$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer File: 6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer (raw, json) Hash identifier: eXAoOFCNLoeKhnn9pZlfuWTBoA2LgAma5t7pZhZoyVs= Subject key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584FA9E3E91236CC073E98D0B340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Oct 2026 14:06:16 +0000 Certificate not after: Sat 28 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 6253 IP: 48.0.0.0 -- 48.43.255.255 IP: 48.48.0.0 -- 48.79.255.255 IP: 48.96.0.0/14 IP: 48.104.0.0 -- 48.127.255.255 IP: 161.151.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a9:e3:e9:12:36:cc:07:3e:98:d0:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 29 14:06:16 2026 GMT Not After : Oct 28 08:45:11 2028 GMT Subject: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:04:31:0b:90:01:d5:14:8f:bf:50:c4:16:b8: 78:cd:d9:3e:4f:e2:2b:75:a0:00:89:e7:a7:b2:13: 19:8e:0a:a4:b6:6a:fe:f2:57:ae:8d:b3:2a:48:52: b9:46:37:59:75:4d:b3:b1:53:07:42:3b:e8:18:8c: 13:8d:56:87:ac:58:fe:9d:cb:f8:35:26:57:60:ac: 7f:9c:27:f9:5b:7d:f4:20:f1:a6:60:91:2b:0a:0e: e8:1c:dd:84:d8:9a:f6:31:a9:df:b0:9c:5f:73:dd: 4d:d4:82:fd:22:ee:94:eb:1c:57:e2:d8:30:ee:d6: 6f:ed:b9:84:dd:78:21:45:78:fe:4c:c0:81:6b:be: 3e:bd:45:e9:f4:4e:96:37:21:45:e3:f6:b7:75:b1: 61:18:8f:ad:04:19:3e:6b:dc:b3:8a:55:a2:5c:f4: 19:3b:0b:a3:10:5d:4f:89:b4:70:e2:11:09:90:68: a9:38:43:87:82:4d:ed:9c:5e:18:9b:90:a0:b1:75: 0a:c4:80:37:c4:db:91:32:7c:74:25:b8:5d:09:d8: bc:6c:6b:f1:67:95:e6:2a:44:77:d7:8c:f0:3a:72: 7f:d3:64:e3:52:5e:ca:86:ac:bf:aa:5f:75:37:7e: b4:08:99:ee:d8:5d:1b:62:86:8b:fb:5b:05:d9:55: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 48.0.0.0-48.43.255.255 48.48.0.0-48.79.255.255 48.96.0.0/14 48.104.0.0-48.127.255.255 161.151.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6253 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:48:79:1a:d2:23:96:ff:e1:0d:25:4d:eb:4b:f2:90:57:20: 1a:24:25:bb:58:4e:b8:24:bb:9c:9b:e0:3f:ef:85:1d:1c:11: f3:2e:65:99:0a:d7:ef:80:43:90:7b:32:ab:27:e9:09:2f:5a: a8:60:c1:51:b9:6c:7a:3b:aa:3f:33:0a:4e:64:fc:c1:59:e5: 24:a9:8f:74:89:16:6b:1a:90:9a:80:c2:bb:1a:1a:17:ec:39: fd:8a:7f:c9:29:8a:b0:c1:b8:35:41:e7:8b:24:48:0c:79:e9: 61:7c:72:ca:df:7b:b6:46:7f:34:fe:8c:9d:10:f6:ce:bb:31: 7c:b1:d1:49:31:fa:ad:ff:d7:24:5d:84:b0:89:84:ab:ae:52: 0d:03:ff:9a:ac:54:2e:10:f9:83:bf:e8:35:73:51:0c:fe:b2: 7b:3b:35:36:0c:2e:e8:09:86:a2:bb:1b:98:c0:bb:75:3c:1a: 04:a5:cb:13:86:9c:47:e4:0d:2f:45:99:02:d7:ff:4d:11:2f: ac:81:d7:73:d8:82:f4:91:61:72:d4:b5:fe:fa:43:c8:5b:05: 39:bf:79:6f:04:b0:19:b8:8d:1c:ff:b4:1f:66:f2:80:2f:56: 59:de:8a:54:26:9c:02:6f:08:04:a9:48:cc:c1:e5:c3:5a:96: fd:b0:67:90 -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWE+p4+kSNswHPpjQs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MTAyOTE0MDYxNloXDTI4MTAyODA4NDUxMVowLzEtMCsGA1UEAxMk NmMyYjY0NzAtOTRlNC00Zjc3LTlkNDgtMTNkNWFhYTJiM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAQxC5AB1RSPv1DEFrh4zdk+T+IrdaAAieen shMZjgqktmr+8leujbMqSFK5RjdZdU2zsVMHQjvoGIwTjVaHrFj+ncv4NSZXYKx/ nCf5W330IPGmYJErCg7oHN2E2Jr2ManfsJxfc91N1IL9Iu6U6xxX4tgw7tZv7bmE 3XghRXj+TMCBa74+vUXp9E6WNyFF4/a3dbFhGI+tBBk+a9yzilWiXPQZOwujEF1P ibRw4hEJkGipOEOHgk3tnF4Ym5CgsXUKxIA3xNuRMnx0JbhdCdi8bGvxZ5XmKkR3 14zwOnJ/02TjUl7Khqy/ql91N360CJnu2F0bYoaL+1sF2VWs2wIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFHAftb/Qv6trssT32Dce7KNZwW73MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFhMmIzYzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZjMmI2NDcwLTk0ZTQtNGY3Ny05 ZDQ4LTEzZDVhYWEyYjNjMi82YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFh MmIzYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MDMEAgABMC0wCQMCBDADAwIwKDAKAwMEMDADAwQwQAMDAjBgMAoD AwMwaAMDBzAAAwMAoZcwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICGG0wVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAREh5GtIjlv/hDSVN60vykFcgGiQlu1hOuCS7nJvgP++FHRwR8y5lmQrX74BD kHsyqyfpCS9aqGDBUblsejuqPzMKTmT8wVnlJKmPdIkWaxqQmoDCuxoaF+w5/Yp/ ySmKsMG4NUHniyRIDHnpYXxyyt97tkZ/NP6MnRD2zrsxfLHRSTH6rf/XJF2EsImE q65SDQP/mqxULhD5g7/oNXNRDP6yezs1Ngwu6AmGorsbmMC7dTwaBKXLE4acR+QN L0WZAtf/TREvrIHXc9iC9JFhctS1/vpDyFsFOb95bwSwGbiNHP+0H2bygC9WWd6K VCacAm8IBKlIzMHlw1qW/bBnkA== -----END CERTIFICATE-----Generated at Sun Nov 15 12:19:37 2026 by rpki-client