$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3.cer File: 343f3818-9125-4058-ac0a-1c14eb831ce3.cer (raw, json) Hash identifier: n/tZONJs7z7LELE1OVM5fQ0u0Po56xkpxdIQqCZPR9Q= Subject key identifier: 4A:56:53:A4:17:EA:69:55:6C:CE:B2:A8:DA:8C:E5:2D:FA:27:87:4D Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584E6EB8E503C348A53BE5E9AB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3/343f3818-9125-4058-ac0a-1c14eb831ce3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jul 2026 16:39:58 +0000 Certificate not after: Tue 10 Oct 2028 16:39:58 +0000 Subordinate resources: AS: 401751 IP: 143.223.137.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6e:b8:e5:03:c3:48:a5:3b:e5:e9:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 8 16:39:58 2026 GMT Not After : Oct 10 16:39:58 2028 GMT Subject: CN=343f3818-9125-4058-ac0a-1c14eb831ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8e:55:6f:35:64:44:c9:c2:62:ec:8b:34:57: d2:32:38:a2:a8:34:db:a2:bd:67:dd:90:0b:60:96: 80:60:d9:1b:14:00:8a:ed:cd:8b:3c:32:41:7a:3a: cf:3d:6c:91:39:22:20:13:46:3f:7c:ea:3f:52:12: 13:cb:a7:ce:05:9c:62:6a:f4:1c:3e:57:ab:95:48: f2:32:72:8c:83:e2:dc:b3:0d:71:a7:85:46:c5:31: 94:ac:31:cf:76:87:4e:fe:ff:bb:12:13:26:5e:df: 4b:c2:78:71:09:60:be:a0:ad:e5:74:61:79:3e:3e: 62:41:ba:75:df:9d:6e:ef:3d:de:c0:b1:19:87:e7: 19:9b:36:7d:c0:88:ef:5f:8f:6b:74:bc:79:b5:86: 2e:90:40:2b:21:61:c4:34:94:fc:2c:a7:4e:ca:84: e8:2d:f7:5c:bc:0a:f3:b2:73:ed:b3:4a:f4:c4:5f: fe:db:71:8a:19:6c:5e:97:65:00:1f:36:00:f1:31: aa:ad:17:bd:fd:89:ca:5d:99:1c:e1:1b:42:dc:e7: ad:f0:f7:16:de:8d:13:c5:f8:16:70:c3:93:fe:d6: 18:d9:59:90:71:25:be:44:b2:2b:57:44:a8:2e:79: 94:29:0d:7e:58:1c:10:dd:9e:65:b2:50:a1:34:3e: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:56:53:A4:17:EA:69:55:6C:CE:B2:A8:DA:8C:E5:2D:FA:27:87:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/343f3818-9125-4058-ac0a-1c14eb831ce3/343f3818-9125-4058-ac0a-1c14eb831ce3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 143.223.137.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401751 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:70:b2:22:d3:9a:13:73:6c:fa:b0:8d:ef:60:ac:8e:21:0f: be:ea:99:b3:11:3c:af:9c:01:b5:65:e6:e9:10:c2:69:76:83: 0e:56:dd:8d:e8:80:ce:6e:c5:b4:9d:60:5f:30:ea:af:2a:ea: 33:da:9e:61:66:49:8a:21:66:bc:18:f2:bb:14:f8:39:92:b5: f2:b0:d1:04:8a:20:91:86:f1:7c:68:e1:7b:cc:ba:81:ed:03: be:96:0c:e8:fb:95:06:37:41:47:4f:49:65:68:e4:2e:8c:0d: 37:96:b9:17:2b:f6:c4:81:e4:3b:76:3e:a9:04:91:a7:27:ad: 0f:fc:97:21:b5:ba:8c:47:b7:65:61:99:64:83:1b:c3:70:ca: 27:1d:78:3e:9b:fb:03:5d:77:04:d0:86:58:47:fa:b7:b7:ea: 27:11:9e:7f:bc:cf:21:4d:6b:0f:6e:54:4f:50:ea:4a:4a:c9: 2d:bb:f7:6a:dc:51:11:4c:5e:d4:c9:ac:d6:41:4c:65:5e:6a: 46:dc:b2:37:3a:1e:f7:4c:0a:cb:e3:61:46:46:a7:7c:48:6c: 59:19:a2:52:75:85:4f:8a:6e:fc:84:23:39:3b:ae:1d:7c:19: f2:cc:88:62:b7:e0:51:9a:b2:57:9d:6e:91:ac:38:f0:fc:5b: d7:88:03:c4 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5uuOUDw0ilO+XpqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDcwODE2Mzk1OFoXDTI4MTAxMDE2Mzk1OFowLzEtMCsGA1UEAxMk MzQzZjM4MTgtOTEyNS00MDU4LWFjMGEtMWMxNGViODMxY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo5VbzVkRMnCYuyLNFfSMjiiqDTbor1n3ZAL YJaAYNkbFACK7c2LPDJBejrPPWyROSIgE0Y/fOo/UhITy6fOBZxiavQcPlerlUjy MnKMg+Lcsw1xp4VGxTGUrDHPdodO/v+7EhMmXt9LwnhxCWC+oK3ldGF5Pj5iQbp1 351u7z3ewLEZh+cZmzZ9wIjvX49rdLx5tYYukEArIWHENJT8LKdOyoToLfdcvArz snPts0r0xF/+23GKGWxel2UAHzYA8TGqrRe9/YnKXZkc4RtC3Oet8PcW3o0TxfgW cMOT/tYY2VmQcSW+RLIrV0SoLnmUKQ1+WBwQ3Z5lslChND4s1QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEpWU6QX6mlVbM6yqNqM5S36J4dNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z NDNmMzgxOC05MTI1LTQwNTgtYWMwYS0xYzE0ZWI4MzFjZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzM0M2YzODE4LTkxMjUtNDA1OC1h YzBhLTFjMTRlYjgzMWNlMy8zNDNmMzgxOC05MTI1LTQwNTgtYWMwYS0xYzE0ZWI4 MzFjZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACP34kwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiFXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACpwsiLTmhNzbPqwje9grI4hD77qmbMRPK+cAbVl5ukQwml2 gw5W3Y3ogM5uxbSdYF8w6q8q6jPanmFmSYohZrwY8rsU+DmStfKw0QSKIJGG8Xxo 4XvMuoHtA76WDOj7lQY3QUdPSWVo5C6MDTeWuRcr9sSB5Dt2PqkEkacnrQ/8lyG1 uoxHt2VhmWSDG8NwyicdeD6b+wNddwTQhlhH+re36icRnn+8zyFNaw9uVE9Q6kpK yS2792rcURFMXtTJrNZBTGVeakbcsjc6HvdMCsvjYUZGp3xIbFkZolJ1hU+KbvyE Izk7rh18GfLMiGK34FGasledbpGsOPD8W9eIA8Q= -----END CERTIFICATE-----Generated at Thu Jul 23 19:57:49 2026 by rpki-client