$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer File: 6efc8ae9-a0c6-428a-8a95-038468028928.cer (raw, json) Hash identifier: WVqMPX4gBy1bsY0Gn9LJKLesFZyWbum8E80y4rId+34= Subject key identifier: AB:3B:7F:A9:50:69:94:B8:3E:D4:04:B9:62:7A:B3:FD:4A:D6:43:78 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584AD92EC5402F5E541753E40FA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Aug 2025 00:45:24 +0000 Certificate not after: Wed 17 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 917 AS: 969 AS: 36260 IP: 23.143.176.0/24 IP: 64.234.232.0/22 IP: 65.97.52.0/22 IP: 170.39.224.0/22 IP: 199.119.64.0/23 IP: 209.209.56.0/22 IP: 2606:7140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:2e:c5:40:2f:5e:54:17:53:e4:0f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 14 00:45:24 2025 GMT Not After : Nov 17 01:45:24 2027 GMT Subject: CN=6efc8ae9-a0c6-428a-8a95-038468028928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ca:ad:ae:16:6c:16:38:b1:13:f7:bc:4c:f7: c3:8b:fa:ac:98:40:ca:ce:01:5d:e4:48:bf:4f:d9: fb:66:05:c0:5b:21:37:66:89:16:2e:0f:0b:23:2b: 11:77:ab:e2:1c:77:0f:4e:57:07:be:a7:b6:c2:d0: 33:4d:c0:9e:86:32:d2:33:01:6b:db:e4:9a:84:42: 07:ea:50:56:be:90:1c:80:cd:4c:b7:6d:83:4a:d4: f2:61:86:88:a2:21:b6:db:40:9a:6f:30:9a:8a:4f: 84:74:13:d1:0b:1f:82:61:09:76:17:c4:dc:ac:cb: ac:6d:49:e1:87:5e:c1:0a:23:e9:b5:8e:9b:87:e6: 50:60:4d:65:f2:a5:d4:50:78:40:8c:c7:33:a0:a4: f9:1b:71:37:e2:a9:9c:8f:81:cb:ce:9a:2a:4f:df: a9:1b:be:05:28:ec:7f:c4:51:ba:55:f9:d4:a4:13: 35:f0:37:27:9a:a9:76:ea:a6:e3:da:bf:16:a3:ff: bc:fe:88:bf:8f:42:dc:a7:d0:f5:c9:ca:7d:ff:69: e0:45:ba:fa:a5:54:91:2e:bb:43:3d:c0:d7:ef:32: 50:66:46:e5:4c:d6:50:34:69:40:b3:a7:74:f3:44: dc:6d:94:71:b3:13:24:05:fe:4e:f6:2c:db:a9:c3: ee:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3B:7F:A9:50:69:94:B8:3E:D4:04:B9:62:7A:B3:FD:4A:D6:43:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.143.176.0/24 64.234.232.0/22 65.97.52.0/22 170.39.224.0/22 199.119.64.0/23 209.209.56.0/22 IPv6: 2606:7140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 917 969 36260 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:72:17:38:92:2b:7c:73:1f:55:59:91:b9:c5:86:1f:05:54: 78:04:82:38:de:32:a3:3f:5a:05:ca:4c:b4:e9:7b:81:c2:ce: 8b:d6:e6:eb:66:2b:d7:e9:22:a7:73:9f:3e:be:af:fb:55:40: b8:9e:59:87:da:14:64:be:86:40:86:6e:30:f7:a7:b6:d0:e8: f1:7b:6e:7d:e0:93:cd:6f:cf:35:4c:8a:48:02:56:af:35:32: 5e:89:ec:0c:41:b3:c5:36:03:db:cd:e5:f8:cf:d6:3b:19:87: a2:4a:86:5a:3c:87:be:ba:ea:11:ba:81:95:74:c8:cb:6c:24: 70:d8:9d:78:87:7e:a4:63:d3:9e:d9:ba:e5:2c:9a:2e:c9:91: 05:4d:6a:e4:50:12:72:1a:e4:ab:ad:81:a2:7f:4d:b8:df:8b: 79:5c:57:50:b6:ae:17:c6:20:ca:21:75:1e:0b:3b:4e:63:5c: 6b:1a:2b:eb:f8:ae:4f:72:86:1f:fb:4b:91:0f:d0:f1:ea:e9: b7:26:2d:e2:22:fc:54:00:26:26:c3:ee:ab:5c:95:f8:12:92: 6c:90:d7:8e:08:26:d3:bc:4f:ff:28:d0:4a:6b:58:0d:d3:63: ee:93:6d:72:6b:83:48:e7:57:71:c6:04:77:2a:f1:55:b1:32: 1d:c6:da:b3 -----BEGIN CERTIFICATE----- MIIHPjCCBiagAwIBAgIUAQ0Mn0MoWErZLsVAL15UF1PkD6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDgxNDAwNDUyNFoXDTI3MTExNzAxNDUyNFowLzEtMCsGA1UEAxMk NmVmYzhhZTktYTBjNi00MjhhLThhOTUtMDM4NDY4MDI4OTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsqtrhZsFjixE/e8TPfDi/qsmEDKzgFd5Ei/ T9n7ZgXAWyE3ZokWLg8LIysRd6viHHcPTlcHvqe2wtAzTcCehjLSMwFr2+SahEIH 6lBWvpAcgM1Mt22DStTyYYaIoiG220CabzCaik+EdBPRCx+CYQl2F8TcrMusbUnh h17BCiPptY6bh+ZQYE1l8qXUUHhAjMczoKT5G3E34qmcj4HLzpoqT9+pG74FKOx/ xFG6VfnUpBM18Dcnmql26qbj2r8Wo/+8/oi/j0Lcp9D1ycp9/2ngRbr6pVSRLrtD PcDX7zJQZkblTNZQNGlAs6d080TcbZRxsxMkBf5O9izbqcPuhQIDAQABo4IEUDCC BEwwHQYDVR0OBBYEFKs7f6lQaZS4PtQEuWJ6s/1K1kN4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 ZWZjOGFlOS1hMGM2LTQyOGEtOGE5NS0wMzg0NjgwMjg5MjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZlZmM4YWU5LWEwYzYtNDI4YS04 YTk1LTAzODQ2ODAyODkyOC82ZWZjOGFlOS1hMGM2LTQyOGEtOGE5NS0wMzg0Njgw Mjg5MjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAAXj7ADBAJA6ugDBAJBYTQDBAKqJ+ADBAHHd0AD BALR0TgwDQQCAAIwBwMFACYGcUAwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICA5UC AgPJAgMAjaQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAanIXOJIrfHMfVVmRucWGHwVUeASCON4yoz9aBcpM tOl7gcLOi9bm62Yr1+kip3OfPr6v+1VAuJ5Zh9oUZL6GQIZuMPenttDo8XtufeCT zW/PNUyKSAJWrzUyXonsDEGzxTYD283l+M/WOxmHokqGWjyHvrrqEbqBlXTIy2wk cNideId+pGPTntm65SyaLsmRBU1q5FASchrkq62Bon9NuN+LeVxXULauF8YgyiF1 Hgs7TmNcaxor6/iuT3KGH/tLkQ/Q8erptyYt4iL8VAAmJsPuq1yV+BKSbJDXjggm 07xP/yjQSmtYDdNj7pNtcmuDSOdXccYEdyrxVbEyHcbasw== -----END CERTIFICATE-----Generated at Sat Aug 23 16:29:06 2025 by rpki-client