$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer File: 529d57aa-cd56-41d8-b3ad-b413b968b610.cer (raw, json) Hash identifier: OHTBJBtvk0OSuofx3enVPOZbgOgkcFMF/OiTwAH0vNM= Subject key identifier: 2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B80AFCD355DB4E6B86DA9BB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 00:45:23 +0000 Certificate not after: Sun 16 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 22878 IP: 68.171.208.0/20 IP: 162.247.76.0/22 IP: 173.230.240.0/20 IP: 192.64.32.0/22 IP: 192.197.207.0/24 IP: 207.45.176.0/20 IP: 2607:f548::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:af:cd:35:5d:b4:e6:b8:6d:a9:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 13 00:45:23 2025 GMT Not After : Jan 16 01:45:23 2028 GMT Subject: CN=529d57aa-cd56-41d8-b3ad-b413b968b610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:7b:ed:38:2e:85:97:08:0b:bc:22:60:5f: 45:32:e6:09:9e:15:03:c6:ca:78:30:20:98:b3:b5: af:69:36:c7:3d:7a:bf:e2:fc:10:df:98:80:28:ea: 87:dd:a4:ae:d3:57:39:05:f0:a3:65:9e:8d:d0:75: a5:74:49:15:ce:07:fe:96:26:12:e9:1a:e0:b3:13: 0a:6a:2a:be:91:97:d3:2f:92:36:b9:46:0c:11:80: 93:13:11:22:9f:ab:26:86:02:47:56:6c:a1:93:e7: 12:58:63:89:20:75:02:ea:a1:65:d2:d7:80:32:33: 03:ba:b4:75:71:b3:85:ac:d3:1c:a3:4c:24:1d:1f: d4:ca:1d:7f:b8:d4:24:b0:ea:e4:b5:2d:ea:90:5c: f4:e1:24:ca:6a:b9:fa:6a:b4:91:ac:85:7f:c9:a6: 8c:d4:43:71:9f:63:68:c8:7a:ee:d3:fc:2e:70:17: 7e:ac:63:d6:b0:60:3f:91:f0:b7:4d:c6:f7:af:31: fa:8b:cb:c1:78:9a:fe:6a:4f:94:72:46:f0:0a:06: e8:07:9a:46:8c:13:0c:9d:92:db:b5:6a:f3:ec:67: da:43:41:36:7a:27:ff:be:96:18:ac:e0:ea:b8:fe: 65:b9:c2:59:4d:b4:26:d6:5c:0f:8c:c3:ae:4b:f6: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 68.171.208.0/20 162.247.76.0/22 173.230.240.0/20 192.64.32.0/22 192.197.207.0/24 207.45.176.0/20 IPv6: 2607:f548::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22878 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:80:75:11:7f:a5:90:f8:e1:16:17:3e:22:de:3d:26:01:50: 99:31:f4:37:cd:f3:a2:44:75:a7:13:16:7b:1f:57:8d:6f:79: c2:d8:ee:a3:26:e1:b9:b7:23:9d:45:90:ee:71:c9:1a:65:f8: 96:a5:dc:84:8e:d8:f7:21:cf:e7:8b:23:e6:2a:2d:3a:26:6a: 2a:6e:dd:d2:cd:34:45:58:d8:b3:ba:fb:f3:25:e1:70:ce:3d: 2e:b8:f8:8e:ad:d6:ec:e4:b2:f4:cf:0f:ab:b9:f1:fd:91:73: 62:d0:cf:8f:31:41:9c:c4:64:3a:7c:5a:98:a9:c7:44:31:c3: 80:26:17:cd:aa:24:28:1a:53:18:fd:bd:ba:03:64:b4:75:cb: 2e:c2:82:6d:30:d7:60:98:e4:d4:b7:6a:ea:d4:8b:3a:45:2d: 35:49:8b:2e:4c:90:dd:0d:da:7c:61:1a:c6:3c:8a:cc:a2:f0: 0c:8b:e6:3d:e0:f3:0d:d4:7e:2b:f7:ab:a2:ba:ec:c5:38:16: 5e:8e:06:b3:c6:26:ad:5d:1d:7f:47:15:33:53:ff:e0:44:48: ec:27:50:ff:b9:cb:a8:cf:77:e2:c5:a7:62:c0:1d:94:74:48: fd:4d:60:89:68:42:dc:a1:69:b1:a6:32:3e:8d:47:6d:46:81: aa:83:d1:74 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEuAr801XbTmuG2pu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAxMzAwNDUyM1oXDTI4MDExNjAxNDUyM1owLzEtMCsGA1UEAxMk NTI5ZDU3YWEtY2Q1Ni00MWQ4LWIzYWQtYjQxM2I5NjhiNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE177TguhZcIC7wiYF9FMuYJnhUDxsp4MCCY s7WvaTbHPXq/4vwQ35iAKOqH3aSu01c5BfCjZZ6N0HWldEkVzgf+liYS6RrgsxMK aiq+kZfTL5I2uUYMEYCTExEin6smhgJHVmyhk+cSWGOJIHUC6qFl0teAMjMDurR1 cbOFrNMco0wkHR/Uyh1/uNQksOrktS3qkFz04STKarn6arSRrIV/yaaM1ENxn2No yHru0/wucBd+rGPWsGA/kfC3Tcb3rzH6i8vBeJr+ak+UckbwCgboB5pGjBMMnZLb tWrz7GfaQ0E2eif/vpYYrODquP5lucJZTbQm1lwPjMOuS/YSbQIDAQABo4IERzCC BEMwHQYDVR0OBBYEFComSDwhra5TajK8ILOhZEYsXIRUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81 MjlkNTdhYS1jZDU2LTQxZDgtYjNhZC1iNDEzYjk2OGI2MTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzUyOWQ1N2FhLWNkNTYtNDFkOC1i M2FkLWI0MTNiOTY4YjYxMC81MjlkNTdhYS1jZDU2LTQxZDgtYjNhZC1iNDEzYjk2 OGI2MTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAREq9ADBAKi90wDBASt5vADBALAQCADBADAxc8D BATPLbAwDQQCAAIwBwMFACYH9UgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICWV4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgIB1EX+lkPjhFhc+It49JgFQmTH0N83zokR1pxMWex9XjW95wtju oybhubcjnUWQ7nHJGmX4lqXchI7Y9yHP54sj5iotOiZqKm7d0s00RVjYs7r78yXh cM49Lrj4jq3W7OSy9M8Pq7nx/ZFzYtDPjzFBnMRkOnxamKnHRDHDgCYXzaokKBpT GP29ugNktHXLLsKCbTDXYJjk1Ldq6tSLOkUtNUmLLkyQ3Q3afGEaxjyKzKLwDIvm PeDzDdR+K/erorrsxTgWXo4Gs8YmrV0df0cVM1P/4ERI7CdQ/7nLqM934sWnYsAd lHRI/U1giWhC3KFpsaYyPo1HbUaBqoPRdA== -----END CERTIFICATE-----Generated at Sun Oct 19 12:35:24 2025 by rpki-client