$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e.cer File: db50bc76-8345-4464-a992-23bbdfe1744e.cer (raw, json) Hash identifier: fNLb+tpMBgmPDMQQkCXCWwboVO9xmdxNw0n3y6xP8dY= Subject key identifier: 60:99:9B:8C:54:17:64:0C:99:04:D0:57:80:9F:E9:D9:0C:F8:D6:B1 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A268318FD9183B772E5EE9900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e/db50bc76-8345-4464-a992-23bbdfe1744e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Jun 2025 00:45:37 +0000 Certificate not after: Tue 14 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 32073 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:83:18:fd:91:83:b7:72:e5:ee:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 11 00:45:37 2025 GMT Not After : Sep 14 00:45:37 2027 GMT Subject: CN=db50bc76-8345-4464-a992-23bbdfe1744e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:cf:7e:2f:75:bc:72:e6:3e:bb:d2:6f:fe: 1f:6c:1f:91:1d:f1:91:a4:fd:1e:03:48:84:4e:14: 6f:bd:fb:c5:84:3c:de:7b:5c:77:60:ff:c8:39:74: 76:9d:22:ee:07:c0:79:86:a9:ed:e9:d8:9c:97:a6: 17:80:f6:e6:77:be:d6:2f:71:eb:dc:85:8b:df:86: 81:4d:3e:7b:df:9d:77:e8:2e:da:22:a1:78:6c:a4: 51:c7:86:1c:64:84:4f:e7:6f:f8:a3:7f:e3:e1:fc: b1:b2:b7:5f:34:99:a3:57:23:57:9e:0f:74:df:59: 69:19:78:0a:f6:f5:fc:ca:3c:8b:84:92:c3:7b:38: b7:1d:a3:3e:24:4b:79:a6:3f:6a:f2:25:d3:56:1a: a9:49:e7:cb:30:a1:cb:6e:7d:e1:0e:a4:5b:2b:f8: 10:66:83:6c:76:32:ac:d0:a6:24:73:ef:2f:1b:f1: 7a:13:1a:18:a0:93:cd:30:30:76:83:41:e9:7c:92: 84:52:8a:3e:e3:79:a0:cb:38:51:08:f6:71:53:74: 98:4e:42:ee:f7:39:21:7f:b4:04:8f:13:a9:c3:17: 22:22:64:b8:cb:86:e8:17:78:80:16:fe:c8:d0:94: b1:05:6f:72:2f:bc:42:9a:20:0f:49:48:50:1d:f3: cf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:99:9B:8C:54:17:64:0C:99:04:D0:57:80:9F:E9:D9:0C:F8:D6:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/db50bc76-8345-4464-a992-23bbdfe1744e/db50bc76-8345-4464-a992-23bbdfe1744e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 32073 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:6e:ab:5a:13:94:2e:cd:f2:3c:26:34:8f:3f:f1:8f:c3:45: 29:9a:97:b9:60:1d:38:47:f0:dc:5a:ea:14:ae:86:59:3a:7d: ce:fd:c7:5f:d6:be:ca:f3:be:fd:98:d7:56:9a:45:0f:d7:64: ec:43:45:8c:6b:ef:ae:f3:80:ac:e2:c5:74:4e:84:ac:bb:cc: 0d:a7:fd:49:1f:00:ef:2d:a9:db:da:1b:f7:c4:4d:a7:01:2f: 9f:19:00:d8:7d:71:4c:c0:05:86:be:11:92:d7:94:4e:19:21: ba:38:22:a1:81:d1:15:67:4c:44:42:3d:ae:9e:1c:e6:06:0a: 5c:40:95:d3:9b:7a:f9:b1:1a:9d:63:16:c9:36:c4:99:5d:e3: 38:bc:02:e4:2f:41:b0:c2:ac:d8:bd:da:a0:f3:4d:f5:ad:09: b0:8a:54:7d:cb:64:fc:6c:9a:e1:3b:a9:53:17:09:af:13:71: f2:16:9c:dc:19:93:6b:50:f2:b3:dc:59:46:d1:66:bb:a5:bf: 15:cc:76:ad:10:44:17:c0:0b:43:eb:21:d4:2c:44:13:61:14: 3e:3a:9a:e4:e1:ba:d2:c7:76:4d:3b:fc:50:04:5c:f9:87:95: 79:cf:c0:3a:37:f9:af:11:b6:f1:e9:ce:1a:45:28:b2:7b:f2: 28:4e:4b:67 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEomgxj9kYO3cuXumQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDYxMTAwNDUzN1oXDTI3MDkxNDAwNDUzN1owLzEtMCsGA1UEAxMk ZGI1MGJjNzYtODM0NS00NDY0LWE5OTItMjNiYmRmZTE3NDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGvPfi91vHLmPrvSb/4fbB+RHfGRpP0eA0iE ThRvvfvFhDzee1x3YP/IOXR2nSLuB8B5hqnt6dicl6YXgPbmd77WL3Hr3IWL34aB TT5735136C7aIqF4bKRRx4YcZIRP52/4o3/j4fyxsrdfNJmjVyNXng9031lpGXgK 9vX8yjyLhJLDezi3HaM+JEt5pj9q8iXTVhqpSefLMKHLbn3hDqRbK/gQZoNsdjKs 0KYkc+8vG/F6ExoYoJPNMDB2g0HpfJKEUoo+43mgyzhRCPZxU3SYTkLu9zkhf7QE jxOpwxciImS4y4boF3iAFv7I0JSxBW9yL7xCmiAPSUhQHfPPNQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFGCZm4xUF2QMmQTQV4Cf6dkM+NaxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k YjUwYmM3Ni04MzQ1LTQ0NjQtYTk5Mi0yM2JiZGZlMTc0NGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2RiNTBiYzc2LTgzNDUtNDQ2NC1h OTkyLTIzYmJkZmUxNzQ0ZS9kYjUwYmM3Ni04MzQ1LTQ0NjQtYTk5Mi0yM2JiZGZl MTc0NGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICfUkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUW6rWhOULs3yPCY0jz/xj8NFKZqX uWAdOEfw3FrqFK6GWTp9zv3HX9a+yvO+/ZjXVppFD9dk7ENFjGvvrvOArOLFdE6E rLvMDaf9SR8A7y2p29ob98RNpwEvnxkA2H1xTMAFhr4RkteUThkhujgioYHRFWdM REI9rp4c5gYKXECV05t6+bEanWMWyTbEmV3jOLwC5C9BsMKs2L3aoPNN9a0JsIpU fctk/Gya4TupUxcJrxNx8hac3BmTa1Dys9xZRtFmu6W/Fcx2rRBEF8ALQ+sh1CxE E2EUPjqa5OG60sd2TTv8UARc+YeVec/AOjf5rxG28enOGkUosnvyKE5LZw== -----END CERTIFICATE-----Generated at Wed Jul 2 01:27:42 2025 by rpki-client