$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer File: 4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer (raw, json) Hash identifier: c3dKv8YkJjGJaO1irZN/eMq+jAgTFgnipiNHwaX+HVg= Subject key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D3B2D37FCE83F11BECCB64C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Mar 2026 12:45:22 +0000 Certificate not after: Thu 22 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 63072 IP: 23.135.176.0/24 IP: 162.253.244.0/22 IP: 2605:1740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:2d:37:fc:e8:3f:11:be:cc:b6:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 20 12:45:22 2026 GMT Not After : Jun 22 12:45:22 2028 GMT Subject: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:30:10:1d:6c:30:dd:7f:c7:86:bc:77:77: f6:3f:ae:d5:30:07:43:c7:ab:8b:bc:b8:22:e8:3c: 41:c8:6d:3b:eb:0d:bf:ea:47:a5:1c:1e:f6:c8:f0: 99:49:f3:6a:fb:c0:0a:de:16:9e:52:5a:c1:4d:b2: da:bc:fa:0d:d4:86:be:e0:1e:d3:96:02:39:b3:16: 74:56:c5:0c:60:0a:79:d6:0a:7c:63:b9:15:7c:ce: 66:97:72:95:11:3d:3d:50:10:4b:6e:34:68:ed:6d: 82:fa:40:92:e6:37:6d:4b:90:6c:1d:28:7e:63:e7: c8:98:3a:ab:e7:03:56:5b:b6:a0:f1:7b:06:1a:66: 30:19:7f:99:38:4c:51:12:0c:e7:eb:5e:bd:b8:3c: e5:b5:80:ab:c5:fe:e1:fb:e3:8c:ec:cc:0e:d6:86: 06:3d:a7:ba:78:cc:e6:75:21:1d:7e:85:5d:d8:ac: cd:30:d9:17:4f:fc:64:48:34:47:e5:a5:ed:84:59: 93:52:38:5f:4c:3f:b6:85:04:4c:ba:bf:7b:f6:02: 68:04:ca:53:99:d2:5f:e1:49:9a:0d:40:6e:17:bb: 2e:08:e5:5e:61:4d:b3:84:a8:7f:29:41:02:13:87: 64:60:f5:52:d6:fc:29:47:b4:8a:9c:b2:68:72:7d: 74:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.135.176.0/24 162.253.244.0/22 IPv6: 2605:1740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63072 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c1:78:1b:f7:ec:9a:a8:bf:13:d3:e4:7e:9b:ad:66:b8:02: 8c:42:ea:09:86:72:82:cb:1c:0a:18:0c:b3:73:ea:20:cd:6d: 67:f1:15:29:ed:ee:bf:aa:b8:5e:ec:5d:71:86:ce:1b:10:a7: df:26:9a:ba:2b:44:0a:f5:62:3b:08:ac:28:7e:e5:a0:82:f8: c0:73:80:ef:85:1f:a4:d1:6f:62:24:9e:44:c3:e2:49:f4:db: e0:7a:f7:8a:3c:cc:fe:d3:7b:0c:61:d8:d8:0b:18:dc:fc:47: 4e:b2:3d:d1:32:bf:41:33:39:94:fe:c1:90:73:28:68:9f:93: 44:c3:21:ee:ba:bc:a4:2f:27:97:24:a0:03:8d:c3:03:bd:09: 65:de:fa:62:2e:9f:f4:c6:03:88:08:dd:22:84:10:cc:38:fd: a8:da:e6:9c:2c:ac:37:71:78:1f:02:5b:1f:29:cf:32:ac:1b: 96:16:b3:d6:ae:16:11:cb:a6:2b:f0:e9:e5:6f:ed:b0:7b:5c: 5a:c6:dd:ee:09:dd:14:cd:f4:64:59:a5:d4:18:75:92:2a:68: 85:57:aa:4b:5a:aa:00:ef:d5:50:39:7f:da:ab:ef:e5:22:f5: fe:c0:2e:18:83:d6:9f:a9:44:f6:7d:60:c1:0a:8c:76:11:13: 81:15:cf:b0 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE07LTf86D8Rvsy2TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDMyMDEyNDUyMloXDTI4MDYyMjEyNDUyMlowLzEtMCsGA1UEAxMk NDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThjM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P0wEB1sMN1/x4a8d3f2P67VMAdDx6uLvLgi 6DxByG076w2/6kelHB72yPCZSfNq+8AK3haeUlrBTbLavPoN1Ia+4B7TlgI5sxZ0 VsUMYAp51gp8Y7kVfM5ml3KVET09UBBLbjRo7W2C+kCS5jdtS5BsHSh+Y+fImDqr 5wNWW7ag8XsGGmYwGX+ZOExREgzn6169uDzltYCrxf7h++OM7MwO1oYGPae6eMzm dSEdfoVd2KzNMNkXT/xkSDRH5aXthFmTUjhfTD+2hQRMur979gJoBMpTmdJf4Uma DUBuF7suCOVeYU2zhKh/KUECE4dkYPVS1vwpR7SKnLJocn10RwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFNkpuObM1CNDRkeJM5dKJHaZjKtyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQwMDlkOTNhLWQ5ZTctNGViNy05 NGNkLWZmZWMwNjE4YzNlYy80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYx OGMzZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXh7ADBAKi/fQwDQQCAAIwBwMFACYFF0AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPZgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF7BeBv37JqovxPT5H6b rWa4AoxC6gmGcoLLHAoYDLNz6iDNbWfxFSnt7r+quF7sXXGGzhsQp98mmrorRAr1 YjsIrCh+5aCC+MBzgO+FH6TRb2IknkTD4kn02+B694o8zP7Tewxh2NgLGNz8R06y PdEyv0EzOZT+wZBzKGifk0TDIe66vKQvJ5ckoAONwwO9CWXe+mIun/TGA4gI3SKE EMw4/aja5pwsrDdxeB8CWx8pzzKsG5YWs9auFhHLpivw6eVv7bB7XFrG3e4J3RTN 9GRZpdQYdZIqaIVXqktaqgDv1VA5f9qr7+Ui9f7ALhiD1p+pRPZ9YMEKjHYRE4EV z7A= -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:14 2026 by rpki-client