$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5.cer File: ab5b105c-8dbd-45f0-ac97-15de885200c5.cer (raw, json) Hash identifier: OYp8/4t1WZoULyKbWur8SJucbUECrOUbWrkVQuCrhvA= Subject key identifier: 44:D3:F7:A3:DF:11:1F:5E:E6:F8:9F:17:2E:A9:27:30:30:E3:96:64 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848A202874F7738CC60CE146940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ab5b105c-8dbd-45f0-ac97-15de885200c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jan 2025 20:52:56 +0000 Certificate not after: Tue 27 Apr 2027 19:52:56 +0000 Subordinate resources: IP: 69.59.30.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:02:87:4f:77:38:cc:60:ce:14:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 22 20:52:56 2025 GMT Not After : Apr 27 19:52:56 2027 GMT Subject: CN=ab5b105c-8dbd-45f0-ac97-15de885200c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2b:c3:dd:70:a1:b1:f7:6a:b6:8c:08:01:2f: 3a:43:49:f4:e6:66:2e:93:02:88:04:49:a7:f2:26: e9:71:76:1a:45:f3:ee:e8:d5:c8:3b:a8:89:9d:5c: c7:e5:72:b3:47:25:c2:8a:26:b4:67:e5:33:a8:e2: b5:f5:6f:59:eb:00:e7:05:6c:93:57:b8:e3:b4:2d: 93:80:51:bb:11:0a:9c:94:71:c5:04:af:0f:46:f3: 8e:ec:d5:40:4d:eb:da:90:56:ff:08:54:d1:b4:db: 2a:c3:3d:a5:42:66:0b:7a:0a:46:f9:a9:5d:c1:c8: 37:fc:e6:81:80:12:9a:7c:b6:5c:20:4c:b5:53:4a: 07:d0:91:91:ed:a8:16:4a:04:6e:a3:3b:5b:7a:0d: e6:64:21:b8:1d:14:d6:58:1a:b3:6c:fe:aa:96:5f: 9e:5e:5e:7a:0a:6c:c9:96:08:83:a8:86:6e:65:49: 6e:6a:e3:4b:6f:15:ac:ef:af:87:b8:62:51:e1:32: 1f:0a:7f:3c:44:b5:8a:89:ee:df:f2:fd:d3:60:ba: 1e:d6:f7:54:c5:d3:11:70:8a:0d:31:4f:e6:04:45: 6b:fb:6e:e1:fa:e6:c2:62:8c:4b:5b:9c:aa:21:b7: 59:0a:d3:ee:54:d5:70:da:05:14:1c:60:af:7c:d8: fc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D3:F7:A3:DF:11:1F:5E:E6:F8:9F:17:2E:A9:27:30:30:E3:96:64 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ab5b105c-8dbd-45f0-ac97-15de885200c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 69.59.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:38:4f:d9:23:f9:8d:75:79:ad:75:13:45:e6:8b:de:77:ef: 35:51:c7:f5:52:2b:72:95:54:60:a7:f7:67:d1:dc:6d:53:30: 3e:44:2a:16:8d:aa:e5:12:c5:d2:ef:de:c8:fa:15:b4:4e:6d: 05:49:54:a6:13:e6:d0:3c:11:a8:c6:5e:9d:1a:07:b3:51:13: 79:c6:48:9a:b3:ac:c2:0f:43:e6:07:e7:14:ef:3d:e6:73:a8: 06:75:cb:d6:2b:df:cc:de:a9:36:e1:3e:bb:a8:62:cb:b1:aa: 65:ce:7c:92:f5:78:1c:5e:6b:d5:52:cf:89:b5:44:8c:a0:7c: 4d:98:3f:c2:43:13:0c:66:bf:4c:84:f2:fa:41:f4:3c:5e:ea: 10:6f:b8:18:0b:f8:91:79:2a:32:e5:83:fc:ed:23:56:9d:f1: a3:03:d5:11:14:c3:1f:89:dd:e5:17:f9:13:7a:4e:2b:0e:eb: 9c:21:0a:97:5b:4f:91:bd:32:89:19:4d:2f:14:c3:d1:1f:1c: 4c:4e:77:70:fc:b7:48:88:6e:17:0b:f7:eb:b3:5f:8f:f2:20: c5:43:9e:58:38:2c:25:b7:a7:d6:30:73:22:d8:14:7d:a9:7b: 8a:be:d6:5a:0b:ad:91:ea:1f:40:63:d9:b1:c3:c9:f4:e3:cd: 75:e2:6f:1f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEiiAodPdzjMYM4UaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyMjIwNTI1NloXDTI3MDQyNzE5NTI1NlowLzEtMCsGA1UEAxMk YWI1YjEwNWMtOGRiZC00NWYwLWFjOTctMTVkZTg4NTIwMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ivD3XChsfdqtowIAS86Q0n05mYukwKIBEmn 8ibpcXYaRfPu6NXIO6iJnVzH5XKzRyXCiia0Z+UzqOK19W9Z6wDnBWyTV7jjtC2T gFG7EQqclHHFBK8PRvOO7NVATevakFb/CFTRtNsqwz2lQmYLegpG+aldwcg3/OaB gBKafLZcIEy1U0oH0JGR7agWSgRuoztbeg3mZCG4HRTWWBqzbP6qll+eXl56CmzJ lgiDqIZuZUluauNLbxWs76+HuGJR4TIfCn88RLWKie7f8v3TYLoe1vdUxdMRcIoN MU/mBEVr+27h+ubCYoxLW5yqIbdZCtPuVNVw2gUUHGCvfNj8xwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFETT96PfER9e5vifFy6pJzAw45ZkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h YjViMTA1Yy04ZGJkLTQ1ZjAtYWM5Ny0xNWRlODg1MjAwYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FiNWIxMDVjLThkYmQtNDVmMC1h Yzk3LTE1ZGU4ODUyMDBjNS9hYjViMTA1Yy04ZGJkLTQ1ZjAtYWM5Ny0xNWRlODg1 MjAwYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABFOx4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjDhP2SP5jXV5rXUTReaL 3nfvNVHH9VIrcpVUYKf3Z9HcbVMwPkQqFo2q5RLF0u/eyPoVtE5tBUlUphPm0DwR qMZenRoHs1ETecZImrOswg9D5gfnFO895nOoBnXL1ivfzN6pNuE+u6hiy7GqZc58 kvV4HF5r1VLPibVEjKB8TZg/wkMTDGa/TITy+kH0PF7qEG+4GAv4kXkqMuWD/O0j Vp3xowPVERTDH4nd5Rf5E3pOKw7rnCEKl1tPkb0yiRlNLxTD0R8cTE53cPy3SIhu Fwv367Nfj/IgxUOeWDgsJben1jBzItgUfal7ir7WWgutkeofQGPZscPJ9OPNdeJv Hw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:18:18 2025 by rpki-client