$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer File: 3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer (raw, json) Hash identifier: 8GG8pLNfs0oyAokLJKqsr6hQtkyWyCbqtZsn1RCQCMM= Subject key identifier: CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D30027BC831EC2959B9B66B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Mar 2026 12:45:22 +0000 Certificate not after: Sun 18 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 399612 IP: 68.68.221.0/24 IP: 2602:fc7a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:02:7b:c8:31:ec:29:59:b9:b6:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 16 12:45:22 2026 GMT Not After : Jun 18 12:45:22 2028 GMT Subject: CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:36:be:4c:e9:a2:b5:3c:d5:bd:a9:2f:51:c4: 49:7f:61:7e:a2:d5:d8:88:b4:43:6d:13:de:2c:c2: 06:8a:e5:7b:0a:38:84:af:05:63:10:13:a2:dc:64: 34:61:f5:97:68:f9:3e:80:60:09:bc:e0:22:d2:d6: 87:fb:8f:93:d6:ee:70:f9:ab:ee:53:a7:b2:f5:2b: 4e:3d:f2:f2:6d:f5:72:d0:42:5d:1a:83:f2:74:fb: ba:ee:3b:30:ca:01:65:5d:be:04:e3:4a:b8:58:03: a0:ec:76:04:b0:f8:a0:11:07:dc:bc:9b:63:53:aa: 7a:63:1d:c0:a5:b4:76:03:84:57:74:c9:7a:7e:fc: 42:7a:fc:6c:a2:67:0d:89:6f:90:3d:46:c9:4f:f6: dd:57:c4:9c:23:0f:0c:cc:5d:78:93:c3:32:14:79: 66:bb:e4:4c:3c:81:b8:f2:0d:be:14:c9:fc:ba:41: b7:da:73:34:ee:8a:b7:09:fb:f5:60:eb:fa:9d:d3: 2a:57:48:1f:cc:40:fa:01:99:20:cd:a5:d6:24:c8: 07:30:8a:ec:d4:e8:51:f2:f0:5d:3f:4f:34:87:a4: c1:ca:62:77:e5:f3:3e:df:03:39:c6:cb:07:cc:28: 7b:c4:c7:26:42:38:3e:d1:eb:14:19:b9:94:91:e6: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 68.68.221.0/24 IPv6: 2602:fc7a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399612 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:9a:7f:1b:ff:f9:b1:93:c3:b1:36:1d:f3:e0:42:31:18:6e: a5:7a:6c:c9:8d:cf:6f:85:f7:78:61:ed:6d:ae:b7:41:18:7a: 4d:1e:77:65:bc:35:34:43:a3:d7:7c:6c:33:8b:a6:03:93:e3: 45:b4:31:2c:db:8c:a7:06:8e:4a:93:11:83:43:66:57:5d:e4: 01:c0:85:b4:ab:0c:05:56:21:77:80:14:1d:00:b0:45:05:88: ce:93:03:77:5d:c6:52:df:04:96:e4:f1:94:64:f2:7d:44:d5: 94:0f:f3:c5:33:a9:e2:ec:13:66:61:f2:18:47:a3:ee:10:3e: 9c:ec:7b:5b:22:84:72:0f:55:ec:23:3b:0b:88:20:71:73:19: 03:19:84:ac:72:a1:ec:1c:97:de:8f:f4:c5:1d:11:e0:36:0e: 87:94:5b:c9:24:e4:6a:b1:6a:1e:3c:a2:1e:18:42:84:f2:e5: 1f:4c:93:35:d4:74:66:58:67:9a:fb:80:48:e8:16:35:10:69: b2:56:6c:55:a6:82:d9:72:57:4b:b0:07:32:70:1b:96:b4:0a: b6:a1:eb:99:bc:1e:a3:fa:ad:d4:93:3b:cc:24:13:10:52:fc: a5:c1:84:2e:04:9d:82:c0:8e:af:bc:dd:04:47:8c:93:ee:2f: da:06:04:14 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0wAnvIMewpWbm2awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDMxNjEyNDUyMloXDTI4MDYxODEyNDUyMlowLzEtMCsGA1UEAxMk M2IwYjRlNDUtYzkxNi00OGJlLWFlMGQtYjU3YjgwYTMwY2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTa+TOmitTzVvakvUcRJf2F+otXYiLRDbRPe LMIGiuV7CjiErwVjEBOi3GQ0YfWXaPk+gGAJvOAi0taH+4+T1u5w+avuU6ey9StO PfLybfVy0EJdGoPydPu67jswygFlXb4E40q4WAOg7HYEsPigEQfcvJtjU6p6Yx3A pbR2A4RXdMl6fvxCevxsomcNiW+QPUbJT/bdV8ScIw8MzF14k8MyFHlmu+RMPIG4 8g2+FMn8ukG32nM07oq3Cfv1YOv6ndMqV0gfzED6AZkgzaXWJMgHMIrs1OhR8vBd P080h6TBymJ35fM+3wM5xssHzCh7xMcmQjg+0esUGbmUkeYP1QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFM3wDkvx+7U57T96lDzXSivCDvcWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z YjBiNGU0NS1jOTE2LTQ4YmUtYWUwZC1iNTdiODBhMzBjZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzNiMGI0ZTQ1LWM5MTYtNDhiZS1h ZTBkLWI1N2I4MGEzMGNkYy8zYjBiNGU0NS1jOTE2LTQ4YmUtYWUwZC1iNTdiODBh MzBjZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABERN0wDgQCAAIwCAMGBCYC/HoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYY/DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjmn8b//mxk8OxNh3z4EIxGG6l emzJjc9vhfd4Ye1trrdBGHpNHndlvDU0Q6PXfGwzi6YDk+NFtDEs24ynBo5KkxGD Q2ZXXeQBwIW0qwwFViF3gBQdALBFBYjOkwN3XcZS3wSW5PGUZPJ9RNWUD/PFM6ni 7BNmYfIYR6PuED6c7HtbIoRyD1XsIzsLiCBxcxkDGYSscqHsHJfej/TFHRHgNg6H lFvJJORqsWoePKIeGEKE8uUfTJM11HRmWGea+4BI6BY1EGmyVmxVpoLZcldLsAcy cBuWtAq2oeuZvB6j+q3UkzvMJBMQUvylwYQuBJ2CwI6vvN0ER4yT7i/aBgQU -----END CERTIFICATE-----Generated at Sat Mar 28 08:45:03 2026 by rpki-client