$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer File: d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer (raw, json) Hash identifier: WKj2m8H00miMFgWuvTxnFGl0VlEXOf/NGLMK3Yn65y8= Subject key identifier: 7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858496200B05E8FE8EE8919D78838 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Apr 2025 15:24:26 +0000 Certificate not after: Sat 28 Nov 2026 01:45:26 +0000 Subordinate resources: AS: 393444 IP: 72.46.112.0/20 IP: 143.246.128.0/21 IP: 207.162.208.0/20 IP: 2605:e8c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:62:00:b0:5e:8f:e8:ee:89:19:d7:88:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 1 15:24:26 2025 GMT Not After : Nov 28 01:45:26 2026 GMT Subject: CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:a0:51:35:df:7c:a8:90:14:df:e0:41:12: 15:47:6a:31:4a:cb:13:1b:8c:fb:38:c3:8f:2e:b7: bb:e2:bb:d5:0c:33:59:31:4c:fd:ea:47:f7:f0:85: 73:b9:8a:2a:8b:b3:ab:2b:45:00:9c:2a:a9:b5:7d: df:25:dc:cc:92:37:92:53:ef:84:56:1d:59:f7:dd: d4:7f:2d:19:cc:8f:5f:3a:a1:8a:bb:a6:ac:ba:68: ea:48:db:e5:4d:58:cf:23:87:23:cf:46:f7:a5:a5: da:8a:b2:d7:2d:d1:a7:7d:3d:a4:87:ab:3b:b7:04: f5:67:56:f0:9d:7a:e7:64:29:cc:66:5b:16:21:66: fe:6e:ac:2d:d6:f4:2a:2d:10:64:98:3e:db:97:88: a1:a1:75:27:f8:83:7b:e1:3b:d5:09:76:10:23:0d: 65:d9:29:00:bb:49:af:7b:78:65:6b:d5:0b:0f:cd: fd:fb:3f:7d:b2:c2:bf:2f:42:e9:21:40:3d:df:29: 05:25:76:a7:78:88:4c:d0:a4:1b:80:ca:be:c4:ac: 48:c3:e5:7b:02:cf:cb:87:94:36:2f:1b:11:68:7e: 18:90:3f:27:0f:ca:51:95:dd:01:6d:e5:20:a8:4d: ff:d8:bc:32:20:21:af:b3:67:95:f5:45:53:83:96: e4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 72.46.112.0/20 143.246.128.0/21 207.162.208.0/20 IPv6: 2605:e8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393444 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:36:06:10:f3:cd:1f:38:26:ca:de:ba:34:28:2c:fb:ad:a8: c2:d8:74:0f:50:a0:58:c9:92:88:24:1f:55:cb:6a:c2:47:bc: 74:9d:72:db:f4:07:ac:a5:2f:a9:56:2e:bc:0d:1e:e8:ad:60: 94:02:a2:00:96:7a:ae:90:ab:04:6a:f1:f5:37:8f:26:04:06: 55:6c:fc:37:79:e6:f6:8b:92:36:d0:84:cb:ab:c1:bd:74:b7: e9:47:4a:78:02:c9:0c:44:ca:7a:7c:41:90:b0:b6:e8:29:d1: 1c:6d:64:d3:15:a5:cc:c5:99:51:4a:09:bf:8f:27:45:9d:4d: 43:8c:b0:5a:d4:db:91:7c:d2:11:58:3a:f3:bd:75:50:07:88: 65:46:32:b4:c3:e4:86:eb:5e:db:9e:82:46:73:c1:55:14:96: e6:fa:27:8a:18:80:58:e5:10:91:7e:f1:e2:80:6d:ec:5f:af: 06:87:99:32:5b:80:e5:c1:20:a5:34:93:0d:da:58:1e:3c:82: 11:6b:3f:c8:01:41:ca:c6:4f:1e:cc:f7:5c:f2:8a:7c:9a:26: 2a:30:38:27:db:5d:ec:b4:8d:fb:cf:0f:9d:c1:ea:0d:50:db: 80:f2:a7:f8:6d:e2:4d:94:f7:a9:d3:91:82:91:1c:ac:4c:3b: f2:e8:76:6b -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEliALBej+juiRnXiDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDQwMTE1MjQyNloXDTI2MTEyODAxNDUyNlowLzEtMCsGA1UEAxMk ZDNiNzA3YWItYjRhNi00MmRlLWE3YmMtNjExNWNhNGIzYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlKgUTXffKiQFN/gQRIVR2oxSssTG4z7OMOP Lre74rvVDDNZMUz96kf38IVzuYoqi7OrK0UAnCqptX3fJdzMkjeSU++EVh1Z993U fy0ZzI9fOqGKu6asumjqSNvlTVjPI4cjz0b3paXairLXLdGnfT2kh6s7twT1Z1bw nXrnZCnMZlsWIWb+bqwt1vQqLRBkmD7bl4ihoXUn+IN74TvVCXYQIw1l2SkAu0mv e3hla9ULD839+z99ssK/L0LpIUA93ykFJXaneIhM0KQbgMq+xKxIw+V7As/Lh5Q2 LxsRaH4YkD8nD8pRld0BbeUgqE3/2LwyICGvs2eV9UVTg5bk5wIDAQABo4IENjCC BDIwHQYDVR0OBBYEFHyRxn8bR75s+zIyUO8HUmn0Va7AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k M2I3MDdhYi1iNGE2LTQyZGUtYTdiYy02MTE1Y2E0YjNiM2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2QzYjcwN2FiLWI0YTYtNDJkZS1h N2JjLTYxMTVjYTRiM2IzZS9kM2I3MDdhYi1iNGE2LTQyZGUtYTdiYy02MTE1Y2E0 YjNiM2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARILnADBAOP9oADBATPotAwDQQCAAIwBwMFACYF 6MAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgDkMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHY2BhDzzR84 JsreujQoLPutqMLYdA9QoFjJkogkH1XLasJHvHSdctv0B6ylL6lWLrwNHuitYJQC ogCWeq6QqwRq8fU3jyYEBlVs/Dd55vaLkjbQhMurwb10t+lHSngCyQxEynp8QZCw tugp0RxtZNMVpczFmVFKCb+PJ0WdTUOMsFrU25F80hFYOvO9dVAHiGVGMrTD5Ibr XtuegkZzwVUUlub6J4oYgFjlEJF+8eKAbexfrwaHmTJbgOXBIKU0kw3aWB48ghFr P8gBQcrGTx7M91zyinyaJiowOCfbXey0jfvPD53B6g1Q24Dyp/ht4k2U96nTkYKR HKxMO/Lodms= -----END CERTIFICATE-----Generated at Wed Nov 5 17:50:59 2025 by rpki-client