$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer File: 32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer (raw, json) Hash identifier: ee2TsUpe7OGoXuS2CJNQjys34o42PzgsAs6XCLMwZsk= Subject key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B4CEF59E0DA6812CC2D9DFD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Sep 2025 11:51:24 +0000 Certificate not after: Mon 22 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 399629 IP: 64.7.198.0/23 IP: 64.52.80.0/24 IP: 64.94.84.0/23 IP: 64.95.10.0 -- 64.95.13.255 IP: 64.111.92.0/23 IP: 64.190.113.0/24 IP: 65.38.120.0/23 IP: 67.217.228.0/24 IP: 69.67.172.0/23 IP: 72.5.42.0/23 IP: 96.9.124.0/23 IP: 149.248.76.0/22 IP: 162.33.176.0/22 IP: 162.252.198.0/23 IP: 168.100.8.0/22 IP: 192.153.57.0/24 IP: 193.149.129.0/24 IP: 193.149.176.0/24 IP: 193.149.180.0/24 IP: 193.149.185.0/24 IP: 193.149.187.0/24 IP: 193.149.189.0 -- 193.149.190.255 IP: 195.85.114.0/23 IP: 198.13.158.0/23 IP: 199.217.98.0/23 IP: 206.71.148.0/23 IP: 206.166.251.0/24 IP: 206.188.196.0/23 IP: 216.245.184.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4c:ef:59:e0:da:68:12:cc:2d:9d:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 24 11:51:24 2025 GMT Not After : Nov 22 01:45:25 2027 GMT Subject: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:88:c2:1d:af:6c:4e:a4:5d:d6:8d:e3:9d:20: f2:85:18:cd:a8:12:c5:6a:18:e1:75:a2:34:e5:d8: be:6d:5f:d9:e9:33:ad:49:c1:ca:d5:5f:99:85:27: aa:be:d1:ae:e2:ec:10:b2:b8:50:e8:99:97:7e:00: ef:9f:ba:a9:e7:45:8b:a3:5c:8f:34:6a:02:1a:a0: 27:08:90:7e:2c:a5:40:6e:f0:0c:2d:23:9b:f4:34: 39:2d:98:04:a2:22:9c:a6:d0:9d:37:31:74:31:00: d4:ae:01:e5:52:d3:1a:57:bf:4f:ac:53:57:0e:0f: b6:bf:db:f2:00:03:fe:2c:70:35:e0:41:e9:c1:14: aa:5d:e4:12:ab:bf:ea:22:27:6b:6d:72:e1:0b:c5: e8:58:c2:63:0b:a8:26:df:1b:a1:8c:4a:0c:ee:70: 7e:97:a1:a7:d7:b2:f7:e9:84:d2:b8:6a:be:c6:4c: c9:ab:8f:e5:00:70:b6:3b:5c:5d:99:e6:11:28:b5: a3:5b:dd:b9:e6:72:dc:df:4f:b7:a6:bd:ee:55:e2: ef:25:65:a2:22:38:8e:6a:02:f5:fa:15:82:1d:40: 29:19:9c:55:31:c3:9c:1b:39:41:da:ce:da:ad:72: 63:9d:48:55:c4:3c:91:2c:32:8a:fb:f9:7b:f9:3a: 38:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.7.198.0/23 64.52.80.0/24 64.94.84.0/23 64.95.10.0-64.95.13.255 64.111.92.0/23 64.190.113.0/24 65.38.120.0/23 67.217.228.0/24 69.67.172.0/23 72.5.42.0/23 96.9.124.0/23 149.248.76.0/22 162.33.176.0/22 162.252.198.0/23 168.100.8.0/22 192.153.57.0/24 193.149.129.0/24 193.149.176.0/24 193.149.180.0/24 193.149.185.0/24 193.149.187.0/24 193.149.189.0-193.149.190.255 195.85.114.0/23 198.13.158.0/23 199.217.98.0/23 206.71.148.0/23 206.166.251.0/24 206.188.196.0/23 216.245.184.