$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer File: bfc0b168-b834-4192-acf1-30565a4b3e0c.cer (raw, json) Hash identifier: QKoOBkysJESBu8IRWJJvye0FNC8FyQj2IepjOSRfv/s= Subject key identifier: 0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B9C9AA62629A221766FA97400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Oct 2025 00:45:24 +0000 Certificate not after: Wed 26 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 399868 IP: 23.183.48.0/24 IP: 173.249.176.0/22 IP: 2602:fc5c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:9a:a6:26:29:a2:21:76:6f:a9:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 23 00:45:24 2025 GMT Not After : Jan 26 01:45:24 2028 GMT Subject: CN=bfc0b168-b834-4192-acf1-30565a4b3e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:7d:49:b3:17:43:33:05:9c:3f:a0:a6:6a: 37:f4:25:85:fd:df:9a:60:94:db:9d:4e:7d:85:f0: 97:24:8e:d1:38:85:74:b9:d8:f1:25:b2:ed:de:e3: 10:cc:18:61:f8:79:10:27:dd:93:df:52:bb:66:d4: 77:8d:33:75:19:cf:0a:70:01:31:08:45:0e:23:ae: ea:be:36:d5:4e:11:6a:f9:56:73:d1:f1:c7:c1:0e: 83:30:6e:38:b3:22:94:84:a3:94:02:91:0d:d6:35: 1e:81:60:59:95:7f:42:84:a8:21:a0:7d:c7:a9:fb: 7d:40:6e:33:73:09:ce:26:2f:23:a5:f5:76:6f:f0: 5c:b1:01:cb:3e:15:fd:e6:44:d8:14:36:9d:96:e0: ba:6c:c7:16:4c:8b:b2:78:c1:29:cf:e1:4b:1b:8a: d7:63:d8:57:7d:2d:83:9d:d1:35:18:2b:ee:81:d5: 62:40:d8:c6:4c:8d:09:2f:58:65:34:21:fe:cd:c6: dd:5c:6c:0b:29:53:9f:4f:2a:78:c9:68:f0:a8:17: 6c:50:21:81:39:c4:de:cf:c0:3b:fa:cd:9b:fe:29: b3:30:4b:60:79:1d:93:ed:2f:22:0f:f6:7d:9f:69: bb:27:dd:38:13:b3:43:93:a7:dc:8b:f4:83:3f:68: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.183.48.0/24 173.249.176.0/22 IPv6: 2602:fc5c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399868 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:f5:09:77:44:32:2f:00:9a:ed:8e:d3:8f:e2:d9:4e:7c:96: 75:e6:e7:aa:a9:2c:81:0f:8c:73:28:90:82:7e:e0:6b:ce:22: b9:8c:e1:95:e9:2b:f9:1c:44:72:07:d5:03:51:9e:87:3b:4d: fa:46:e3:f7:ac:eb:80:ac:f5:29:d2:50:25:c8:c6:30:4b:88: 1a:00:5d:17:c1:31:f3:33:93:95:75:61:ae:c9:33:b2:01:87: 97:12:fa:78:4c:e7:e2:8a:82:5a:96:ad:6f:62:d3:1d:46:7a: b5:69:d1:7d:8f:f9:04:c0:5c:15:0e:fd:ae:4e:7b:e5:bb:82: 92:32:eb:e4:97:bd:11:49:fa:b7:3a:cf:7f:b0:b5:2f:f5:a2: 37:2c:b1:fa:95:84:d5:f9:b3:fa:e8:48:16:3a:e1:16:91:73: 84:94:2a:e0:19:a6:59:25:d3:14:33:92:77:c7:28:1a:85:f1: d4:de:29:6c:1c:89:5d:56:33:18:c0:49:b8:79:71:a4:ac:54: 20:4f:9b:e3:d1:0c:3a:0c:3c:3c:b2:ef:06:52:cb:67:b2:1a: 56:c2:2f:f8:13:e8:2a:9d:49:f1:4b:22:85:d3:95:99:fd:8a: 36:df:70:f8:aa:2d:9d:79:0c:4f:7e:ba:b9:d1:ec:df:e8:9f: ee:e3:f7:ae -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEucmqYmKaIhdm+pdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAyMzAwNDUyNFoXDTI4MDEyNjAxNDUyNFowLzEtMCsGA1UEAxMk YmZjMGIxNjgtYjgzNC00MTkyLWFjZjEtMzA1NjVhNGIzZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWN9SbMXQzMFnD+gpmo39CWF/d+aYJTbnU59 hfCXJI7ROIV0udjxJbLt3uMQzBhh+HkQJ92T31K7ZtR3jTN1Gc8KcAExCEUOI67q vjbVThFq+VZz0fHHwQ6DMG44syKUhKOUApEN1jUegWBZlX9ChKghoH3Hqft9QG4z cwnOJi8jpfV2b/BcsQHLPhX95kTYFDadluC6bMcWTIuyeMEpz+FLG4rXY9hXfS2D ndE1GCvugdViQNjGTI0JL1hlNCH+zcbdXGwLKVOfTyp4yWjwqBdsUCGBOcTez8A7 +s2b/imzMEtgeR2T7S8iD/Z9n2m7J904E7NDk6fci/SDP2hfxwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFAtfaEJ4it+jsBqrmuE9xrkeD9GhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i ZmMwYjE2OC1iODM0LTQxOTItYWNmMS0zMDU2NWE0YjNlMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2JmYzBiMTY4LWI4MzQtNDE5Mi1h Y2YxLTMwNTY1YTRiM2UwYy9iZmMwYjE2OC1iODM0LTQxOTItYWNmMS0zMDU2NWE0 YjNlMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXtzADBAKt+bAwDgQCAAIwCAMGBCYC/FwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYZ/DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCy9Ql3RDIvAJrtjtOP 4tlOfJZ15ueqqSyBD4xzKJCCfuBrziK5jOGV6Sv5HERyB9UDUZ6HO036RuP3rOuA rPUp0lAlyMYwS4gaAF0XwTHzM5OVdWGuyTOyAYeXEvp4TOfiioJalq1vYtMdRnq1 adF9j/kEwFwVDv2uTnvlu4KSMuvkl70RSfq3Os9/sLUv9aI3LLH6lYTV+bP66EgW OuEWkXOElCrgGaZZJdMUM5J3xygahfHU3ilsHIldVjMYwEm4eXGkrFQgT5vj0Qw6 DDw8su8GUstnshpWwi/4E+gqnUnxSyKF05WZ/Yo233D4qi2deQxPfrq50ezf6J/u 4/eu -----END CERTIFICATE-----Generated at Wed Nov 5 12:46:06 2025 by rpki-client