$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer File: 46d43cee-39e6-4150-ae7b-94a20c139206.cer (raw, json) Hash identifier: YsTglx59yQ/i1BRh+Zu01KST/+wAkYat5zNd0yiXAPE= Subject key identifier: 28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584AEF843E78C2C45C30C8B2FA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 Aug 2025 00:45:24 +0000 Certificate not after: Thu 25 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 394367 IP: 23.176.0.0/24 IP: 205.207.142.0/24 IP: 207.167.72.0/22 IP: 2602:ff70::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:84:3e:78:c2:c4:5c:30:c8:b2:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 22 00:45:24 2025 GMT Not After : Nov 25 01:45:24 2027 GMT Subject: CN=46d43cee-39e6-4150-ae7b-94a20c139206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:02:cd:71:30:57:d6:82:10:7b:7e:ac:e8: 28:de:45:2b:42:dd:79:7a:ac:5d:d8:d6:96:46:50: 60:1e:36:ac:17:d4:b2:04:96:02:fb:08:af:fe:76: 96:22:ad:fd:c0:62:46:fc:ef:b5:f3:6e:7d:fc:96: df:a8:a2:f5:00:cc:7b:6f:e7:b5:e7:65:0e:9c:b9: 90:0d:f2:35:99:d9:19:73:ea:bd:1b:2e:f5:f3:12: ac:50:c5:67:c5:50:e3:7f:b2:15:b9:94:98:01:3f: 5e:aa:bd:82:57:07:60:77:01:dd:b6:74:16:4f:ff: e5:06:30:82:4a:e0:d2:39:06:b5:7e:81:05:42:99: b1:26:a4:7c:d0:bd:19:5c:41:f6:63:3b:2a:bb:58: 2b:59:cb:a5:27:90:56:60:e6:79:a9:c4:fb:0e:71: 7d:07:2b:49:6f:39:26:4a:22:8f:51:0e:59:8d:b8: 14:ae:05:c6:18:05:a3:fb:30:b4:c4:f3:1c:0d:72: b8:ec:01:33:57:9c:bf:40:69:5a:da:26:dc:09:1d: 5d:58:12:88:3c:62:c9:a5:c7:fc:86:ba:52:f1:03: 2e:c9:0e:16:c2:bf:8d:32:bc:d9:d7:a5:c6:e0:f4: 65:10:68:81:cd:f4:bc:5c:22:95:0c:1c:ad:54:51: fd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.176.0.0/24 205.207.142.0/24 207.167.72.0/22 IPv6: 2602:ff70::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394367 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:91:c9:4f:59:02:bd:e8:6e:2c:49:a4:0c:a7:09:f9:d3:cb: d8:97:29:8f:33:79:41:99:33:57:9c:14:10:30:ea:76:21:3f: 42:1d:de:2e:9e:9b:58:f0:93:64:f4:6c:32:99:c5:dd:f0:18: ed:72:0c:fa:69:1f:60:e0:e1:90:fa:85:d0:3d:a1:0b:03:91: 76:b7:ef:e4:b5:e7:8b:bc:ec:84:5a:bc:ea:34:c3:d1:37:03: 35:5c:3e:c5:d0:ac:e2:d7:c1:f3:09:9a:67:c9:ed:c3:37:e1: 1a:38:eb:cc:dc:7a:31:ed:cc:67:fe:57:b1:b9:43:87:c2:41: 12:c9:1e:4f:d1:44:92:e7:99:0d:31:cb:eb:20:57:a4:08:cc: 92:e9:33:dc:1c:6e:cc:f1:0f:d3:8b:fe:ad:01:35:4c:9c:69: bf:ec:73:23:bc:83:94:4e:cb:0d:0d:17:a0:fb:01:8e:5b:60: 27:48:b2:0d:62:ed:0c:87:0a:e6:0e:83:d2:42:6e:89:12:0c: 32:db:67:4b:3c:bf:56:2c:4b:59:94:2b:b5:2f:50:d4:5a:19: bc:2c:21:74:ca:10:a5:e5:38:46:30:c5:e4:6f:8f:3c:03:09: e8:e8:55:19:b2:f7:a0:a8:d8:b1:36:96:66:a6:c4:a7:c5:33: 11:d5:a3:97 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWErvhD54wsRcMMiy+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDgyMjAwNDUyNFoXDTI3MTEyNTAxNDUyNFowLzEtMCsGA1UEAxMk NDZkNDNjZWUtMzllNi00MTUwLWFlN2ItOTRhMjBjMTM5MjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkoCzXEwV9aCEHt+rOgo3kUrQt15eqxd2NaW RlBgHjasF9SyBJYC+wiv/naWIq39wGJG/O+18259/JbfqKL1AMx7b+e152UOnLmQ DfI1mdkZc+q9Gy718xKsUMVnxVDjf7IVuZSYAT9eqr2CVwdgdwHdtnQWT//lBjCC SuDSOQa1foEFQpmxJqR80L0ZXEH2Yzsqu1grWculJ5BWYOZ5qcT7DnF9BytJbzkm SiKPUQ5ZjbgUrgXGGAWj+zC0xPMcDXK47AEzV5y/QGla2ibcCR1dWBKIPGLJpcf8 hrpS8QMuyQ4Wwr+NMrzZ16XG4PRlEGiBzfS8XCKVDBytVFH98QIDAQABo4IENzCC BDMwHQYDVR0OBBYEFCiHO/PJIMruB/hUtQE3m8aECPkVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 NmQ0M2NlZS0zOWU2LTQxNTAtYWU3Yi05NGEyMGMxMzkyMDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQ2ZDQzY2VlLTM5ZTYtNDE1MC1h ZTdiLTk0YTIwYzEzOTIwNi80NmQ0M2NlZS0zOWU2LTQxNTAtYWU3Yi05NGEyMGMx MzkyMDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXsAADBADNz44DBALPp0gwDgQCAAIwCAMGBCYC /3AAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYEfzBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASkclPWQK9 6G4sSaQMpwn508vYlymPM3lBmTNXnBQQMOp2IT9CHd4unptY8JNk9GwymcXd8Bjt cgz6aR9g4OGQ+oXQPaELA5F2t+/kteeLvOyEWrzqNMPRNwM1XD7F0Kzi18HzCZpn ye3DN+EaOOvM3Hox7cxn/lexuUOHwkESyR5P0USS55kNMcvrIFekCMyS6TPcHG7M 8Q/Ti/6tATVMnGm/7HMjvIOUTssNDReg+wGOW2AnSLINYu0MhwrmDoPSQm6JEgwy 22dLPL9WLEtZlCu1L1DUWhm8LCF0yhCl5ThGMMXkb488Awno6FUZsvegqNixNpZm psSnxTMR1aOX -----END CERTIFICATE-----Generated at Sat Aug 23 13:46:09 2025 by rpki-client