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399629 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e4:3b:cb:01:41:20:89:1a:00:30:47:f6:4a:60:81:7e:0f: 6f:be:81:e7:a4:fa:7d:89:79:98:f5:f2:1a:e9:e6:a7:5d:e5: 93:74:44:6e:dd:51:83:9d:f5:14:6f:97:66:79:05:f1:d7:46: 91:bb:df:e7:f4:0c:f3:8c:82:dd:84:f6:45:8f:96:88:f9:46: c1:c8:d4:47:fa:e1:d8:29:32:c9:78:44:02:12:6f:bc:54:42: 1b:5b:3d:ec:16:c9:12:7e:9d:07:b1:b9:f3:47:ee:09:c6:0d: 80:15:71:2f:78:ef:ac:31:f7:66:b2:c9:28:ed:65:40:e3:b9: 49:2f:97:40:f8:42:03:9a:f6:de:71:58:4b:c2:06:46:93:cc: 0f:a4:57:c1:1b:b9:a5:4e:d9:0d:3c:f5:cd:33:e5:5d:78:62: 8a:88:28:63:8c:d6:35:d9:33:19:e7:53:5d:3b:4d:a2:6d:fd: ae:a6:78:93:92:72:ea:2f:55:3c:95:24:b0:fd:4e:f0:77:9e: d3:3c:85:58:6c:0c:b6:79:8a:ca:1e:7d:d4:5f:42:ac:20:d5: da:09:18:2e:9f:c4:82:e1:71:0b:28:c6:e1:0e:be:35:13:97: ad:02:88:5d:52:a9:68:da:3e:12:79:c6:c7:89:6c:f9:b5:47: f7:f7:cc:40 -----BEGIN CERTIFICATE----- MIIHxjCCBq6gAwIBAgIUAQ0Mn0MoWEtM71ng2mgSzC2d/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDkyNDExNTEyNFoXDTI3MTEyMjAxNDUyNVowLzEtMCsGA1UEAxMk MzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNmMTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYjCHa9sTqRd1o3jnSDyhRjNqBLFahjhdaI0 5di+bV/Z6TOtScHK1V+ZhSeqvtGu4uwQsrhQ6JmXfgDvn7qp50WLo1yPNGoCGqAn CJB+LKVAbvAMLSOb9DQ5LZgEoiKcptCdNzF0MQDUrgHlUtMaV79PrFNXDg+2v9vy AAP+LHA14EHpwRSqXeQSq7/qIidrbXLhC8XoWMJjC6gm3xuhjEoM7nB+l6Gn17L3 6YTSuGq+xkzJq4/lAHC2O1xdmeYRKLWjW9255nLc30+3pr3uVeLvJWWiIjiOagL1 +hWCHUApGZxVMcOcGzlB2s7arXJjnUhVxDyRLDKK+/l7+To44QIDAQABo4IE2DCC BNQwHQYDVR0OBBYEFMJt0yTKHW4LXr2TtW8GfDNxVQnMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z MmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzMyZjNkZGUxLTQzZGQtNGZmZC1h ZTI0LTBjMzhjZThjZjEwMy8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4 Y2YxMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgdsGCCsGAQUF BwEHAQH/BIHLMIHIMIHFBAIAATCBvgMEAUAHxgMEAEA0UAMEAUBeVDAMAwQBQF8K AwQBQF8MAwQBQG9cAwQAQL5xAwQBQSZ4AwQAQ9nkAwQBRUOsAwQBSAUqAwQBYAl8 AwQClfhMAwQCoiGwAwQBovzGAwQCqGQIAwQAwJk5AwQAwZWBAwQAwZWwAwQAwZW0 AwQAwZW5AwQAwZW7MAwDBADBlb0DBADBlb4DBAHDVXIDBAHGDZ4DBAHH2WIDBAHO R5QDBADOpvsDBAHOvMQDBADY9bgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhkN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJTkO8sBQSCJGgAwR/ZKYIF+D2++geek+n2JeZj18hrp5qdd5ZN0 RG7dUYOd9RRvl2Z5BfHXRpG73+f0DPOMgt2E9kWPloj5RsHI1Ef64dgpMsl4RAIS b7xUQhtbPewWyRJ+nQexufNH7gnGDYAVcS9476wx92ayySjtZUDjuUkvl0D4QgOa 9t5xWEvCBkaTzA+kV8EbuaVO2Q089c0z5V14YoqIKGOM1jXZMxnnU107TaJt/a6m eJOScuovVTyVJLD9TvB3ntM8hVhsDLZ5isoefdRfQqwg1doJGC6fxILhcQsoxuEO vjUTl60CiF1SqWjaPhJ5xseJbPm1R/f3zEA= -----END CERTIFICATE-----Generated at Sun Oct 19 12:38:50 2025 by rpki-client