$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer File: e1045712-9a23-40a5-87f8-41b31ddbe93b.cer (raw, json) Hash identifier: oJaFOyRNu2dmjUg0mmvzZyzUoYuMr0pcYqX+wferjtE= Subject key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F2EE5925B7F0CD1006142D158 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Sep 2026 12:45:12 +0000 Certificate not after: Mon 18 Dec 2028 13:45:12 +0000 Subordinate resources: AS: 1024 IP: 23.172.144.0/24 IP: 2602:fca7::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:e5:92:5b:7f:0c:d1:00:61:42:d1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 15 12:45:12 2026 GMT Not After : Dec 18 13:45:12 2028 GMT Subject: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:28:8b:5c:9e:ed:87:48:cc:4b:5c:07:f4:e9: 05:da:56:3c:57:02:73:70:24:6c:47:6a:12:48:3a: 8b:f6:82:1f:eb:67:77:d2:19:03:49:f8:8d:8d:ec: 1f:a8:85:40:1c:12:69:4b:f7:cd:21:22:1c:0e:5e: 08:88:ee:46:b5:de:6c:72:55:70:15:94:37:8e:4d: 77:1b:df:49:49:ab:c3:27:cd:3d:82:0f:94:f1:11: 26:9d:b2:2d:7c:ae:95:d7:3c:31:67:4e:a9:ff:2d: a5:e3:be:63:3e:71:62:00:aa:ec:cb:98:65:a1:aa: 21:c7:62:38:50:ea:17:51:93:da:12:f4:f8:de:8d: cb:04:f6:08:66:db:e3:9f:80:99:2e:a0:a4:82:fe: 6c:39:ac:f5:1a:d2:f1:d1:1f:5b:f5:e2:c6:96:0c: 3d:63:87:49:24:3a:68:69:16:6a:91:56:91:45:f2: d4:8f:64:45:78:e1:21:5d:3c:38:c3:de:43:c5:da: 3c:de:5c:89:eb:d8:31:e4:bb:4a:7c:0e:57:d4:b2: 12:d8:9b:04:0f:79:4e:44:ea:9a:45:ea:a1:4a:2a: 67:ee:a2:62:9b:cb:ec:58:78:67:ce:9f:17:a1:3d: 60:bc:c9:d6:9d:63:d0:0c:cc:ea:30:f5:f8:a5:3e: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.172.144.0/24 IPv6: 2602:fca7::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1024 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:07:9a:5f:5b:7e:ff:93:6b:a2:11:1c:88:ee:19:77:eb:90: 9d:de:75:76:5d:0f:35:8a:d5:f7:59:48:25:ff:7d:7b:c0:4e: 17:7e:7c:1a:4d:43:11:8f:aa:c4:cb:ae:5f:7b:0d:05:c3:5f: 6e:44:89:bb:d5:d2:ee:01:c3:a6:8a:ef:4d:f0:20:0c:3a:44: 2a:7c:f0:71:6f:3c:9d:82:6a:34:e4:82:9b:16:08:61:28:2b: 4d:07:5d:76:75:4c:cd:c1:b5:85:cb:2c:f0:ad:9c:48:44:2f: d6:0b:3a:d6:00:7d:77:92:3a:20:a7:21:e2:d7:69:f7:97:4f: 2b:cc:9c:8a:8a:78:b5:38:65:71:c1:aa:b4:74:b4:08:89:7f: 71:f5:8b:02:6d:23:4c:d9:96:e5:21:f5:fa:d5:cb:61:4a:ae: 5b:01:62:1c:c3:2f:66:1c:77:4e:a7:0a:c1:16:2b:b8:26:81: 9e:0f:f7:b0:8e:ac:cf:10:27:ca:f4:c9:f6:29:78:25:c4:32: a8:77:84:83:b0:de:8e:a8:4b:0c:59:68:7a:98:98:ae:02:93: 29:71:b4:85:21:50:0c:72:46:aa:2b:e8:6c:a1:56:08:ba:6d: ed:b8:99:d8:f6:c4:d3:6a:80:2c:34:2f:00:af:5f:69:a3:fe: 3f:bc:15:fc -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE8u5ZJbfwzRAGFC0VgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDkxNTEyNDUxMloXDTI4MTIxODEzNDUxMlowLzEtMCsGA1UEAxMk ZTEwNDU3MTItOWEyMy00MGE1LTg3ZjgtNDFiMzFkZGJlOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iiLXJ7th0jMS1wH9OkF2lY8VwJzcCRsR2oS SDqL9oIf62d30hkDSfiNjewfqIVAHBJpS/fNISIcDl4IiO5Gtd5sclVwFZQ3jk13 G99JSavDJ809gg+U8REmnbItfK6V1zwxZ06p/y2l475jPnFiAKrsy5hloaohx2I4 UOoXUZPaEvT43o3LBPYIZtvjn4CZLqCkgv5sOaz1GtLx0R9b9eLGlgw9Y4dJJDpo aRZqkVaRRfLUj2RFeOEhXTw4w95Dxdo83lyJ69gx5LtKfA5X1LIS2JsED3lOROqa ReqhSipn7qJim8vsWHhnzp8XoT1gvMnWnWPQDMzqMPX4pT6u/QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFLHHl58emelNxAa/CKlJCmrLIjBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l MTA0NTcxMi05YTIzLTQwYTUtODdmOC00MWIzMWRkYmU5M2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2UxMDQ1NzEyLTlhMjMtNDBhNS04 N2Y4LTQxYjMxZGRiZTkzYi9lMTA0NTcxMi05YTIzLTQwYTUtODdmOC00MWIzMWRk YmU5M2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrJAwDgQCAAIwCAMGBCYC/KcAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAgQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEEHml9bfv+Ta6IRHIjuGXfrkJ3e dXZdDzWK1fdZSCX/fXvAThd+fBpNQxGPqsTLrl97DQXDX25EibvV0u4Bw6aK703w IAw6RCp88HFvPJ2CajTkgpsWCGEoK00HXXZ1TM3BtYXLLPCtnEhEL9YLOtYAfXeS OiCnIeLXafeXTyvMnIqKeLU4ZXHBqrR0tAiJf3H1iwJtI0zZluUh9frVy2FKrlsB YhzDL2Ycd06nCsEWK7gmgZ4P97COrM8QJ8r0yfYpeCXEMqh3hIOw3o6oSwxZaHqY mK4CkylxtIUhUAxyRqor6GyhVgi6be24mdj2xNNqgCw0LwCvX2mj/j+8Ffw= -----END CERTIFICATE-----Generated at Wed Sep 23 00:13:38 2026 by rpki-client