$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.cer File: f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.cer (raw, json) Hash identifier: kBPLmHJs2/4Z1xSOLY29/usuKwSPM90sJ4BMOuUqA+M= Subject key identifier: B0:D2:B9:31:C6:54:9A:BD:94:59:80:DF:EF:60:E8:85:59:C2:5D:A3 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584E94E2D58189C2356EBAF68540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jul 2026 08:45:11 +0000 Certificate not after: Tue 24 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 32123 IP: 69.50.88.0/22 IP: 162.254.180.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:e2:d5:81:89:c2:35:6e:ba:f6:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jul 22 08:45:11 2026 GMT Not After : Oct 24 08:45:11 2028 GMT Subject: CN=f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:47:e0:94:89:53:e1:ec:1b:a9:f0:38:36:fa: 53:2f:2a:54:78:27:34:bc:0e:b8:7c:8f:33:c4:d6: e8:51:15:7c:f1:b4:d2:1d:0f:46:91:37:58:13:d2: f1:32:89:ea:53:a6:4e:cf:ca:81:63:09:e8:e8:58: 24:52:e5:0c:b6:3e:09:30:4e:fa:36:78:ab:73:ab: 62:0c:c7:c9:c1:72:66:08:f3:40:ab:e4:ac:2c:51: d5:e1:84:50:0b:bf:73:27:ed:9a:b8:61:64:7f:c3: ef:55:eb:1c:45:4c:fc:95:22:54:3d:40:81:a5:06: 7c:c5:e5:6c:86:6c:a1:bf:4d:9e:e2:e5:59:61:a3: 76:86:1f:c2:a3:9e:99:02:f8:ff:45:28:a5:16:b1: 7e:cf:ff:9a:58:40:ee:1d:f1:47:d3:9e:ba:e9:2a: 32:9e:c7:35:28:d2:8b:75:e3:d3:90:f5:c9:d4:15: 2b:e2:d4:48:df:5b:b6:15:d8:e9:cb:73:f0:a2:a5: f3:03:14:2d:f9:9f:4c:9a:3c:a8:68:9c:f1:34:59: ac:88:2d:75:21:6f:93:b6:1f:db:06:f9:28:ab:ee: fd:9b:53:11:18:94:9d:1d:1c:f6:a9:00:74:b3:32: c8:9e:d4:7f:f3:8b:32:72:ad:6c:27:d0:5c:aa:65: 37:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D2:B9:31:C6:54:9A:BD:94:59:80:DF:EF:60:E8:85:59:C2:5D:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 69.50.88.0/22 162.254.180.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32123 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:80:fa:17:63:94:27:fb:e0:aa:b9:8f:3b:43:bb:9b:01:b9: 0d:93:44:2f:b2:ff:9a:c3:9b:fc:ff:c3:28:67:0b:2c:f2:a7: 46:8d:c1:50:ca:78:de:21:12:ae:f0:34:62:a2:a9:b9:e4:b6: 1d:c2:b4:6e:db:d0:e5:2f:65:ef:90:05:5a:fa:4b:f8:74:73: a8:c6:05:92:b2:08:b4:98:d3:bc:f0:59:ba:59:2d:3d:30:14: 42:3e:21:28:a9:a6:b4:e7:a7:4b:bb:67:e0:a7:80:32:93:f1: 06:48:c2:3d:92:cf:74:35:0a:42:44:e9:4c:64:37:2a:38:8c: dc:01:ba:f4:69:03:8e:48:8d:90:6d:f2:a5:88:29:f6:49:72: e3:79:de:cf:dc:82:08:28:73:e2:36:cc:ec:02:fb:8d:20:ab: 9a:31:ee:0d:e3:df:1f:0c:cc:7a:c4:36:e9:43:ba:cd:5a:ef: d8:7c:ca:5c:14:68:4b:49:1c:93:a7:c0:9d:6d:0d:63:d3:20: e5:23:81:d1:b8:33:ae:c1:be:da:35:5a:de:18:80:fb:9d:3f: 38:cd:e7:da:ac:46:b9:f7:5a:ba:01:27:ce:a9:5a:e3:33:ee: a7:d2:ee:c2:d5:91:aa:b0:75:3b:7e:42:db:db:f1:35:66:1a: 2b:1c:64:69 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE6U4tWBicI1brr2hUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDcyMjA4NDUxMVoXDTI4MTAyNDA4NDUxMVowLzEtMCsGA1UEAxMk ZjhmOWUxYTctOTE5Ni00ZWQ1LTlmMWUtZmM2ZGM3MjhjYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kfglIlT4ewbqfA4NvpTLypUeCc0vA64fI8z xNboURV88bTSHQ9GkTdYE9LxMonqU6ZOz8qBYwno6FgkUuUMtj4JME76Nnirc6ti DMfJwXJmCPNAq+SsLFHV4YRQC79zJ+2auGFkf8PvVescRUz8lSJUPUCBpQZ8xeVs hmyhv02e4uVZYaN2hh/Co56ZAvj/RSilFrF+z/+aWEDuHfFH05666Soynsc1KNKL dePTkPXJ1BUr4tRI31u2Fdjpy3PwoqXzAxQt+Z9MmjyoaJzxNFmsiC11IW+Tth/b Bvkoq+79m1MRGJSdHRz2qQB0szLIntR/84sycq1sJ9BcqmU3gQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFLDSuTHGVJq9lFmA3+9g6IVZwl2jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m OGY5ZTFhNy05MTk2LTRlZDUtOWYxZS1mYzZkYzcyOGNiNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Y4ZjllMWE3LTkxOTYtNGVkNS05 ZjFlLWZjNmRjNzI4Y2I3Ni9mOGY5ZTFhNy05MTk2LTRlZDUtOWYxZS1mYzZkYzcy OGNiNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJFMlgDBAKi/rQwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICfXswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAZ4D6F2OUJ/vgqrmPO0O7mwG5DZNEL7L/msOb/P/D KGcLLPKnRo3BUMp43iESrvA0YqKpueS2HcK0btvQ5S9l75AFWvpL+HRzqMYFkrII tJjTvPBZulktPTAUQj4hKKmmtOenS7tn4KeAMpPxBkjCPZLPdDUKQkTpTGQ3KjiM 3AG69GkDjkiNkG3ypYgp9kly43nez9yCCChz4jbM7AL7jSCrmjHuDePfHwzMesQ2 6UO6zVrv2HzKXBRoS0kck6fAnW0NY9Mg5SOB0bgzrsG+2jVa3hiA+50/OM3n2qxG ufdaugEnzqla4zPup9LuwtWRqrB1O35C29vxNWYaKxxkaQ== -----END CERTIFICATE-----Generated at Thu Jul 23 20:20:52 2026 by rpki-client