$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer File: 6e08e0de-ab5e-4883-8f09-7d9570f20186.cer (raw, json) Hash identifier: VrY2sTzR0alvZy/zFixnfav4QKXBojUj4faxhhyWyXw= Subject key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584AC2D94A77997325A8BCB2C4C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Aug 2025 00:45:23 +0000 Certificate not after: Tue 09 Nov 2027 01:45:23 +0000 Subordinate resources: AS: 399883 IP: 104.247.108.0/22 IP: 2602:fc06::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:d9:4a:77:99:73:25:a8:bc:b2:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 6 00:45:23 2025 GMT Not After : Nov 9 01:45:23 2027 GMT Subject: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a2:34:67:a0:c7:ba:64:36:4c:b1:83:25:f4: b0:08:20:af:90:f7:8c:a3:2c:38:8f:35:2c:30:11: 0e:6a:8f:a5:79:53:e8:c1:9e:a5:93:be:fb:5c:3e: ce:03:4f:90:68:26:c0:54:30:97:85:d9:b9:98:59: 4c:40:fa:18:1a:86:b4:85:95:44:68:38:03:aa:51: 2f:16:dc:7e:46:1d:74:92:b3:38:a0:52:4c:64:14: 00:e8:59:50:0a:d0:d0:9a:a4:99:a3:ff:f6:5e:38: 31:a4:3f:7e:d1:6e:5f:0d:8b:ec:f9:da:e8:ef:49: 6a:6b:55:50:1d:50:88:26:31:e4:7b:57:3f:dd:ff: a4:19:88:49:a5:91:8a:cb:0b:89:3b:30:e4:52:45: d6:d9:b2:e5:0e:f7:e1:44:98:a1:6f:2b:7f:1f:92: e0:8a:13:45:7e:ca:a8:36:88:ad:7e:a2:c3:27:3f: 03:da:e1:a0:19:09:19:d1:ff:f1:7e:5c:9c:49:68: 50:ac:ec:bc:a5:29:d1:0b:7a:14:b0:67:42:8a:ac: 9d:0b:a6:fd:8b:91:b0:a1:f4:38:78:09:51:e7:ea: 5c:e1:57:59:ac:84:64:1b:de:b7:fd:6e:02:4e:d1: 34:da:fc:f6:0d:29:4c:29:c4:2d:08:96:e3:45:b5: ab:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.247.108.0/22 IPv6: 2602:fc06::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399883 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:65:5b:4d:bb:82:68:8d:31:df:7c:f6:8c:8a:a3:bb:4e:9b: 8e:ad:64:23:57:2b:36:56:df:22:6c:ef:87:6d:12:f2:bb:d8: 66:4c:7d:f9:07:21:85:88:fc:9c:d1:9d:ef:d7:6f:d1:18:6d: 73:f0:ce:5f:11:7e:32:77:ad:6b:08:4f:64:20:d4:48:52:d9: 82:6e:6a:c7:8f:34:f7:3b:8c:96:6e:95:e6:44:2e:f2:a3:82: 90:bb:74:33:64:d2:ef:a4:d3:66:9f:2b:23:65:5d:7d:45:ca: 96:9a:8e:e2:ff:0e:1a:ac:94:b0:f4:17:32:ca:cb:b1:9e:2d: bf:d0:8c:69:9e:08:1d:5d:b2:47:ec:60:f5:46:fd:8a:d2:a6: 30:3f:dc:99:47:a5:e3:88:88:64:ab:be:56:e1:4b:85:af:c7: 70:28:a9:44:d4:78:eb:48:b1:3c:b6:56:c1:5e:16:4a:74:33: 1a:a2:2b:3f:59:e9:4c:ff:0b:4f:dc:df:c6:2a:5a:9e:11:ab: 69:1e:48:a2:ba:99:b2:c1:75:9a:c0:16:b1:04:e4:99:76:3b: 00:46:8c:3f:6d:23:b2:ad:3e:e7:ac:5e:5e:b7:b3:d2:1b:83: 6a:1f:ce:61:94:d7:2a:af:37:03:88:de:82:bd:27:20:c0:b1: 87:42:ef:01 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErC2Up3mXMlqLyyxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDgwNjAwNDUyM1oXDTI3MTEwOTAxNDUyM1owLzEtMCsGA1UEAxMk NmUwOGUwZGUtYWI1ZS00ODgzLThmMDktN2Q5NTcwZjIwMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6I0Z6DHumQ2TLGDJfSwCCCvkPeMoyw4jzUs MBEOao+leVPowZ6lk777XD7OA0+QaCbAVDCXhdm5mFlMQPoYGoa0hZVEaDgDqlEv Ftx+Rh10krM4oFJMZBQA6FlQCtDQmqSZo//2XjgxpD9+0W5fDYvs+dro70lqa1VQ HVCIJjHke1c/3f+kGYhJpZGKywuJOzDkUkXW2bLlDvfhRJihbyt/H5LgihNFfsqo NoitfqLDJz8D2uGgGQkZ0f/xflycSWhQrOy8pSnRC3oUsGdCiqydC6b9i5GwofQ4 eAlR5+pc4VdZrIRkG963/W4CTtE02vz2DSlMKcQtCJbjRbWrOwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOtooKWlMmHzjLOQPg9H6kkvs4ZZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 ZTA4ZTBkZS1hYjVlLTQ4ODMtOGYwOS03ZDk1NzBmMjAxODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZlMDhlMGRlLWFiNWUtNDg4My04 ZjA5LTdkOTU3MGYyMDE4Ni82ZTA4ZTBkZS1hYjVlLTQ4ODMtOGYwOS03ZDk1NzBm MjAxODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAJo92wwDgQCAAIwCAMGBCYC/AYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYaCzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChZVtNu4JojTHffPaMiqO7TpuO rWQjVys2Vt8ibO+HbRLyu9hmTH35ByGFiPyc0Z3v12/RGG1z8M5fEX4yd61rCE9k INRIUtmCbmrHjzT3O4yWbpXmRC7yo4KQu3QzZNLvpNNmnysjZV19RcqWmo7i/w4a rJSw9Bcyysuxni2/0IxpnggdXbJH7GD1Rv2K0qYwP9yZR6XjiIhkq75W4UuFr8dw KKlE1HjrSLE8tlbBXhZKdDMaois/WelM/wtP3N/GKlqeEatpHkiiupmywXWawBax BOSZdjsARow/bSOyrT7nrF5et7PSG4NqH85hlNcqrzcDiN6CvScgwLGHQu8B -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:25 2025 by rpki-client