$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer File: b32217e1-2473-49a5-919e-08e1896c5019.cer (raw, json) Hash identifier: L3hgx6mk+jD719PMDMV2uJi3RBgX7jGXOoZD6Jhkjzc= Subject key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A3CD88EC9804A1AB6874978C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Jun 2025 00:45:35 +0000 Certificate not after: Wed 22 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 22191 IP: 130.45.128.0/17 IP: 2604:1dc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:d8:8e:c9:80:4a:1a:b6:87:49:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 19 00:45:35 2025 GMT Not After : Sep 22 00:45:35 2027 GMT Subject: CN=b32217e1-2473-49a5-919e-08e1896c5019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:26:e2:0a:1d:54:35:88:bb:0e:48:68:b2: 0f:2d:54:0c:cf:b9:cd:14:02:44:27:63:f2:98:9f: f3:f4:a1:68:1c:74:7b:12:7c:85:9d:24:6d:dd:d6: 99:1b:00:32:27:df:8e:4a:d3:cf:00:0b:d1:90:18: 3d:84:0c:76:8f:7b:65:d1:fe:68:ea:3a:8b:73:7f: 1d:7f:97:71:56:44:be:88:29:2c:d9:09:ce:29:3a: 24:a8:94:d4:17:30:ea:04:56:c3:74:b4:ea:51:35: d8:ec:32:ec:20:5b:c8:9a:ec:57:da:76:23:31:57: 97:ff:d4:27:5b:ce:58:b5:32:2b:65:1c:aa:5a:16: 06:b6:dc:5a:33:32:5d:e9:8b:f5:d5:88:08:78:f1: 6d:68:1f:fc:c3:c1:f4:4c:c8:16:a8:fb:43:01:fc: f9:9c:b3:2f:44:ff:44:8d:d6:59:b2:bd:d7:21:9d: 15:91:14:59:75:73:a5:15:ae:07:5e:7d:c1:c0:cb: e6:ff:f8:7e:7b:7c:87:7b:9f:4b:c6:a9:4e:b9:99: 5b:af:59:40:cb:60:d6:93:fc:30:5e:df:47:c1:95: 54:fc:ec:0b:bc:af:d7:23:f8:fa:f7:fb:10:62:25: 60:82:6f:4c:f0:ce:66:8e:e8:fe:48:00:8a:97:c0: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 130.45.128.0/17 IPv6: 2604:1dc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22191 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c5:73:6c:90:ff:c7:6e:94:c7:bf:bf:e6:8c:7c:f1:4f:d4: 91:6d:ef:03:92:34:a3:fb:73:00:97:16:32:bb:fd:fc:f2:e8: e1:12:94:0e:3d:de:df:07:08:00:97:99:f5:f3:5d:10:03:89: 87:fa:01:e7:b6:0c:53:7f:93:5a:98:95:80:d5:09:14:23:82: 03:ca:d4:af:15:b3:5d:8f:63:26:91:03:11:0f:27:c4:c7:43: a0:b8:29:a6:fe:f1:77:d3:4a:86:9a:8d:12:39:66:71:fe:a6: 6c:ca:70:1a:32:f3:8d:dd:b4:73:a5:d7:75:70:59:23:06:57: cd:53:18:59:4e:02:5d:4d:ec:09:9b:b9:04:1c:c4:8b:a3:4f: 27:28:b9:7e:27:ac:11:d3:7d:8a:b1:d7:51:7f:fe:70:b2:02: 8d:3c:ab:cd:88:c6:8a:5a:f2:b7:45:45:66:38:99:aa:61:e8: df:04:0e:09:14:e3:0b:01:bb:69:38:9b:f3:b1:a5:8e:c7:e2: d7:97:18:c2:cc:3c:e1:4e:1b:52:41:a0:df:9c:b6:61:ee:07: cb:9e:3f:ac:c7:be:03:0d:10:4d:64:ae:5a:e5:82:b3:dc:02: e8:0b:79:fd:21:bb:6a:21:ba:b1:fe:97:03:9b:a7:a9:10:8a: ef:8d:98:6b -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEo82I7JgEoatodJeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDYxOTAwNDUzNVoXDTI3MDkyMjAwNDUzNVowLzEtMCsGA1UEAxMk YjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1MDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrwm4godVDWIuw5IaLIPLVQMz7nNFAJEJ2Py mJ/z9KFoHHR7EnyFnSRt3daZGwAyJ9+OStPPAAvRkBg9hAx2j3tl0f5o6jqLc38d f5dxVkS+iCks2QnOKTokqJTUFzDqBFbDdLTqUTXY7DLsIFvImuxX2nYjMVeX/9Qn W85YtTIrZRyqWhYGttxaMzJd6Yv11YgIePFtaB/8w8H0TMgWqPtDAfz5nLMvRP9E jdZZsr3XIZ0VkRRZdXOlFa4HXn3BwMvm//h+e3yHe59LxqlOuZlbr1lAy2DWk/ww Xt9HwZVU/OwLvK/XI/j69/sQYiVggm9M8M5mjuj+SACKl8AYZQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFEiuDfig13SQWKRatSOmbrexwHe2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i MzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2IzMjIxN2UxLTI0NzMtNDlhNS05 MTllLTA4ZTE4OTZjNTAxOS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2 YzUwMTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAeCLYAwDQQCAAIwBwMFACYEHcAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICVq8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEcVzbJD/x26Ux7+/5ox88U/UkW3v A5I0o/tzAJcWMrv9/PLo4RKUDj3e3wcIAJeZ9fNdEAOJh/oB57YMU3+TWpiVgNUJ FCOCA8rUrxWzXY9jJpEDEQ8nxMdDoLgppv7xd9NKhpqNEjlmcf6mbMpwGjLzjd20 c6XXdXBZIwZXzVMYWU4CXU3sCZu5BBzEi6NPJyi5fiesEdN9irHXUX/+cLICjTyr zYjGilryt0VFZjiZqmHo3wQOCRTjCwG7aTib87Gljsfi15cYwsw84U4bUkGg35y2 Ye4Hy54/rMe+Aw0QTWSuWuWCs9wC6At5/SG7aiG6sf6XA5unqRCK742Yaw== -----END CERTIFICATE-----Generated at Mon Jun 30 20:29:46 2025 by rpki-client