$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5.cer File: bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5.cer (raw, json) Hash identifier: FUy3SSzbnmCPFCBw9w1u1/f2l7BnmUAhPcTH2yJOYvE= Subject key identifier: 14:7A:42:0A:50:96:2E:EF:A8:3A:22:5B:D8:A9:0B:E9:38:7C:B2:CB Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849E64D5501F17C4208FBAAB400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 May 2025 00:45:33 +0000 Certificate not after: Sun 22 Aug 2027 00:45:33 +0000 Subordinate resources: AS: 11994 IP: 63.249.64.0/18 IP: 68.170.176.0/20 IP: 74.220.64.0/20 IP: 216.173.128.0/20 IP: 2607:f5f8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:4d:55:01:f1:7c:42:08:fb:aa:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 19 00:45:33 2025 GMT Not After : Aug 22 00:45:33 2027 GMT Subject: CN=bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:12:7f:5e:dd:84:8f:e3:7d:b3:51:1b:16:25: 2d:d6:ba:0f:d1:6c:1d:6f:a4:4d:42:de:ed:af:aa: 33:b8:5f:e5:07:09:27:49:19:c8:6d:d8:10:bb:bf: 28:3f:f7:01:fd:7f:37:05:89:30:6e:a2:b1:9f:d6: b5:b7:a1:11:15:9e:2b:51:93:77:2c:cd:80:f9:3b: 62:b0:57:33:a4:0b:07:64:aa:a3:46:c3:bf:df:ae: 75:50:a4:18:81:4d:22:1b:83:21:cb:e8:75:3b:d8: 70:af:2d:9a:e1:67:e8:a2:17:c4:da:6f:fc:ad:71: 53:51:cf:77:2e:07:33:fa:25:8c:53:4e:e4:e5:fd: ab:98:4a:41:a0:b8:2b:81:6a:29:b4:c5:f6:b1:1c: 83:03:ed:19:9f:0b:a4:d5:60:62:83:88:94:dc:9e: f7:b9:f2:86:91:f5:8b:f6:d2:25:d3:38:90:0c:83: d5:d1:ba:c3:6c:fd:97:19:d0:42:df:71:0b:60:47: 84:8c:dd:90:2a:7b:ef:5e:72:e3:ae:85:41:23:56: db:b6:f7:c1:89:03:3e:45:3c:d7:ec:76:48:08:14: 84:b8:12:62:99:08:41:6b:bc:bc:c5:14:b7:3d:c7: 51:8a:1c:7f:71:31:5a:cc:77:c5:9a:30:d2:5c:79: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7A:42:0A:50:96:2E:EF:A8:3A:22:5B:D8:A9:0B:E9:38:7C:B2:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 63.249.64.0/18 68.170.176.0/20 74.220.64.0/20 216.173.128.0/20 IPv6: 2607:f5f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11994 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:68:43:58:9a:8c:d4:22:7c:85:55:eb:f3:87:60:8c:0a:a3: 13:c7:c1:6f:3c:b8:2d:7c:2b:0b:db:db:36:7d:98:13:9e:0a: 44:3f:1f:16:5f:4a:bb:ba:17:da:91:8b:31:90:01:58:6d:0f: 0b:24:8a:cb:53:0b:42:0c:2e:ed:37:d3:ed:5b:e8:1d:54:c0: 43:19:63:d7:11:65:e7:c5:89:82:64:2a:32:ee:90:56:17:7d: c8:59:8d:e3:80:47:57:5a:31:30:fb:92:2e:6c:81:04:ef:55: df:fb:04:dd:1c:14:f5:72:8f:61:7c:ba:7c:ed:97:35:dc:1e: 74:e3:fb:44:db:7a:e3:73:51:2a:ee:0f:a0:cb:0a:65:22:f3: 2d:91:3e:ac:7b:d5:16:c4:43:7f:be:93:c4:1f:14:38:b0:ed: 94:39:77:a1:c2:be:f9:16:8b:f8:4a:53:5d:41:73:36:ee:52: f0:89:dd:74:60:ab:aa:36:31:f9:2c:dd:a1:04:aa:e2:08:f5: f0:f5:72:b2:f8:5f:a2:d8:4b:0d:d5:14:5b:9e:23:c9:c6:a7: 32:80:a0:7d:40:63:f6:52:b8:5c:9c:3f:d1:de:a3:05:9e:fc: c2:11:23:42:8b:3b:73:c5:d8:49:9d:27:e6:87:b7:47:83:42: e3:7c:b3:f2 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEnmTVUB8XxCCPuqtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDUxOTAwNDUzM1oXDTI3MDgyMjAwNDUzM1owLzEtMCsGA1UEAxMk YmNkNjllNmMtNzJhOS00ZmRmLTkzNTMtNmUwODFlYWE2ZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBJ/Xt2Ej+N9s1EbFiUt1roP0Wwdb6RNQt7t r6ozuF/lBwknSRnIbdgQu78oP/cB/X83BYkwbqKxn9a1t6ERFZ4rUZN3LM2A+Tti sFczpAsHZKqjRsO/3651UKQYgU0iG4Mhy+h1O9hwry2a4WfoohfE2m/8rXFTUc93 Lgcz+iWMU07k5f2rmEpBoLgrgWoptMX2sRyDA+0Znwuk1WBig4iU3J73ufKGkfWL 9tIl0ziQDIPV0brDbP2XGdBC33ELYEeEjN2QKnvvXnLjroVBI1bbtvfBiQM+RTzX 7HZICBSEuBJimQhBa7y8xRS3PcdRihx/cTFazHfFmjDSXHmOGQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFBR6QgpQli7vqDoiW9ipC+k4fLLLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i Y2Q2OWU2Yy03MmE5LTRmZGYtOTM1My02ZTA4MWVhYTZlZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2JjZDY5ZTZjLTcyYTktNGZkZi05 MzUzLTZlMDgxZWFhNmVkNS9iY2Q2OWU2Yy03MmE5LTRmZGYtOTM1My02ZTA4MWVh YTZlZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAY/+UADBAREqrADBARK3EADBATYrYAwDQQCAAIw BwMFACYH9fgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLtowVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADGhD WJqM1CJ8hVXr84dgjAqjE8fBbzy4LXwrC9vbNn2YE54KRD8fFl9Ku7oX2pGLMZAB WG0PCySKy1MLQgwu7TfT7VvoHVTAQxlj1xFl58WJgmQqMu6QVhd9yFmN44BHV1ox MPuSLmyBBO9V3/sE3RwU9XKPYXy6fO2XNdwedOP7RNt643NRKu4PoMsKZSLzLZE+ rHvVFsRDf76TxB8UOLDtlDl3ocK++RaL+EpTXUFzNu5S8InddGCrqjYx+SzdoQSq 4gj18PVysvhfothLDdUUW54jycanMoCgfUBj9lK4XJw/0d6jBZ78whEjQos7c8XY SZ0n5oe3R4NC43yz8g== -----END CERTIFICATE-----Generated at Wed Nov 5 06:43:08 2025 by rpki-client