXIrsj5bofb6uNXsmnnA== -----END CERTIFICATE-----Generated at Thu Sep 24 22:01:53 2026 by rpki-client