$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer File: 32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer (raw, json) Hash identifier: ceV5uCOrnLIb4EV9EXI7DbHdYGbzCweE694nyXi+Ogk= Subject key identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D4EB37EE3B5D61A5BA6C1AD60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Mar 2026 12:36:17 +0000 Certificate not after: Fri 10 Mar 2028 13:45:24 +0000 Subordinate resources: IP: 149.112.78.0/24 IP: 199.7.70.0/24 IP: 199.33.230.0 -- 199.33.233.255 IP: 2001:500:210::/48 IP: 2001:501:210::/48 IP: 2001:503:ff40::/46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:b3:7e:e3:b5:d6:1a:5b:a6:c1:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 27 12:36:17 2026 GMT Not After : Mar 10 13:45:24 2028 GMT Subject: CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:1e:29:20:52:d8:06:fd:5f:17:54:de:3a: a1:db:6e:6b:8a:42:98:be:a8:11:c3:54:84:46:47: 41:e1:ff:11:4e:37:e8:0b:f6:d7:93:50:f8:45:2c: c7:6b:c6:f2:a0:bf:4d:ac:47:90:17:f8:a1:29:2f: 3a:56:c6:30:91:cd:6d:0f:d2:41:7b:43:f4:9b:ee: 77:29:df:15:99:0b:ef:26:6f:48:aa:b3:d1:0a:d2: 60:df:51:82:81:cd:60:6d:8c:86:87:b9:a9:e7:46: ce:8e:16:be:00:59:7b:b6:07:95:e7:eb:48:55:be: 93:14:10:a5:3f:5d:50:fb:35:dc:68:5d:f8:0d:82: 52:d7:5a:7f:4d:99:22:af:0d:36:7b:a3:cb:cf:95: b5:01:33:27:98:b8:90:5a:65:44:20:17:41:56:65: 24:4d:22:fc:38:ba:69:fa:0d:0b:9c:1b:e0:bd:16: 07:0a:5d:98:b4:9f:7e:71:a4:e0:40:b2:ae:c8:ba: e9:b8:e7:16:44:08:66:74:ed:91:70:f7:0e:72:85: f1:85:0b:97:cb:35:8c:bb:1a:a5:36:8a:a4:d5:82: 24:29:ba:bc:a4:d0:83:96:14:7a:1f:0b:7a:97:8c: 39:c4:87:0c:da:11:b0:ff:9b:88:0f:52:2c:60:55: 55:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 149.112.78.0/24 199.7.70.0/24 199.33.230.0-199.33.233.255 IPv6: 2001:500:210::/48 2001:501:210::/48 2001:503:ff40::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:18:15:ab:0e:44:05:a0:3a:56:25:86:03:e9:9d:ce:d8:16: cd:af:b1:83:7b:f2:5a:f3:62:85:66:cd:28:d0:07:fe:6e:eb: c8:4c:17:53:78:4b:63:bd:a9:d3:54:b6:f0:4e:3f:1b:57:2d: b7:93:2e:a2:e0:15:0c:5b:9d:55:17:42:ee:9a:e9:a2:fe:e3: a8:8d:69:02:d7:d2:cb:ef:06:80:9d:3b:73:aa:b0:69:f0:5b: 2d:bd:f9:bf:f8:f4:a1:ff:34:15:75:6a:42:3f:3d:8f:12:3d: 4e:aa:e6:10:ab:f6:95:dc:5a:7c:2e:a6:e0:ed:23:b6:87:c7: f5:24:b4:2c:b5:66:af:1a:60:42:df:10:31:25:5d:53:1c:1d: 30:c0:d2:5d:54:0f:4f:ef:5b:6e:da:90:2c:5c:0b:7c:df:60: d8:a7:6d:2c:a3:fa:f8:0c:76:38:92:eb:16:2b:76:55:66:cb: 56:61:fd:c5:f3:58:3b:31:d4:cc:19:df:0c:03:49:be:d2:c4: 12:86:d2:7a:03:49:b7:fd:4c:1b:42:7b:16:ae:7b:68:b1:22: e9:42:49:1b:4a:01:bb:b8:46:2a:6d:e1:17:b9:22:af:e7:7f: cb:f5:cc:82:d1:53:91:83:65:a9:2f:5d:30:5f:31:29:ae:a5: 27:f4:7c:09 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE1Os37jtdYaW6bBrWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDMyNzEyMzYxN1oXDTI4MDMxMDEzNDUyNFowLzEtMCsGA1UEAxMk MzJkOWI2YTctMmVkNS00NDhiLTliY2ItOGQyNjJhY2MzZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU4eKSBS2Ab9XxdU3jqh225rikKYvqgRw1SE RkdB4f8RTjfoC/bXk1D4RSzHa8byoL9NrEeQF/ihKS86VsYwkc1tD9JBe0P0m+53 Kd8VmQvvJm9IqrPRCtJg31GCgc1gbYyGh7mp50bOjha+AFl7tgeV5+tIVb6TFBCl P11Q+zXcaF34DYJS11p/TZkirw02e6PLz5W1ATMnmLiQWmVEIBdBVmUkTSL8OLpp +g0LnBvgvRYHCl2YtJ9+caTgQLKuyLrpuOcWRAhmdO2RcPcOcoXxhQuXyzWMuxql Noqk1YIkKbq8pNCDlhR6Hwt6l4w5xIcM2hGw/5uID1IsYFVVjwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFD9/qne/r+crKrPK0h6sTBABHaQqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z MmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFjYzNmNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzMyZDliNmE3LTJlZDUtNDQ4Yi05 YmNiLThkMjYyYWNjM2Y3Ni8zMmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFj YzNmNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwVgYIKwYBBQUH AQcBAf8ERzBFMCAEAgABMBoDBACVcE4DBADHB0YwDAMEAcch5gMEAcch6DAhBAIA AjAbAwcAIAEFAAIQAwcAIAEFAQIQAwcCIAEFA/9AMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAQYFasORAWg OlYlhgPpnc7YFs2vsYN78lrzYoVmzSjQB/5u68hMF1N4S2O9qdNUtvBOPxtXLbeT LqLgFQxbnVUXQu6a6aL+46iNaQLX0svvBoCdO3OqsGnwWy29+b/49KH/NBV1akI/ PY8SPU6q5hCr9pXcWnwupuDtI7aHx/UktCy1Zq8aYELfEDElXVMcHTDA0l1UD0/v W27akCxcC3zfYNinbSyj+vgMdjiS6xYrdlVmy1Zh/cXzWDsx1MwZ3wwDSb7SxBKG 0noDSbf9TBtCexaue2ixIulCSRtKAbu4Ript4Re5Iq/nf8v1zILRU5GDZakvXTBf MSmupSf0fAk= -----END CERTIFICATE-----Generated at Fri Apr 17 16:32:46 2026 by rpki-client