$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef.cer File: 18489a14-d237-40bd-ae7a-25fe7c7561ef.cer (raw, json) Hash identifier: GAJp/uwdJlEX2U3gHbFginrBOCrNodaNvJiZmzOQOEU= Subject key identifier: BB:7B:55:BC:B8:3E:D2:78:FE:4F:27:20:25:0B:3F:8C:F1:BA:07:08 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F69FE9607D2D471B1D1E9C000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/18489a14-d237-40bd-ae7a-25fe7c7561ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 16:48:17 +0000 Certificate not after: Thu 30 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 54256 IP: 23.153.168.0/24 IP: 198.134.236.0/24 IP: 198.252.222.0/24 IP: 2602:2d9::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:fe:96:07:d2:d4:71:b1:d1:e9:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 6 16:48:17 2026 GMT Not After : Nov 30 13:45:11 2028 GMT Subject: CN=18489a14-d237-40bd-ae7a-25fe7c7561ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:35:f8:a8:14:e1:a7:c9:93:a8:cc:0e:dc:73: fb:e9:ce:fe:76:4e:01:6c:0d:84:b7:f9:00:81:02: 1b:54:21:40:b8:c5:33:32:5e:a4:89:3b:8f:a3:4e: d1:a4:3b:53:3e:18:b5:eb:4f:c2:98:3a:c6:71:43: d5:4f:87:08:8f:2a:92:96:e3:65:fd:c2:bf:fe:7d: 05:6f:57:b7:21:ef:f2:90:15:31:72:81:20:85:d1: dc:1e:55:31:a1:0c:b5:6c:18:86:ae:ed:92:b1:ae: 88:87:b9:4f:1b:ba:1a:19:8b:60:c1:7f:d4:1f:92: fc:32:71:b4:04:8b:eb:01:12:6d:43:6a:89:3a:c0: 56:99:47:d6:29:1c:6f:17:1e:29:b6:66:e7:46:76: 32:ce:ab:ec:2d:57:75:1b:c4:4d:e2:35:07:3d:02: a4:71:63:ec:90:85:00:42:23:2c:d1:08:eb:84:db: 02:d8:da:48:9e:d0:ae:1d:1b:d1:b4:84:13:4e:1c: 4e:fe:7f:a4:05:54:cd:51:08:86:0a:5b:b3:9a:ba: 8d:ea:6e:eb:2f:bb:e7:e4:8c:0c:6d:cf:23:d5:68: 71:c9:e8:b0:bb:7f:97:4f:f0:59:60:7d:f9:77:ff: 93:2e:7c:be:3b:ed:ea:dd:02:1a:79:4c:dc:3b:ce: 7f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7B:55:BC:B8:3E:D2:78:FE:4F:27:20:25:0B:3F:8C:F1:BA:07:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/18489a14-d237-40bd-ae7a-25fe7c7561ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.153.168.0/24 198.134.236.0/24 198.252.222.0/24 IPv6: 2602:2d9::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54256 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:57:a9:58:b6:8c:47:a1:63:81:a3:4b:d0:c3:6b:3a:6f:3c: db:cc:29:32:cb:43:92:59:32:c4:99:9d:db:3e:d5:41:5c:43: 79:83:ee:a0:a9:39:8b:9f:5b:34:15:a9:89:bf:2f:aa:7d:28: ad:1d:31:e5:64:f4:5a:c8:4a:f3:26:a7:68:03:9a:b9:35:fd: 1e:18:e7:52:c6:ed:57:a3:eb:17:2d:7d:cc:af:76:41:cf:5a: 3f:ad:fa:29:a9:37:7a:d5:b6:d5:ed:42:9c:96:db:55:20:52: 7e:f9:8b:95:15:62:1b:3e:44:3a:f4:54:0c:0a:ec:a4:0f:3a: 37:a8:a7:9f:9a:13:d0:e7:a6:6b:85:f8:42:e5:fe:a9:5a:18: f3:5b:32:97:00:7d:37:cb:64:dd:23:18:c8:b9:3a:7e:73:e2: e3:47:23:55:c4:12:b4:b3:4e:6b:d1:67:ba:2e:bd:78:63:32: 85:5a:0f:ac:d2:3c:8b:ed:cb:97:c3:0a:33:90:b4:a1:6c:0b: 06:3b:99:b1:19:91:be:e7:38:1b:2d:5e:7c:23:d1:76:e3:ca: 7e:17:8d:19:ac:82:2f:06:43:36:44:8d:00:78:30:89:59:e7: 41:6c:9f:25:da:27:11:d6:83:62:de:41:18:38:df:cb:40:d4: fb:e2:76:9f -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE9p/pYH0tRxsdHpwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAwNjE2NDgxN1oXDTI4MTEzMDEzNDUxMVowLzEtMCsGA1UEAxMk MTg0ODlhMTQtZDIzNy00MGJkLWFlN2EtMjVmZTdjNzU2MWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zX4qBThp8mTqMwO3HP76c7+dk4BbA2Et/kA gQIbVCFAuMUzMl6kiTuPo07RpDtTPhi160/CmDrGcUPVT4cIjyqSluNl/cK//n0F b1e3Ie/ykBUxcoEghdHcHlUxoQy1bBiGru2Ssa6Ih7lPG7oaGYtgwX/UH5L8MnG0 BIvrARJtQ2qJOsBWmUfWKRxvFx4ptmbnRnYyzqvsLVd1G8RN4jUHPQKkcWPskIUA QiMs0QjrhNsC2NpIntCuHRvRtIQTThxO/n+kBVTNUQiGCluzmrqN6m7rL7vn5IwM bc8j1Whxyeiwu3+XT/BZYH35d/+TLny+O+3q3QIaeUzcO85/UwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFLt7Vby4PtJ4/k8nICULP4zxugcIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x ODQ4OWExNC1kMjM3LTQwYmQtYWU3YS0yNWZlN2M3NTYxZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzE4NDg5YTE0LWQyMzctNDBiZC1h ZTdhLTI1ZmU3Yzc1NjFlZi8xODQ4OWExNC1kMjM3LTQwYmQtYWU3YS0yNWZlN2M3 NTYxZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXmagDBADGhuwDBADG/N4wDQQCAAIwBwMFACYC AtkwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANPwMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJxXqVi2jEeh Y4GjS9DDazpvPNvMKTLLQ5JZMsSZnds+1UFcQ3mD7qCpOYufWzQVqYm/L6p9KK0d MeVk9FrISvMmp2gDmrk1/R4Y51LG7Vej6xctfcyvdkHPWj+t+impN3rVttXtQpyW 21UgUn75i5UVYhs+RDr0VAwK7KQPOjeop5+aE9DnpmuF+ELl/qlaGPNbMpcAfTfL ZN0jGMi5On5z4uNHI1XEErSzTmvRZ7ouvXhjMoVaD6zSPIvty5fDCjOQtKFsCwY7 mbEZkb7nOBstXnwj0Xbjyn4XjRmsgi8GQzZEjQB4MIlZ50FsnyXaJxHWg2LeQRg4 38tA1Pvidp8= -----END CERTIFICATE-----Generated at Thu Nov 5 14:47:31 2026 by rpki-client