$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer File: 39695c91-50ed-402c-b896-6056bbde88df.cer (raw, json) Hash identifier: MBFNKD2RoqmYBRzWbdw8hvd2hkAIZ8qek3MszAIRh9c= Subject key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B7223F86A89DFC99E49310480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 19:42:20 +0000 Certificate not after: Sun 06 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 14445 AS: 399448 AS: 399516 AS: 400891 IP: 23.136.184.0/24 IP: 23.137.136.0/22 IP: 23.170.240.0/20 IP: 45.42.176.0/22 IP: 131.143.36.0/22 IP: 199.127.152.0/22 IP: 216.73.148.0/22 IP: 2606:18c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:23:f8:6a:89:df:c9:9e:49:31:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 7 19:42:20 2025 GMT Not After : Dec 6 01:45:27 2026 GMT Subject: CN=39695c91-50ed-402c-b896-6056bbde88df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:55:63:94:a1:02:3f:aa:2c:95:5d:53:64: da:1f:d6:f6:17:02:a4:a6:dd:b5:57:41:c0:e5:a1: fd:36:f2:9e:4e:2e:5f:36:37:46:30:45:94:7d:06: 15:86:72:4e:22:38:77:24:c7:cc:fe:df:93:5d:bb: 59:29:29:a0:dc:67:a4:07:3c:9d:59:bb:75:e9:27: bf:c2:4c:a4:c5:71:14:13:83:92:bb:1b:2a:a1:50: 87:62:bb:80:b2:df:de:d2:6b:b5:6c:0d:5b:2b:00: 02:2e:91:c7:e9:b4:e3:01:70:ce:da:30:fa:13:5a: 25:5a:e7:57:04:96:19:e6:d9:db:04:95:e2:2c:b9: 11:4f:ee:19:ea:e0:af:0c:81:a7:d9:7a:02:24:7f: b7:36:a2:59:f8:22:79:01:4d:1a:90:9b:c4:d7:69: fe:87:ee:fc:5b:87:c8:c1:8b:af:8c:9c:97:46:a8: 03:64:24:10:69:24:2b:d3:b1:a1:12:bf:61:1c:82: a4:6b:46:59:48:5f:5f:61:2b:ca:71:30:1a:03:54: 18:df:c4:13:10:20:77:f4:90:fe:06:ac:ac:cb:32: f3:3a:39:e2:b4:a6:96:db:ba:c9:11:f9:57:1d:a0: 61:35:b2:94:d5:dc:e4:94:a1:e2:09:85:ce:61:f2: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.136.184.0/24 23.137.136.0/22 23.170.240.0/20 45.42.176.0/22 131.143.36.0/22 199.127.152.0/22 216.73.148.0/22 IPv6: 2606:18c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14445 399448 399516 400891 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7c:7f:df:88:c2:4a:5e:5f:39:e2:c3:b3:d6:fc:f1:b5:8b: bd:2b:22:d6:61:7e:98:6a:0d:73:cb:fa:dd:50:96:c4:87:f3: 84:5c:2c:37:af:21:b8:d2:fa:84:58:98:53:ad:e1:0f:8b:84: c2:7d:63:68:5e:ef:be:af:9f:06:eb:e4:5e:1c:fd:b7:00:10: 09:99:59:63:09:0e:4c:22:6a:92:4e:cc:a7:5f:de:d3:da:f8: 52:26:ea:0c:5d:16:c8:3d:bd:b2:90:59:2c:4c:85:83:2d:12: cc:e2:17:8e:d5:3d:1e:ce:74:01:e1:27:26:eb:35:2e:47:23: 75:5c:43:71:af:f2:af:d4:0d:07:4e:c7:74:d0:1c:1a:e0:02: b5:13:2a:b4:7f:1a:b8:f6:9b:4f:24:3a:77:44:5d:2f:55:0a: 8f:df:7a:4a:32:ae:e9:0f:59:be:bb:79:b9:95:e7:07:5a:a5: c2:5d:b9:ee:df:f4:a4:ee:ca:70:6b:3f:7e:35:30:ec:c6:73: 00:6d:cd:f2:24:a0:5d:d5:d1:c0:da:e3:ea:8c:6d:d1:5f:17: 09:31:ba:80:3b:f1:4a:fe:ab:50:27:c6:96:4c:7e:f3:91:b1: 5a:d6:8b:2a:7b:86:aa:ff:f0:bc:19:10:b9:bf:cd:8f:e1:68: 79:d3:55:59 -----BEGIN CERTIFICATE----- MIIHSjCCBjKgAwIBAgIUAQ0Mn0MoWEtyI/hqid/JnkkxBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAwNzE5NDIyMFoXDTI2MTIwNjAxNDUyN1owLzEtMCsGA1UEAxMk Mzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4OGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwxVY5ShAj+qLJVdU2TaH9b2FwKkpt21V0HA 5aH9NvKeTi5fNjdGMEWUfQYVhnJOIjh3JMfM/t+TXbtZKSmg3GekBzydWbt16Se/ wkykxXEUE4OSuxsqoVCHYruAst/e0mu1bA1bKwACLpHH6bTjAXDO2jD6E1olWudX BJYZ5tnbBJXiLLkRT+4Z6uCvDIGn2XoCJH+3NqJZ+CJ5AU0akJvE12n+h+78W4fI wYuvjJyXRqgDZCQQaSQr07GhEr9hHIKka0ZZSF9fYSvKcTAaA1QY38QTECB39JD+ BqysyzLzOjnitKaW27rJEflXHaBhNbKU1dzklKHiCYXOYfK9WQIDAQABo4IEXDCC BFgwHQYDVR0OBBYEFPr1OhEeAF28nGFnsZdr1Q3pHYG0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z OTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzM5Njk1YzkxLTUwZWQtNDAyYy1i ODk2LTYwNTZiYmRlODhkZi8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJk ZTg4ZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBAAXiLgDBAIXiYgDBAQXqvADBAItKrADBAKDjyQD BALHf5gDBALYSZQwDQQCAAIwBwMFACYGGMAwKAYIKwYBBQUHAQgBAf8EGTAXoBUw EwICOG0CAwYYWAIDBhicAgMGHfswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhnx/34jCSl5fOeLDs9b88bWL vSsi1mF+mGoNc8v63VCWxIfzhFwsN68huNL6hFiYU63hD4uEwn1jaF7vvq+fBuvk Xhz9twAQCZlZYwkOTCJqkk7Mp1/e09r4UibqDF0WyD29spBZLEyFgy0SzOIXjtU9 Hs50AeEnJus1LkcjdVxDca/yr9QNB07HdNAcGuACtRMqtH8auPabTyQ6d0RdL1UK j996SjKu6Q9Zvrt5uZXnB1qlwl257t/0pO7KcGs/fjUw7MZzAG3N8iSgXdXRwNrj 6oxt0V8XCTG6gDvxSv6rUCfGlkx+85GxWtaLKnuGqv/wvBkQub/Nj+FoedNVWQ== -----END CERTIFICATE-----Generated at Sun Oct 19 12:38:18 2025 by rpki-client