$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e.cer File: db50bc76-8345-4464-a992-23bbdfe1744e.cer (raw, json) Hash identifier: uJOgXcnFxMlUqIdi9dNcGGUHqJaBwqIEIkihv5x9bv4= Subject key identifier: 60:99:9B:8C:54:17:64:0C:99:04:D0:57:80:9F:E9:D9:0C:F8:D6:B1 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F2C1AE364B9625B21239BE100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e/db50bc76-8345-4464-a992-23bbdfe1744e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Sep 2026 12:45:11 +0000 Certificate not after: Sun 17 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 32073 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:1a:e3:64:b9:62:5b:21:23:9b:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 14 12:45:11 2026 GMT Not After : Dec 17 13:45:11 2028 GMT Subject: CN=db50bc76-8345-4464-a992-23bbdfe1744e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:cf:7e:2f:75:bc:72:e6:3e:bb:d2:6f:fe: 1f:6c:1f:91:1d:f1:91:a4:fd:1e:03:48:84:4e:14: 6f:bd:fb:c5:84:3c:de:7b:5c:77:60:ff:c8:39:74: 76:9d:22:ee:07:c0:79:86:a9:ed:e9:d8:9c:97:a6: 17:80:f6:e6:77:be:d6:2f:71:eb:dc:85:8b:df:86: 81:4d:3e:7b:df:9d:77:e8:2e:da:22:a1:78:6c:a4: 51:c7:86:1c:64:84:4f:e7:6f:f8:a3:7f:e3:e1:fc: b1:b2:b7:5f:34:99:a3:57:23:57:9e:0f:74:df:59: 69:19:78:0a:f6:f5:fc:ca:3c:8b:84:92:c3:7b:38: b7:1d:a3:3e:24:4b:79:a6:3f:6a:f2:25:d3:56:1a: a9:49:e7:cb:30:a1:cb:6e:7d:e1:0e:a4:5b:2b:f8: 10:66:83:6c:76:32:ac:d0:a6:24:73:ef:2f:1b:f1: 7a:13:1a:18:a0:93:cd:30:30:76:83:41:e9:7c:92: 84:52:8a:3e:e3:79:a0:cb:38:51:08:f6:71:53:74: 98:4e:42:ee:f7:39:21:7f:b4:04:8f:13:a9:c3:17: 22:22:64:b8:cb:86:e8:17:78:80:16:fe:c8:d0:94: b1:05:6f:72:2f:bc:42:9a:20:0f:49:48:50:1d:f3: cf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:99:9B:8C:54:17:64:0C:99:04:D0:57:80:9F:E9:D9:0C:F8:D6:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e/db50bc76-8345-4464-a992-23bbdfe1744e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 32073 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4a:41:fd:1c:9a:37:ba:38:8a:dd:4c:de:7b:74:7f:be:01: ae:17:d5:7a:65:38:b0:02:6f:c5:11:8c:1e:ac:8b:06:f0:70: 3f:03:37:3b:df:42:11:86:2e:5f:de:11:f1:77:cc:85:36:80: 1a:69:0b:fa:35:b3:37:0e:82:17:0a:45:76:bf:8d:b1:54:b6: bf:7f:c8:88:8d:ea:a0:44:25:7a:ea:1f:54:da:9b:a2:8e:d2: e0:ca:ad:ee:ab:e3:fa:b0:c0:81:83:8c:33:58:61:7d:b9:16: 80:d7:eb:fb:a8:fa:67:1a:fd:0d:fc:66:27:76:1e:4e:0e:70: 24:50:3d:f2:0f:06:33:a2:01:f8:0f:7b:f2:f3:43:13:31:91: 71:58:7f:9f:ce:d6:12:c9:bb:9f:a6:65:0e:3d:6a:3f:c7:ae: 44:29:ec:c3:c4:14:15:06:33:09:92:b3:ac:48:89:80:f7:9c: 98:4e:0b:aa:2d:b0:3e:2e:6b:97:85:b1:10:7c:f4:10:0d:ac: db:af:30:d1:1c:00:fa:6c:2c:5b:7d:7a:a9:92:cb:8e:52:7c: fd:7e:52:85:3d:25:6f:d8:28:94:14:4d:e7:54:94:a7:e3:31: 0d:e0:94:9b:f1:c9:a6:ce:f7:61:da:02:9e:7d:36:8b:37:b2: 5c:63:f4:0f -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE8sGuNkuWJbISOb4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDkxNDEyNDUxMVoXDTI4MTIxNzEzNDUxMVowLzEtMCsGA1UEAxMk ZGI1MGJjNzYtODM0NS00NDY0LWE5OTItMjNiYmRmZTE3NDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGvPfi91vHLmPrvSb/4fbB+RHfGRpP0eA0iE ThRvvfvFhDzee1x3YP/IOXR2nSLuB8B5hqnt6dicl6YXgPbmd77WL3Hr3IWL34aB TT5735136C7aIqF4bKRRx4YcZIRP52/4o3/j4fyxsrdfNJmjVyNXng9031lpGXgK 9vX8yjyLhJLDezi3HaM+JEt5pj9q8iXTVhqpSefLMKHLbn3hDqRbK/gQZoNsdjKs 0KYkc+8vG/F6ExoYoJPNMDB2g0HpfJKEUoo+43mgyzhRCPZxU3SYTkLu9zkhf7QE jxOpwxciImS4y4boF3iAFv7I0JSxBW9yL7xCmiAPSUhQHfPPNQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFGCZm4xUF2QMmQTQV4Cf6dkM+NaxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k YjUwYmM3Ni04MzQ1LTQ0NjQtYTk5Mi0yM2JiZGZlMTc0NGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2RiNTBiYzc2LTgzNDUtNDQ2NC1h OTkyLTIzYmJkZmUxNzQ0ZS9kYjUwYmM3Ni04MzQ1LTQ0NjQtYTk5Mi0yM2JiZGZl MTc0NGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICfUkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAH0pB/RyaN7o4it1M3nt0f74BrhfV emU4sAJvxRGMHqyLBvBwPwM3O99CEYYuX94R8XfMhTaAGmkL+jWzNw6CFwpFdr+N sVS2v3/IiI3qoEQleuofVNqboo7S4Mqt7qvj+rDAgYOMM1hhfbkWgNfr+6j6Zxr9 DfxmJ3YeTg5wJFA98g8GM6IB+A978vNDEzGRcVh/n87WEsm7n6ZlDj1qP8euRCns w8QUFQYzCZKzrEiJgPecmE4Lqi2wPi5rl4WxEHz0EA2s268w0RwA+mwsW316qZLL jlJ8/X5ShT0lb9golBRN51SUp+MxDeCUm/HJps73YdoCnn02izeyXGP0Dw== -----END CERTIFICATE-----Generated at Thu Sep 24 00:33:07 2026 by rpki-client