$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer File: eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer (raw, json) Hash identifier: diwBNa1rI0mqgIyKV0HkfjCn3sbVO5lnzB7mYw3PVZ4= Subject key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A8DCE675AA9B2FA3C7CB56A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Jul 2025 00:45:37 +0000 Certificate not after: Thu 21 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 7212 IP: 129.59.0.0/16 IP: 192.111.108.0 -- 192.111.110.255 IP: 2607:8a00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:ce:67:5a:a9:b2:fa:3c:7c:b5:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 18 00:45:37 2025 GMT Not After : Oct 21 00:45:37 2027 GMT Subject: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a2:54:c6:85:4a:0f:d3:cb:5c:2a:77:c3:89: 02:b7:5b:6f:82:9a:1d:25:39:1d:74:16:cb:af:7c: 8e:43:db:9e:c1:a7:01:41:d5:92:54:b7:40:fd:7a: d1:d9:18:ad:b5:df:f3:88:b6:df:db:c0:83:07:03: 58:3b:ec:70:90:ce:81:c0:4f:bb:65:fb:ce:1a:b3: 42:53:ee:bb:1d:26:29:87:1d:0c:33:71:3c:12:91: 64:83:e9:6c:2d:82:e9:b3:54:c7:c1:ba:af:ed:94: 78:1f:4b:12:f3:16:83:79:9c:db:13:68:ce:9c:d9: 90:b3:e5:33:43:2c:9b:dd:6d:77:ad:42:93:b2:78: cd:ee:aa:ec:b8:ad:cc:bb:e7:07:4d:ee:44:2c:2c: 1a:85:ae:ff:28:6f:a7:e5:dc:1f:9e:9c:ae:18:a9: bc:e8:0e:8b:e0:8c:4c:a0:33:11:9a:21:13:a4:31: 8a:09:67:d8:12:80:5c:b3:16:18:ab:75:d5:5f:c8: 95:bf:47:05:c5:33:e5:6d:77:f4:d2:d6:2b:f0:81: c2:08:35:d8:92:ff:19:ef:06:17:6f:65:34:e5:77: b4:5d:26:ba:5c:af:05:a7:e8:13:4a:01:56:8a:b4: 7f:61:ba:cc:91:19:a1:2a:61:fb:4f:aa:d9:d5:9a: 8d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 129.59.0.0/16 192.111.108.0-192.111.110.255 IPv6: 2607:8a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7212 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e4:73:34:2c:c0:47:44:50:cd:31:c5:f4:0d:6a:06:a5:29: 56:19:3f:b6:a1:1b:f0:01:a1:29:64:45:db:71:0c:ee:42:0b: f4:6b:da:6f:4c:66:bd:76:23:da:08:72:db:a2:e9:0e:56:6d: 40:a8:b1:6a:97:6b:2d:ab:c3:cb:98:5b:6f:9c:d4:95:c2:8f: e7:e7:c5:ea:9b:19:94:3c:42:d9:73:26:68:e5:6d:b1:3e:44: d4:60:ff:10:66:0b:32:20:77:ed:58:ae:30:60:c9:69:44:3e: 52:bc:b5:bc:2f:3c:37:7f:be:c1:72:aa:41:c9:06:11:06:19: 84:67:f3:32:4b:ce:f7:c4:04:10:b1:2d:c7:da:ea:a1:eb:3d: ad:ae:44:79:14:0a:30:4e:14:44:65:0b:c5:9a:72:dd:59:f7: d9:54:84:ea:6a:b1:f8:00:db:4d:54:9c:c6:1f:ea:ca:34:0e: f1:cd:57:49:6c:ac:07:e9:fc:c0:12:75:89:43:4b:83:18:91: 79:e5:23:26:f8:86:ff:9a:e1:48:5a:67:02:0f:aa:83:a4:a9: 53:0e:08:f9:4d:12:72:9f:c1:2f:02:2a:f2:f2:5e:e7:68:df: dc:c4:f5:8f:28:ed:60:2d:4f:af:76:9e:1d:e3:14:e3:ca:49: 61:aa:3b:a3 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEqNzmdaqbL6PHy1aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDcxODAwNDUzN1oXDTI3MTAyMTAwNDUzN1owLzEtMCsGA1UEAxMk ZWFjMDA4OTQtNWUxNy00ZTE0LWI4ZWItYjdmYjM0OGFkMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6JUxoVKD9PLXCp3w4kCt1tvgpodJTkddBbL r3yOQ9uewacBQdWSVLdA/XrR2Rittd/ziLbf28CDBwNYO+xwkM6BwE+7ZfvOGrNC U+67HSYphx0MM3E8EpFkg+lsLYLps1THwbqv7ZR4H0sS8xaDeZzbE2jOnNmQs+Uz Qyyb3W13rUKTsnjN7qrsuK3Mu+cHTe5ELCwaha7/KG+n5dwfnpyuGKm86A6L4IxM oDMRmiETpDGKCWfYEoBcsxYYq3XVX8iVv0cFxTPlbXf00tYr8IHCCDXYkv8Z7wYX b2U05Xe0XSa6XK8Fp+gTSgFWirR/YbrMkRmhKmH7T6rZ1ZqNSwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFMGMzG5veiQfVwqwwaKoyXz6Mb3FMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l YWMwMDg5NC01ZTE3LTRlMTQtYjhlYi1iN2ZiMzQ4YWQxYzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2VhYzAwODk0LTVlMTctNGUxNC1i OGViLWI3ZmIzNDhhZDFjMi9lYWMwMDg5NC01ZTE3LTRlMTQtYjhlYi1iN2ZiMzQ4 YWQxYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBkEAgABMBMDAwCBOzAMAwQCwG9sAwQAwG9uMA0EAgACMAcDBQAm B4oAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAhwsMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJnkczQswEdE UM0xxfQNagalKVYZP7ahG/ABoSlkRdtxDO5CC/Rr2m9MZr12I9oIctui6Q5WbUCo sWqXay2rw8uYW2+c1JXCj+fnxeqbGZQ8QtlzJmjlbbE+RNRg/xBmCzIgd+1YrjBg yWlEPlK8tbwvPDd/vsFyqkHJBhEGGYRn8zJLzvfEBBCxLcfa6qHrPa2uRHkUCjBO FERlC8Wact1Z99lUhOpqsfgA201UnMYf6so0DvHNV0lsrAfp/MASdYlDS4MYkXnl Iyb4hv+a4UhaZwIPqoOkqVMOCPlNEnKfwS8CKvLyXudo39zE9Y8o7WAtT692nh3j FOPKSWGqO6M= -----END CERTIFICATE-----Generated at Mon Aug 4 16:10:51 2025 by rpki-client