$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.cer File: f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.cer (raw, json) Hash identifier: V/J9KKzBOqLuj27JirqQgcUc9gmYJFWxGyBvO1S3fVA= Subject key identifier: B0:D2:B9:31:C6:54:9A:BD:94:59:80:DF:EF:60:E8:85:59:C2:5D:A3 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858498FC221F048ABD5ED844BE580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Apr 2025 00:45:34 +0000 Certificate not after: Thu 22 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 32123 IP: 69.50.88.0/22 IP: 162.254.180.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c2:21:f0:48:ab:d5:ed:84:4b:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 18 00:45:34 2025 GMT Not After : Jul 22 00:45:34 2027 GMT Subject: CN=f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:47:e0:94:89:53:e1:ec:1b:a9:f0:38:36:fa: 53:2f:2a:54:78:27:34:bc:0e:b8:7c:8f:33:c4:d6: e8:51:15:7c:f1:b4:d2:1d:0f:46:91:37:58:13:d2: f1:32:89:ea:53:a6:4e:cf:ca:81:63:09:e8:e8:58: 24:52:e5:0c:b6:3e:09:30:4e:fa:36:78:ab:73:ab: 62:0c:c7:c9:c1:72:66:08:f3:40:ab:e4:ac:2c:51: d5:e1:84:50:0b:bf:73:27:ed:9a:b8:61:64:7f:c3: ef:55:eb:1c:45:4c:fc:95:22:54:3d:40:81:a5:06: 7c:c5:e5:6c:86:6c:a1:bf:4d:9e:e2:e5:59:61:a3: 76:86:1f:c2:a3:9e:99:02:f8:ff:45:28:a5:16:b1: 7e:cf:ff:9a:58:40:ee:1d:f1:47:d3:9e:ba:e9:2a: 32:9e:c7:35:28:d2:8b:75:e3:d3:90:f5:c9:d4:15: 2b:e2:d4:48:df:5b:b6:15:d8:e9:cb:73:f0:a2:a5: f3:03:14:2d:f9:9f:4c:9a:3c:a8:68:9c:f1:34:59: ac:88:2d:75:21:6f:93:b6:1f:db:06:f9:28:ab:ee: fd:9b:53:11:18:94:9d:1d:1c:f6:a9:00:74:b3:32: c8:9e:d4:7f:f3:8b:32:72:ad:6c:27:d0:5c:aa:65: 37:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D2:B9:31:C6:54:9A:BD:94:59:80:DF:EF:60:E8:85:59:C2:5D:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 69.50.88.0/22 162.254.180.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32123 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:75:85:7f:89:39:e2:b4:b7:89:7d:7e:61:c3:4e:37:4d:7f: e8:59:6c:5a:6f:76:8b:a7:fc:52:7b:f5:e2:be:ab:30:9c:0e: b6:cf:10:93:b7:dc:10:04:0e:38:58:6a:c4:cc:14:55:c0:9d: 08:3f:20:d6:d8:a3:45:95:a1:b9:87:bf:15:78:16:e7:e2:97: c2:6c:4f:92:c8:45:d1:e1:5f:c0:89:d5:4b:c7:ad:d2:26:34: 84:b1:a3:b3:43:ec:72:8a:da:20:17:bb:59:a3:3d:e2:8f:da: d9:ed:63:9b:e4:f1:bd:61:54:a1:ba:ce:7d:8c:74:ca:7e:05: dc:05:08:73:a2:b4:82:4a:55:62:0f:8c:94:5f:f4:9d:78:0a: b4:89:01:5f:9b:be:f9:6c:d6:d4:91:44:75:24:16:33:49:b4: d7:db:de:23:e3:1a:f6:d8:ba:d0:26:db:6e:c9:e5:1b:d9:63: 6a:35:f0:df:ef:25:d7:6e:cd:d3:3d:dd:30:d6:9d:0a:22:93: a0:47:a7:1d:0a:23:20:fc:54:28:07:78:4b:bc:a1:a8:41:ae: 00:5f:eb:95:b8:93:aa:69:cf:87:6f:37:97:90:8c:d8:55:a2: f9:3d:0e:bb:e4:eb:77:f7:d2:0d:0e:76:6a:43:51:90:51:d5: 02:d9:c5:89 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEmPwiHwSKvV7YRL5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDQxODAwNDUzNFoXDTI3MDcyMjAwNDUzNFowLzEtMCsGA1UEAxMk ZjhmOWUxYTctOTE5Ni00ZWQ1LTlmMWUtZmM2ZGM3MjhjYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kfglIlT4ewbqfA4NvpTLypUeCc0vA64fI8z xNboURV88bTSHQ9GkTdYE9LxMonqU6ZOz8qBYwno6FgkUuUMtj4JME76Nnirc6ti DMfJwXJmCPNAq+SsLFHV4YRQC79zJ+2auGFkf8PvVescRUz8lSJUPUCBpQZ8xeVs hmyhv02e4uVZYaN2hh/Co56ZAvj/RSilFrF+z/+aWEDuHfFH05666Soynsc1KNKL dePTkPXJ1BUr4tRI31u2Fdjpy3PwoqXzAxQt+Z9MmjyoaJzxNFmsiC11IW+Tth/b Bvkoq+79m1MRGJSdHRz2qQB0szLIntR/84sycq1sJ9BcqmU3gQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFLDSuTHGVJq9lFmA3+9g6IVZwl2jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m OGY5ZTFhNy05MTk2LTRlZDUtOWYxZS1mYzZkYzcyOGNiNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Y4ZjllMWE3LTkxOTYtNGVkNS05 ZjFlLWZjNmRjNzI4Y2I3Ni9mOGY5ZTFhNy05MTk2LTRlZDUtOWYxZS1mYzZkYzcy OGNiNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJFMlgDBAKi/rQwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICfXswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAR3WFf4k54rS3iX1+YcNON01/6FlsWm92i6f8Unv1 4r6rMJwOts8Qk7fcEAQOOFhqxMwUVcCdCD8g1tijRZWhuYe/FXgW5+KXwmxPkshF 0eFfwInVS8et0iY0hLGjs0PscoraIBe7WaM94o/a2e1jm+TxvWFUobrOfYx0yn4F 3AUIc6K0gkpVYg+MlF/0nXgKtIkBX5u++WzW1JFEdSQWM0m019veI+Ma9ti60Cbb bsnlG9ljajXw3+8l127N0z3dMNadCiKToEenHQojIPxUKAd4S7yhqEGuAF/rlbiT qmnPh283l5CM2FWi+T0Ou+Trd/fSDQ52akNRkFHVAtnFiQ== -----END CERTIFICATE-----Generated at Wed Nov 5 06:59:47 2025 by rpki-client