$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer File: c52a3659-4578-49f3-9ef2-ea8640fc6339.cer (raw, json) Hash identifier: lG0PC38M8x/IY+5kl1TP2nVyN66TTDNYKWs/kn954kk= Subject key identifier: F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858499557813D2F5DA4921BEEA180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Apr 2025 00:45:34 +0000 Certificate not after: Sat 24 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 399321 IP: 104.224.42.0/24 IP: 167.253.12.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:57:81:3d:2f:5d:a4:92:1b:ee:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 20 00:45:34 2025 GMT Not After : Jul 24 00:45:34 2027 GMT Subject: CN=c52a3659-4578-49f3-9ef2-ea8640fc6339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d5:91:08:cd:de:4c:7b:31:cb:de:e7:0c:e2: c7:26:0e:59:3f:8e:50:83:81:16:d5:b1:b9:8c:c5: 0c:39:3e:90:ee:3a:1d:fe:d1:0f:23:d9:79:03:41: aa:99:d7:76:5c:76:80:f2:4e:e7:31:1a:b8:2c:4b: af:72:51:3e:3b:01:9e:1c:2b:63:af:53:63:41:8c: 3c:69:ff:8e:ee:b4:12:9a:1e:9a:94:ad:94:a5:97: a5:a4:aa:b1:63:ce:44:14:f9:32:46:95:09:45:8e: c3:5c:c2:45:05:09:a9:4e:af:8b:0b:ee:d1:97:ab: 90:78:3d:ec:f2:d0:41:c8:11:43:65:99:6f:b0:7c: 86:67:6f:da:d7:13:94:23:49:db:be:03:cf:f4:7c: 0e:e3:27:eb:47:55:33:bd:1b:98:02:36:24:d2:cf: 49:38:91:45:ff:a6:d2:06:41:9f:c5:5d:0e:d3:25: d9:ca:50:80:18:87:fd:fb:85:ed:d9:7f:3a:cd:52: eb:d2:6a:49:79:19:32:fd:0a:9c:ca:79:a2:63:ca: 34:0b:5e:00:80:0e:b7:7b:27:50:d0:13:fc:9b:46: bc:d5:a0:73:8e:51:99:90:a4:29:28:2d:ec:40:26: 20:28:e5:5c:b2:8f:f1:7d:8b:3c:1f:63:da:0c:b8: b4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.224.42.0/24 167.253.12.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399321 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:33:74:ac:2f:9f:8f:1b:eb:f5:3c:be:44:75:f9:74:15:f7: 98:de:67:86:d3:d0:11:b1:5c:97:c2:13:73:ee:07:bd:69:08: c3:85:87:97:67:de:6d:84:95:97:bd:4f:84:e6:49:12:4c:34: 04:19:94:81:2d:d5:1c:ee:db:8b:3c:00:8e:05:70:c0:a7:7a: 8e:cf:58:c9:ee:6e:95:10:7e:7a:2a:3f:96:e7:c0:a6:2a:25: af:dc:e2:37:bc:d1:69:ad:8a:9a:9e:ea:9a:c1:56:8b:a6:bb: 78:72:28:3e:a1:4c:3a:20:de:d2:f3:55:cd:d9:ff:e3:12:9a: f6:ef:5f:03:43:bd:f1:fa:55:43:51:a0:74:71:57:0f:a4:5a: b1:b3:9c:5a:cc:db:db:b5:29:ad:e2:24:d3:2d:83:ae:f7:b7: cc:68:bc:a1:72:90:2a:2e:a0:40:11:73:92:78:6d:32:1b:c7: 73:64:cf:1e:c3:c0:9b:b6:71:7c:a1:e1:4f:b5:33:4b:e8:d9: 75:75:6b:07:1e:d2:c6:12:99:85:a1:ee:88:10:5c:ca:7c:60: 34:ef:91:c7:1c:ed:75:38:72:17:be:81:70:a6:d0:0f:1d:0e: 16:41:47:d1:9b:e5:cd:50:ea:6b:5d:cf:ac:ee:32:2a:2e:be: d7:f3:3a:f1 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEmVV4E9L12kkhvuoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDQyMDAwNDUzNFoXDTI3MDcyNDAwNDUzNFowLzEtMCsGA1UEAxMk YzUyYTM2NTktNDU3OC00OWYzLTllZjItZWE4NjQwZmM2MzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dWRCM3eTHsxy97nDOLHJg5ZP45Qg4EW1bG5 jMUMOT6Q7jod/tEPI9l5A0Gqmdd2XHaA8k7nMRq4LEuvclE+OwGeHCtjr1NjQYw8 af+O7rQSmh6alK2UpZelpKqxY85EFPkyRpUJRY7DXMJFBQmpTq+LC+7Rl6uQeD3s 8tBByBFDZZlvsHyGZ2/a1xOUI0nbvgPP9HwO4yfrR1UzvRuYAjYk0s9JOJFF/6bS BkGfxV0O0yXZylCAGIf9+4Xt2X86zVLr0mpJeRky/QqcynmiY8o0C14AgA63eydQ 0BP8m0a81aBzjlGZkKQpKC3sQCYgKOVcso/xfYs8H2PaDLi0ZQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFPUaNvyGonbzux9tbzsYOf3P2Zj6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j NTJhMzY1OS00NTc4LTQ5ZjMtOWVmMi1lYTg2NDBmYzYzMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M1MmEzNjU5LTQ1NzgtNDlmMy05 ZWYyLWVhODY0MGZjNjMzOS9jNTJhMzY1OS00NTc4LTQ5ZjMtOWVmMi1lYTg2NDBm YzYzMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABo4CoDBAKn/QwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhfZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAG0zdKwvn48b6/U8vkR1+XQV95jeZ4bT0BGxXJfC E3PuB71pCMOFh5dn3m2ElZe9T4TmSRJMNAQZlIEt1Rzu24s8AI4FcMCneo7PWMnu bpUQfnoqP5bnwKYqJa/c4je80Wmtipqe6prBVoumu3hyKD6hTDog3tLzVc3Z/+MS mvbvXwNDvfH6VUNRoHRxVw+kWrGznFrM29u1Ka3iJNMtg673t8xovKFykCouoEAR c5J4bTIbx3Nkzx7DwJu2cXyh4U+1M0vo2XV1awce0sYSmYWh7ogQXMp8YDTvkccc 7XU4che+gXCm0A8dDhZBR9Gb5c1Q6mtdz6zuMiouvtfzOvE= -----END CERTIFICATE-----Generated at Wed Nov 5 14:58:43 2025 by rpki-client