$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer File: f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer (raw, json) Hash identifier: TwYtRyBjSncO3+DzbKo5s200p/tBCZsYN2eqAT7LG60= Subject key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A71E38F02BC7736F22C818200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Jul 2025 00:45:36 +0000 Certificate not after: Mon 11 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 62827 IP: 158.51.232.0/22 IP: 198.17.211.0/24 IP: 198.96.5.0/24 IP: 209.209.108.0/22 IP: 2620:7f:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:e3:8f:02:bc:77:36:f2:2c:81:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 8 00:45:36 2025 GMT Not After : Oct 11 00:45:36 2027 GMT Subject: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5b:62:f2:c6:a9:e2:42:78:66:37:31:cb:2d: 23:84:0c:ec:5d:15:4a:19:7e:ab:8f:14:49:31:1a: dd:38:b5:6f:04:1d:d4:2e:bd:dc:b6:33:78:7e:75: 54:f6:ec:f8:1c:05:4e:fb:eb:7e:85:8e:68:03:2c: 8b:a6:1c:37:59:f4:21:4e:c7:f1:28:89:44:7c:c3: 7a:d6:58:5d:63:92:f9:7e:ff:69:a3:15:e9:30:63: 22:cc:0d:db:0f:e4:6d:3b:b7:49:f1:06:b2:25:b4: 71:30:41:0f:97:eb:7a:40:17:e1:f8:6a:45:45:68: 33:f0:74:e1:2e:bd:34:53:b0:23:b8:cc:60:1f:fd: ef:cd:2c:9c:3e:4b:16:63:9f:b8:40:f3:75:58:4d: 3b:af:b7:dd:4c:07:56:8b:e1:42:a3:9b:8e:ea:08: 6f:e9:0f:25:62:e6:e6:34:8d:0e:45:e2:ff:b7:a4: 21:7c:c7:53:2a:13:57:a3:a5:f6:08:31:a9:86:53: 1b:e4:4d:12:e6:0a:e7:2a:de:3e:40:37:e1:12:86: 78:31:60:77:4f:59:b8:0e:2a:79:0e:79:4d:d2:df: 71:70:3e:8f:2b:eb:a5:1d:a7:4d:a4:57:72:df:19: 2a:de:37:c2:2e:b2:3b:16:63:f3:37:2c:25:0a:23: 0e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 158.51.232.0/22 198.17.211.0/24 198.96.5.0/24 209.209.108.0/22 IPv6: 2620:7f:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62827 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f6:9e:c7:8e:f8:22:4d:db:6b:29:29:97:88:fc:b8:40:02: d7:7c:6a:9a:fe:a6:84:a0:b8:c8:76:d3:d9:c8:f4:d2:0a:fc: e0:07:76:11:e9:95:17:c3:3c:c6:8b:c6:ad:1c:68:74:c6:57: d6:a4:0b:4e:b9:8c:c9:e4:3a:58:ae:fa:16:5c:d5:01:9a:71: 57:1d:ef:d6:be:0e:77:69:c5:10:de:07:9a:e0:f4:ce:53:69: ab:3c:96:ae:c2:df:1e:1c:b7:b2:50:bd:74:2c:e8:80:2a:38: 3c:c8:03:35:17:27:7d:4b:fc:de:06:22:82:88:df:db:32:c4: 43:e5:14:22:38:d1:3d:4e:32:e3:cf:56:c2:5f:a6:14:98:fd: 75:d0:6c:a8:7c:47:31:0d:26:0b:1f:9c:49:d6:88:d4:13:d3: ae:16:d5:1b:e9:bb:7c:c2:31:f5:ad:50:8d:8a:42:70:c8:62: ce:6b:28:8c:8a:1f:2f:95:73:36:b9:da:c2:98:4f:4a:2a:c7: 86:52:34:37:ef:5f:1d:b7:1b:d9:52:77:a5:c8:1e:be:62:5b: f4:de:50:37:24:d9:63:b9:25:c6:5b:82:a8:e6:50:76:a6:41: 48:d2:1d:bf:a1:15:5c:b5:9f:e4:dc:2a:58:34:05:b4:2b:a0: 04:06:69:aa -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWEpx448CvHc28iyBggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDcwODAwNDUzNloXDTI3MTAxMTAwNDUzNlowLzEtMCsGA1UEAxMk ZjA0YmM3ZmQtNTMzNC00NWVlLTlhNDgtM2ZmYjExN2FkNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVti8sap4kJ4Zjcxyy0jhAzsXRVKGX6rjxRJ MRrdOLVvBB3ULr3ctjN4fnVU9uz4HAVO++t+hY5oAyyLphw3WfQhTsfxKIlEfMN6 1lhdY5L5fv9poxXpMGMizA3bD+RtO7dJ8QayJbRxMEEPl+t6QBfh+GpFRWgz8HTh Lr00U7AjuMxgH/3vzSycPksWY5+4QPN1WE07r7fdTAdWi+FCo5uO6ghv6Q8lYubm NI0OReL/t6QhfMdTKhNXo6X2CDGphlMb5E0S5grnKt4+QDfhEoZ4MWB3T1m4Dip5 DnlN0t9xcD6PK+ulHadNpFdy3xkq3jfCLrI7FmPzNywlCiMOHQIDAQABo4IEPjCC BDowHQYDVR0OBBYEFHtgFv0iea3sTtSg59vcjeOFc6cGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m MDRiYzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZiMTE3YWQ0ZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2YwNGJjN2ZkLTUzMzQtNDVlZS05 YTQ4LTNmZmIxMTdhZDRmMy9mMDRiYzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZiMTE3 YWQ0ZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMB4EAgABMBgDBAKeM+gDBADGEdMDBADGYAUDBALR0WwwDwQCAAIw CQMHACYgAH+gADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA9WswVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA JPaex474Ik3baykpl4j8uEAC13xqmv6mhKC4yHbT2cj00gr84Ad2EemVF8M8xovG rRxodMZX1qQLTrmMyeQ6WK76FlzVAZpxVx3v1r4Od2nFEN4HmuD0zlNpqzyWrsLf Hhy3slC9dCzogCo4PMgDNRcnfUv83gYigojf2zLEQ+UUIjjRPU4y489Wwl+mFJj9 ddBsqHxHMQ0mCx+cSdaI1BPTrhbVG+m7fMIx9a1QjYpCcMhizmsojIofL5VzNrna wphPSirHhlI0N+9fHbcb2VJ3pcgevmJb9N5QNyTZY7klxluCqOZQdqZBSNIdv6EV XLWf5NwqWDQFtCugBAZpqg== -----END CERTIFICATE-----Generated at Wed Nov 5 14:23:35 2025 by rpki-client