$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer File: 76b8b138-986a-4190-a7a3-3625b5f70769.cer (raw, json) Hash identifier: muVNi/6wIJCfK+E4CMR5fOpKJbBb0ZNIJLFYATcVf6Q= Subject key identifier: 39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584BAF20B852ABEA5BDC13A07380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Oct 2025 16:00:05 +0000 Certificate not after: Tue 01 Feb 2028 17:00:05 +0000 Subordinate resources: AS: 21981 IP: 69.2.160.0/19 IP: 76.72.128.0/20 IP: 147.124.48.0/20 IP: 2604:5c80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:20:b8:52:ab:ea:5b:dc:13:a0:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 29 16:00:05 2025 GMT Not After : Feb 1 17:00:05 2028 GMT Subject: CN=76b8b138-986a-4190-a7a3-3625b5f70769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7b:9c:38:8d:7d:9f:e5:07:ce:d2:db:87:5c: dc:8e:6a:20:45:d6:84:c2:55:26:dd:7f:5f:61:94: d4:11:50:49:87:5e:de:90:93:5d:60:1e:fc:13:05: a0:fd:2d:64:f5:3d:21:53:8a:20:25:0c:bb:9c:fc: 1e:b5:d3:78:ec:13:32:83:89:05:c0:e8:40:76:d1: 93:0f:95:bb:c7:c1:89:ea:76:f8:7e:17:b1:ea:e9: 09:73:e3:fd:3a:e2:d3:c5:11:e2:5b:ba:22:38:56: 0a:08:76:bd:b0:45:0e:4d:01:41:43:69:f2:a4:26: fc:56:c8:52:d7:3e:94:54:33:7e:7a:9f:96:5d:ee: 25:e5:d3:54:12:1b:d5:57:0e:f0:1f:cb:41:9e:e4: ee:92:13:e1:f7:78:6e:8b:b5:a6:f1:58:b1:b8:a8: 15:4d:4c:62:f2:d3:ec:32:93:8e:3a:ab:62:0f:65: 5e:69:55:ef:40:5e:49:96:ce:2a:ed:2b:4c:b3:b2: 83:ed:e2:60:eb:5b:b5:09:cf:ae:d7:e4:3a:43:5f: 26:94:0c:2d:55:a3:99:09:6e:a5:51:da:08:ce:b9: d5:7d:8f:1d:91:00:3e:28:82:47:ba:c9:2d:5a:35: 38:0a:da:b6:44:79:79:d9:20:09:14:29:32:e0:b6: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 69.2.160.0/19 76.72.128.0/20 147.124.48.0/20 IPv6: 2604:5c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21981 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:41:10:35:2d:27:2d:40:83:75:5d:ac:39:25:00:d5:61:69: 19:57:a3:91:7d:36:8a:f0:ae:03:95:06:1e:94:1f:e2:a1:b9: 6f:fa:c5:d6:90:5d:4c:fa:5f:13:6e:59:20:e5:4f:77:2d:43: 34:30:71:50:9c:6f:2d:16:08:bb:32:0c:79:99:6a:b1:0d:42: 04:05:f0:bd:62:81:24:77:8d:c6:40:37:fb:20:54:66:5e:6a: e5:26:58:6e:f7:c1:f6:f5:2d:20:f4:3f:aa:10:a2:e6:6f:f7: 72:b0:f9:80:91:66:7c:37:9e:7b:56:e3:c1:e3:61:e2:60:df: 25:9b:8a:c0:fb:5a:a1:af:81:eb:b5:62:5a:fd:e4:9a:ea:79: 65:01:8a:e9:04:57:ee:7a:a7:b1:46:1b:57:19:78:89:58:ef: 7d:3d:6c:1f:96:df:c5:a8:47:92:61:51:29:27:2b:f2:bb:db: 23:ba:83:3d:fe:73:12:cb:f4:f9:f3:53:46:e6:f0:c7:00:e6: 36:f8:9e:bc:fa:49:cf:c7:8e:91:18:05:1a:f0:00:2e:3a:d3: d2:3b:11:fc:c0:b0:25:a4:6e:d9:d1:91:2e:4a:7b:b7:39:b7: 47:70:e3:8e:ae:d9:ed:fa:43:73:18:0a:f6:70:ae:cb:9d:22: ff:fd:b5:62 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEuvILhSq+pb3BOgc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MTAyOTE2MDAwNVoXDTI4MDIwMTE3MDAwNVowLzEtMCsGA1UEAxMk NzZiOGIxMzgtOTg2YS00MTkwLWE3YTMtMzYyNWI1ZjcwNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3ucOI19n+UHztLbh1zcjmogRdaEwlUm3X9f YZTUEVBJh17ekJNdYB78EwWg/S1k9T0hU4ogJQy7nPwetdN47BMyg4kFwOhAdtGT D5W7x8GJ6nb4fhex6ukJc+P9OuLTxRHiW7oiOFYKCHa9sEUOTQFBQ2nypCb8VshS 1z6UVDN+ep+WXe4l5dNUEhvVVw7wH8tBnuTukhPh93hui7Wm8VixuKgVTUxi8tPs MpOOOqtiD2VeaVXvQF5Jls4q7StMs7KD7eJg61u1Cc+u1+Q6Q18mlAwtVaOZCW6l UdoIzrnVfY8dkQA+KIJHusktWjU4Ctq2RHl52SAJFCky4LarRQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFDkXdthlfmyT4fq0JMuN63Z2M4RyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83 NmI4YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1YjVmNzA3NjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzc2YjhiMTM4LTk4NmEtNDE5MC1h N2EzLTM2MjViNWY3MDc2OS83NmI4YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1YjVm NzA3NjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAVFAqADBARMSIADBASTfDAwDQQCAAIwBwMFACYE XIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICVd0wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKEEQNS0nLUCD dV2sOSUA1WFpGVejkX02ivCuA5UGHpQf4qG5b/rF1pBdTPpfE25ZIOVPdy1DNDBx UJxvLRYIuzIMeZlqsQ1CBAXwvWKBJHeNxkA3+yBUZl5q5SZYbvfB9vUtIPQ/qhCi 5m/3crD5gJFmfDeee1bjweNh4mDfJZuKwPtaoa+B67ViWv3kmup5ZQGK6QRX7nqn sUYbVxl4iVjvfT1sH5bfxahHkmFRKScr8rvbI7qDPf5zEsv0+fNTRubwxwDmNvie vPpJz8eOkRgFGvAALjrT0jsR/MCwJaRu2dGRLkp7tzm3R3Djjq7Z7fpDcxgK9nCu y50i//21Yg== -----END CERTIFICATE-----Generated at Tue Nov 4 23:34:36 2025 by rpki-client