$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3.cer File: cf146642-7b71-41f6-b82f-62c0fe1634f3.cer (raw, json) Hash identifier: lhIZ+KNfBVbg2yciACcJb7vaooCMYrBf5z6mzZ2jZ98= Subject key identifier: B6:0E:67:F6:4E:FC:CD:54:0E:2C:92:79:62:68:F0:2B:C5:D0:BE:54 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584B7B1A6D3C9A82CE9614EF3C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3/cf146642-7b71-41f6-b82f-62c0fe1634f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 11 Oct 2025 00:45:22 +0000 Certificate not after: Fri 14 Jan 2028 01:45:22 +0000 Subordinate resources: IP: 192.135.199.0/24 IP: 199.10.105.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:1a:6d:3c:9a:82:ce:96:14:ef:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 11 00:45:22 2025 GMT Not After : Jan 14 01:45:22 2028 GMT Subject: CN=cf146642-7b71-41f6-b82f-62c0fe1634f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:7f:47:5b:15:10:7c:62:da:f5:11:32:fa: a4:c1:9c:51:5f:e0:29:2d:5d:e3:52:cb:a6:91:06: 30:c0:d0:ce:3e:a0:c0:dc:21:04:16:77:7c:f8:4c: 53:f9:22:c2:5c:ce:8d:11:2c:da:0a:84:a3:a1:00: 3f:46:cc:04:34:25:b2:fc:17:81:7a:59:58:36:2f: b8:ba:54:f5:c5:c6:f6:ad:5c:62:c9:b1:ae:9d:3f: c7:99:6b:5d:36:0c:82:fc:36:b1:07:f7:1d:4d:c5: fb:ac:15:21:d3:54:43:aa:cb:91:e3:d0:68:bc:a6: f0:aa:9d:99:38:27:2c:34:27:bc:bd:c2:50:6a:34: bc:0d:99:b4:be:21:04:c0:e6:e5:93:fc:5f:80:71: ec:43:7e:36:d1:c0:68:fe:02:f0:ba:8b:55:da:47: 95:18:9d:67:4b:c4:a7:ad:41:3e:90:b5:2c:5b:bb: 6a:f3:1b:e2:45:64:d9:1f:32:f0:d7:b6:7b:5b:d5: ed:99:7d:30:38:a7:08:8a:90:56:62:68:d8:ab:7c: fb:60:5a:f1:4d:53:15:e0:02:9c:bf:51:9d:6e:ab: 83:52:76:d0:a9:af:1c:ad:cf:d6:40:36:17:3e:20: 07:15:62:f0:3b:e4:ed:52:59:c3:69:aa:6c:fc:b4: 1c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0E:67:F6:4E:FC:CD:54:0E:2C:92:79:62:68:F0:2B:C5:D0:BE:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3/cf146642-7b71-41f6-b82f-62c0fe1634f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.135.199.0/24 199.10.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b8:18:90:42:6c:05:0f:5d:82:f1:18:3d:3e:fa:c2:2e:d4: 00:3a:09:b4:ee:ba:9f:65:91:f8:c8:8c:17:93:9a:e7:6e:7c: 22:73:47:82:b5:dc:fe:a9:61:71:97:4e:b9:21:0f:45:77:9f: a2:df:f3:83:04:c0:c8:e2:15:ef:fe:81:d1:8a:88:8b:7e:0f: 82:c6:5c:e5:5d:4c:b2:e6:bb:3e:02:b3:0d:8c:54:3d:13:ba: fc:0f:10:39:58:92:7b:25:8f:b8:91:db:0f:1f:37:1a:36:ed: bd:cd:9d:dd:75:4b:d4:4b:09:35:14:99:19:c3:f5:44:bd:c7: 2c:a3:27:ae:3f:7f:4e:95:bd:e7:a6:fd:2f:3e:a8:b0:1c:2a: 3e:61:cf:b5:0f:5c:d7:c4:03:d9:b0:48:aa:98:17:05:de:6f: 0f:6e:c6:b4:da:34:8d:84:19:66:e5:cf:a4:62:5f:6a:e2:15: ed:0b:2a:f3:f1:60:1f:ba:d7:cd:71:ab:03:69:c8:8d:3c:d7: 10:01:f6:67:53:7c:ee:de:cb:00:6d:0c:54:f6:d5:ad:c2:4c: 35:0f:db:0d:a4:7f:1b:0b:b3:f0:d7:4e:4e:38:ce:2b:36:c5: 29:5b:ab:d8:01:51:d8:19:a9:f1:72:2f:b7:3c:55:b4:b3:05: b9:c7:e2:4b -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEt7Gm08moLOlhTvPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MTAxMTAwNDUyMloXDTI4MDExNDAxNDUyMlowLzEtMCsGA1UEAxMk Y2YxNDY2NDItN2I3MS00MWY2LWI4MmYtNjJjMGZlMTYzNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofl/R1sVEHxi2vURMvqkwZxRX+ApLV3jUsum kQYwwNDOPqDA3CEEFnd8+ExT+SLCXM6NESzaCoSjoQA/RswENCWy/BeBellYNi+4 ulT1xcb2rVxiybGunT/HmWtdNgyC/DaxB/cdTcX7rBUh01RDqsuR49BovKbwqp2Z OCcsNCe8vcJQajS8DZm0viEEwOblk/xfgHHsQ3420cBo/gLwuotV2keVGJ1nS8Sn rUE+kLUsW7tq8xviRWTZHzLw17Z7W9XtmX0wOKcIipBWYmjYq3z7YFrxTVMV4AKc v1GdbquDUnbQqa8crc/WQDYXPiAHFWLwO+TtUlnDaaps/LQc9wIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFLYOZ/ZO/M1UDiySeWJo8CvF0L5UMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j ZjE0NjY0Mi03YjcxLTQxZjYtYjgyZi02MmMwZmUxNjM0ZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2NmMTQ2NjQyLTdiNzEtNDFmNi1i ODJmLTYyYzBmZTE2MzRmMy9jZjE0NjY0Mi03YjcxLTQxZjYtYjgyZi02MmMwZmUx NjM0ZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAh8cDBADHCmkwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKLgYkEJsBQ9d gvEYPT76wi7UADoJtO66n2WR+MiMF5Oa5258InNHgrXc/qlhcZdOuSEPRXefot/z gwTAyOIV7/6B0YqIi34PgsZc5V1Msua7PgKzDYxUPRO6/A8QOViSeyWPuJHbDx83 Gjbtvc2d3XVL1EsJNRSZGcP1RL3HLKMnrj9/TpW956b9Lz6osBwqPmHPtQ9c18QD 2bBIqpgXBd5vD27GtNo0jYQZZuXPpGJfauIV7Qsq8/FgH7rXzXGrA2nIjTzXEAH2 Z1N87t7LAG0MVPbVrcJMNQ/bDaR/Gwuz8NdOTjjOKzbFKVur2AFR2Bmp8XIvtzxV tLMFucfiSw== -----END CERTIFICATE-----Generated at Sun Oct 19 12:33:37 2025 by rpki-client