$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer File: 59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer (raw, json) Hash identifier: /EjfDn3/AlppXkliGI2tOWhAZrnJMDBVUgYdHrLAWZk= Subject key identifier: B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848FC71687A78181487DDB47800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Feb 2025 06:19:06 +0000 Certificate not after: Sun 30 May 2027 05:19:06 +0000 Subordinate resources: IP: 23.133.228.0/24 IP: 2602:f6fb::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fc:71:68:7a:78:18:14:87:dd:b4:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 24 06:19:06 2025 GMT Not After : May 30 05:19:06 2027 GMT Subject: CN=59f6e545-1944-4ca0-a155-69ded2cdb1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:83:5f:de:ec:2e:de:5a:26:67:e5:e6:aa:86: 87:c6:bf:c5:21:29:a9:ae:91:fd:fc:14:de:16:d4: a2:97:43:10:07:04:95:0a:4a:0f:cd:2f:d7:a1:b1: 51:20:1b:79:b6:66:68:1b:9b:8f:92:be:04:1d:84: 32:ac:84:25:e6:8d:97:13:c3:8c:5a:89:9e:7f:2a: 79:cf:41:26:c8:60:99:f8:05:88:b3:68:9c:7c:45: 04:49:fe:62:d8:c0:37:4d:82:8b:02:45:1f:bb:2f: 53:d3:b4:ca:99:bb:52:b8:e7:49:6f:6c:57:f4:89: e2:e3:49:59:b1:ca:16:64:c0:92:39:a7:98:dd:0b: 59:01:45:87:90:8b:df:66:fa:20:6d:f5:3c:ba:de: 26:f3:f1:d0:69:81:a4:83:aa:2a:62:87:e9:00:ce: f1:4e:87:ad:8a:c8:ab:1a:66:5f:3a:58:3e:e0:d8: 2c:b8:14:b3:d1:3c:a7:3a:18:b4:c6:2a:53:a5:51: b0:5f:b0:1c:33:1f:e7:1a:22:b2:fc:2b:04:6c:4c: 76:51:7d:b7:a3:9d:7f:e4:91:1e:26:ee:62:43:ab: 4d:00:91:0c:e9:91:3d:7f:96:20:b4:e2:da:d3:e9: a4:63:99:07:aa:d8:44:27:1f:b8:c9:da:97:54:1d: d4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.133.228.0/24 IPv6: 2602:f6fb::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f0:7c:64:c8:9d:6f:71:80:fc:2f:5e:af:1a:f9:e5:ce:de: 66:2b:0a:e2:9e:02:f9:51:9f:ca:80:37:8b:5a:d1:0d:6f:00: 92:14:90:1e:97:9f:71:3d:47:f5:b8:55:c5:ac:50:55:42:28: 6b:36:e5:87:d2:eb:d5:6d:11:2e:02:85:e2:5c:d0:f3:65:f0: f9:f4:57:78:85:91:c2:91:33:b4:0c:31:82:7c:d5:ed:3e:69: 79:3e:01:49:8c:d8:4b:1d:e5:c2:0b:f1:7a:00:03:bc:ef:58: 0a:c2:93:6e:19:7c:f5:1b:63:35:35:98:7f:08:d5:89:8d:e4: 84:a2:2a:63:97:1e:3e:4a:ac:82:63:ce:40:e5:66:78:ff:89: 0c:4f:6d:37:dd:1d:3a:d0:df:f9:f0:75:e9:ea:57:86:ac:c0: 42:43:db:9b:61:2f:c8:91:eb:7f:2d:50:4c:5c:27:a9:5e:37: 34:7c:5f:40:30:d6:92:3e:b6:c8:ed:9d:ab:a2:fb:f8:bf:b3: 39:5c:d4:2c:a2:60:24:0a:74:7c:c3:d5:be:06:8b:bf:59:42: 95:f1:77:fc:f4:83:2e:79:27:42:57:e5:e1:ac:d8:ef:0e:b6: 42:3a:cf:55:aa:41:b5:f9:a5:0d:cf:a8:d5:b8:72:28:59:a0: 35:bb:4b:f4 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEj8cWh6eBgUh920eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNDA2MTkwNloXDTI3MDUzMDA1MTkwNlowLzEtMCsGA1UEAxMk NTlmNmU1NDUtMTk0NC00Y2EwLWExNTUtNjlkZWQyY2RiMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5INf3uwu3lomZ+XmqoaHxr/FISmprpH9/BTe FtSil0MQBwSVCkoPzS/XobFRIBt5tmZoG5uPkr4EHYQyrIQl5o2XE8OMWomefyp5 z0EmyGCZ+AWIs2icfEUESf5i2MA3TYKLAkUfuy9T07TKmbtSuOdJb2xX9Ini40lZ scoWZMCSOaeY3QtZAUWHkIvfZvogbfU8ut4m8/HQaYGkg6oqYofpAM7xToetisir GmZfOlg+4NgsuBSz0TynOhi0xipTpVGwX7AcMx/nGiKy/CsEbEx2UX23o51/5JEe Ju5iQ6tNAJEM6ZE9f5YgtOLa0+mkY5kHqthEJx+4ydqXVB3UFwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFLa/rz4d6s48jHnhPHVCG//DZDeTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 OWY2ZTU0NS0xOTQ0LTRjYTAtYTE1NS02OWRlZDJjZGIxZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzU5ZjZlNTQ1LTE5NDQtNGNhMC1h MTU1LTY5ZGVkMmNkYjFmZi81OWY2ZTU0NS0xOTQ0LTRjYTAtYTE1NS02OWRlZDJj ZGIxZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXheQwDgQCAAIwCAMGACYC9vsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AETwfGTInW9xgPwvXq8a+eXO3mYrCuKeAvlRn8qAN4ta0Q1vAJIUkB6Xn3E9R/W4 VcWsUFVCKGs25YfS69VtES4CheJc0PNl8Pn0V3iFkcKRM7QMMYJ81e0+aXk+AUmM 2Esd5cIL8XoAA7zvWArCk24ZfPUbYzU1mH8I1YmN5ISiKmOXHj5KrIJjzkDlZnj/ iQxPbTfdHTrQ3/nwdenqV4aswEJD25thL8iR638tUExcJ6leNzR8X0Aw1pI+tsjt naui+/i/szlc1CyiYCQKdHzD1b4Gi79ZQpXxd/z0gy55J0JX5eGs2O8OtkI6z1Wq QbX5pQ3PqNW4cihZoDW7S/Q= -----END CERTIFICATE-----Generated at Fri Apr 4 16:20:29 2025 by rpki-client