$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee.cer File: b718aa52-21de-402e-8bcf-bfe1926502ee.cer (raw, json) Hash identifier: 1yd3at7XUaycivvbKMyRNE7nbkWoumRJXCb061vzQCI= Subject key identifier: 0E:1E:2D:73:6C:9D:72:83:29:76:A2:CD:94:A5:8B:E9:73:CD:88:2A Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584ADBF975A7A1237014C9E0894F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/b718aa52-21de-402e-8bcf-bfe1926502ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 15 Aug 2025 00:45:25 +0000 Certificate not after: Thu 18 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 19689 IP: 64.78.240.0/20 IP: 64.119.80.0/20 IP: 208.123.160.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:f9:75:a7:a1:23:70:14:c9:e0:89:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 15 00:45:25 2025 GMT Not After : Nov 18 01:45:25 2027 GMT Subject: CN=b718aa52-21de-402e-8bcf-bfe1926502ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:26:ea:be:ae:9a:28:ab:e1:94:63:60:fe:70: 22:ea:37:7e:4e:fd:e0:86:ee:28:e1:8f:20:f5:9a: f6:11:1a:ba:6a:1f:ec:86:49:02:7a:e0:b3:19:36: c1:2a:2c:4d:79:b8:e0:b4:80:92:ba:e7:f8:4a:07: e0:29:e6:ec:4d:b7:45:64:61:3f:5e:89:03:e4:83: b1:91:a6:fd:84:9b:90:8e:fe:55:35:62:e6:75:c7: f7:fd:da:24:b4:52:92:8e:8e:0d:c5:9a:9c:7b:1f: db:d2:77:fa:5e:8a:0b:8e:97:0d:7e:ec:e0:b3:55: c0:53:34:9a:d1:a4:c4:ed:61:cf:84:2d:1f:d9:40: 04:cf:d6:3d:70:59:2a:3f:64:6c:55:9a:af:1e:65: 87:9b:9f:97:ee:b2:58:87:35:55:d4:a6:db:fe:6f: 79:6e:9c:49:75:de:7c:7c:2f:83:07:6a:b6:2d:a1: 83:ff:2c:d3:71:ae:e0:ef:25:ba:8a:dc:ca:2b:2b: 3f:d6:c4:78:28:98:51:a1:0e:5b:0a:93:dd:5d:cb: 42:be:5b:8f:26:88:df:32:58:a8:97:b5:be:c7:c6: 94:1c:64:68:90:ea:55:f3:fe:ec:67:8a:5a:e9:cb: 3f:fa:cc:a5:99:0c:5e:c5:a8:d7:de:de:97:b4:08: 6b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1E:2D:73:6C:9D:72:83:29:76:A2:CD:94:A5:8B:E9:73:CD:88:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/b718aa52-21de-402e-8bcf-bfe1926502ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.78.240.0/20 64.119.80.0/20 208.123.160.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19689 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fd:86:f1:6a:80:1d:b1:5f:68:ad:1f:59:51:6e:d9:4c:1a: 6c:2a:9b:a5:37:12:27:03:f3:a7:08:00:93:14:8e:99:d2:2e: 4d:9e:ed:0c:43:47:61:6e:c1:ce:a6:a2:66:b8:ed:c3:11:fe: ce:e4:29:ce:0d:39:df:31:fb:01:80:9b:00:0b:b5:f2:50:97: 52:b0:ed:e8:26:bd:52:0f:28:78:29:b9:c0:86:c3:bf:ae:51: bb:88:03:1b:7d:c3:cd:5e:a2:fc:e8:94:5e:ae:80:3b:28:36: 13:99:cb:29:a3:a9:1e:a0:fc:d8:13:5c:c7:44:b4:3b:51:74: a1:1b:8d:b2:21:b4:7f:ec:c3:88:76:f8:33:0b:ea:2e:ed:8e: 88:63:ea:61:cf:fa:e4:9a:ce:7b:38:35:f1:c4:47:53:16:c8: 05:75:29:81:16:f3:05:69:8b:a2:6f:42:f8:d1:89:a6:53:bb: 96:af:e7:d4:5c:a8:71:a3:03:80:15:99:9c:e4:bc:6f:1d:ce: f4:78:6c:76:a6:71:14:2b:a7:15:8f:f3:a7:41:25:35:89:ce: 5c:e2:21:a5:8c:62:0a:7a:7c:19:60:8c:06:2a:5b:c0:77:af: 6a:26:a2:a4:01:f4:19:e0:65:43:a9:ed:86:86:a0:90:ef:31: 8a:2e:8b:74 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWErb+XWnoSNwFMngiU8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDgxNTAwNDUyNVoXDTI3MTExODAxNDUyNVowLzEtMCsGA1UEAxMk YjcxOGFhNTItMjFkZS00MDJlLThiY2YtYmZlMTkyNjUwMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCbqvq6aKKvhlGNg/nAi6jd+Tv3ghu4o4Y8g 9Zr2ERq6ah/shkkCeuCzGTbBKixNebjgtICSuuf4SgfgKebsTbdFZGE/XokD5IOx kab9hJuQjv5VNWLmdcf3/doktFKSjo4NxZqcex/b0nf6XooLjpcNfuzgs1XAUzSa 0aTE7WHPhC0f2UAEz9Y9cFkqP2RsVZqvHmWHm5+X7rJYhzVV1Kbb/m95bpxJdd58 fC+DB2q2LaGD/yzTca7g7yW6itzKKys/1sR4KJhRoQ5bCpPdXctCvluPJojfMlio l7W+x8aUHGRokOpV8/7sZ4pa6cs/+sylmQxexajX3t6XtAhr0QIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFA4eLXNsnXKDKXaizZSli+lzzYgqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i NzE4YWE1Mi0yMWRlLTQwMmUtOGJjZi1iZmUxOTI2NTAyZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2I3MThhYTUyLTIxZGUtNDAyZS04 YmNmLWJmZTE5MjY1MDJlZS9iNzE4YWE1Mi0yMWRlLTQwMmUtOGJjZi1iZmUxOTI2 NTAyZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBARATvADBARAd1ADBATQe6AwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICTOkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAM/2G8WqAHbFfaK0fWVFu2UwabCqbpTcS JwPzpwgAkxSOmdIuTZ7tDENHYW7BzqaiZrjtwxH+zuQpzg053zH7AYCbAAu18lCX UrDt6Ca9Ug8oeCm5wIbDv65Ru4gDG33DzV6i/OiUXq6AOyg2E5nLKaOpHqD82BNc x0S0O1F0oRuNsiG0f+zDiHb4MwvqLu2OiGPqYc/65JrOezg18cRHUxbIBXUpgRbz BWmLom9C+NGJplO7lq/n1FyocaMDgBWZnOS8bx3O9HhsdqZxFCunFY/zp0ElNYnO XOIhpYxiCnp8GWCMBipbwHevaiaipAH0GeBlQ6nthoagkO8xii6LdA== -----END CERTIFICATE-----Generated at Sat Aug 23 16:54:19 2025 by rpki-client