$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer File: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer (raw, json) Hash identifier: rg8h8fOq61gDfD2XyStHoju9EzAkXoykn+7VbxVU+vE= Subject key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A0F6E9AFE184698300CAA7C60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Jun 2025 18:20:45 +0000 Certificate not after: Sun 05 Sep 2027 18:20:45 +0000 Subordinate resources: IP: 129.98.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0f:6e:9a:fe:18:46:98:30:0c:aa:7c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 2 18:20:45 2025 GMT Not After : Sep 5 18:20:45 2027 GMT Subject: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:56:aa:1b:5d:f5:1f:aa:2f:65:ad:14:d2:14: c7:d9:88:9d:b3:57:9b:42:b6:c8:be:eb:13:f6:eb: 7b:03:77:84:b6:44:d8:fe:9c:89:a9:cb:4b:2e:de: 6b:0b:8a:00:8e:d8:a0:e4:40:20:4f:a1:09:0b:7c: 01:d3:f9:da:dc:ee:7c:45:de:b5:88:3b:d3:51:1a: c4:9c:f1:18:e9:34:8e:27:37:34:ad:ac:5d:02:d1: 3f:2b:d5:5a:30:85:8e:a1:0f:6b:b1:b6:9c:1f:6f: 66:4f:43:31:3c:f9:46:fa:2d:bb:0c:3b:f5:83:46: 16:e8:cf:64:a5:07:f2:d1:70:6d:be:32:7a:a1:9c: b7:77:d9:b7:f9:d3:f8:7d:19:0e:bc:16:7b:42:fe: f3:55:02:97:ab:41:2f:11:a7:0a:ad:21:9d:f9:79: fc:3a:32:49:f8:b0:4d:85:76:ff:3d:9b:be:80:06: e0:35:80:13:97:7f:db:c8:c6:3c:c1:ae:27:bc:a4: e0:d2:e7:dd:25:0a:cc:44:a0:0f:a2:af:ca:3f:cd: d7:9f:16:9e:d6:5a:64:06:76:f0:1d:99:5c:1c:1e: 03:db:a1:54:67:a1:f5:47:e1:85:8d:2a:96:d0:d8: c7:a6:65:66:81:01:b8:93:68:6c:8c:b1:27:aa:f4: 66:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 129.98.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:cc:c4:95:95:72:fe:de:21:5b:fd:e6:5c:33:a9:da:75:ff: 91:ae:b7:13:55:55:dc:a3:19:1f:25:61:f8:27:de:aa:3d:94: 03:9d:e7:d3:ba:51:a5:0c:95:7f:17:1c:de:af:3a:b0:25:97: 8a:ae:45:79:44:9e:85:02:6c:7e:65:cc:b4:83:e0:07:34:55: 5f:b7:af:0e:9e:b3:5e:c5:af:ec:71:2f:e2:c1:8b:b2:20:18: f5:d1:2e:3c:33:3a:17:2d:16:cd:4b:1b:0c:a1:4e:61:a2:00: 53:dd:3c:6a:3b:b6:1b:fe:6b:90:d3:eb:5b:34:b5:b6:26:ed: 74:00:52:26:ce:f8:d7:c8:02:22:a1:5a:f2:7d:ed:cc:a3:8c: d0:ce:42:d9:e3:0e:4f:71:4c:a2:0e:38:92:ad:cc:12:05:f5: 67:0b:d7:3a:19:14:10:8f:03:2b:b4:b8:2b:20:62:4c:bc:8b: ef:10:60:12:af:ec:96:47:f1:d0:10:ac:63:8f:ec:80:56:b7: fd:93:30:9a:25:3f:2b:4b:b0:76:c5:86:0b:d8:5a:86:95:0a: 1d:ea:f5:d6:0c:44:80:75:68:12:06:b1:1f:7d:b6:6c:a3:28: 58:27:5f:29:4e:18:52:61:74:33:f8:71:3e:62:d4:5a:30:4f: 97:ca:80:d8 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEoPbpr+GEaYMAyqfGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYwMjE4MjA0NVoXDTI3MDkwNTE4MjA0NVowLzEtMCsGA1UEAxMk MDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4YmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVaqG131H6ovZa0U0hTH2Yids1ebQrbIvusT 9ut7A3eEtkTY/pyJqctLLt5rC4oAjtig5EAgT6EJC3wB0/na3O58Rd61iDvTURrE nPEY6TSOJzc0raxdAtE/K9VaMIWOoQ9rsbacH29mT0MxPPlG+i27DDv1g0YW6M9k pQfy0XBtvjJ6oZy3d9m3+dP4fRkOvBZ7Qv7zVQKXq0EvEacKrSGd+Xn8OjJJ+LBN hXb/PZu+gAbgNYATl3/byMY8wa4nvKTg0ufdJQrMRKAPoq/KP83Xnxae1lpkBnbw HZlcHB4D26FUZ6H1R+GFjSqW0NjHpmVmgQG4k2hsjLEnqvRmxQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFH289rWocnwKgnxhEgQ2/oQrzBzRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w NDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzA0MGE5OGUxLTBjYjktNGUyMy05 MTBlLTIwZWM1ZGZlOGJlYy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRm ZThiZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCBYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGzMSVlXL+3iFb/eZcM6na df+RrrcTVVXcoxkfJWH4J96qPZQDnefTulGlDJV/FxzerzqwJZeKrkV5RJ6FAmx+ Zcy0g+AHNFVft68OnrNexa/scS/iwYuyIBj10S48MzoXLRbNSxsMoU5hogBT3Txq O7Yb/muQ0+tbNLW2Ju10AFImzvjXyAIioVryfe3Mo4zQzkLZ4w5PcUyiDjiSrcwS BfVnC9c6GRQQjwMrtLgrIGJMvIvvEGASr+yWR/HQEKxjj+yAVrf9kzCaJT8rS7B2 xYYL2FqGlQod6vXWDESAdWgSBrEffbZsoyhYJ18pThhSYXQz+HE+YtRaME+XyoDY -----END CERTIFICATE-----Generated at Sun Oct 26 00:44:33 2025 by rpki-client