$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer File: ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer (raw, json) Hash identifier: ZYVh07ZBwaarBD2cp89hJwgtDBIytGi6+qJk/92Fu0I= Subject key identifier: 2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A9A7934AD77A4E6763311D880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ea5c3d82-c7e0-4511-b102-8995ed813a8a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Jul 2025 13:39:28 +0000 Certificate not after: Mon 14 Dec 2026 14:32:58 +0000 Subordinate resources: AS: 13376 IP: 37.26.88.0/21 IP: 2620:8c:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:79:34:ad:77:a4:e6:76:33:11:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 22 13:39:28 2025 GMT Not After : Dec 14 14:32:58 2026 GMT Subject: CN=ea5c3d82-c7e0-4511-b102-8995ed813a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:66:34:00:8e:30:f7:12:73:e4:78:6e:7f:44: 33:d9:e2:f1:eb:38:8c:3a:7f:27:16:92:6f:57:dd: 90:df:7d:e7:88:1b:d4:fe:c9:76:45:07:9d:dd:08: 1d:4f:9c:9d:cc:94:29:26:f4:b9:e0:a9:ea:e7:b8: 91:86:96:10:53:54:cb:3a:8d:0d:31:f0:46:bc:14: 4d:1c:c3:9f:b0:39:60:da:da:a0:c9:29:22:1b:37: 77:48:b6:b0:7e:b5:66:d7:ba:90:2f:98:45:d3:c6: a9:17:ba:cd:ba:81:3d:ca:d4:34:cc:e1:2f:cf:5a: f9:a6:6e:92:a1:43:bb:f6:97:48:c0:e8:18:d0:81: 3f:79:5b:80:7b:07:0b:fb:ff:fb:41:04:ac:4c:2e: 3b:32:8c:6d:2a:30:32:37:0f:a2:b0:ab:93:de:1b: a7:30:a3:97:eb:82:78:1a:fa:93:90:0b:90:f5:dc: 0c:87:e5:de:d5:72:58:d7:ce:7e:a0:59:e0:e1:ba: 3c:f2:15:9b:23:52:8f:9c:32:85:19:ea:2b:6b:46: cf:9b:43:8a:29:63:e3:e9:00:d5:00:7f:10:27:53: bb:f7:01:c8:e0:c0:cc:74:70:18:d6:6e:9a:5d:42: d3:9b:35:1f:3c:89:b9:d9:b0:cd:51:87:dc:7a:62: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ea5c3d82-c7e0-4511-b102-8995ed813a8a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 37.26.88.0/21 IPv6: 2620:8c:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13376 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:94:29:27:0a:a5:05:d8:f2:9c:3f:9f:67:cc:fe:fe:85:3f: 44:38:ab:60:da:a0:97:45:2f:d6:4f:71:e8:cc:64:1b:2f:de: a8:34:35:8c:68:da:28:67:a5:53:30:d9:01:b5:d0:ef:c7:85: 9c:03:68:ef:11:1d:50:c5:3b:55:ea:c1:cb:5a:14:c4:ee:97: c9:21:38:d1:fa:9e:a6:4e:55:8a:a5:6e:5f:ab:22:8b:3e:da: 4f:3a:d9:4c:cd:bf:c6:0e:0d:2e:2c:28:8a:cb:89:89:79:88: 67:4c:be:b3:56:ab:d4:6b:48:26:85:66:8f:2e:2c:9a:73:1c: c7:55:bc:c1:7f:c7:d1:19:e9:1d:df:d0:ae:92:54:69:ad:dc: 45:b1:cd:63:6c:3f:38:75:60:18:e3:42:77:5b:ef:7f:05:20: 57:49:80:94:a9:72:5d:06:62:53:b1:10:d8:51:42:ce:92:20: 02:be:31:8c:f2:a7:f0:ac:3e:ad:d2:5d:f0:41:9c:ed:00:23: 10:73:e6:72:c8:07:4a:fb:a4:75:15:6c:32:1e:41:14:22:c3: 18:ab:ce:12:1c:0f:59:6d:83:66:b7:ec:36:02:1b:09:a4:ef: 0d:6e:0c:02:e5:c9:a9:bf:ba:f0:d7:23:ce:3c:b4:7c:bc:7e: 1a:66:9d:9b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEqaeTStd6TmdjMR2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDcyMjEzMzkyOFoXDTI2MTIxNDE0MzI1OFowLzEtMCsGA1UEAxMk ZWE1YzNkODItYzdlMC00NTExLWIxMDItODk5NWVkODEzYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/GY0AI4w9xJz5Hhuf0Qz2eLx6ziMOn8nFpJv V92Q333niBvU/sl2RQed3QgdT5ydzJQpJvS54Knq57iRhpYQU1TLOo0NMfBGvBRN HMOfsDlg2tqgySkiGzd3SLawfrVm17qQL5hF08apF7rNuoE9ytQ0zOEvz1r5pm6S oUO79pdIwOgY0IE/eVuAewcL+//7QQSsTC47MoxtKjAyNw+isKuT3hunMKOX64J4 GvqTkAuQ9dwMh+Xe1XJY185+oFng4bo88hWbI1KPnDKFGeora0bPm0OKKWPj6QDV AH8QJ1O79wHI4MDMdHAY1m6aXULTmzUfPIm52bDNUYfcemLgHwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFC3iZaiRXeN4wC1PsypLxp1pxRPGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l YTVjM2Q4Mi1jN2UwLTQ1MTEtYjEwMi04OTk1ZWQ4MTNhOGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2VhNWMzZDgyLWM3ZTAtNDUxMS1i MTAyLTg5OTVlZDgxM2E4YS9lYTVjM2Q4Mi1jN2UwLTQ1MTEtYjEwMi04OTk1ZWQ4 MTNhOGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAMlGlgwDwQCAAIwCQMHACYgAIyAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgI0QDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCplCknCqUF2PKcP59nzP7+hT9E OKtg2qCXRS/WT3HozGQbL96oNDWMaNooZ6VTMNkBtdDvx4WcA2jvER1QxTtV6sHL WhTE7pfJITjR+p6mTlWKpW5fqyKLPtpPOtlMzb/GDg0uLCiKy4mJeYhnTL6zVqvU a0gmhWaPLiyacxzHVbzBf8fRGekd39CuklRprdxFsc1jbD84dWAY40J3W+9/BSBX SYCUqXJdBmJTsRDYUULOkiACvjGM8qfwrD6t0l3wQZztACMQc+ZyyAdK+6R1FWwy HkEUIsMYq84SHA9ZbYNmt+w2AhsJpO8NbgwC5cmpv7rw1yPOPLR8vH4aZp2b -----END CERTIFICATE-----Generated at Wed Aug 6 00:41:50 2025 by rpki-client