$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935.cer File: e48d3078-1b09-45c1-aa5b-24d202c19935.cer (raw, json) Hash identifier: A95xGk8CgNl/m0kijdoe8aBViIeNoE+VSMTPtQwVgKk= Subject key identifier: AC:7C:72:81:83:F7:06:0E:B3:88:E1:E4:4F:A4:A8:31:E0:55:9A:E6 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D2A6D1CF2859F03CEB3353900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/e48d3078-1b09-45c1-aa5b-24d202c19935.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 14 Mar 2026 12:45:22 +0000 Certificate not after: Fri 16 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 35865 IP: 131.153.250.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:6d:1c:f2:85:9f:03:ce:b3:35:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 14 12:45:22 2026 GMT Not After : Jun 16 12:45:22 2028 GMT Subject: CN=e48d3078-1b09-45c1-aa5b-24d202c19935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:21:63:28:98:af:47:b4:b2:77:0a:07:77:38: b7:21:5c:98:04:8e:bd:5b:e7:05:a7:b2:60:37:4c: c0:94:e3:f4:92:d8:62:fa:fc:87:e8:1b:e4:08:53: 5d:90:7f:11:1e:33:72:db:2a:48:8b:77:d9:c6:cf: d4:34:49:f4:a6:15:15:07:29:c1:00:cd:f4:f8:9e: cc:73:84:b9:58:ae:79:7c:7a:fd:96:b0:26:9f:61: 08:fa:61:e4:b7:6f:00:29:81:f9:00:00:cf:f7:51: 71:ba:60:6e:72:bc:8a:a2:4d:90:0a:0a:0d:f3:67: c3:94:2d:74:da:ff:fd:bf:d1:c6:17:80:40:c7:b5: 12:e8:d7:c5:6f:6d:88:fc:11:0c:84:31:b3:15:47: cd:e2:84:d7:0f:c9:4e:f0:97:df:6c:8d:a1:a9:3d: b5:b4:66:97:ca:f2:88:72:c5:6e:b7:d9:42:e0:c4: d8:c0:b4:af:29:98:61:c7:79:de:65:10:ae:ef:0e: 81:00:92:9d:bf:de:5a:1b:e7:16:9b:99:03:05:d7: 06:bf:1e:16:de:27:0b:b1:8f:b4:c5:db:9c:a4:1c: 2c:12:88:8e:5f:a6:06:17:54:be:ce:eb:11:ab:e3: 84:0d:ed:92:0c:5d:60:14:82:8c:5d:23:d5:0f:6a: fe:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7C:72:81:83:F7:06:0E:B3:88:E1:E4:4F:A4:A8:31:E0:55:9A:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/e48d3078-1b09-45c1-aa5b-24d202c19935.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 131.153.250.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35865 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:65:55:99:3c:f2:78:3e:3e:c2:06:e3:4c:5a:af:21:0e:b4: fd:1b:38:c5:af:c6:0a:05:64:78:06:eb:2e:6b:07:03:11:af: 7b:2a:b4:da:7f:f6:ab:fa:70:7c:aa:84:7a:ea:ff:ad:8e:39: 37:8b:99:b7:cf:99:81:9f:2a:30:13:96:82:ce:fc:0c:f6:73: 85:89:0b:4a:1f:89:84:9b:1e:37:6e:c7:ec:f6:d7:16:0b:41: 17:42:c2:60:c3:08:7d:41:e8:37:66:eb:56:04:eb:06:0c:29: fd:0b:05:ac:81:50:79:e9:ff:3a:7e:1b:be:01:20:5e:8a:b6: 7b:df:4e:e2:cd:c3:a9:99:44:36:65:8f:6d:57:8b:d1:ae:7b: be:d1:e1:dd:2d:fc:e7:65:f8:f3:c4:6d:a1:87:08:2e:cc:62: b0:bc:35:30:2d:d8:d3:c5:88:2d:65:0c:32:b5:9b:bb:96:ad: d9:73:1d:5d:09:ec:63:89:fe:c7:7c:ac:03:ee:47:37:81:23: b9:b4:42:74:d4:d7:ec:29:22:71:bb:65:fb:e4:c9:f6:03:8b: 11:6d:38:1e:2e:c5:eb:e8:db:96:e4:35:66:39:b8:3a:a7:f9: 97:5c:49:65:1d:b3:33:b0:3c:ef:90:d5:85:77:45:f6:52:30: ac:41:2d:87 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE0qbRzyhZ8DzrM1OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDMxNDEyNDUyMloXDTI4MDYxNjEyNDUyMlowLzEtMCsGA1UEAxMk ZTQ4ZDMwNzgtMWIwOS00NWMxLWFhNWItMjRkMjAyYzE5OTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCFjKJivR7SydwoHdzi3IVyYBI69W+cFp7Jg N0zAlOP0kthi+vyH6BvkCFNdkH8RHjNy2ypIi3fZxs/UNEn0phUVBynBAM30+J7M c4S5WK55fHr9lrAmn2EI+mHkt28AKYH5AADP91FxumBucryKok2QCgoN82fDlC10 2v/9v9HGF4BAx7US6NfFb22I/BEMhDGzFUfN4oTXD8lO8JffbI2hqT21tGaXyvKI csVut9lC4MTYwLSvKZhhx3neZRCu7w6BAJKdv95aG+cWm5kDBdcGvx4W3icLsY+0 xducpBwsEoiOX6YGF1S+zusRq+OEDe2SDF1gFIKMXSPVD2r+fwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKx8coGD9wYOs4jh5E+kqDHgVZrmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l NDhkMzA3OC0xYjA5LTQ1YzEtYWE1Yi0yNGQyMDJjMTk5MzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2U0OGQzMDc4LTFiMDktNDVjMS1h YTViLTI0ZDIwMmMxOTkzNS9lNDhkMzA3OC0xYjA5LTQ1YzEtYWE1Yi0yNGQyMDJj MTk5MzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGDmfowGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIwZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB9lVZk88ng+PsIG40xaryEOtP0bOMWvxgoFZHgG6y5rBwMR r3sqtNp/9qv6cHyqhHrq/62OOTeLmbfPmYGfKjATloLO/Az2c4WJC0ofiYSbHjdu x+z21xYLQRdCwmDDCH1B6Ddm61YE6wYMKf0LBayBUHnp/zp+G74BIF6KtnvfTuLN w6mZRDZlj21Xi9Gue77R4d0t/Odl+PPEbaGHCC7MYrC8NTAt2NPFiC1lDDK1m7uW rdlzHV0J7GOJ/sd8rAPuRzeBI7m0QnTU1+wpInG7ZfvkyfYDixFtOB4uxevo25bk NWY5uDqn+ZdcSWUdszOwPO+Q1YV3RfZSMKxBLYc= -----END CERTIFICATE-----Generated at Wed Mar 25 23:15:47 2026 by rpki-client