$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer File: d25f3fa9-8b52-4f17-8aca-6740ded73683.cer (raw, json) Hash identifier: 5rwiWcvxFJN4Z50F2e06j8IZYOqmqOlF0CkrKH4wGDg= Subject key identifier: 8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F9630E1999009E9D2D1A434C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 Oct 2026 12:45:11 +0000 Certificate not after: Wed 24 Jan 2029 13:45:11 +0000 Subordinate resources: AS: 399487 IP: 104.166.109.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:30:e1:99:90:09:e9:d2:d1:a4:34:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 22 12:45:11 2026 GMT Not After : Jan 24 13:45:11 2029 GMT Subject: CN=d25f3fa9-8b52-4f17-8aca-6740ded73683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e9:fb:b3:c3:8f:94:a8:1d:9b:a3:e5:62:35: 67:ba:0c:88:38:36:24:58:59:d8:f4:52:e8:e8:10: b1:aa:cc:61:73:5c:4e:06:0a:a4:9c:44:b4:b2:40: ad:0c:6b:fe:d8:11:8e:a5:19:f2:4d:95:79:fd:b7: 63:6d:0d:fe:b0:70:24:71:00:92:e9:1a:62:e5:14: a4:ad:9d:a3:69:21:43:22:22:a0:ca:7e:f8:9b:69: e9:4e:08:95:53:e7:bd:45:5c:90:f0:74:8f:e3:78: 6b:db:19:99:ac:59:c1:54:8e:6e:c8:2c:e5:47:ea: b3:19:8f:33:4d:e4:93:fb:f8:be:2a:59:0d:0e:40: 07:22:bf:fe:32:49:6a:9a:f9:21:80:39:ab:60:c4: 6a:2d:ca:3d:54:b1:e1:b8:b3:69:ad:2e:59:bc:9f: d1:d6:9d:70:0e:d6:ab:39:39:37:b5:1e:cb:e8:0f: 1f:9e:45:c2:72:ac:12:c8:d6:30:cf:3b:b1:a7:70: fb:2c:16:7a:90:5c:5f:5d:ce:3e:47:f9:87:43:5c: f8:97:00:86:86:23:e1:b3:d5:68:43:80:e3:4f:dd: de:f7:ca:6f:4e:a6:0c:fb:bb:45:57:e8:f6:09:d2: 60:a4:11:40:3a:93:af:1c:da:5f:08:98:bc:cb:3f: ed:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.166.109.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399487 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a1:08:90:57:b4:2f:09:d1:1c:92:5d:44:80:d6:7e:f3:66: 0f:f3:d7:f5:63:ca:ea:a5:fa:fd:76:88:2f:d2:43:b3:e5:59: 95:e2:63:e1:e3:d2:ea:31:83:97:72:ad:96:7d:4e:00:02:4b: c2:6b:8a:5b:57:e1:95:77:ea:9b:58:01:91:a0:0d:9c:fc:26: d4:ca:58:eb:ce:65:95:1c:16:b4:6a:9a:8e:68:6c:e8:aa:0c: 79:08:56:3e:a7:7f:d6:06:25:e0:ac:7f:d6:88:2f:a3:3b:23: 97:86:e5:7b:25:ed:c7:78:62:e2:eb:92:4d:09:8d:26:d8:c5: 44:3a:af:33:e1:1a:b9:c0:0b:46:87:58:c4:86:52:3b:9f:81: a9:c4:dd:bb:a5:77:ee:39:c7:ea:01:64:23:7f:bd:e4:b0:e1: e6:77:39:55:e2:3e:d6:4d:09:59:62:b5:43:14:d3:77:de:ef: 26:d1:40:40:7c:88:46:52:0d:36:67:98:f9:78:36:1d:72:5a: 86:a0:cd:55:61:6d:27:f7:bb:b2:df:66:e2:42:1a:e1:7a:4f: 0c:de:b0:72:8c:a5:87:dc:11:9b:c1:0b:0d:13:da:24:9e:dc: 9a:ad:a3:36:c2:b1:f9:b9:ee:44:7f:9d:8b:f7:de:67:0a:6e: 87:1e:c0:50 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE+WMOGZkAnp0tGkNMIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MTAyMjEyNDUxMVoXDTI5MDEyNDEzNDUxMVowLzEtMCsGA1UEAxMk ZDI1ZjNmYTktOGI1Mi00ZjE3LThhY2EtNjc0MGRlZDczNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyun7s8OPlKgdm6PlYjVnugyIODYkWFnY9FLo 6BCxqsxhc1xOBgqknES0skCtDGv+2BGOpRnyTZV5/bdjbQ3+sHAkcQCS6Rpi5RSk rZ2jaSFDIiKgyn74m2npTgiVU+e9RVyQ8HSP43hr2xmZrFnBVI5uyCzlR+qzGY8z TeST+/i+KlkNDkAHIr/+MklqmvkhgDmrYMRqLco9VLHhuLNprS5ZvJ/R1p1wDtar OTk3tR7L6A8fnkXCcqwSyNYwzzuxp3D7LBZ6kFxfXc4+R/mHQ1z4lwCGhiPhs9Vo Q4DjT93e98pvTqYM+7tFV+j2CdJgpBFAOpOvHNpfCJi8yz/tIQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFI61hJpwThGwRmutndNbe/wR8LE2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k MjVmM2ZhOS04YjUyLTRmMTctOGFjYS02NzQwZGVkNzM2ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2QyNWYzZmE5LThiNTItNGYxNy04 YWNhLTY3NDBkZWQ3MzY4My9kMjVmM2ZhOS04YjUyLTRmMTctOGFjYS02NzQwZGVk NzM2ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABopm0wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bhh/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAShCJBXtC8J0RySXUSA1n7zZg/z1/Vjyuql+v12iC/SQ7Pl WZXiY+Hj0uoxg5dyrZZ9TgACS8JriltX4ZV36ptYAZGgDZz8JtTKWOvOZZUcFrRq mo5obOiqDHkIVj6nf9YGJeCsf9aIL6M7I5eG5Xsl7cd4YuLrkk0JjSbYxUQ6rzPh GrnAC0aHWMSGUjufganE3buld+45x+oBZCN/veSw4eZ3OVXiPtZNCVlitUMU03fe 7ybRQEB8iEZSDTZnmPl4Nh1yWoagzVVhbSf3u7LfZuJCGuF6TwzesHKMpYfcEZvB Cw0T2iSe3JqtozbCsfm57kR/nYv33mcKbocewFA= -----END CERTIFICATE-----Generated at Sun Nov 15 14:19:38 2026 by rpki-client