$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a.cer File: e2ad8bac-f79e-47d1-8fca-077de04d0f7a.cer (raw, json) Hash identifier: ZolOUkZDiYerfUtTaHO7+A9Y2cA6Y/4YgxiARsTbuCk= Subject key identifier: 81:06:2F:A8:8C:38:96:74:3A:C6:EC:B2:75:DF:6A:DC:F6:DB:1A:48 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849F442C6955B19DDEF4BD1F600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/e2ad8bac-f79e-47d1-8fca-077de04d0f7a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 24 May 2025 00:45:36 +0000 Certificate not after: Fri 27 Aug 2027 00:45:36 +0000 Subordinate resources: AS: 21804 IP: 24.72.0.0 -- 24.72.143.255 IP: 24.89.64.0/18 IP: 65.87.224.0/19 IP: 74.206.128.0/19 IP: 96.63.128.0 -- 96.63.175.255 IP: 184.169.48.0/20 IP: 209.34.96.0/20 IP: 2605:7200::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:42:c6:95:5b:19:dd:ef:4b:d1:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 24 00:45:36 2025 GMT Not After : Aug 27 00:45:36 2027 GMT Subject: CN=e2ad8bac-f79e-47d1-8fca-077de04d0f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cb:dc:34:d3:ae:e4:a2:13:1c:3d:14:ea:54: f7:cf:89:3e:69:6c:66:de:d1:40:2b:18:96:74:78: f1:e3:66:9b:36:bd:f9:af:18:dc:af:46:48:4c:65: e2:4c:c7:6d:a4:ab:68:5d:82:e1:d6:9a:de:d4:3f: bb:92:7f:cc:bf:55:fa:4c:cf:48:c1:47:04:81:2d: f4:c8:80:12:3a:17:e1:e0:18:ce:9f:78:42:12:00: c7:2b:6e:7d:29:1e:28:6a:b7:32:ab:65:1e:22:0d: 10:ac:c1:cb:b3:0c:0f:31:8b:17:82:7b:33:8b:44: 49:55:5e:b4:96:9b:73:6d:ac:2a:6b:60:76:65:88: 9d:ca:44:22:7a:6b:73:57:80:e0:a7:78:f2:a2:34: 81:90:cf:69:e7:05:62:eb:4f:c0:1d:38:5c:01:61: 0b:d1:bc:32:12:50:0a:09:42:e6:1e:64:bf:31:4e: 33:67:eb:75:5d:23:d1:c6:b4:ce:90:a0:f3:bf:6f: f8:24:a8:df:a7:18:eb:f0:d6:61:b3:05:37:06:5d: 49:ac:22:09:26:b8:26:30:9a:30:ae:41:88:44:8c: 61:94:a8:13:73:04:62:d0:6e:52:5c:5a:76:7d:4a: 29:10:53:ec:a8:fa:f3:50:fc:69:d5:9d:6e:95:0a: d3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:06:2F:A8:8C:38:96:74:3A:C6:EC:B2:75:DF:6A:DC:F6:DB:1A:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/e2ad8bac-f79e-47d1-8fca-077de04d0f7a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 24.72.0.0-24.72.143.255 24.89.64.0/18 65.87.224.0/19 74.206.128.0/19 96.63.128.0-96.63.175.255 184.169.48.0/20 209.34.96.0/20 IPv6: 2605:7200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21804 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:54:2b:08:f7:f6:67:f0:13:2a:0e:ce:54:80:76:2c:37:a1: 