$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer File: d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer (raw, json) Hash identifier: EsHaJmMi16kigvucnARKGLA1XXdW4TXGWNbgbLs56HI= Subject key identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584C93C9F6179A4417859869C5C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 Jan 2026 13:45:23 +0000 Certificate not after: Sun 23 Apr 2028 12:45:23 +0000 Subordinate resources: AS: 61262 AS: 394298 IP: 103.228.96.0/22 IP: 170.76.176.0/22 IP: 185.39.52.0/22 IP: 185.81.136.0/22 IP: 192.234.88.0/24 IP: 203.89.104.0/22 IP: 2606:7a40::/32 IP: 2620:cc:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:93:c9:f6:17:9a:44:17:85:98:69:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jan 19 13:45:23 2026 GMT Not After : Apr 23 12:45:23 2028 GMT Subject: CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8f:dc:9e:87:58:c3:99:e2:6f:83:82:9e:a3: 74:04:23:f9:1e:3e:4b:2e:9a:52:29:47:03:4f:e6: 79:dc:47:8b:83:ad:30:f4:4e:e5:34:05:c0:f5:c3: 6e:d3:92:8e:d3:98:35:2a:47:1e:05:06:8e:e7:36: 4d:6d:e0:d4:ca:0c:70:07:c5:d2:dc:a4:1e:0b:05: 83:47:2a:30:4f:c6:b8:38:77:79:f3:bb:9a:d8:c8: f6:6c:b5:88:e3:14:88:0c:db:00:24:2f:dc:56:93: 29:2e:aa:51:9c:85:0a:72:9c:d5:ff:77:75:7d:b2: 3a:c9:72:f3:e7:02:c9:b5:b1:0b:c7:56:f4:17:d5: 82:f8:8e:8a:5a:3d:01:d8:7d:8d:57:9e:25:d9:17: da:33:22:85:bd:a9:66:6e:74:2f:9f:21:5d:39:be: 0a:d9:5c:dd:a1:7f:fc:26:c5:74:cc:e6:e8:0a:44: 87:08:58:8f:5a:fa:06:c0:3d:a6:4f:78:0b:7b:36: 0d:dc:0f:6c:12:5e:cc:03:57:68:e8:23:e7:25:63: 59:37:89:d0:f1:e7:90:88:23:45:d7:82:42:7e:29: a4:b9:70:cc:d1:52:a8:1c:ae:2b:14:ec:bd:27:d7: e0:98:3f:1b:0d:c8:0c:03:86:a8:74:82:26:53:9e: 14:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 103.228.96.0/22 170.76.176.0/22 185.39.52.0/22 185.81.136.0/22 192.234.88.0/24 203.89.104.0/22 IPv6: 2606:7a40::/32 2620:cc:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61262 394298 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:42:99:0e:3d:11:61:f0:0e:06:5e:4f:de:e4:53:7a:45:d9: 49:ff:34:fa:70:bb:12:75:19:29:6b:9a:cf:e2:bd:fd:c5:77: 99:6f:45:5f:d3:ed:cb:01:9a:c5:74:45:4c:14:59:b3:ea:65: f1:3b:43:01:6e:02:02:78:46:f8:13:3c:cf:ea:89:6f:9b:85: 02:71:4c:12:df:45:4f:36:93:2d:65:42:6e:df:30:cd:c4:9b: 23:01:f6:e8:75:2f:06:2e:45:d5:b6:9e:13:17:bf:be:38:7e: 22:05:df:33:da:f5:76:93:aa:2a:63:5f:53:bc:40:7f:d0:6a: 8e:12:99:f0:28:ec:af:54:38:b9:3e:bd:71:dd:7b:9b:5c:2b: 35:be:e0:b6:c7:42:fb:31:b2:ef:6b:0e:f7:e1:69:31:9b:14: 00:92:1f:4a:ed:90:1e:ff:03:82:19:52:04:f0:0d:b5:b2:90: 92:81:04:b3:c4:33:33:22:45:c8:21:e3:c4:39:a2:e0:c9:89: 0b:76:d7:e4:94:0b:fb:e7:85:50:09:0b:a5:f3:3e:ab:e7:56: 16:90:0b:a0:45:af:70:30:c0:28:79:f3:98:90:3e:db:6c:3e: 69:9d:c7:17:72:ad:46:a8:56:1c:d2:fc:ab:22:2e:6c:8f:7c: d1:74:85:e0 -----BEGIN CERTIFICATE----- MIIHRDCCBiygAwIBAgIUAQ0Mn0MoWEyTyfYXmkQXhZhpxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDExOTEzNDUyM1oXDTI4MDQyMzEyNDUyM1owLzEtMCsGA1UEAxMk ZDQ1YzYyMTEtMTcxNy00YTc1LWE4MmEtMWQ3YTdhYmFjMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo/cnodYw5nib4OCnqN0BCP5Hj5LLppSKUcD T+Z53EeLg60w9E7lNAXA9cNu05KO05g1KkceBQaO5zZNbeDUygxwB8XS3KQeCwWD RyowT8a4OHd587ua2Mj2bLWI4xSIDNsAJC/cVpMpLqpRnIUKcpzV/3d1fbI6yXLz 5wLJtbELx1b0F9WC+I6KWj0B2H2NV54l2RfaMyKFvalmbnQvnyFdOb4K2VzdoX/8 JsV0zOboCkSHCFiPWvoGwD2mT3gLezYN3A9sEl7MA1do6CPnJWNZN4nQ8eeQiCNF 14JCfimkuXDM0VKoHK4rFOy9J9fgmD8bDcgMA4aodIImU54UPQIDAQABo4IEVjCC BFIwHQYDVR0OBBYEFB0d/bQJFzq9/i+gIytMKqN6+gHZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k NDVjNjIxMS0xNzE3LTRhNzUtYTgyYS0xZDdhN2FiYWMyYWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Q0NWM2MjExLTE3MTctNGE3NS1h ODJhLTFkN2E3YWJhYzJhZC9kNDVjNjIxMS0xNzE3LTRhNzUtYTgyYS0xZDdhN2Fi YWMyYWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwVQYIKwYBBQUH AQcBAf8ERjBEMCoEAgABMCQDBAJn5GADBAKqTLADBAK5JzQDBAK5UYgDBADA6lgD BALLWWgwFgQCAAIwEAMFACYGekADBwAmIADMwAAwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAO9OAgMGBDowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAD0KZDj0RYfAOBl5P3uRTekXZSf80+nC7 EnUZKWuaz+K9/cV3mW9FX9PtywGaxXRFTBRZs+pl8TtDAW4CAnhG+BM8z+qJb5uF AnFMEt9FTzaTLWVCbt8wzcSbIwH26HUvBi5F1baeExe/vjh+IgXfM9r1dpOqKmNf U7xAf9BqjhKZ8Cjsr1Q4uT69cd17m1wrNb7gtsdC+zGy72sO9+FpMZsUAJIfSu2Q Hv8DghlSBPANtbKQkoEEs8QzMyJFyCHjxDmi4MmJC3bX5JQL++eFUAkLpfM+q+dW FpALoEWvcDDAKHnzmJA+22w+aZ3HF3KtRqhWHNL8qyIubI980XSF4A== -----END CERTIFICATE-----Generated at Sun Mar 1 22:41:59 2026 by rpki-client