$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf.cer File: fb48c1ae-9017-45de-bb5d-a4edbfb66faf.cer (raw, json) Hash identifier: nz4oKX4Y+1UFxC/XTk9jUPe05wnTCbmmGA3SvEhaKKc= Subject key identifier: C2:DA:66:D4:34:E4:7C:59:0A:8E:F7:B4:D2:7C:07:41:49:3B:36:58 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B20F11C16E7A26B599D009C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf/fb48c1ae-9017-45de-bb5d-a4edbfb66faf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Sep 2025 17:39:22 +0000 Certificate not after: Thu 15 Jul 2027 14:25:25 +0000 Subordinate resources: AS: 401952 IP: 148.59.132.0/24 IP: 2602:fd04::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:f1:1c:16:e7:a2:6b:59:9d:00:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 8 17:39:22 2025 GMT Not After : Jul 15 14:25:25 2027 GMT Subject: CN=fb48c1ae-9017-45de-bb5d-a4edbfb66faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c2:a8:6f:68:8b:d4:63:f5:cc:fb:53:b8:8f: 60:b5:b9:37:b4:14:dd:d6:c7:a3:98:2b:4f:fd:35: 1d:b8:b0:bf:9d:62:5f:19:92:f8:9d:d6:85:6a:8d: 58:fb:6a:a7:1e:bf:73:f0:26:4d:5d:cb:87:74:c1: 32:db:63:bb:6a:59:fd:36:97:01:86:2f:5e:0b:7b: 1d:e8:e2:b7:6d:a8:be:8e:75:7e:bb:5c:0d:5f:fc: 48:bf:7a:af:55:86:85:cb:a9:52:36:2e:7f:8a:27: e3:7a:32:d5:1a:1e:43:d1:70:c2:d7:00:cd:47:94: 33:a4:8d:63:5a:37:93:13:53:41:a4:c2:e0:69:f4: 9b:ce:d8:2a:02:66:78:fe:48:e8:1c:3d:13:f2:ff: 7d:71:68:9d:27:d1:1a:6f:6b:75:ce:f6:ee:78:87: 6e:26:31:72:77:64:cc:69:8e:ad:0d:23:d3:d1:1f: a7:03:8c:f0:c0:78:ec:ab:3a:b6:91:a5:8a:e8:a8: 97:43:60:f0:c1:47:e9:fa:1b:25:2d:b2:1f:bb:25: 50:18:8d:3a:5a:66:a6:d2:ac:4d:80:91:c5:bb:8c: fb:66:9e:11:9d:e3:a8:3b:17:bb:81:67:04:ca:2b: ae:d0:ba:7c:04:18:62:2b:64:f3:f7:41:b5:4e:1e: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DA:66:D4:34:E4:7C:59:0A:8E:F7:B4:D2:7C:07:41:49:3B:36:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb48c1ae-9017-45de-bb5d-a4edbfb66faf/fb48c1ae-9017-45de-bb5d-a4edbfb66faf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 148.59.132.0/24 IPv6: 2602:fd04::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401952 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:af:8c:30:1a:7f:44:0b:e9:2a:74:e2:4c:55:e4:ac:a6:ec: 2e:f4:33:8d:99:cd:78:be:a8:8e:05:66:04:48:98:cd:8f:cb: 15:1e:15:6b:b4:53:eb:0a:7a:cd:7b:c2:4a:45:a9:27:86:12: 61:24:e2:d7:94:83:4b:69:63:db:1a:0f:03:ed:c3:d3:d8:e9: 81:a9:32:ad:a4:ef:91:15:cf:b3:59:ec:be:f3:c9:33:98:66: 6b:96:e4:68:9f:03:e9:a0:37:8a:ec:8f:9c:f8:b1:d6:b3:3f: fb:0c:a0:ac:7f:98:4b:69:a6:2b:34:ec:12:c3:94:0f:f6:ff: d8:ba:fd:c9:cc:e6:51:47:ea:ca:9d:e2:3e:05:ca:23:73:36: 04:56:5e:83:88:d4:bf:85:0c:bf:ce:75:bf:a2:75:8a:38:00: fa:09:45:c8:81:ce:7c:ff:ac:43:cc:bf:f9:ce:99:d2:05:9e: 7f:ef:c1:9d:48:06:fd:30:6e:3c:cc:cd:d7:58:15:b8:4b:f3: 46:9b:6c:4d:3a:a1:1c:90:35:e5:9f:8f:dc:4a:c3:44:0a:5d: 68:ba:39:10:c7:37:bc:6e:8a:e2:4c:a7:a2:c6:ea:24:11:b9: fb:2d:c5:03:dc:a1:ad:e1:3f:73:1f:12:72:d1:c1:4f:19:7b: 9f:8e:89:1e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEsg8RwW56JrWZ0AnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDkwODE3MzkyMloXDTI3MDcxNTE0MjUyNVowLzEtMCsGA1UEAxMk ZmI0OGMxYWUtOTAxNy00NWRlLWJiNWQtYTRlZGJmYjY2ZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcKob2iL1GP1zPtTuI9gtbk3tBTd1sejmCtP /TUduLC/nWJfGZL4ndaFao1Y+2qnHr9z8CZNXcuHdMEy22O7aln9NpcBhi9eC3sd 6OK3bai+jnV+u1wNX/xIv3qvVYaFy6lSNi5/iifjejLVGh5D0XDC1wDNR5QzpI1j WjeTE1NBpMLgafSbztgqAmZ4/kjoHD0T8v99cWidJ9Eab2t1zvbueIduJjFyd2TM aY6tDSPT0R+nA4zwwHjsqzq2kaWK6KiXQ2DwwUfp+hslLbIfuyVQGI06Wmam0qxN gJHFu4z7Zp4RneOoOxe7gWcEyiuu0Lp8BBhiK2Tz90G1Th6woQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMLaZtQ05HxZCo73tNJ8B0FJOzZYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m YjQ4YzFhZS05MDE3LTQ1ZGUtYmI1ZC1hNGVkYmZiNjZmYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2ZiNDhjMWFlLTkwMTctNDVkZS1i YjVkLWE0ZWRiZmI2NmZhZi9mYjQ4YzFhZS05MDE3LTQ1ZGUtYmI1ZC1hNGVkYmZi NjZmYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACUO4QwDgQCAAIwCAMGBCYC/QQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiIDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3r4wwGn9EC+kqdOJMVeSspuwu 9DONmc14vqiOBWYESJjNj8sVHhVrtFPrCnrNe8JKRaknhhJhJOLXlINLaWPbGg8D 7cPT2OmBqTKtpO+RFc+zWey+88kzmGZrluRonwPpoDeK7I+c+LHWsz/7DKCsf5hL aaYrNOwSw5QP9v/Yuv3JzOZRR+rKneI+BcojczYEVl6DiNS/hQy/znW/onWKOAD6 CUXIgc58/6xDzL/5zpnSBZ5/78GdSAb9MG48zM3XWBW4S/NGm2xNOqEckDXln4/c SsNECl1oujkQxze8boriTKeixuokEbn7LcUD3KGt4T9zHxJy0cFPGXufjoke -----END CERTIFICATE-----Generated at Wed Nov 5 22:15:04 2025 by rpki-client