$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer File: 32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer (raw, json) Hash identifier: t5llhW8Orl7SMCjZy2JwYhY9UHr+2zhpJvMYtR2f46E= Subject key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A01751633D8C28B9ACC3D7250 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 May 2025 18:12:29 +0000 Certificate not after: Tue 31 Aug 2027 18:12:29 +0000 Subordinate resources: AS: 31881 AS: 32806 AS: 54570 IP: 67.21.16.0/20 IP: 74.113.252.0/22 IP: 74.119.208.0/21 IP: 158.247.12.0/22 IP: 192.187.0.0/22 IP: 208.114.96.0/19 IP: 216.7.144.0/20 IP: 216.130.32.0/20 IP: 2604:9900::/32 IP: 2607:f7e8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:01:75:16:33:d8:c2:8b:9a:cc:3d:72:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 28 18:12:29 2025 GMT Not After : Aug 31 18:12:29 2027 GMT Subject: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:74:08:ba:15:23:d0:85:1d:06:08:ec:8c:31: e4:54:29:54:f2:eb:d8:fd:e6:b1:86:e3:ae:cf:16: 5f:61:db:02:d1:fb:fa:5a:9e:7b:2c:db:9e:6b:af: 10:28:24:4d:24:65:1d:e5:3d:81:c5:1e:39:f0:32: bf:ea:68:12:b1:49:17:58:5a:81:02:06:3e:d7:d8: 66:4d:a4:a8:f6:ab:e7:78:e8:8c:8c:a9:06:b7:68: 3b:e3:32:f4:fb:28:79:75:4c:88:4b:0b:ac:cc:3d: 50:84:f1:c2:27:e0:17:bb:f3:9c:ba:7e:e4:85:fa: f6:aa:24:9b:5f:cc:3b:73:12:ff:35:17:05:ff:c4: 75:b5:c3:5e:9b:2d:a3:a8:b1:21:83:b9:ae:1d:6e: 1a:cf:d8:e8:02:57:c3:87:f9:ca:1f:6c:19:2d:ee: 37:7d:b5:07:a2:91:e0:f6:1d:b1:5e:5c:94:d8:97: b9:1e:ab:e7:67:4a:0d:a2:3d:40:8b:e0:b9:9e:54: 8a:b4:76:d5:db:a1:1f:30:0d:fb:f7:08:01:81:a7: c0:ed:af:23:78:21:07:b3:80:03:b0:93:31:88:e8: ca:ca:3b:3b:88:85:68:66:61:49:da:5e:cb:ef:34: be:ab:a9:62:b3:2c:30:d0:09:95:aa:fa:7e:dc:21: fd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 67.21.16.0/20 74.113.252.0/22 74.119.208.0/21 158.247.12.0/22 192.187.0.0/22 208.114.96.0/19 216.7.144.0/20 216.130.32.0/20 IPv6: 2604:9900::/32 2607:f7e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31881 32806 54570 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:64:d6:22:33:73:b5:0f:0c:43:ac:af:1c:58:75:2e:3d:21: 98:56:a6:88:63:ed:22:93:9d:b7:bb:ec:11:bf:7f:91:e7:a0: 30:c5:6e:0f:e8:8a:21:96:9d:c5:f3:92:7b:b3:28:cb:90:31: b0:a9:09:d0:18:60:6a:6d:18:39:77:3f:4f:ea:0a:1f:9c:a3: 07:b4:70:0a:31:58:84:01:2c:36:9f:a5:83:34:79:96:79:ab: 1f:86:dd:73:3c:fd:34:03:2e:9c:d7:2c:b8:66:c5:ad:3f:03: ac:1b:d1:0b:c1:6d:6a:d4:51:d1:ea:11:c5:39:b9:d7:a0:0a: 78:a5:0f:db:6c:fb:81:e2:23:b0:47:22:00:d4:e3:d7:d9:29: 31:74:a0:81:f8:58:b6:ff:af:73:2d:3f:70:48:8d:61:98:a5: b5:a7:b4:8b:03:26:90:18:6b:a8:09:85:72:16:7f:db:8b:2d: 27:ef:76:e0:8c:a3:da:82:c7:dd:e1:56:ba:43:d0:f4:a8:5d: 65:76:ba:34:b9:9f:0f:76:a8:09:e3:2b:07:80:5e:80:d5:30: a3:97:fb:a7:a5:a8:d2:8c:10:a8:d3:f1:28:27:84:07:7f:5b: 5b:d1:03:47:90:8c:ae:fd:03:ca:31:e5:65:20:90:83:c4:df: 78:67:a6:46 -----BEGIN CERTIFICATE----- MIIHUjCCBjqgAwIBAgIUAQ0Mn0MoWEoBdRYz2MKLmsw9clAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyODE4MTIyOVoXDTI3MDgzMTE4MTIyOVowLzEtMCsGA1UEAxMk MzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1OGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XQIuhUj0IUdBgjsjDHkVClU8uvY/eaxhuOu zxZfYdsC0fv6Wp57LNuea68QKCRNJGUd5T2BxR458DK/6mgSsUkXWFqBAgY+19hm TaSo9qvneOiMjKkGt2g74zL0+yh5dUyISwuszD1QhPHCJ+AXu/Ocun7khfr2qiSb X8w7cxL/NRcF/8R1tcNemy2jqLEhg7muHW4az9joAlfDh/nKH2wZLe43fbUHopHg 9h2xXlyU2Je5HqvnZ0oNoj1Ai+C5nlSKtHbV26EfMA379wgBgafA7a8jeCEHs4AD sJMxiOjKyjs7iIVoZmFJ2l7L7zS+q6lisyww0AmVqvp+3CH9IQIDAQABo4IEZDCC BGAwHQYDVR0OBBYEFEa8XFHq1wrD8drXef3X1tK6sy8LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z MmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzMyYmE3ZmY0LTI0MDctNGVlMi1h ZjI0LWJkMDY0MWU1NThkMC8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFl NTU4ZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwXwYIKwYBBQUH AQcBAf8EUDBOMDYEAgABMDADBARDFRADBAJKcfwDBANKd9ADBAKe9wwDBALAuwAD BAXQcmADBATYB5ADBATYgiAwFAQCAAIwDgMFACYEmQADBQAmB/foMCMGCCsGAQUF BwEIAQH/BBQwEqAQMA4CAnyJAgMAgCYCAwDVKjBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARZNYiM3O1DwxD rK8cWHUuPSGYVqaIY+0ik523u+wRv3+R56AwxW4P6Iohlp3F85J7syjLkDGwqQnQ GGBqbRg5dz9P6gofnKMHtHAKMViEASw2n6WDNHmWeasfht1zPP00Ay6c1yy4ZsWt PwOsG9ELwW1q1FHR6hHFObnXoAp4pQ/bbPuB4iOwRyIA1OPX2SkxdKCB+Fi2/69z LT9wSI1hmKW1p7SLAyaQGGuoCYVyFn/biy0n73bgjKPagsfd4Va6Q9D0qF1ldro0 uZ8PdqgJ4ysHgF6A1TCjl/unpajSjBCo0/EoJ4QHf1tb0QNHkIyu/QPKMeVlIJCD xN94Z6ZG -----END CERTIFICATE-----Generated at Sun Oct 26 00:45:41 2025 by rpki-client