$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer File: 30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer (raw, json) Hash identifier: hz6wM1A9HNOaJhOnwzb1mleVJFJheukGeADcnFOUCd8= Subject key identifier: 0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0 Authority key identifier: F6:73:56:4C:FE:3F:1C:1E:74:CC:DF:6E:7D:A1:7F:9C:DE:EF:37:70 Certificate issuer: /CN=482a4d06-ced8-4851-80b2-60d3da11fd6f Certificate serial: 010D0C9F4328584A32AAC1D2FB69C82B1B484D7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer Manifest: rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft caRepository: rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/ Notify URL: https://rpki-repo.canops.org/rrdp/notification.xml Certificate not before: Sun 15 Jun 2025 09:15:14 +0000 Certificate not after: Sat 18 Sep 2027 09:15:14 +0000 Subordinate resources: AS: 32591 IP: 23.140.52.0/24 IP: 2602:f633::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:32:aa:c1:d2:fb:69:c8:2b:1b:48:4d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=482a4d06-ced8-4851-80b2-60d3da11fd6f Validity Not Before: Jun 15 09:15:14 2025 GMT Not After : Sep 18 09:15:14 2027 GMT Subject: CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b5:72:ed:34:9a:34:b5:00:21:50:13:92:1f: 01:ba:a9:f5:71:5d:f2:dd:dc:ad:d1:69:f2:79:44: d9:2d:37:50:2e:71:79:a4:f7:68:98:df:96:0f:a4: 77:65:fd:fb:89:6d:a9:f1:5e:03:cb:c2:ce:6a:bd: 31:a3:2c:31:b2:d2:a9:49:2d:16:04:89:94:71:44: a9:8e:cb:4f:7d:e3:38:6c:96:f9:59:81:4e:14:14: d6:d9:cd:96:2c:e5:bd:2f:ac:f1:5b:d5:90:48:df: 20:dd:f5:1f:b8:30:0e:71:de:0c:ae:d3:0f:8d:82: 07:10:5d:ad:a6:04:af:e8:02:14:a4:8d:6f:a2:80: 70:f6:5a:12:15:59:e0:81:3c:96:99:be:8e:e4:5c: e8:01:60:cb:f7:df:31:15:b1:58:86:b7:aa:5d:92: 06:4d:67:65:5a:40:5a:f6:09:2b:5e:a6:43:b9:3c: ba:66:f0:75:2f:a1:e0:78:2d:2c:e5:2f:6b:79:a5: ef:bc:77:5c:02:ba:07:0b:1a:90:db:f8:ed:65:8a: d6:a6:06:53:a7:5f:2b:7b:08:3f:42:47:ac:f3:21: ae:6f:55:1a:76:42:a1:a8:39:e8:b8:c7:1e:47:91: aa:56:6e:70:cb:79:85:8f:f3:b4:b7:57:49:f1:48: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0 Subject Information Access: CA Repository - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/ RPKI Manifest - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft RPKI Notify - URI:https://rpki-repo.canops.org/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.crl X509v3 Authority Key Identifier: keyid:F6:73:56:4C:FE:3F:1C:1E:74:CC:DF:6E:7D:A1:7F:9C:DE:EF:37:70 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer sbgp-ipAddrBlock: critical IPv4: 23.140.52.0/24 IPv6: 2602:f633::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32591 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:79:d7:b4:e9:44:24:35:af:0a:3b:a5:46:46:44:a3:ff:c4: 6c:12:ce:67:10:fe:0f:9c:29:8d:2e:95:6e:14:33:44:e6:1e: 64:0b:78:34:ac:9e:dd:df:be:1d:a9:51:f1:53:84:a5:dd:9a: 29:92:02:e0:d0:5f:f1:d4:29:31:d7:9d:ba:a3:30:86:ad:28: 