$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer File: 1c8f0fea-4d37-4154-9909-d7fb16d78856.cer (raw, json) Hash identifier: D+KJi3jh2HHgTq9UawlUg1cELDnZtimtVfLSHdpBgNY= Subject key identifier: 99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584DD088C55ADA9CAC86D6DC5260 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 00:45:17 +0000 Certificate not after: Tue 15 Aug 2028 00:45:17 +0000 Subordinate resources: AS: 401478 IP: 140.235.148.0/22 IP: 155.103.200.0/22 IP: 2604:3a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:88:c5:5a:da:9c:ac:86:d6:dc:52:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 13 00:45:17 2026 GMT Not After : Aug 15 00:45:17 2028 GMT Subject: CN=1c8f0fea-4d37-4154-9909-d7fb16d78856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2c:f4:c8:95:ea:c2:0d:5a:b3:44:4f:ae:0a: 94:cc:2f:3e:e0:d4:82:24:3a:ac:7e:56:4b:8f:90: 2d:9a:ee:60:31:b0:5e:17:6e:c1:60:1d:0e:41:80: 01:84:f9:ac:37:41:61:ca:a1:4f:a8:62:8d:d3:68: 20:60:0e:38:26:b9:8c:c2:ba:3e:7c:37:d3:c8:51: 55:bc:52:37:43:ab:fe:5b:ba:a1:4e:cf:36:4f:28: 1a:72:c2:47:f8:ae:3f:ba:c7:93:93:21:82:13:eb: 53:4c:4d:d0:5b:34:a3:4e:61:f0:82:2f:33:88:8a: c6:c2:9c:e4:d3:df:4e:41:67:dc:30:06:31:07:bb: 41:da:62:06:ae:aa:7a:a6:08:93:bb:99:76:e5:99: 98:be:aa:63:9f:43:5f:56:95:bc:47:5d:b7:5b:1c: fb:ea:ad:6f:ae:39:ae:16:64:05:11:09:2c:0b:26: 99:c3:9a:67:75:4e:5b:b1:b4:6c:be:05:f0:da:0f: 09:ad:33:1c:d5:18:08:cc:43:b3:7c:bf:61:c0:c0: 4f:12:10:ed:a5:f3:bd:c8:5c:f0:c3:07:dd:29:b4: 0b:e6:14:4c:ce:24:b9:22:0c:cf:21:7c:95:f0:73: 6b:3e:5c:52:f8:a3:fd:2d:ac:fa:c8:7c:a1:57:75: 9a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 140.235.148.0/22 155.103.200.0/22 IPv6: 2604:3a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401478 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:2a:8e:02:5d:5a:c7:ba:b9:56:c1:5a:58:41:d6:1d:02:12: 7f:fa:55:d3:6e:d8:e3:92:7a:ed:05:39:10:23:ce:e2:e3:92: 44:01:62:cb:f5:c0:f1:09:6a:08:43:87:11:62:3c:5f:0d:b0: 74:b5:30:ce:15:96:24:ee:ba:3d:de:9e:78:97:6d:65:10:0a: 15:9e:ec:61:42:9c:67:e9:90:67:40:17:20:87:e5:b3:70:82: 62:e3:57:5d:ab:da:f2:21:d9:b1:a3:03:7e:01:4d:7c:38:a1: fd:3c:6a:93:ae:e1:fc:0c:f9:8d:cf:8d:0f:6d:d2:b7:3c:3f: 8e:4a:45:67:ec:eb:ea:a5:bc:4e:f2:7a:2e:bb:df:3c:f6:fb: 34:67:2d:c8:83:c3:d5:65:34:17:66:61:d9:12:65:07:19:14: 59:48:c9:e1:f0:79:ba:70:1c:b2:18:ba:39:3d:c7:da:f5:5e: 94:e4:36:da:43:e6:90:4f:14:09:60:2c:bc:44:36:e7:86:0c: 12:4d:6f:87:97:4d:20:24:c3:3e:6f:af:22:9c:0d:1a:99:af: ba:1d:75:49:7f:58:b4:91:23:3d:c7:f6:89:bd:ad:0c:99:d0: 4d:80:fe:67:b9:c8:3c:ce:03:bc:81:01:92:e9:95:13:c8:f3: f9:4a:02:d0 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE3QiMVa2pyshtbcUmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDUxMzAwNDUxN1oXDTI4MDgxNTAwNDUxN1owLzEtMCsGA1UEAxMk MWM4ZjBmZWEtNGQzNy00MTU0LTk5MDktZDdmYjE2ZDc4ODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyz0yJXqwg1as0RPrgqUzC8+4NSCJDqsflZL j5Atmu5gMbBeF27BYB0OQYABhPmsN0FhyqFPqGKN02ggYA44JrmMwro+fDfTyFFV vFI3Q6v+W7qhTs82TygacsJH+K4/useTkyGCE+tTTE3QWzSjTmHwgi8ziIrGwpzk 099OQWfcMAYxB7tB2mIGrqp6pgiTu5l25ZmYvqpjn0NfVpW8R123Wxz76q1vrjmu FmQFEQksCyaZw5pndU5bsbRsvgXw2g8JrTMc1RgIzEOzfL9hwMBPEhDtpfO9yFzw wwfdKbQL5hRMziS5IgzPIXyV8HNrPlxS+KP9Laz6yHyhV3WasQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFJmxzTwt1V5wCxExqtNe4GIHahRYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x YzhmMGZlYS00ZDM3LTQxNTQtOTkwOS1kN2ZiMTZkNzg4NTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzFjOGYwZmVhLTRkMzctNDE1NC05 OTA5LWQ3ZmIxNmQ3ODg1Ni8xYzhmMGZlYS00ZDM3LTQxNTQtOTkwOS1kN2ZiMTZk Nzg4NTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKM65QDBAKbZ8gwDQQCAAIwBwMFACYEA6AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBiBGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACMqjgJdWse6uVbBWlhB 1h0CEn/6VdNu2OOSeu0FORAjzuLjkkQBYsv1wPEJaghDhxFiPF8NsHS1MM4VliTu uj3enniXbWUQChWe7GFCnGfpkGdAFyCH5bNwgmLjV12r2vIh2bGjA34BTXw4of08 apOu4fwM+Y3PjQ9t0rc8P45KRWfs6+qlvE7yei673zz2+zRnLciDw9VlNBdmYdkS ZQcZFFlIyeHwebpwHLIYujk9x9r1XpTkNtpD5pBPFAlgLLxENueGDBJNb4eXTSAk wz5vryKcDRqZr7oddUl/WLSRIz3H9om9rQyZ0E2A/me5yDzOA7yBAZLplRPI8/lK AtA= -----END CERTIFICATE-----Generated at Wed May 13 05:34:56 2026 by rpki-client