$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer File: d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer (raw, json) Hash identifier: gr9yrqTPS63GAy2Y1VnXg+mGcuaeqjj221mX2s2jgog= Subject key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D4922A3700447F6DBECDD9780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 12:45:22 +0000 Certificate not after: Tue 27 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 22302 IP: 64.22.32.0/19 IP: 64.246.128.0/19 IP: 72.10.192.0/19 IP: 96.43.64.0/20 IP: 2607:f058::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:22:a3:70:04:47:f6:db:ec:dd:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 25 12:45:22 2026 GMT Not After : Jun 27 12:45:22 2028 GMT Subject: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ad:31:e3:c3:9c:70:f9:28:ff:46:d9:50:55: 34:a9:c3:fc:98:0b:0e:28:f2:52:19:01:07:4d:4d: 8d:56:16:9e:4f:17:be:cf:31:b9:64:9b:4e:57:46: ad:c4:8b:c9:6b:29:21:0d:0f:88:79:2c:ba:2a:70: 2d:51:26:e5:9c:a7:38:1b:ee:d9:42:e5:7b:15:d1: 77:66:b0:5c:85:29:98:70:df:4d:2f:af:fd:55:83: 24:04:8d:47:41:8a:68:e4:0a:ac:5d:1b:35:90:c4: c3:83:0c:66:23:79:87:f9:7f:bd:82:ea:39:f3:d9: 08:a2:f2:38:6a:ff:37:3f:65:08:aa:d8:2e:a2:57: 32:43:d7:a2:29:f7:ca:4c:f7:0c:b9:1a:ac:ef:bf: 85:82:fa:dd:36:e9:55:4f:8e:97:46:dd:a0:b1:06: aa:ab:e5:af:03:60:89:7f:02:d8:6a:f2:40:8c:68: 4b:f8:b4:38:53:df:ed:99:44:56:b5:6c:97:f3:0a: a9:2c:e2:1e:03:e3:46:ee:df:7a:77:95:e2:b5:e0: d0:f8:0d:ec:c6:ee:09:bb:ac:b3:fc:29:6a:1c:c8: 46:7c:45:b0:8e:6c:8d:48:e3:eb:91:a8:cd:26:97: 99:d6:da:d2:70:3e:4c:b8:3e:f8:13:9f:87:8b:ec: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.22.32.0/19 64.246.128.0/19 72.10.192.0/19 96.43.64.0/20 IPv6: 2607:f058::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22302 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:30:3c:5d:c4:27:ec:2d:5b:30:35:4c:1d:05:74:19:3b:93: 22:9c:8d:7d:e8:01:4e:89:99:b4:8e:bb:19:ff:29:9d:0e:d6: a2:6a:c0:aa:f4:53:7a:00:4f:7f:49:08:e8:2b:a3:85:e5:e8: bb:ea:10:d7:83:ef:fd:f1:9b:46:a8:8e:f7:c0:2a:ec:a1:ba: e1:e8:27:c7:dc:dc:b9:56:d9:d7:d2:04:6a:9f:ec:93:94:d7: 65:93:26:60:51:bc:b9:b5:72:ee:83:0a:42:15:a9:20:16:ec: 2c:90:01:c9:e3:43:f8:64:a0:71:74:ad:4b:31:5b:2a:a4:92: e8:dc:a3:6e:95:23:b3:80:36:d5:11:66:99:d5:92:6c:e2:aa: 9f:11:b6:6b:ea:47:c3:f5:29:20:a6:e3:5b:f6:7e:84:b3:be: 68:39:d2:40:04:2f:c6:5f:76:b0:de:f2:a0:f0:24:07:39:4f: f0:77:27:1b:a3:5b:f0:04:8f:cf:a4:f4:ac:f6:c5:fe:29:01: 69:0a:2c:01:4b:c7:14:5b:12:a8:6f:79:8e:35:a1:aa:1c:53: 4c:1d:ab:46:45:40:61:2e:f3:9c:4b:c0:07:80:ae:ad:c5:bd: 5b:96:40:d7:09:80:13:9a:84:4e:ed:21:2e:d0:9a:ab:01:17: 44:22:f8:b1 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWE1JIqNwBEf22+zdl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDMyNTEyNDUyMloXDTI4MDYyNzEyNDUyMlowLzEtMCsGA1UEAxMk ZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVjYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg60x48OccPko/0bZUFU0qcP8mAsOKPJSGQEH TU2NVhaeTxe+zzG5ZJtOV0atxIvJaykhDQ+IeSy6KnAtUSblnKc4G+7ZQuV7FdF3 ZrBchSmYcN9NL6/9VYMkBI1HQYpo5AqsXRs1kMTDgwxmI3mH+X+9guo589kIovI4 av83P2UIqtguolcyQ9eiKffKTPcMuRqs77+FgvrdNulVT46XRt2gsQaqq+WvA2CJ fwLYavJAjGhL+LQ4U9/tmURWtWyX8wqpLOIeA+NG7t96d5XiteDQ+A3sxu4Ju6yz /ClqHMhGfEWwjmyNSOPrkajNJpeZ1trScD5MuD74E5+Hi+ythQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFGp3y7uAfa/gwWdD4rDWuAulRTl7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k MWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2QxYjAwNWY1LWEzMTItNGNiNS04 MWQ4LWE1YzBiZWQ1Y2E0ZC9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVk NWNhNGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAVAFiADBAVA9oADBAVICsADBARgK0AwDQQCAAIw BwMFACYH8FgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICVx4wVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWzA8 XcQn7C1bMDVMHQV0GTuTIpyNfegBTomZtI67Gf8pnQ7WomrAqvRTegBPf0kI6Cuj heXou+oQ14Pv/fGbRqiO98Aq7KG64egnx9zcuVbZ19IEap/sk5TXZZMmYFG8ubVy 7oMKQhWpIBbsLJAByeND+GSgcXStSzFbKqSS6NyjbpUjs4A21RFmmdWSbOKqnxG2 a+pHw/UpIKbjW/Z+hLO+aDnSQAQvxl92sN7yoPAkBzlP8HcnG6Nb8ASPz6T0rPbF /ikBaQosAUvHFFsSqG95jjWhqhxTTB2rRkVAYS7znEvAB4CurcW9W5ZA1wmAE5qE Tu0hLtCaqwEXRCL4sQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:14:52 2026 by rpki-client