67:3e:b8:32:d9:48:3c:91:03:03:73:66:9f:ad:fb:2e:5b:21: 6a:14:91:cc:eb:7c:c5:8f:d3:9f:1d:ca:76:d5:18:6d:c0:89: 79:7c:ed:4b:1c:fc:a4:eb:f3:aa:85:d1:bb:fd:8d:32:ca:6d: 4e:83:dd:96:b3:2b:9e:11:fc:06:1f:01:80:a2:56:04:f7:67: 81:8b:07:9d:71:27:fe:44:f8:0e:b5:9f:c8:8d:46:5d:92:f3: 36:e5:78:67:0f:03:19:79:ac:05:79:30:25:7a:38:e2:7a:4e: 4e:db:45:7c:5e:04:08:95:cb:30:e6:0e:8b:ce:8c:35:4a:52: 78:6c:65:c6:02:82:14:de:51:30:05:34:e0:9e:96:22:36:ba: 0a:ba:48:85:11:bb:96:39:bf:89:3d:ab:15:23:18:65:59:b2: ed:b1:e6:8d:05:c9:00:f4:eb:90:dd:79:4b:d9:2d:e3:c7:18: 17:99:89:3e -----BEGIN CERTIFICATE----- MIIGoDCCBYigAwIBAgIUAQ0Mn0MoWEoyqsHS+2nIKxtITXwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgyYTRkMDYtY2VkOC00ODUxLTgwYjItNjBkM2RhMTFm ZDZmMB4XDTI1MDYxNTA5MTUxNFoXDTI3MDkxODA5MTUxNFowPTE7MDkGA1UEAxMy MzBhMzA4ZTg3MTY2ZDU3MzM1OTAyN2FmOTk3NWE0MTZkNWEzZjE3NmU0NGY0NWM5 MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrtXLtNJo0tQAhUBOS HwG6qfVxXfLd3K3RafJ5RNktN1AucXmk92iY35YPpHdl/fuJbanxXgPLws5qvTGj LDGy0qlJLRYEiZRxRKmOy0994zhslvlZgU4UFNbZzZYs5b0vrPFb1ZBI3yDd9R+4 MA5x3gyu0w+NggcQXa2mBK/oAhSkjW+igHD2WhIVWeCBPJaZvo7kXOgBYMv33zEV sViGt6pdkgZNZ2VaQFr2CStepkO5PLpm8HUvoeB4LSzlL2t5pe+8d1wCugcLGpDb +O1litamBlOnXyt7CD9CR6zzIa5vVRp2QqGoOei4xx5HkapWbnDLeYWP87S3V0nx SOwPAgMBAAGjggOkMIIDoDAdBgNVHQ4EFgQUC4kASKOjlbwfpJZdLdV+3X2R4uAw gfgGCCsGAQUFBwELBIHrMIHoMDwGCCsGAQUFBzAFhjByc3luYzovL3Jwa2ktcmVw by5jYW5vcHMub3JnL3JlcG8vQ2FuT3BzLVBBU1MvMC8waAYIKwYBBQUHMAqGXHJz eW5jOi8vcnBraS1yZXBvLmNhbm9wcy5vcmcvcmVwby9DYW5PcHMtUEFTUy8wLzBC ODkwMDQ4QTNBMzk1QkMxRkE0OTY1RDJERDU3RUREN0Q5MUUyRTAubWZ0MD4GCCsG AQUFBzANhjJodHRwczovL3Jwa2ktcmVwby5jYW5vcHMub3JnL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIHcBgNVHR8EgdQwgdEwgc6ggcug gciGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4 LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80ODJhNGQwNi1jZWQ4LTQ4NTEt ODBiMi02MGQzZGExMWZkNmYvNDgyYTRkMDYtY2VkOC00ODUxLTgwYjItNjBkM2Rh MTFmZDZmLmNybDAfBgNVHSMEGDAWgBT2c1ZM/j8cHnTM3259oX+c3u83cDAOBgNV HQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEBBIGzMIGwMIGtBggrBgEFBQcwAoaBoHJz eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00 N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQ4MmE0ZDA2LWNlZDgtNDg1MS04MGIyLTYw ZDNkYTExZmQ2Zi5jZXIwLwYIKwYBBQUHAQcBAf8EIDAeMAwEAgABMAYDBAAXjDQw DgQCAAIwCAMGACYC9jMAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAn9PMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBADJ517TpRCQ1rwo7pUZGRKP/xGwSzmcQ/g+cKY0ulW4UM0TmHmQLeDSsnt3f vh2pUfFThKXdmimSAuDQX/HUKTHXnbqjMIatKGc+uDLZSDyRAwNzZp+t+y5bIWoU kczrfMWP058dynbVGG3AiXl87Usc/KTr86qF0bv9jTLKbU6D3ZazK54R/AYfAYCi VgT3Z4GLB51xJ/5E+A61n8iNRl2S8zbleGcPAxl5rAV5MCV6OOJ6Tk7bRXxeBAiV yzDmDovOjDVKUnhsZcYCghTeUTAFNOCeliI2ugq6SIURu5Y5v4k9qxUjGGVZsu2x 5o0FyQD065DdeUvZLePHGBeZiT4= -----END CERTIFICATE-----Generated at Wed Nov 5 18:20:22 2025 by rpki-client