$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer File: 143c0e16-c384-40db-8cbd-7b2f4a55e007.cer (raw, json) Hash identifier: c1/5qGabC9NDd8etmiJ8z8/ztPvo92dFGo27DQL9iMI= Subject key identifier: 8B:D3:DF:B3:87:7D:6A:C1:E1:D8:C2:C7:BF:CF:A1:37:02:8D:7C:1F Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B8EA539B924F21975ABF8DBA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Oct 2025 00:45:23 +0000 Certificate not after: Fri 21 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 15154 IP: 64.113.32.0/20 IP: 198.232.165.0 -- 198.232.166.255 IP: 2604:e780::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:a5:39:b9:24:f2:19:75:ab:f8:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 18 00:45:23 2025 GMT Not After : Jan 21 01:45:23 2028 GMT Subject: CN=143c0e16-c384-40db-8cbd-7b2f4a55e007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:53:21:14:7f:07:55:d1:21:d1:4b:c9:51:75: 0c:87:89:6e:ad:8c:5c:6d:2b:ca:cf:d0:ce:c8:f6: 8d:a7:aa:b6:45:ca:cf:78:67:2a:b4:d4:88:17:28: f5:b5:70:c6:b0:66:d0:40:7d:65:d4:bf:00:e0:70: fa:cc:ed:02:20:7a:ef:2e:35:a5:84:2e:b8:f6:0f: 0b:53:4e:66:3b:5e:fc:a1:e7:7f:e1:59:a1:f4:01: df:70:73:b5:8f:7d:5a:82:c9:73:32:30:29:95:d1: 25:f7:7b:13:30:7b:96:40:85:06:7b:ac:99:b6:10: 30:dc:08:b1:34:54:33:13:76:34:ab:9d:3a:85:d1: fb:97:40:fd:3a:f0:ca:24:ee:78:90:a3:28:70:33: 1b:36:e9:25:af:f3:52:50:4b:0f:4c:be:32:5b:15: e4:22:22:84:3c:36:0d:4b:60:09:03:03:bc:91:a1: e5:1e:37:0f:d5:d4:0f:ce:5b:d7:4a:f1:09:34:a3: 49:1e:39:6b:be:3a:94:24:16:ec:5b:56:8b:c5:a1: b9:84:10:fb:4e:e3:2f:ad:28:65:ad:e2:1c:de:aa: 1b:17:52:aa:69:76:5e:44:b0:74:fe:c4:42:05:c9: db:b1:4b:b6:56:5c:22:6b:a8:38:14:b6:89:2d:a7: 3f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D3:DF:B3:87:7D:6A:C1:E1:D8:C2:C7:BF:CF:A1:37:02:8D:7C:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.113.32.0/20 198.232.165.0-198.232.166.255 IPv6: 2604:e780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15154 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:25:92:78:a7:fa:3c:29:44:93:1d:44:82:3f:1c:26:39:4c: 80:db:f6:f6:cf:cb:27:24:9e:34:f8:e5:24:5c:95:27:cd:5b: 53:05:62:d1:f5:49:28:08:eb:94:05:a7:d4:50:92:84:bb:6b: 43:d4:68:a4:8b:79:e5:24:d1:64:15:92:1f:9a:18:b9:69:8b: 44:ba:24:b6:3b:50:d4:ad:f8:88:c3:79:03:e3:0f:4f:d7:2e: 43:43:77:06:df:7a:b6:4c:4d:e8:f6:f0:a9:78:d0:0c:13:21: 58:e4:ad:46:b2:7d:11:1b:7e:f4:d6:7f:f0:06:dd:38:28:8e: fb:42:d0:3a:64:6f:68:b9:01:85:38:e5:ad:dd:f5:5d:f6:ea: a5:56:1b:01:6e:c7:ac:26:63:f4:85:f4:62:2f:f6:47:e7:b7: 96:b0:d7:e7:3d:64:6b:da:ab:d5:08:5a:38:89:9d:14:5e:92: a3:3a:39:9d:90:52:c3:4d:33:3d:34:30:8f:8c:bc:ea:45:75: 4e:6c:79:f9:74:05:a9:58:4e:ef:d8:9d:96:bd:6d:77:5f:87: 85:03:a6:bc:61:28:f3:94:af:73:17:8b:33:03:a9:6f:0d:bd: 5b:64:fe:73:19:78:d2:bc:e8:70:fc:72:0d:dc:9f:80:14:1b: 27:a8:51:a1 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEuOpTm5JPIZdav426AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAxODAwNDUyM1oXDTI4MDEyMTAxNDUyM1owLzEtMCsGA1UEAxMk MTQzYzBlMTYtYzM4NC00MGRiLThjYmQtN2IyZjRhNTVlMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlMhFH8HVdEh0UvJUXUMh4lurYxcbSvKz9DO yPaNp6q2RcrPeGcqtNSIFyj1tXDGsGbQQH1l1L8A4HD6zO0CIHrvLjWlhC649g8L U05mO178oed/4Vmh9AHfcHO1j31agslzMjApldEl93sTMHuWQIUGe6yZthAw3Aix NFQzE3Y0q506hdH7l0D9OvDKJO54kKMocDMbNuklr/NSUEsPTL4yWxXkIiKEPDYN S2AJAwO8kaHlHjcP1dQPzlvXSvEJNKNJHjlrvjqUJBbsW1aLxaG5hBD7TuMvrShl reIc3qobF1KqaXZeRLB0/sRCBcnbsUu2Vlwia6g4FLaJLac/GQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFIvT37OHfWrB4djCx7/PoTcCjXwfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x NDNjMGUxNi1jMzg0LTQwZGItOGNiZC03YjJmNGE1NWUwMDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzE0M2MwZTE2LWMzODQtNDBkYi04 Y2JkLTdiMmY0YTU1ZTAwNy8xNDNjMGUxNi1jMzg0LTQwZGItOGNiZC03YjJmNGE1 NWUwMDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBoEAgABMBQDBARAcSAwDAMEAMbopQMEAMbopjANBAIAAjAHAwUA JgTngDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI7MjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgJZJ4p/o8 KUSTHUSCPxwmOUyA2/b2z8snJJ40+OUkXJUnzVtTBWLR9UkoCOuUBafUUJKEu2tD 1Giki3nlJNFkFZIfmhi5aYtEuiS2O1DUrfiIw3kD4w9P1y5DQ3cG33q2TE3o9vCp eNAMEyFY5K1Gsn0RG3701n/wBt04KI77QtA6ZG9ouQGFOOWt3fVd9uqlVhsBbses JmP0hfRiL/ZH57eWsNfnPWRr2qvVCFo4iZ0UXpKjOjmdkFLDTTM9NDCPjLzqRXVO bHn5dAWpWE7v2J2WvW13X4eFA6a8YSjzlK9zF4szA6lvDb1bZP5zGXjSvOhw/HIN 3J+AFBsnqFGh -----END CERTIFICATE-----Generated at Sun Oct 19 12:30:53 2025 by rpki-client