$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer File: c52a3659-4578-49f3-9ef2-ea8640fc6339.cer (raw, json) Hash identifier: KTE2HOoFXgh44vaA3nrpqVVpFe+uqn3T+WUfo94o8XM= Subject key identifier: F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584E9A783345FFD30F4597039580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Jul 2026 08:45:11 +0000 Certificate not after: Thu 26 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 399321 IP: 104.224.42.0/24 IP: 167.253.12.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:78:33:45:ff:d3:0f:45:97:03:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 24 08:45:11 2026 GMT Not After : Oct 26 08:45:11 2028 GMT Subject: CN=c52a3659-4578-49f3-9ef2-ea8640fc6339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d5:91:08:cd:de:4c:7b:31:cb:de:e7:0c:e2: c7:26:0e:59:3f:8e:50:83:81:16:d5:b1:b9:8c:c5: 0c:39:3e:90:ee:3a:1d:fe:d1:0f:23:d9:79:03:41: aa:99:d7:76:5c:76:80:f2:4e:e7:31:1a:b8:2c:4b: af:72:51:3e:3b:01:9e:1c:2b:63:af:53:63:41:8c: 3c:69:ff:8e:ee:b4:12:9a:1e:9a:94:ad:94:a5:97: a5:a4:aa:b1:63:ce:44:14:f9:32:46:95:09:45:8e: c3:5c:c2:45:05:09:a9:4e:af:8b:0b:ee:d1:97:ab: 90:78:3d:ec:f2:d0:41:c8:11:43:65:99:6f:b0:7c: 86:67:6f:da:d7:13:94:23:49:db:be:03:cf:f4:7c: 0e:e3:27:eb:47:55:33:bd:1b:98:02:36:24:d2:cf: 49:38:91:45:ff:a6:d2:06:41:9f:c5:5d:0e:d3:25: d9:ca:50:80:18:87:fd:fb:85:ed:d9:7f:3a:cd:52: eb:d2:6a:49:79:19:32:fd:0a:9c:ca:79:a2:63:ca: 34:0b:5e:00:80:0e:b7:7b:27:50:d0:13:fc:9b:46: bc:d5:a0:73:8e:51:99:90:a4:29:28:2d:ec:40:26: 20:28:e5:5c:b2:8f:f1:7d:8b:3c:1f:63:da:0c:b8: b4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.224.42.0/24 167.253.12.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399321 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:61:a6:7e:7d:2d:2b:c1:72:94:77:db:49:bf:94:7f:3e:6b: 0a:c8:08:be:6f:d7:11:41:e0:b7:d0:a1:68:b0:63:d2:2f:06: ef:6b:b1:82:2a:d0:8e:0c:32:2c:6c:02:87:8a:35:63:81:d7: b0:27:99:ef:2b:21:98:9e:bc:3f:f9:30:d1:09:4c:ab:46:63: 9a:05:a2:07:44:03:07:d0:63:e3:3c:6b:56:2f:ae:0a:9c:ee: d0:09:90:fb:bf:99:2d:58:bb:0b:97:0e:ea:5d:98:2b:11:94: 3b:1d:1d:02:e3:c6:cc:c6:04:ac:d4:cd:88:e5:d2:79:6b:7f: 74:f2:bd:6c:8b:af:79:d8:e4:47:81:20:29:97:62:f1:37:a9: 03:28:e0:03:7d:a7:34:85:a1:54:5d:3a:d5:0c:c3:31:f7:11: 6e:09:2f:37:4b:a4:44:eb:ab:61:96:90:68:63:15:7e:97:36: 66:82:97:18:61:4c:30:e5:32:b7:fe:fe:31:e3:de:a9:af:ef: 0e:56:b0:d3:46:82:24:2a:78:05:77:be:f1:6c:e7:24:c8:03: 7b:23:c0:82:36:01:ed:73:36:a1:1b:a9:0d:7f:0b:c6:8e:39: c8:76:96:9f:8c:f2:8d:9c:28:97:49:a3:bb:12:5a:b5:8a:e0: e7:cb:a0:4c -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE6aeDNF/9MPRZcDlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDcyNDA4NDUxMVoXDTI4MTAyNjA4NDUxMVowLzEtMCsGA1UEAxMk YzUyYTM2NTktNDU3OC00OWYzLTllZjItZWE4NjQwZmM2MzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dWRCM3eTHsxy97nDOLHJg5ZP45Qg4EW1bG5 jMUMOT6Q7jod/tEPI9l5A0Gqmdd2XHaA8k7nMRq4LEuvclE+OwGeHCtjr1NjQYw8 af+O7rQSmh6alK2UpZelpKqxY85EFPkyRpUJRY7DXMJFBQmpTq+LC+7Rl6uQeD3s 8tBByBFDZZlvsHyGZ2/a1xOUI0nbvgPP9HwO4yfrR1UzvRuYAjYk0s9JOJFF/6bS BkGfxV0O0yXZylCAGIf9+4Xt2X86zVLr0mpJeRky/QqcynmiY8o0C14AgA63eydQ 0BP8m0a81aBzjlGZkKQpKC3sQCYgKOVcso/xfYs8H2PaDLi0ZQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFPUaNvyGonbzux9tbzsYOf3P2Zj6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j NTJhMzY1OS00NTc4LTQ5ZjMtOWVmMi1lYTg2NDBmYzYzMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M1MmEzNjU5LTQ1NzgtNDlmMy05 ZWYyLWVhODY0MGZjNjMzOS9jNTJhMzY1OS00NTc4LTQ5ZjMtOWVmMi1lYTg2NDBm YzYzMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABo4CoDBAKn/QwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhfZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHNhpn59LSvBcpR320m/lH8+awrICL5v1xFB4LfQ oWiwY9IvBu9rsYIq0I4MMixsAoeKNWOB17Anme8rIZievD/5MNEJTKtGY5oFogdE AwfQY+M8a1Yvrgqc7tAJkPu/mS1YuwuXDupdmCsRlDsdHQLjxszGBKzUzYjl0nlr f3TyvWyLr3nY5EeBICmXYvE3qQMo4AN9pzSFoVRdOtUMwzH3EW4JLzdLpETrq2GW kGhjFX6XNmaClxhhTDDlMrf+/jHj3qmv7w5WsNNGgiQqeAV3vvFs5yTIA3sjwII2 Ae1zNqEbqQ1/C8aOOch2lp+M8o2cKJdJo7sSWrWK4OfLoEw= -----END CERTIFICATE-----Generated at Tue Jul 28 19:48:45 2026 by rpki-client