$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3.cer File: 98c27bef-79eb-4153-b064-e68d263b6ae3.cer (raw, json) Hash identifier: D7NTSrbDj0chPXr3rapjgr/Fm442R/+LZk+teU9lB+M= Subject key identifier: A1:93:B3:16:A4:B7:75:34:E9:B0:F2:5B:7C:D6:96:E5:10:64:C3:C9 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858492A981A781557BCF0E8C5B340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/98c27bef-79eb-4153-b064-e68d263b6ae3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Mar 2025 19:04:15 +0000 Certificate not after: Tue 15 Jun 2027 19:04:15 +0000 Subordinate resources: AS: 400288 IP: 128.254.232.0/22 IP: 2602:fbf2::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2a:98:1a:78:15:57:bc:f0:e8:c5:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 12 19:04:15 2025 GMT Not After : Jun 15 19:04:15 2027 GMT Subject: CN=98c27bef-79eb-4153-b064-e68d263b6ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:03:b4:3b:b6:dc:fd:f0:09:22:98:7d:69: 8a:7e:35:1b:2b:b0:e3:c5:b1:ce:70:73:df:02:73: 5c:a8:cb:f1:87:8d:2f:42:34:99:2f:6a:bf:b8:97: b2:9e:8b:57:d9:e6:d8:d2:a6:8d:f9:a3:ed:2b:73: 94:43:6c:82:20:64:7d:ae:0a:dc:e9:19:eb:12:d9: 58:44:a4:ee:14:90:a1:0a:06:0e:7d:67:6b:e0:1f: 03:3b:53:ba:cc:e4:15:57:11:af:75:3d:d0:45:ee: e1:66:45:3b:55:f4:03:a0:f4:1d:63:5d:be:77:f2: 78:75:74:10:3e:4d:fe:43:71:6c:74:67:fe:1b:62: ed:63:d6:1f:af:c7:bd:c8:32:5a:60:47:a5:5a:47: 88:ea:5a:7c:d7:f8:ff:54:f5:63:28:52:b7:4d:8d: 6e:e8:b3:be:64:f4:00:4e:11:8a:e4:68:98:33:24: b8:8d:d9:d4:10:b6:bf:11:9c:0c:21:2e:16:c3:a1: 38:f9:7f:6d:c5:29:fa:0e:bd:4d:81:31:2e:08:e4: 98:56:c7:85:b1:bc:58:b5:30:e8:ca:cc:1a:d4:49: ec:d4:13:dc:cc:aa:43:c0:3c:f0:75:f4:f9:9b:7a: 2a:df:a1:29:e1:8c:90:59:3c:26:22:e2:b0:94:b5: 44:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:93:B3:16:A4:B7:75:34:E9:B0:F2:5B:7C:D6:96:E5:10:64:C3:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/98c27bef-79eb-4153-b064-e68d263b6ae3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 128.254.232.0/22 IPv6: 2602:fbf2::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400288 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:a4:fa:2d:5e:bb:5a:cb:f0:e4:45:de:0d:3b:12:90:b2:25: c5:c8:2b:2e:80:85:39:cb:a8:57:b9:be:79:a3:15:f4:59:1f: 6c:8a:db:5f:b9:0e:28:29:0c:ac:b7:25:38:8d:81:06:47:b0: 8a:37:e3:71:43:28:53:26:46:f2:a1:a4:68:2d:04:a2:24:f7: bc:a7:8e:10:a5:13:03:bb:c4:54:d4:e8:57:5a:d0:54:c0:ff: ec:20:5b:08:69:7f:21:84:ed:8c:da:7a:9d:25:89:09:28:1d: 82:80:f1:b4:c9:10:bc:68:74:1a:45:a2:e8:35:e4:ca:d7:32: 82:4c:17:e3:df:f2:96:a6:b5:ca:7e:b2:f0:5c:7a:1c:f4:60: 05:a3:fb:10:3d:45:8b:27:f6:ad:36:a7:0e:e3:18:01:d7:5b: a0:08:15:56:d9:8b:b4:78:28:b8:a1:cd:3a:1d:95:36:28:5a: 84:17:67:21:1a:b7:92:ad:c9:dd:7b:f1:1c:83:4e:f5:b1:18: 5e:73:ad:6c:bb:bc:3c:db:45:fa:f2:35:cd:08:aa:f0:cb:48: 44:a9:44:90:62:1b:70:7a:9a:2c:5d:4f:8f:29:a1:1a:f6:49: e0:4c:da:f1:f7:79:01:f1:7c:55:b9:1e:e1:2d:6e:b6:cc:ed: fb:1f:b6:c2 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEkqmBp4FVe88OjFs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxMjE5MDQxNVoXDTI3MDYxNTE5MDQxNVowLzEtMCsGA1UEAxMk OThjMjdiZWYtNzllYi00MTUzLWIwNjQtZTY4ZDI2M2I2YWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx8DtDu23P3wCSKYfWmKfjUbK7DjxbHOcHPf AnNcqMvxh40vQjSZL2q/uJeynotX2ebY0qaN+aPtK3OUQ2yCIGR9rgrc6RnrEtlY RKTuFJChCgYOfWdr4B8DO1O6zOQVVxGvdT3QRe7hZkU7VfQDoPQdY12+d/J4dXQQ Pk3+Q3FsdGf+G2LtY9Yfr8e9yDJaYEelWkeI6lp81/j/VPVjKFK3TY1u6LO+ZPQA ThGK5GiYMyS4jdnUELa/EZwMIS4Ww6E4+X9txSn6Dr1NgTEuCOSYVseFsbxYtTDo yswa1Ens1BPczKpDwDzwdfT5m3oq36Ep4YyQWTwmIuKwlLVEhwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKGTsxakt3U06bDyW3zWluUQZMPJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 OGMyN2JlZi03OWViLTQxNTMtYjA2NC1lNjhkMjYzYjZhZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk4YzI3YmVmLTc5ZWItNDE1My1i MDY0LWU2OGQyNjNiNmFlMy85OGMyN2JlZi03OWViLTQxNTMtYjA2NC1lNjhkMjYz YjZhZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKA/ugwDgQCAAIwCAMGBCYC+/IAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYboDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgpPotXrtay/DkRd4NOxKQsiXF yCsugIU5y6hXub55oxX0WR9sittfuQ4oKQystyU4jYEGR7CKN+NxQyhTJkbyoaRo LQSiJPe8p44QpRMDu8RU1OhXWtBUwP/sIFsIaX8hhO2M2nqdJYkJKB2CgPG0yRC8 aHQaRaLoNeTK1zKCTBfj3/KWprXKfrLwXHoc9GAFo/sQPUWLJ/atNqcO4xgB11ug CBVW2Yu0eCi4oc06HZU2KFqEF2chGreSrcnde/Ecg071sRhec61su7w820X68jXN CKrwy0hEqUSQYhtweposXU+PKaEa9kngTNrx93kB8XxVuR7hLW62zO37H7bC -----END CERTIFICATE-----Generated at Thu May 8 17:15:01 2025 by rpki-client