$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c22901dc-bb61-4018-9056-f25593ea3954.cer File: c22901dc-bb61-4018-9056-f25593ea3954.cer (raw, json) Hash identifier: PGh3B4AGaB4DVGOnkHSs7Pe7NjZ+VD2IdUYv7UGqnE8= Subject key identifier: B7:2A:2F:2E:AD:11:D5:49:EC:23:92:F9:FD:F0:BD:B1:DB:35:0B:12 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B4BA4D173736457503CBAFE40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c22901dc-bb61-4018-9056-f25593ea3954/c22901dc-bb61-4018-9056-f25593ea3954.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c22901dc-bb61-4018-9056-f25593ea3954/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Sep 2025 00:45:24 +0000 Certificate not after: Tue 28 Dec 2027 01:45:24 +0000 Subordinate resources: IP: 2602:ff27::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:a4:d1:73:73:64:57:50:3c:ba:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 24 00:45:24 2025 GMT Not After : Dec 28 01:45:24 2027 GMT Subject: CN=c22901dc-bb61-4018-9056-f25593ea3954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:14:a6:b2:06:93:3e:1f:38:1f:c0:66:fd: c8:04:18:5e:d3:0b:f7:56:ca:f9:f1:37:cc:7d:44: d6:a5:08:8f:31:fb:7b:41:14:23:ae:8c:24:be:b3: 44:60:74:7a:cb:ee:eb:e1:f3:f7:61:fb:63:8d:86: 41:80:c8:8d:62:73:51:06:dd:6f:84:d1:b9:79:90: 15:21:ae:ca:fc:57:52:ac:67:14:9f:6d:29:73:0e: 7c:85:50:b5:3b:30:1e:c0:d0:15:1c:18:10:d1:9e: 1e:72:11:d3:fa:ef:4f:28:29:6d:f6:e6:f0:52:e1: cf:24:70:87:5d:75:02:81:9a:bb:d1:61:07:86:33: 50:ad:6a:db:f7:91:bf:87:57:50:07:b0:15:6f:db: ec:02:ca:2c:37:09:11:24:e7:16:16:1e:4c:a3:d4: d6:4b:e8:a5:c8:ab:cf:ca:a8:92:5b:c6:2c:45:52: 2c:82:7e:94:98:60:6c:30:6b:13:6a:25:9d:b0:42: e7:98:80:c7:0c:8e:8d:5c:99:15:cf:91:86:c8:b6: f6:d1:0b:1c:05:12:c3:a8:6e:e9:50:76:9f:7c:3c: 93:6b:1b:1a:75:fd:f0:9b:e6:65:9c:9b:92:fd:2d: 30:31:a4:39:3d:3d:8c:06:dd:a4:89:f9:7b:33:11: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2A:2F:2E:AD:11:D5:49:EC:23:92:F9:FD:F0:BD:B1:DB:35:0B:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c22901dc-bb61-4018-9056-f25593ea3954/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c22901dc-bb61-4018-9056-f25593ea3954/c22901dc-bb61-4018-9056-f25593ea3954.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv6: 2602:ff27::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7d:26:9d:d7:45:f0:40:76:31:e5:06:48:00:55:63:11:b3: 61:39:3e:e3:0a:cb:f3:71:6e:65:34:71:87:f0:cd:44:05:4f: e0:5f:0c:9e:31:77:58:19:21:b9:6e:fd:b2:75:e3:79:37:8a: d4:1f:83:8b:f2:c3:41:a6:89:7d:c2:ed:51:b0:23:b4:51:34: 40:e5:0a:30:71:54:c5:9d:76:f1:72:75:36:60:94:73:b1:4f: 6c:3e:57:0d:8c:3a:d1:03:b4:79:a1:ae:0e:b7:f6:f3:c7:ee: 69:e8:ea:de:90:1a:18:3c:24:0e:bf:3b:cb:78:f6:d0:fa:be: 0a:a4:df:b8:e0:2c:89:97:b2:1b:55:ca:0c:1a:19:b2:4f:d2: a9:a2:ce:17:0c:f5:81:0c:32:6e:7e:a8:85:d9:36:fa:b7:e7: 04:b0:3b:29:df:a2:c6:ad:94:d7:79:c0:01:81:cf:47:e1:c4: 52:32:47:78:09:79:6a:b4:4e:69:94:b8:f5:ff:77:1a:a5:92: 08:4d:08:61:b0:8c:af:e9:a2:d7:81:d7:b9:3c:ef:f4:f4:f8: 6d:b2:26:1f:2b:b4:11:48:ed:f8:31:9f:72:27:8c:dd:bd:39: 50:d8:d0:1b:b1:30:16:0a:69:74:df:fd:56:61:e5:20:d7:a9: 4b:12:40:97 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEtLpNFzc2RXUDy6/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDkyNDAwNDUyNFoXDTI3MTIyODAxNDUyNFowLzEtMCsGA1UEAxMk YzIyOTAxZGMtYmI2MS00MDE4LTkwNTYtZjI1NTkzZWEzOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1MUprIGkz4fOB/AZv3IBBhe0wv3Vsr58TfM fUTWpQiPMft7QRQjrowkvrNEYHR6y+7r4fP3YftjjYZBgMiNYnNRBt1vhNG5eZAV Ia7K/FdSrGcUn20pcw58hVC1OzAewNAVHBgQ0Z4echHT+u9PKClt9ubwUuHPJHCH XXUCgZq70WEHhjNQrWrb95G/h1dQB7AVb9vsAsosNwkRJOcWFh5Mo9TWS+ilyKvP yqiSW8YsRVIsgn6UmGBsMGsTaiWdsELnmIDHDI6NXJkVz5GGyLb20QscBRLDqG7p UHaffDyTaxsadf3wm+ZlnJuS/S0wMaQ5PT2MBt2kifl7MxEbnwIDAQABo4IEATCC A/0wHQYDVR0OBBYEFLcqLy6tEdVJ7COS+f3wvbHbNQsSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j MjI5MDFkYy1iYjYxLTQwMTgtOTA1Ni1mMjU1OTNlYTM5NTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2MyMjkwMWRjLWJiNjEtNDAxOC05 MDU2LWYyNTU5M2VhMzk1NC9jMjI5MDFkYy1iYjYxLTQwMTgtOTA1Ni1mMjU1OTNl YTM5NTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAv8nADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5fSad10XwQHYx5QZI AFVjEbNhOT7jCsvzcW5lNHGH8M1EBU/gXwyeMXdYGSG5bv2ydeN5N4rUH4OL8sNB pol9wu1RsCO0UTRA5QowcVTFnXbxcnU2YJRzsU9sPlcNjDrRA7R5oa4Ot/bzx+5p 6OrekBoYPCQOvzvLePbQ+r4KpN+44CyJl7IbVcoMGhmyT9Kpos4XDPWBDDJufqiF 2Tb6t+cEsDsp36LGrZTXecABgc9H4cRSMkd4CXlqtE5plLj1/3capZIITQhhsIyv 6aLXgde5PO/09PhtsiYfK7QRSO34MZ9yJ4zdvTlQ2NAbsTAWCml03/1WYeUg16lL EkCX -----END CERTIFICATE-----Generated at Wed Nov 5 19:15:58 2025 by rpki-client