$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.cer File: ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.cer (raw, json) Hash identifier: iCHOuFeaNo6u8Rzqce1UxN1H7MbyyyFybn9MvDP6eYM= Subject key identifier: F2:F7:9D:DC:35:6B:B7:E1:90:03:3C:F4:68:4A:76:FA:86:4C:82:B7 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A9E8E7F8C745D0AE993FD7980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Jul 2025 00:45:35 +0000 Certificate not after: Wed 27 Oct 2027 00:45:35 +0000 Subordinate resources: AS: 399879 IP: 192.133.6.0/24 IP: 2620:9a:e000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:8e:7f:8c:74:5d:0a:e9:93:fd:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 24 00:45:35 2025 GMT Not After : Oct 27 00:45:35 2027 GMT Subject: CN=ed9aba72-cce4-4dbe-b91d-f6cc07f49dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b6:b6:29:2a:88:5b:40:27:7b:b7:b1:15:45: 1d:a4:53:00:86:30:8b:9d:df:05:5a:39:17:6b:af: 6f:50:17:28:f5:a6:a5:32:d4:73:45:cb:12:70:eb: e9:8e:a0:c0:c4:89:37:95:9d:48:c7:78:14:9c:2a: 5f:ed:26:93:50:91:eb:ad:9f:82:f0:86:aa:75:5b: 10:46:22:e9:c8:1b:75:f2:1c:6a:a5:ef:fd:bd:31: 2c:c9:38:61:c4:18:b5:2e:71:79:be:1f:8d:98:07: 90:4d:6c:3c:ef:b1:17:84:06:ff:a1:c9:b4:ff:fb: ee:af:64:c2:a9:a6:a7:7f:23:42:52:04:fa:a8:45: f4:6b:0d:af:83:e6:1d:e6:d1:af:a6:42:8e:52:de: 65:ba:af:46:a1:bf:55:5a:ae:ec:bb:c1:6b:a8:73: c3:1a:ab:e7:b8:8c:58:5f:ef:9c:b3:74:dd:e8:0b: 94:c1:30:f2:6c:af:fd:b1:e5:5e:fa:f6:9d:cd:46: e1:ac:6d:c4:26:bd:57:9c:37:a4:f9:7c:de:5a:48: 8a:5b:b1:aa:c3:44:83:0b:17:3b:0e:52:69:ba:a1: 04:d9:73:5e:71:1f:b6:de:7f:4a:1b:3a:db:bb:1f: 17:8e:6f:61:07:3f:7a:27:ff:82:93:60:ac:45:73: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F7:9D:DC:35:6B:B7:E1:90:03:3C:F4:68:4A:76:FA:86:4C:82:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.133.6.0/24 IPv6: 2620:9a:e000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399879 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d4:b1:44:c2:20:26:d2:28:e9:6e:c8:8c:b4:7b:c9:b0:24: 44:33:10:9b:6e:43:61:8e:09:94:ac:35:d9:12:d7:43:a1:48: 01:01:8f:39:9a:b4:ca:a7:40:14:fb:79:83:f1:46:77:c8:2c: 6c:75:05:7c:6d:2a:f3:99:04:86:bb:23:80:e7:59:e3:cb:9b: 20:17:bd:36:4f:8b:18:a6:6e:78:ad:d0:e5:5d:d6:cb:0c:7b: f4:2a:61:7b:c8:92:55:08:c8:37:a2:11:76:3d:6a:92:77:40: 3c:1c:a7:76:88:78:09:f1:04:f6:3d:2a:fa:6d:55:c5:72:ec: 6a:63:e8:a7:1d:a0:5b:96:9d:87:81:36:8e:8d:14:1a:ff:1e: 58:38:d7:f3:ed:bf:9e:aa:df:90:d2:16:a6:5d:e9:4d:cc:81: c2:97:96:ef:6b:87:b3:fe:c9:6e:fa:b4:cd:4e:53:31:f3:93: de:c5:e4:f2:d0:4e:4c:6e:12:61:4c:3f:d7:9b:02:a0:54:fe: 30:3a:22:06:ef:8f:f2:a1:d7:78:87:58:ea:28:79:cc:b9:ea: 55:dc:f3:24:9a:cd:b5:62:c7:fb:31:7d:3d:5a:45:c2:17:cf: a4:5c:da:01:cc:51:7b:03:ab:14:33:9f:7d:17:54:3f:ab:01: 5d:1d:65:4d -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEqejn+MdF0K6ZP9eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDcyNDAwNDUzNVoXDTI3MTAyNzAwNDUzNVowLzEtMCsGA1UEAxMk ZWQ5YWJhNzItY2NlNC00ZGJlLWI5MWQtZjZjYzA3ZjQ5ZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7a2KSqIW0Ane7exFUUdpFMAhjCLnd8FWjkX a69vUBco9aalMtRzRcsScOvpjqDAxIk3lZ1Ix3gUnCpf7SaTUJHrrZ+C8IaqdVsQ RiLpyBt18hxqpe/9vTEsyThhxBi1LnF5vh+NmAeQTWw877EXhAb/ocm0//vur2TC qaanfyNCUgT6qEX0aw2vg+Yd5tGvpkKOUt5luq9Gob9VWq7su8FrqHPDGqvnuIxY X++cs3Td6AuUwTDybK/9seVe+vadzUbhrG3EJr1XnDek+XzeWkiKW7Gqw0SDCxc7 DlJpuqEE2XNecR+23n9KGzrbux8Xjm9hBz96J/+Ck2CsRXO8xQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFPL3ndw1a7fhkAM89GhKdvqGTIK3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l ZDlhYmE3Mi1jY2U0LTRkYmUtYjkxZC1mNmNjMDdmNDlkYmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2VkOWFiYTcyLWNjZTQtNGRiZS1i OTFkLWY2Y2MwN2Y0OWRiYS9lZDlhYmE3Mi1jY2U0LTRkYmUtYjkxZC1mNmNjMDdm NDlkYmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADAhQYwDwQCAAIwCQMHBCYgAJrgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGGgcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAR9SxRMIgJtIo6W7IjLR7ybAk RDMQm25DYY4JlKw12RLXQ6FIAQGPOZq0yqdAFPt5g/FGd8gsbHUFfG0q85kEhrsj gOdZ48ubIBe9Nk+LGKZueK3Q5V3Wywx79Cphe8iSVQjIN6IRdj1qkndAPByndoh4 CfEE9j0q+m1VxXLsamPopx2gW5adh4E2jo0UGv8eWDjX8+2/nqrfkNIWpl3pTcyB wpeW72uHs/7Jbvq0zU5TMfOT3sXk8tBOTG4SYUw/15sCoFT+MDoiBu+P8qHXeIdY 6ih5zLnqVdzzJJrNtWLH+zF9PVpFwhfPpFzaAcxRewOrFDOffRdUP6sBXR1lTQ== -----END CERTIFICATE-----Generated at Mon Aug 4 07:57:02 2025 by rpki-client