$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer File: 32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer (raw, json) Hash identifier: 9OrfAcj8bvjPwJ4KzurK36kgQqjZBEDb/7M6t84127I= Subject key identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D3C0DFFD693196AD4C09B6E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Mar 2026 20:18:17 +0000 Certificate not after: Fri 10 Mar 2028 13:45:24 +0000 Subordinate resources: IP: 149.112.78.0/24 IP: 199.7.70.0/24 IP: 199.33.230.0 -- 199.33.233.255 IP: 2001:500:210::/48 IP: 2001:503:ff40::/46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3c:0d:ff:d6:93:19:6a:d4:c0:9b:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 20 20:18:17 2026 GMT Not After : Mar 10 13:45:24 2028 GMT Subject: CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:1e:29:20:52:d8:06:fd:5f:17:54:de:3a: a1:db:6e:6b:8a:42:98:be:a8:11:c3:54:84:46:47: 41:e1:ff:11:4e:37:e8:0b:f6:d7:93:50:f8:45:2c: c7:6b:c6:f2:a0:bf:4d:ac:47:90:17:f8:a1:29:2f: 3a:56:c6:30:91:cd:6d:0f:d2:41:7b:43:f4:9b:ee: 77:29:df:15:99:0b:ef:26:6f:48:aa:b3:d1:0a:d2: 60:df:51:82:81:cd:60:6d:8c:86:87:b9:a9:e7:46: ce:8e:16:be:00:59:7b:b6:07:95:e7:eb:48:55:be: 93:14:10:a5:3f:5d:50:fb:35:dc:68:5d:f8:0d:82: 52:d7:5a:7f:4d:99:22:af:0d:36:7b:a3:cb:cf:95: b5:01:33:27:98:b8:90:5a:65:44:20:17:41:56:65: 24:4d:22:fc:38:ba:69:fa:0d:0b:9c:1b:e0:bd:16: 07:0a:5d:98:b4:9f:7e:71:a4:e0:40:b2:ae:c8:ba: e9:b8:e7:16:44:08:66:74:ed:91:70:f7:0e:72:85: f1:85:0b:97:cb:35:8c:bb:1a:a5:36:8a:a4:d5:82: 24:29:ba:bc:a4:d0:83:96:14:7a:1f:0b:7a:97:8c: 39:c4:87:0c:da:11:b0:ff:9b:88:0f:52:2c:60:55: 55:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 149.112.78.0/24 199.7.70.0/24 199.33.230.0-199.33.233.255 IPv6: 2001:500:210::/48 2001:503:ff40::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b6:a5:cc:06:58:4f:db:f9:9e:b6:fd:a6:48:f3:eb:2f:ae: 4e:ee:b0:84:23:4e:e1:e2:fa:60:33:3f:f5:31:99:6d:2c:c5: ab:2d:43:92:f0:75:e2:d7:b9:c0:06:92:7f:65:ab:12:9f:b7: 24:db:8f:eb:39:7c:88:53:54:88:51:a5:42:87:c6:f0:de:12: a4:5f:33:fa:8c:dd:c9:4b:61:b9:b6:27:54:57:6a:2d:62:c4: 22:3d:20:8f:d3:8a:26:c1:ff:bc:ad:02:df:7f:b3:3c:a1:32: 6f:89:9d:89:39:bd:ec:00:d4:6a:ca:ea:01:07:f7:f9:b3:fa: c6:1e:58:b4:46:ef:0d:21:03:a9:52:4f:e4:7b:7a:50:ff:bd: ae:eb:e5:31:f2:ec:16:5b:f3:1d:92:ad:d3:94:f0:eb:82:f0: 52:ac:96:52:aa:13:e0:8e:27:7a:76:84:09:66:40:fc:54:6c: 35:fc:a2:59:41:f7:fb:1d:f8:a0:78:d2:5d:e6:90:88:6b:94: e8:72:a9:61:eb:81:1e:7f:a9:9a:c8:43:d0:10:3f:66:16:38: 76:2e:72:7c:16:e6:90:42:8b:97:a0:c8:2a:e6:3d:81:1f:46: 1e:d1:8e:a9:89:7f:7b:40:18:19:10:14:1f:34:e6:43:78:b2: 5e:03:81:23 -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWE08Df/Wkxlq1MCbbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDMyMDIwMTgxN1oXDTI4MDMxMDEzNDUyNFowLzEtMCsGA1UEAxMk MzJkOWI2YTctMmVkNS00NDhiLTliY2ItOGQyNjJhY2MzZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU4eKSBS2Ab9XxdU3jqh225rikKYvqgRw1SE RkdB4f8RTjfoC/bXk1D4RSzHa8byoL9NrEeQF/ihKS86VsYwkc1tD9JBe0P0m+53 Kd8VmQvvJm9IqrPRCtJg31GCgc1gbYyGh7mp50bOjha+AFl7tgeV5+tIVb6TFBCl P11Q+zXcaF34DYJS11p/TZkirw02e6PLz5W1ATMnmLiQWmVEIBdBVmUkTSL8OLpp +g0LnBvgvRYHCl2YtJ9+caTgQLKuyLrpuOcWRAhmdO2RcPcOcoXxhQuXyzWMuxql Noqk1YIkKbq8pNCDlhR6Hwt6l4w5xIcM2hGw/5uID1IsYFVVjwIDAQABo4IELTCC BCkwHQYDVR0OBBYEFD9/qne/r+crKrPK0h6sTBABHaQqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z MmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFjYzNmNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzMyZDliNmE3LTJlZDUtNDQ4Yi05 YmNiLThkMjYyYWNjM2Y3Ni8zMmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFj YzNmNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCAEAgABMBoDBACVcE4DBADHB0YwDAMEAcch5gMEAcch6DAYBAIA AjASAwcAIAEFAAIQAwcCIAEFA/9AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAe2pcwGWE/b+Z62/aZI8+sv rk7usIQjTuHi+mAzP/UxmW0sxastQ5LwdeLXucAGkn9lqxKftyTbj+s5fIhTVIhR pUKHxvDeEqRfM/qM3clLYbm2J1RXai1ixCI9II/TiibB/7ytAt9/szyhMm+JnYk5 vewA1GrK6gEH9/mz+sYeWLRG7w0hA6lST+R7elD/va7r5THy7BZb8x2SrdOU8OuC 8FKsllKqE+COJ3p2hAlmQPxUbDX8ollB9/sd+KB40l3mkIhrlOhyqWHrgR5/qZrI Q9AQP2YWOHYucnwW5pBCi5egyCrmPYEfRh7RjqmJf3tAGBkQFB805kN4sl4DgSM= -----END CERTIFICATE-----Generated at Sun Mar 22 06:55:06 2026 by rpki-client