$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b399aa50-a75c-4ef1-9fa7-5278b22697c4.cer File: b399aa50-a75c-4ef1-9fa7-5278b22697c4.cer (raw, json) Hash identifier: fMgNIKlQkgP0DZmCcAaREgu93lHugWAOaZT1A7Wyro8= Subject key identifier: 9C:9F:7B:67:BB:B6:A0:09:C0:58:57:BB:E6:25:7A:7B:9D:50:65:2E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285849C324B37ACFC5593B448E2680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b399aa50-a75c-4ef1-9fa7-5278b22697c4/b399aa50-a75c-4ef1-9fa7-5278b22697c4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b399aa50-a75c-4ef1-9fa7-5278b22697c4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 May 2025 10:30:24 +0000 Certificate not after: Sun 04 Apr 2027 14:12:20 +0000 Subordinate resources: AS: 399464 IP: 198.135.180.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:24:b3:7a:cf:c5:59:3b:44:8e:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 6 10:30:24 2025 GMT Not After : Apr 4 14:12:20 2027 GMT Subject: CN=b399aa50-a75c-4ef1-9fa7-5278b22697c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:ad:4a:95:51:88:d3:b4:10:34:dc:65:5b: 6d:44:f3:78:5e:35:b4:e7:0f:1e:c8:b0:81:0f:2d: b1:5e:b7:bc:d7:ae:5a:ce:3c:c2:95:13:ea:c5:91: 99:3c:32:5e:48:de:3c:10:8e:e5:eb:da:8c:6f:ce: 43:e8:93:d9:36:68:2a:9c:85:68:7a:eb:24:53:b8: b6:2f:d4:7c:c6:3e:12:69:f6:de:fc:92:9a:57:5a: ec:13:89:e5:4f:63:1c:28:b7:b3:8f:65:bc:f4:cb: 11:0b:92:7f:c9:b7:ca:95:b2:16:5e:76:11:ec:2c: bb:cc:97:b3:bd:e1:42:28:16:cc:68:40:21:a9:da: b0:5c:e4:ae:3c:32:1e:5c:fc:2a:a9:ba:34:02:a9: 2d:79:63:27:a7:fc:20:56:7d:3b:5f:cd:37:05:d1: b9:e8:da:98:d3:bb:07:f1:c3:4f:45:bf:ca:7a:b9: a4:7b:15:87:66:06:4d:39:38:14:79:4b:e3:f2:36: 55:23:f0:6e:8c:0a:a7:44:d4:9f:b2:6b:c6:d1:7a: 21:6a:f8:29:ab:f4:ec:81:08:99:9b:ff:fa:54:23: 3f:9d:78:7a:a0:01:d6:50:b7:03:49:1b:1d:d7:18: 06:f2:d7:f1:95:6b:0b:3f:b0:e4:2c:ce:23:f8:42: bb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9F:7B:67:BB:B6:A0:09:C0:58:57:BB:E6:25:7A:7B:9D:50:65:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b399aa50-a75c-4ef1-9fa7-5278b22697c4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b399aa50-a75c-4ef1-9fa7-5278b22697c4/b399aa50-a75c-4ef1-9fa7-5278b22697c4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 198.135.180.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399464 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:8b:36:37:08:10:c6:2f:cb:9f:16:12:e0:83:cd:9b:ab:1b: a8:79:88:c6:c2:4c:b5:6c:79:63:23:f3:a6:2c:de:41:7a:6b: f7:72:28:57:1b:7a:93:db:b7:d4:49:72:d5:f6:8f:00:87:6b: 96:44:1f:ef:f7:19:31:f6:af:08:8d:17:31:34:79:7c:61:2a: cf:ec:97:3b:6d:5f:2c:41:b2:f8:ec:a9:8f:bb:a1:69:76:73: 40:ee:ec:12:35:82:c3:24:28:42:fa:21:2e:12:54:9e:83:8f: 7d:81:4d:d6:da:ac:6b:51:0f:8f:47:c4:74:61:1e:c2:0e:b9: 4d:38:be:cb:6a:7b:65:60:e2:bb:19:b2:50:e7:7b:32:bf:fe: 7b:80:ff:b4:f9:21:38:0b:72:63:95:95:0f:97:ad:1d:0c:8b: 8b:ef:4d:0d:d1:79:6e:10:f8:3b:20:2c:9f:50:c6:e7:6c:ae: f4:a4:8f:f5:44:20:5a:bf:86:9e:ff:e9:2d:91:7a:d5:b9:05: c7:0c:36:8d:af:a0:e2:e0:61:aa:8a:3d:d7:1c:4b:98:9f:8a: 4f:b2:81:72:33:d8:87:7a:eb:8b:92:df:ff:27:59:0a:98:fa: 32:d6:7c:7b:a2:41:5f:a1:a6:96:da:00:02:63:df:f4:75:68: f3:10:18:cb -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEnDJLN6z8VZO0SOJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDUwNjEwMzAyNFoXDTI3MDQwNDE0MTIyMFowLzEtMCsGA1UEAxMk YjM5OWFhNTAtYTc1Yy00ZWYxLTlmYTctNTI3OGIyMjY5N2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOatSpVRiNO0EDTcZVttRPN4XjW05w8eyLCB Dy2xXre8165azjzClRPqxZGZPDJeSN48EI7l69qMb85D6JPZNmgqnIVoeuskU7i2 L9R8xj4Safbe/JKaV1rsE4nlT2McKLezj2W89MsRC5J/ybfKlbIWXnYR7Cy7zJez veFCKBbMaEAhqdqwXOSuPDIeXPwqqbo0AqkteWMnp/wgVn07X803BdG56NqY07sH 8cNPRb/KermkexWHZgZNOTgUeUvj8jZVI/BujAqnRNSfsmvG0Xohavgpq/TsgQiZ m//6VCM/nXh6oAHWULcDSRsd1xgG8tfxlWsLP7DkLM4j+EK7GwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJyfe2e7tqAJwFhXu+YlenudUGUuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i Mzk5YWE1MC1hNzVjLTRlZjEtOWZhNy01Mjc4YjIyNjk3YzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2IzOTlhYTUwLWE3NWMtNGVmMS05 ZmE3LTUyNzhiMjI2OTdjNC9iMzk5YWE1MC1hNzVjLTRlZjEtOWZhNy01Mjc4YjIy Njk3YzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGh7QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhhoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJaLNjcIEMYvy58WEuCDzZurG6h5iMbCTLVseWMj86Ys3kF6 a/dyKFcbepPbt9RJctX2jwCHa5ZEH+/3GTH2rwiNFzE0eXxhKs/slzttXyxBsvjs qY+7oWl2c0Du7BI1gsMkKEL6IS4SVJ6Dj32BTdbarGtRD49HxHRhHsIOuU04vstq e2Vg4rsZslDnezK//nuA/7T5ITgLcmOVlQ+XrR0Mi4vvTQ3ReW4Q+DsgLJ9Qxuds rvSkj/VEIFq/hp7/6S2RetW5BccMNo2voOLgYaqKPdccS5ifik+ygXIz2Id664uS 3/8nWQqY+jLWfHuiQV+hppbaAAJj3/R1aPMQGMs= -----END CERTIFICATE-----Generated at Wed Nov 5 02:42:16 2025 by rpki-client