$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer File: 1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer (raw, json) Hash identifier: Vhna3hp0b0OYuBvo5W6oa1whxLfkjkYs1BO1eUrgs7U= Subject key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B86452C954093BBEBC84CB3C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Oct 2025 00:45:23 +0000 Certificate not after: Tue 18 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 62727 IP: 23.175.80.0/24 IP: 23.226.80.0/20 IP: 130.44.24.0/24 IP: 204.80.232.0/24 IP: 209.94.32.0/20 IP: 2606:29c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:45:2c:95:40:93:bb:eb:c8:4c:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 15 00:45:23 2025 GMT Not After : Jan 18 01:45:23 2028 GMT Subject: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:cc:0a:c3:61:91:d1:ab:b9:bc:87:24:52: 54:35:26:44:0d:17:01:fd:e5:d9:73:26:2b:a9:1e: 34:86:a4:81:0f:a1:7f:55:33:e0:3e:9b:e4:9e:88: 2d:8c:0a:ef:8e:03:e5:6d:fd:8a:19:eb:8d:3c:a7: 84:85:3e:10:aa:2f:b6:13:ef:85:44:c9:75:7b:fc: a9:6d:ba:f2:f8:72:64:5b:22:84:a7:55:41:05:b0: 11:71:20:eb:2e:cd:44:06:5d:fa:cc:9a:5e:c2:f9: 2f:2c:7c:84:30:d4:f7:c1:1e:1b:d2:78:a4:14:63: 3a:8a:9a:d2:f5:88:67:8f:13:89:8e:fd:c1:53:b5: b1:43:18:11:c5:e4:2e:d9:62:3a:fd:bd:60:a2:e2: 36:fc:ab:d7:c8:17:dc:ce:f4:6a:08:a6:23:b2:83: af:e7:a6:d8:c0:70:3a:87:00:fa:82:8f:64:c1:57: 96:ec:f2:72:06:e9:f8:28:60:97:2a:4b:a4:54:80: 85:5d:28:ab:97:35:4f:3c:99:7d:30:1f:05:0a:bf: 9c:b2:9a:89:c0:ab:5f:e0:53:c6:16:10:81:29:70: 1a:96:18:d6:ea:26:15:25:2f:09:57:7b:31:36:67: 64:81:89:d8:57:56:54:49:b0:02:d0:07:74:69:05: c3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.175.80.0/24 23.226.80.0/20 130.44.24.0/24 204.80.232.0/24 209.94.32.0/20 IPv6: 2606:29c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62727 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ca:04:15:27:cc:19:89:76:75:a7:21:b0:35:29:da:04:b0: e0:a3:94:34:06:e7:6a:e8:15:2a:e5:dc:49:26:2e:ca:6f:e9: 4a:f7:5b:4d:32:f2:a2:73:3c:f0:09:bd:c6:88:4f:23:02:28: 00:ae:b8:8e:bf:be:f2:87:59:dd:36:a4:11:c2:77:60:0a:20: c2:4a:d0:75:07:71:94:5b:97:5e:9b:5b:8a:e9:a7:bb:ad:3e: 75:0b:36:43:91:49:b7:3f:82:a6:ab:0f:9b:35:74:e2:b7:bc: f1:af:bb:c5:73:b9:fd:0a:68:99:01:0b:c5:6e:21:52:e1:2b: 03:3a:67:5f:8b:53:7e:0c:57:54:4c:ff:fc:67:70:79:8e:7c: 46:1e:26:50:18:51:aa:b1:12:ff:a6:00:16:ac:3a:6b:d6:8a: b2:25:66:07:6d:51:98:90:95:63:39:33:26:86:3c:24:3f:05: 08:ef:a2:6e:36:69:be:3f:ba:5a:a0:cb:17:24:dc:c5:cf:ce: 5a:e2:9d:f5:00:67:69:41:7d:a5:ba:d2:ba:c8:fb:71:1f:a4: ec:79:a3:b0:a6:7f:bd:4e:ac:0c:88:b0:1e:d9:3b:21:77:28: 13:d1:ec:83:9f:8f:c0:2c:e7:c7:eb:3f:df:ea:f0:74:93:69: 8f:95:7b:8b -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWEuGRSyVQJO768hMs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAxNTAwNDUyM1oXDTI4MDExODAxNDUyM1owLzEtMCsGA1UEAxMk MWNmYjY2YmMtZGNmZC00YzdlLWJkMDAtMzhlOTIzNzE5YWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS3MCsNhkdGrubyHJFJUNSZEDRcB/eXZcyYr qR40hqSBD6F/VTPgPpvknogtjArvjgPlbf2KGeuNPKeEhT4Qqi+2E++FRMl1e/yp bbry+HJkWyKEp1VBBbARcSDrLs1EBl36zJpewvkvLHyEMNT3wR4b0nikFGM6iprS 9YhnjxOJjv3BU7WxQxgRxeQu2WI6/b1gouI2/KvXyBfczvRqCKYjsoOv56bYwHA6 hwD6go9kwVeW7PJyBun4KGCXKkukVICFXSirlzVPPJl9MB8FCr+cspqJwKtf4FPG FhCBKXAalhjW6iYVJS8JV3sxNmdkgYnYV1ZUSbAC0Ad0aQXDbwIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFDpA83ZDzQp6+r3aeX3xhMroAE2MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x Y2ZiNjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5MjM3MTlhYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzFjZmI2NmJjLWRjZmQtNGM3ZS1i ZDAwLTM4ZTkyMzcxOWFiNC8xY2ZiNjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5MjM3 MTlhYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAAXr1ADBAQX4lADBACCLBgDBADMUOgDBATRXiAw DQQCAAIwBwMFACYGKcAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPUHMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAJPKBBUnzBmJdnWnIbA1KdoEsOCjlDQG52roFSrl3EkmLspv6Ur3W00y8qJz PPAJvcaITyMCKACuuI6/vvKHWd02pBHCd2AKIMJK0HUHcZRbl16bW4rpp7utPnUL NkORSbc/gqarD5s1dOK3vPGvu8Vzuf0KaJkBC8VuIVLhKwM6Z1+LU34MV1RM//xn cHmOfEYeJlAYUaqxEv+mABasOmvWirIlZgdtUZiQlWM5MyaGPCQ/BQjvom42ab4/ ulqgyxck3MXPzlrinfUAZ2lBfaW60rrI+3EfpOx5o7Cmf71OrAyIsB7ZOyF3KBPR 7IOfj8As58frP9/q8HSTaY+Ve4s= -----END CERTIFICATE-----Generated at Sun Oct 19 12:35:48 2025 by rpki-client