$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer File: d25f3fa9-8b52-4f17-8aca-6740ded73683.cer (raw, json) Hash identifier: rWSzssNauahp8PAn1gjMsSdsiX5XxSG1dSR92QaH+CE= Subject key identifier: 8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A909917068BAA00E07C906200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Jul 2025 00:45:37 +0000 Certificate not after: Fri 22 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 399487 IP: 104.166.109.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:99:17:06:8b:aa:00:e0:7c:90:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 19 00:45:37 2025 GMT Not After : Oct 22 00:45:37 2027 GMT Subject: CN=d25f3fa9-8b52-4f17-8aca-6740ded73683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e9:fb:b3:c3:8f:94:a8:1d:9b:a3:e5:62:35: 67:ba:0c:88:38:36:24:58:59:d8:f4:52:e8:e8:10: b1:aa:cc:61:73:5c:4e:06:0a:a4:9c:44:b4:b2:40: ad:0c:6b:fe:d8:11:8e:a5:19:f2:4d:95:79:fd:b7: 63:6d:0d:fe:b0:70:24:71:00:92:e9:1a:62:e5:14: a4:ad:9d:a3:69:21:43:22:22:a0:ca:7e:f8:9b:69: e9:4e:08:95:53:e7:bd:45:5c:90:f0:74:8f:e3:78: 6b:db:19:99:ac:59:c1:54:8e:6e:c8:2c:e5:47:ea: b3:19:8f:33:4d:e4:93:fb:f8:be:2a:59:0d:0e:40: 07:22:bf:fe:32:49:6a:9a:f9:21:80:39:ab:60:c4: 6a:2d:ca:3d:54:b1:e1:b8:b3:69:ad:2e:59:bc:9f: d1:d6:9d:70:0e:d6:ab:39:39:37:b5:1e:cb:e8:0f: 1f:9e:45:c2:72:ac:12:c8:d6:30:cf:3b:b1:a7:70: fb:2c:16:7a:90:5c:5f:5d:ce:3e:47:f9:87:43:5c: f8:97:00:86:86:23:e1:b3:d5:68:43:80:e3:4f:dd: de:f7:ca:6f:4e:a6:0c:fb:bb:45:57:e8:f6:09:d2: 60:a4:11:40:3a:93:af:1c:da:5f:08:98:bc:cb:3f: ed:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.166.109.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399487 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:26:6a:f0:8c:48:f8:d8:d3:c4:0c:7d:33:df:f9:41:92:2a: 65:f3:fc:5f:bd:b2:0e:bc:26:96:77:44:89:a7:bb:79:fe:bb: be:4f:4f:d1:b4:ea:17:d6:7d:f0:74:eb:42:4e:a0:4f:63:fa: 5b:a2:53:44:24:b9:93:a4:ce:de:aa:e4:e0:f2:08:f7:f6:f3: c2:69:4b:27:a4:74:e4:1d:9b:7f:7f:a5:73:86:53:6c:49:20: 1f:6c:c3:99:2a:4c:6b:49:50:78:f2:95:92:74:30:ca:a6:62: 7f:3d:8d:fc:b9:b2:87:0f:7c:5c:21:68:12:8c:ac:32:c7:a8: 21:68:10:08:a5:c8:df:c1:f4:74:7f:b4:4b:7c:8a:c0:72:52: 6f:57:4a:bf:5c:92:67:00:b3:95:40:ea:01:28:09:7c:56:5a: 3c:82:95:b9:49:e6:7c:a2:34:89:66:88:3e:91:53:02:67:4f: cc:85:57:f3:6a:ac:30:09:51:8b:07:25:40:f9:2d:12:f8:c4: a8:d1:c4:61:89:62:24:8b:3b:04:45:62:ea:33:f0:7e:5c:68: 1c:4f:f0:99:26:93:63:ec:42:77:40:ca:cf:61:37:75:e4:57: 69:3a:e0:03:1c:de:38:46:9e:12:78:a4:2f:86:6f:3d:d3:fb: 75:fd:5b:a6 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEqQmRcGi6oA4HyQYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDcxOTAwNDUzN1oXDTI3MTAyMjAwNDUzN1owLzEtMCsGA1UEAxMk ZDI1ZjNmYTktOGI1Mi00ZjE3LThhY2EtNjc0MGRlZDczNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyun7s8OPlKgdm6PlYjVnugyIODYkWFnY9FLo 6BCxqsxhc1xOBgqknES0skCtDGv+2BGOpRnyTZV5/bdjbQ3+sHAkcQCS6Rpi5RSk rZ2jaSFDIiKgyn74m2npTgiVU+e9RVyQ8HSP43hr2xmZrFnBVI5uyCzlR+qzGY8z TeST+/i+KlkNDkAHIr/+MklqmvkhgDmrYMRqLco9VLHhuLNprS5ZvJ/R1p1wDtar OTk3tR7L6A8fnkXCcqwSyNYwzzuxp3D7LBZ6kFxfXc4+R/mHQ1z4lwCGhiPhs9Vo Q4DjT93e98pvTqYM+7tFV+j2CdJgpBFAOpOvHNpfCJi8yz/tIQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFI61hJpwThGwRmutndNbe/wR8LE2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k MjVmM2ZhOS04YjUyLTRmMTctOGFjYS02NzQwZGVkNzM2ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2QyNWYzZmE5LThiNTItNGYxNy04 YWNhLTY3NDBkZWQ3MzY4My9kMjVmM2ZhOS04YjUyLTRmMTctOGFjYS02NzQwZGVk NzM2ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABopm0wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bhh/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD8mavCMSPjY08QMfTPf+UGSKmXz/F+9sg68JpZ3RImnu3n+ u75PT9G06hfWffB060JOoE9j+luiU0QkuZOkzt6q5ODyCPf288JpSyekdOQdm39/ pXOGU2xJIB9sw5kqTGtJUHjylZJ0MMqmYn89jfy5socPfFwhaBKMrDLHqCFoEAil yN/B9HR/tEt8isByUm9XSr9ckmcAs5VA6gEoCXxWWjyClblJ5nyiNIlmiD6RUwJn T8yFV/NqrDAJUYsHJUD5LRL4xKjRxGGJYiSLOwRFYuoz8H5caBxP8Jkmk2PsQndA ys9hN3XkV2k64AMc3jhGnhJ4pC+Gbz3T+3X9W6Y= -----END CERTIFICATE-----Generated at Wed Nov 5 13:15:04 2025 by rpki-client