$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5.cer File: ab5b105c-8dbd-45f0-ac97-15de885200c5.cer (raw, json) Hash identifier: Mm+kBVGsElRwdayAsO1ok0aYjTM7d3nmTuIb4GZAznE= Subject key identifier: 44:D3:F7:A3:DF:11:1F:5E:E6:F8:9F:17:2E:A9:27:30:30:E3:96:64 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DA6A88250D50D9B0571235100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ab5b105c-8dbd-45f0-ac97-15de885200c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Apr 2026 00:45:17 +0000 Certificate not after: Mon 31 Jul 2028 00:45:17 +0000 Subordinate resources: IP: 69.59.30.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:a8:82:50:d5:0d:9b:05:71:23:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 28 00:45:17 2026 GMT Not After : Jul 31 00:45:17 2028 GMT Subject: CN=ab5b105c-8dbd-45f0-ac97-15de885200c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2b:c3:dd:70:a1:b1:f7:6a:b6:8c:08:01:2f: 3a:43:49:f4:e6:66:2e:93:02:88:04:49:a7:f2:26: e9:71:76:1a:45:f3:ee:e8:d5:c8:3b:a8:89:9d:5c: c7:e5:72:b3:47:25:c2:8a:26:b4:67:e5:33:a8:e2: b5:f5:6f:59:eb:00:e7:05:6c:93:57:b8:e3:b4:2d: 93:80:51:bb:11:0a:9c:94:71:c5:04:af:0f:46:f3: 8e:ec:d5:40:4d:eb:da:90:56:ff:08:54:d1:b4:db: 2a:c3:3d:a5:42:66:0b:7a:0a:46:f9:a9:5d:c1:c8: 37:fc:e6:81:80:12:9a:7c:b6:5c:20:4c:b5:53:4a: 07:d0:91:91:ed:a8:16:4a:04:6e:a3:3b:5b:7a:0d: e6:64:21:b8:1d:14:d6:58:1a:b3:6c:fe:aa:96:5f: 9e:5e:5e:7a:0a:6c:c9:96:08:83:a8:86:6e:65:49: 6e:6a:e3:4b:6f:15:ac:ef:af:87:b8:62:51:e1:32: 1f:0a:7f:3c:44:b5:8a:89:ee:df:f2:fd:d3:60:ba: 1e:d6:f7:54:c5:d3:11:70:8a:0d:31:4f:e6:04:45: 6b:fb:6e:e1:fa:e6:c2:62:8c:4b:5b:9c:aa:21:b7: 59:0a:d3:ee:54:d5:70:da:05:14:1c:60:af:7c:d8: fc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D3:F7:A3:DF:11:1F:5E:E6:F8:9F:17:2E:A9:27:30:30:E3:96:64 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ab5b105c-8dbd-45f0-ac97-15de885200c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 69.59.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:15:ba:51:46:13:d8:42:14:17:52:af:e7:07:c1:2f:e3:ac: 1f:83:40:45:8f:07:f1:8c:28:ff:66:dc:16:a9:29:c7:11:b3: 28:3b:2a:07:33:42:4e:4f:cb:bb:d1:68:fb:fb:b7:a1:7e:98: 61:65:19:20:9a:6c:5f:ff:ac:27:c1:c1:0a:ef:93:64:1e:42: e9:16:16:b9:dd:9e:91:57:52:87:fc:40:55:af:df:a7:f8:49: 92:57:00:d8:27:2a:3b:05:ae:c6:55:4a:bc:77:16:ee:eb:05: aa:7f:34:05:9d:31:9a:9c:d4:22:f8:ca:07:39:ac:f2:05:3f: 11:0b:10:96:95:f2:19:b0:d9:79:9e:59:60:a3:7d:68:66:ef: cc:98:3f:7f:66:4f:26:97:5d:dd:31:b0:13:98:00:a6:63:47: 5e:f3:f6:95:0b:bc:a1:e5:53:8c:2d:35:59:20:79:51:7f:8b: bf:c7:ed:3b:6c:ac:c4:4a:ed:fb:b6:f9:11:6a:a9:f9:3d:e8: e3:64:8e:1d:e7:8f:6b:a2:e3:c5:97:6d:f7:7d:cf:85:06:61: b1:b9:23:1c:c8:e9:8a:83:f0:71:7d:93:0b:2d:d5:2b:64:3b: a0:e7:80:14:20:4e:68:37:34:8b:31:5a:b1:97:73:04:1d:e9: 81:46:9f:73 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE2mqIJQ1Q2bBXEjUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyODAwNDUxN1oXDTI4MDczMTAwNDUxN1owLzEtMCsGA1UEAxMk YWI1YjEwNWMtOGRiZC00NWYwLWFjOTctMTVkZTg4NTIwMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ivD3XChsfdqtowIAS86Q0n05mYukwKIBEmn 8ibpcXYaRfPu6NXIO6iJnVzH5XKzRyXCiia0Z+UzqOK19W9Z6wDnBWyTV7jjtC2T gFG7EQqclHHFBK8PRvOO7NVATevakFb/CFTRtNsqwz2lQmYLegpG+aldwcg3/OaB gBKafLZcIEy1U0oH0JGR7agWSgRuoztbeg3mZCG4HRTWWBqzbP6qll+eXl56CmzJ lgiDqIZuZUluauNLbxWs76+HuGJR4TIfCn88RLWKie7f8v3TYLoe1vdUxdMRcIoN MU/mBEVr+27h+ubCYoxLW5yqIbdZCtPuVNVw2gUUHGCvfNj8xwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFETT96PfER9e5vifFy6pJzAw45ZkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h YjViMTA1Yy04ZGJkLTQ1ZjAtYWM5Ny0xNWRlODg1MjAwYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FiNWIxMDVjLThkYmQtNDVmMC1h Yzk3LTE1ZGU4ODUyMDBjNS9hYjViMTA1Yy04ZGJkLTQ1ZjAtYWM5Ny0xNWRlODg1 MjAwYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABFOx4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAxW6UUYT2EIUF1Kv5wfB L+OsH4NARY8H8Ywo/2bcFqkpxxGzKDsqBzNCTk/Lu9Fo+/u3oX6YYWUZIJpsX/+s J8HBCu+TZB5C6RYWud2ekVdSh/xAVa/fp/hJklcA2CcqOwWuxlVKvHcW7usFqn80 BZ0xmpzUIvjKBzms8gU/EQsQlpXyGbDZeZ5ZYKN9aGbvzJg/f2ZPJpdd3TGwE5gA pmNHXvP2lQu8oeVTjC01WSB5UX+Lv8ftO2ysxErt+7b5EWqp+T3o42SOHeePa6Lj xZdt933PhQZhsbkjHMjpioPwcX2TCy3VK2Q7oOeAFCBOaDc0izFasZdzBB3pgUaf cw== -----END CERTIFICATE-----Generated at Sun May 3 17:06:55 2026 by rpki-client