$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer File: 30040710-7ccf-4c85-98c7-8d6246d146f5.cer (raw, json) Hash identifier: GGR6zGe1Nd+D+ASqOnHau0CaZumevW3uoxP5g40BowI= Subject key identifier: 88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F9E90F051E0CE05573677CC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 25 Oct 2026 12:45:12 +0000 Certificate not after: Sat 27 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 399478 IP: 23.176.240.0/24 IP: 2620:95:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:90:f0:51:e0:ce:05:57:36:77:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 25 12:45:12 2026 GMT Not After : Jan 27 13:45:12 2029 GMT Subject: CN=30040710-7ccf-4c85-98c7-8d6246d146f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:18:98:54:e0:fc:a2:0b:4a:bf:fc:15:ae: ce:be:9a:96:ab:66:f8:d3:b9:7c:d3:85:75:e6:b9: 37:d6:8a:20:07:9d:e6:d8:31:18:1f:a0:59:5f:ab: 13:5f:80:b1:bf:06:4f:e3:29:09:fd:d4:4e:1c:ed: 95:f3:e1:54:cc:c3:c0:f9:32:13:84:bf:b1:a4:03: cd:5f:6f:c7:45:41:2b:f6:76:56:e2:60:9b:8a:28: f6:ec:5f:d8:28:e6:56:98:72:f3:50:8e:7c:10:04: d7:2c:6d:08:21:91:9e:dc:ec:66:84:d5:70:31:1b: 0d:c7:e2:39:22:ac:ec:fd:b4:ff:a8:9e:3c:d2:10: 37:bb:fe:53:83:3e:cd:bf:28:90:89:2e:7a:58:44: e0:e6:17:c3:ec:75:a6:2c:69:17:25:4a:63:4b:16: dc:68:48:d2:df:58:3d:99:97:e2:61:11:5d:81:0f: 32:72:79:ee:93:ef:82:d7:91:56:82:a3:47:9a:fc: e7:c0:bc:13:40:20:12:21:81:98:c5:b8:ec:07:d5: 7e:b8:2f:14:d1:6d:a5:3e:b6:7f:42:3b:0a:27:ff: f4:9b:a2:6f:e3:69:56:b1:7d:65:3d:76:93:2e:68: 86:51:5a:85:86:57:1e:ab:28:5c:76:62:77:c7:95: 6b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.176.240.0/24 IPv6: 2620:95:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399478 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e2:84:9c:0e:63:00:95:3e:53:b5:d9:65:7a:ce:91:54:c8: c5:03:92:40:71:65:f2:ba:a4:b6:4c:60:69:f1:a3:6d:ef:a2: 85:ee:f2:a5:31:44:99:61:93:f5:9a:32:36:e2:46:6a:49:45: 33:9b:80:24:af:cf:f1:fd:4a:ce:1d:50:13:12:9a:fc:84:9a: 7c:ee:56:55:68:7d:a6:73:c0:68:69:75:c2:92:00:ca:ca:92: 1a:d6:00:79:c3:8e:7c:97:90:54:a1:79:06:fc:34:0c:7d:0f: 9f:75:53:8d:03:bd:19:d7:70:b2:a0:3f:34:56:2f:8c:ea:27: 1c:65:85:30:05:fe:d4:03:c5:2a:71:a6:aa:a8:a4:99:08:f0: 7f:e3:33:8c:b1:e0:a7:26:06:93:56:89:8f:c4:8e:b6:1d:55: 9f:5b:19:5d:0c:31:25:e8:6d:d8:c5:e9:69:64:4e:69:8f:e1: 8b:8a:80:2c:5b:4a:d9:28:61:88:cc:dc:e0:71:20:34:83:eb: de:9a:e0:be:94:9d:e9:b7:09:38:8b:15:3e:2b:1d:11:07:55: 5d:c0:66:6c:06:2d:68:6b:96:5c:77:30:ee:7a:96:20:42:c0: a7:b7:82:65:db:90:0d:95:fe:0b:ed:de:7e:06:35:58:57:3e: 3d:c2:c2:2e -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE+ekPBR4M4FVzZ3zEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAyNTEyNDUxMloXDTI5MDEyNzEzNDUxMlowLzEtMCsGA1UEAxMk MzAwNDA3MTAtN2NjZi00Yzg1LTk4YzctOGQ2MjQ2ZDE0NmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n8YmFTg/KILSr/8Fa7OvpqWq2b407l804V1 5rk31oogB53m2DEYH6BZX6sTX4CxvwZP4ykJ/dROHO2V8+FUzMPA+TIThL+xpAPN X2/HRUEr9nZW4mCbiij27F/YKOZWmHLzUI58EATXLG0IIZGe3OxmhNVwMRsNx+I5 Iqzs/bT/qJ480hA3u/5Tgz7NvyiQiS56WETg5hfD7HWmLGkXJUpjSxbcaEjS31g9 mZfiYRFdgQ8ycnnuk++C15FWgqNHmvznwLwTQCASIYGYxbjsB9V+uC8U0W2lPrZ/ QjsKJ//0m6Jv42lWsX1lPXaTLmiGUVqFhlceqyhcdmJ3x5VryQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFIhJbJoGQdeyLm3/7LbNJFu3uwoxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z MDA0MDcxMC03Y2NmLTRjODUtOThjNy04ZDYyNDZkMTQ2ZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzMwMDQwNzEwLTdjY2YtNGM4NS05 OGM3LThkNjI0NmQxNDZmNS8zMDA0MDcxMC03Y2NmLTRjODUtOThjNy04ZDYyNDZk MTQ2ZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXsPAwDwQCAAIwCQMHACYgAJWgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGGHYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAc+KEnA5jAJU+U7XZZXrOkVTI xQOSQHFl8rqktkxgafGjbe+ihe7ypTFEmWGT9ZoyNuJGaklFM5uAJK/P8f1Kzh1Q ExKa/ISafO5WVWh9pnPAaGl1wpIAysqSGtYAecOOfJeQVKF5Bvw0DH0Pn3VTjQO9 GddwsqA/NFYvjOonHGWFMAX+1APFKnGmqqikmQjwf+MzjLHgpyYGk1aJj8SOth1V n1sZXQwxJeht2MXpaWROaY/hi4qALFtK2ShhiMzc4HEgNIPr3prgvpSd6bcJOIsV PisdEQdVXcBmbAYtaGuWXHcw7nqWIELAp7eCZduQDZX+C+3efgY1WFc+PcLCLg== -----END CERTIFICATE-----Generated at Thu Nov 5 16:51:08 2026 by rpki-client