$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380.cer File: 5c7a2328-dcf6-422c-86d8-1338335ce380.cer (raw, json) Hash identifier: NGCrxul9n88GOEbtOXW1IYyxS0HLkaNJRodJVlOe43g= Subject key identifier: 3D:92:EA:B1:35:C9:66:55:3C:1A:19:BE:AC:96:B7:C7:7B:92:45:0C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858496001FEC35B893C0E011F4E60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/5c7a2328-dcf6-422c-86d8-1338335ce380.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 31 Mar 2025 22:15:27 +0000 Certificate not after: Sun 13 Jun 2027 05:22:58 +0000 Subordinate resources: AS: 38439 IP: 199.127.129.0/24 IP: 2602:f831::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:01:fe:c3:5b:89:3c:0e:01:1f:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 31 22:15:27 2025 GMT Not After : Jun 13 05:22:58 2027 GMT Subject: CN=5c7a2328-dcf6-422c-86d8-1338335ce380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:28:e6:dd:ba:58:36:2f:19:2d:65:d4:ec: 41:48:d6:01:7d:b0:8d:f0:59:14:ce:ee:78:da:b6: 86:d3:4f:2d:f9:f9:b1:20:aa:18:2e:57:14:eb:50: 9e:7c:df:61:72:b6:23:d5:bb:63:fa:65:63:4e:6d: 8b:c2:05:02:1b:06:52:e5:0c:c6:2b:30:d8:57:aa: f2:74:0c:f5:20:76:8b:a5:5b:72:0c:49:a4:3f:04: 1b:95:b2:13:8d:f3:76:88:8f:d4:e7:c2:7c:8e:1d: 30:eb:75:00:d5:f6:a4:c9:0e:56:bf:e2:81:53:3e: 9e:09:b2:1d:d8:7c:c3:a0:ba:71:c2:9b:57:12:69: 28:8c:51:33:64:06:dd:bd:3d:89:0f:1a:a4:9f:6d: 67:24:a9:e9:a2:e8:03:66:6e:1c:e7:40:dd:38:96: 9e:f2:1c:b0:56:31:71:92:f2:20:a3:19:3e:b8:78: ee:87:6e:d9:a5:61:95:8e:1c:52:ae:3c:72:66:09: e1:83:6c:63:df:63:fd:38:f3:e2:70:c0:c0:7a:36: b6:bc:bf:af:41:e3:5e:78:51:e0:db:67:6f:9b:7c: 3d:73:ca:47:62:06:42:c4:79:f8:89:fd:63:1c:1d: f8:f7:71:da:ce:57:45:38:de:49:22:40:29:06:da: ae:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:92:EA:B1:35:C9:66:55:3C:1A:19:BE:AC:96:B7:C7:7B:92:45:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/5c7a2328-dcf6-422c-86d8-1338335ce380.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 199.127.129.0/24 IPv6: 2602:f831::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38439 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:07:c3:4e:3a:fc:33:ab:c6:c6:06:68:8e:4b:84:65:25:23: e6:ff:a8:b0:bb:e0:26:db:0c:e6:43:59:25:e4:39:90:b4:1e: e4:70:34:7b:ff:8b:2b:f0:79:66:f9:f5:26:96:6c:53:cd:8f: df:77:e1:93:32:e4:79:f3:40:4e:ae:41:ca:a1:0c:a5:5a:bf: bd:16:58:b2:b9:59:39:f9:d1:7f:8f:b9:41:af:9a:11:06:f4: cf:0e:5f:c7:de:0e:f5:7f:5e:2d:ca:03:e0:86:de:2a:ab:4d: 8b:a4:92:78:b2:a6:4d:04:b3:c5:ab:e6:df:2d:cb:28:cc:e8: 10:17:64:a7:01:09:31:37:b2:7d:59:26:26:36:cb:a1:93:4b: 35:58:76:78:e2:dd:f7:92:c8:69:40:b1:e3:8c:65:a4:32:32: 84:8e:f3:05:06:e1:da:bc:be:fc:de:62:66:78:c8:f8:97:67: 8c:7d:14:cd:6a:d3:3d:09:89:fd:64:e8:9e:2d:b3:7d:6f:1a: bd:e1:82:41:4e:9b:4d:cc:b9:2c:e4:ff:48:63:ce:27:dd:f3: e2:ec:6c:37:1e:dd:2d:54:73:7d:26:ba:46:e2:a5:a7:5e:e5: 93:04:d9:c7:1f:a6:e8:7d:1c:40:7b:f3:a4:f7:aa:71:08:f6: 07:1b:3f:4e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWElgAf7DW4k8DgEfTmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMzMTIyMTUyN1oXDTI3MDYxMzA1MjI1OFowLzEtMCsGA1UEAxMk NWM3YTIzMjgtZGNmNi00MjJjLTg2ZDgtMTMzODMzNWNlMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSwo5t26WDYvGS1l1OxBSNYBfbCN8FkUzu54 2raG008t+fmxIKoYLlcU61CefN9hcrYj1btj+mVjTm2LwgUCGwZS5QzGKzDYV6ry dAz1IHaLpVtyDEmkPwQblbITjfN2iI/U58J8jh0w63UA1fakyQ5Wv+KBUz6eCbId 2HzDoLpxwptXEmkojFEzZAbdvT2JDxqkn21nJKnpougDZm4c50DdOJae8hywVjFx kvIgoxk+uHjuh27ZpWGVjhxSrjxyZgnhg2xj32P9OPPicMDAeja2vL+vQeNeeFHg 22dvm3w9c8pHYgZCxHn4if1jHB3493HazldFON5JIkApBtquNwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFD2S6rE1yWZVPBoZvqyWt8d7kkUMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 YzdhMjMyOC1kY2Y2LTQyMmMtODZkOC0xMzM4MzM1Y2UzODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVjN2EyMzI4LWRjZjYtNDIyYy04 NmQ4LTEzMzgzMzVjZTM4MC81YzdhMjMyOC1kY2Y2LTQyMmMtODZkOC0xMzM4MzM1 Y2UzODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADHf4EwDgQCAAIwCAMGACYC+DEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCWJzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPB8NOOvwzq8bGBmiOS4RlJSPm /6iwu+Am2wzmQ1kl5DmQtB7kcDR7/4sr8Hlm+fUmlmxTzY/fd+GTMuR580BOrkHK oQylWr+9FliyuVk5+dF/j7lBr5oRBvTPDl/H3g71f14tygPght4qq02LpJJ4sqZN BLPFq+bfLcsozOgQF2SnAQkxN7J9WSYmNsuhk0s1WHZ44t33kshpQLHjjGWkMjKE jvMFBuHavL783mJmeMj4l2eMfRTNatM9CYn9ZOieLbN9bxq94YJBTptNzLks5P9I Y84n3fPi7Gw3Ht0tVHN9JrpG4qWnXuWTBNnHH6bofRxAe/Ok96pxCPYHGz9O -----END CERTIFICATE-----Generated at Sun Apr 27 02:12:14 2025 by rpki-client