$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer File: da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer (raw, json) Hash identifier: QCowuiJ1J89LWzzsf+GsZZVX7sIuB+33PSqiF1drAy0= Subject key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584BA4FAB0D6D7CCA78DA1F25340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Oct 2025 00:45:22 +0000 Certificate not after: Sat 29 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 14203 AS: 21870 AS: 395628 IP: 66.129.224.0/19 IP: 198.186.160.0/24 IP: 2620:103:c000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a4:fa:b0:d6:d7:cc:a7:8d:a1:f2:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 26 00:45:22 2025 GMT Not After : Jan 29 01:45:22 2028 GMT Subject: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:ff:77:60:52:0c:5f:77:77:0d:dc:fc:6d: ef:53:b6:56:3a:5a:53:f0:29:ce:2b:e8:60:76:58: 9b:03:40:ae:a4:df:02:db:14:08:72:7b:7a:1a:be: 79:04:3e:0d:ab:f8:84:2d:83:ba:59:a5:ab:04:43: 65:11:ae:3e:cd:1f:99:26:04:b8:d2:ad:e3:f6:17: 93:ed:75:e2:21:fc:a6:a6:47:41:bd:4d:45:19:93: 20:f0:f7:8f:86:c1:f4:3d:c5:02:77:3b:3b:c8:7d: 0a:79:b7:59:36:2e:1c:81:d3:09:04:f2:8d:10:e8: a8:a5:2d:84:74:4b:6a:54:12:16:7c:f5:a6:93:c8: 6f:9a:1f:1a:47:c1:7b:ee:7a:76:4e:2e:fd:4f:ce: 7e:44:f2:34:fa:4d:62:2d:48:c4:bb:3b:6a:4a:34: 28:f1:89:c4:62:cf:46:12:49:b3:a7:09:5a:de:38: f4:d5:51:4a:9c:3e:97:e1:a4:0e:ba:c4:e0:b2:dc: ab:69:3a:96:c0:b4:b8:2e:a9:2e:ec:5a:a4:17:25: 82:72:42:69:55:0d:52:72:db:18:2b:47:b8:d2:65: 50:2a:11:01:72:f3:d0:9d:38:1c:85:35:97:de:99: 2b:54:36:0e:f5:c9:81:5f:bf:f5:97:7a:06:bc:ce: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 66.129.224.0/19 198.186.160.0/24 IPv6: 2620:103:c000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14203 21870 395628 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:39:86:e2:3c:34:76:a4:e1:33:c1:b6:a8:4f:66:f2:6a:07: 1c:21:b4:7d:fa:df:6a:48:e6:d2:b3:af:35:47:ae:69:0f:3f: 97:51:10:d5:b5:90:5c:75:ff:d5:d5:e9:e3:a7:17:b0:50:96: 1a:de:45:80:df:cc:76:38:ca:5a:bb:1e:1b:23:45:48:0a:87: e9:72:1d:af:3c:52:6d:3c:c7:25:5d:df:0a:df:f6:4e:e3:93: 41:07:ff:c1:05:96:cb:3c:f8:53:0d:87:f9:db:3e:0d:1d:9d: 7d:5a:de:88:a6:b5:0a:66:73:ad:26:95:a5:db:e4:7c:c5:73: 35:2e:b7:0a:58:85:91:14:11:f4:9e:ad:8e:f8:5a:5c:3c:32: b7:be:5c:57:28:48:bb:17:ca:f7:6b:a2:92:06:98:9c:23:ec: e5:63:f9:df:f9:57:6f:3a:4d:f0:63:0a:2f:83:a1:05:38:2c: 2c:af:75:49:03:1e:f4:81:22:9e:8d:45:0c:87:dc:a6:02:cc: 28:33:77:b0:4a:f8:27:26:87:4e:98:b4:0f:b0:c1:95:50:0c: b4:65:20:1d:98:34:2e:d2:21:4a:97:b4:1d:9f:e9:fa:86:91: 29:f4:42:58:47:b7:6e:e7:b0:92:21:83:02:3b:29:d6:84:aa: de:f0:5c:e2 -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWEuk+rDW18ynjaHyU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAyNjAwNDUyMloXDTI4MDEyOTAxNDUyMlowLzEtMCsGA1UEAxMk ZGE2YzdmNmItODE2OC00NDI5LTk0ZDUtY2ZiMTRlNTdkZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkD/d2BSDF93dw3c/G3vU7ZWOlpT8CnOK+hg dlibA0CupN8C2xQIcnt6Gr55BD4Nq/iELYO6WaWrBENlEa4+zR+ZJgS40q3j9heT 7XXiIfympkdBvU1FGZMg8PePhsH0PcUCdzs7yH0KebdZNi4cgdMJBPKNEOiopS2E dEtqVBIWfPWmk8hvmh8aR8F77np2Ti79T85+RPI0+k1iLUjEuztqSjQo8YnEYs9G Ekmzpwla3jj01VFKnD6X4aQOusTgstyraTqWwLS4Lqku7FqkFyWCckJpVQ1SctsY K0e40mVQKhEBcvPQnTgchTWX3pkrVDYO9cmBX7/1l3oGvM4ebQIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFAN5NKwu/FDUIuTWw5NdzkxpxHn2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k YTZjN2Y2Yi04MTY4LTQ0MjktOTRkNS1jZmIxNGU1N2RkMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2RhNmM3ZjZiLTgxNjgtNDQyOS05 NGQ1LWNmYjE0ZTU3ZGQyZS9kYTZjN2Y2Yi04MTY4LTQ0MjktOTRkNS1jZmIxNGU1 N2RkMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAVCgeADBADGuqAwDgQCAAIwCAMGACYgAQPAMCIG CCsGAQUFBwEIAQH/BBMwEaAPMA0CAjd7AgJVbgIDBglsMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHw5huI8 NHak4TPBtqhPZvJqBxwhtH3632pI5tKzrzVHrmkPP5dRENW1kFx1/9XV6eOnF7BQ lhreRYDfzHY4ylq7HhsjRUgKh+lyHa88Um08xyVd3wrf9k7jk0EH/8EFlss8+FMN h/nbPg0dnX1a3oimtQpmc60mlaXb5HzFczUutwpYhZEUEfSerY74Wlw8Mre+XFco SLsXyvdropIGmJwj7OVj+d/5V286TfBjCi+DoQU4LCyvdUkDHvSBIp6NRQyH3KYC zCgzd7BK+Ccmh06YtA+wwZVQDLRlIB2YNC7SIUqXtB2f6fqGkSn0QlhHt27nsJIh gwI7KdaEqt7wXOI= -----END CERTIFICATE-----Generated at Wed Nov 5 06:59:46 2025 by rpki-client