51:a3:3f:bb:d7:71:6a:ab:b3:10:71:9b:5d:04:b5:66:83:9f: 11:0b:2d:f0:29:a3:fd:95:78:a7:46:d3:49:e5:c1:56:ad:e4: a5:6b:98:8d:70:27:6a:7e:3b:6d:11:61:dc:78:6b:10:3b:44: 1c:3d:ff:c2:c3:31:f3:83:6c:cb:20:30:39:f6:ec:69:96:4a: 7e:cc:77:95:53:1f:d9:3a:e4:ed:63:d8:ee:7f:0a:4b:ca:8a: 37:7d:9a:22:4e:11:65:a3:e4:ef:f7:0f:51:40:38:8c:81:5c: ce:98:e1:70:2e:00:40:eb:e3:42:6c:b3:62:e9:bb:d6:5c:51: d4:9f:5b:4d:a8:6c:15:9a:6c:1b:f1:88:29:f5:9b:25:41:37: a3:bb:01:9c:d2:62:d9:29:20:aa:a7:e0:3f:45:fb:68:b5:99: 63:89:ae:e1:fc:22:22:8e:60:9f:74:c6:ce:dd:4f:d6:81:28: 86:fd:f7:43:ae:9c:02:7d:6b:33:60:e1:7f:10:c1:a6:4e:d2: 1c:53:b6:66:76:1a:2b:0f:5d:09:a3:37:39:86:b6:4c:7f:a1: 2a:bb:1d:68:5c:2d:71:fb:70:1e:1a:f8:be:96:b0:da:7e:e0: cf:a9:b5:a5 -----BEGIN CERTIFICATE----- MIIHSjCCBjKgAwIBAgIUAQ0Mn0MoWEn0QsaVWxnd70vR9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDUyNDAwNDUzNloXDTI3MDgyNzAwNDUzNlowLzEtMCsGA1UEAxMk ZTJhZDhiYWMtZjc5ZS00N2QxLThmY2EtMDc3ZGUwNGQwZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cvcNNOu5KITHD0U6lT3z4k+aWxm3tFAKxiW dHjx42abNr35rxjcr0ZITGXiTMdtpKtoXYLh1pre1D+7kn/Mv1X6TM9IwUcEgS30 yIASOhfh4BjOn3hCEgDHK259KR4oarcyq2UeIg0QrMHLswwPMYsXgnszi0RJVV60 lptzbawqa2B2ZYidykQiemtzV4Dgp3jyojSBkM9p5wVi60/AHThcAWEL0bwyElAK CULmHmS/MU4zZ+t1XSPRxrTOkKDzv2/4JKjfpxjr8NZhswU3Bl1JrCIJJrgmMJow rkGIRIxhlKgTcwRi0G5SXFp2fUopEFPsqPrzUPxp1Z1ulQrTywIDAQABo4IEXDCC BFgwHQYDVR0OBBYEFIEGL6iMOJZ0OsbssnXfatz22xpIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l MmFkOGJhYy1mNzllLTQ3ZDEtOGZjYS0wNzdkZTA0ZDBmN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2UyYWQ4YmFjLWY3OWUtNDdkMS04 ZmNhLTA3N2RlMDRkMGY3YS9lMmFkOGJhYy1mNzllLTQ3ZDEtOGZjYS0wNzdkZTA0 ZDBmN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwYQYIKwYBBQUH AQcBAf8EUjBQMD8EAgABMDkwCwMDAxhIAwQEGEiAAwQGGFlAAwQFQVfgAwQFSs6A MAwDBAdgP4ADBARgP6ADBAS4qTADBATRImAwDQQCAAIwBwMFACYFcgAwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICVSwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV1QrCPf2Z/ATKg7OVIB2LDeh UaM/u9dxaquzEHGbXQS1ZoOfEQst8Cmj/ZV4p0bTSeXBVq3kpWuYjXAnan47bRFh 3HhrEDtEHD3/wsMx84NsyyAwOfbsaZZKfsx3lVMf2Trk7WPY7n8KS8qKN32aIk4R ZaPk7/cPUUA4jIFczpjhcC4AQOvjQmyzYum71lxR1J9bTahsFZpsG/GIKfWbJUE3 o7sBnNJi2SkgqqfgP0X7aLWZY4mu4fwiIo5gn3TGzt1P1oEohv33Q66cAn1rM2Dh fxDBpk7SHFO2ZnYaKw9dCaM3OYa2TH+hKrsdaFwtcftwHhr4vpaw2n7gz6m1pQ== -----END CERTIFICATE-----Generated at Wed Nov 5 06:52:31 2025 by rpki-client