$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb.cer File: 361a16d3-f3cf-464c-8fba-a435adeb72cb.cer (raw, json) Hash identifier: liKXAqMFa6e4UiR0oLtVI2rtdRZxHRjklZ7Q/eotdKc= Subject key identifier: 90:87:F8:2E:3D:D9:DD:17:A2:09:70:EA:A9:D9:08:41:DC:E1:89:9E Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F6555E92BE8389C8BB2AF4F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/361a16d3-f3cf-464c-8fba-a435adeb72cb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 00:45:12 +0000 Certificate not after: Sun 07 Jan 2029 01:45:12 +0000 Subordinate resources: AS: 394222 IP: 168.151.40.0/23 IP: 2620:47:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:55:e9:2b:e8:38:9c:8b:b2:af:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 5 00:45:12 2026 GMT Not After : Jan 7 01:45:12 2029 GMT Subject: CN=361a16d3-f3cf-464c-8fba-a435adeb72cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7a:53:2c:de:50:ca:05:c3:ef:e6:a0:fd:d4: 96:a5:fd:56:3d:b8:80:62:92:fe:00:43:19:f8:a6: 5a:2e:fa:33:38:e7:d2:0f:73:29:5a:58:0f:23:9a: f9:7f:a0:d6:5d:19:e1:fc:7f:78:d9:c9:ec:2c:8c: 97:4c:7f:37:73:69:3c:76:c6:e7:e8:78:b0:3e:ee: e4:fe:d0:d0:7d:a9:ca:24:82:77:34:b5:13:53:19: 8e:e7:69:ed:0a:62:65:67:73:6a:37:87:86:59:be: e4:96:45:44:1c:fa:07:1f:bb:af:65:b6:d1:d4:7a: 5b:bf:c7:5c:15:3c:4c:35:c5:60:1d:65:f3:5f:4a: 7b:30:2f:81:9e:61:78:f3:9b:6c:2c:77:0d:4e:fa: ee:0f:48:00:a7:76:13:47:80:12:d9:2f:2f:8b:76: d3:e8:0b:b1:e7:a0:af:fd:f9:d9:aa:cc:8f:06:ba: 29:19:91:c4:28:ca:66:06:ea:fd:61:0c:53:8e:72: 17:7d:e2:4e:45:44:5a:e4:32:c0:c1:34:91:3f:9d: 63:cc:d5:9d:ea:24:c7:b0:28:0e:97:ac:9f:eb:f5: 9d:80:06:b2:0b:d1:35:b3:36:2b:35:cf:5a:7b:98: a7:8e:df:49:1b:49:38:c6:69:47:d1:9e:5b:a0:7e: 93:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:87:F8:2E:3D:D9:DD:17:A2:09:70:EA:A9:D9:08:41:DC:E1:89:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/361a16d3-f3cf-464c-8fba-a435adeb72cb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 168.151.40.0/23 IPv6: 2620:47:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394222 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:bb:a6:76:8a:03:15:b8:1b:36:70:2c:b1:60:8f:68:cc:37: 76:9e:05:7d:89:21:8b:15:64:5a:a9:bc:e5:0a:6f:87:df:e8: 4a:36:bb:53:d3:86:b6:b1:9c:d7:34:87:b9:e1:d5:a0:2d:8a: 8a:1d:49:8d:fb:d9:0f:ad:c3:29:d8:d4:b6:8d:68:8c:b3:e0: 13:70:18:ff:90:f6:f9:e9:22:77:10:43:2c:eb:b3:9d:08:e0: d9:35:c3:b1:17:64:a3:32:bb:29:51:01:f3:f7:04:13:bd:01: 5c:53:4c:d4:fe:ee:41:0e:bc:35:53:71:cc:9b:d0:e9:fe:0d: ed:9c:5c:26:53:07:fa:ed:a3:dd:4a:5c:56:81:0c:c4:39:2e: 76:a0:b0:57:45:59:88:65:3b:16:ec:85:87:d5:23:71:6c:1c: 93:92:51:3c:75:83:95:f9:c3:97:26:07:5c:13:46:0a:bc:ba: f2:14:9c:ab:ef:18:4a:d7:cc:30:d6:9d:55:ab:c5:13:98:a1: b6:9c:f4:b0:34:b0:d2:0c:71:c6:45:b6:10:ff:71:c1:cf:ea: 02:fd:7e:56:8b:ad:ad:b2:ca:73:f6:a7:2e:f8:45:0b:3e:eb: 2b:14:23:87:42:b0:bb:03:2f:26:ea:73:ed:c7:df:26:f7:65: 7c:c4:22:3e -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE9lVekr6Dici7KvT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAwNTAwNDUxMloXDTI5MDEwNzAxNDUxMlowLzEtMCsGA1UEAxMk MzYxYTE2ZDMtZjNjZi00NjRjLThmYmEtYTQzNWFkZWI3MmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnpTLN5QygXD7+ag/dSWpf1WPbiAYpL+AEMZ +KZaLvozOOfSD3MpWlgPI5r5f6DWXRnh/H942cnsLIyXTH83c2k8dsbn6HiwPu7k /tDQfanKJIJ3NLUTUxmO52ntCmJlZ3NqN4eGWb7klkVEHPoHH7uvZbbR1Hpbv8dc FTxMNcVgHWXzX0p7MC+BnmF485tsLHcNTvruD0gAp3YTR4AS2S8vi3bT6Aux56Cv /fnZqsyPBropGZHEKMpmBur9YQxTjnIXfeJORURa5DLAwTSRP51jzNWd6iTHsCgO l6yf6/WdgAayC9E1szYrNc9ae5injt9JG0k4xmlH0Z5boH6T2wIDAQABo4IELDCC BCgwHQYDVR0OBBYEFJCH+C492d0Xoglw6qnZCEHc4YmeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z NjFhMTZkMy1mM2NmLTQ2NGMtOGZiYS1hNDM1YWRlYjcyY2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM2MWExNmQzLWYzY2YtNDY0Yy04 ZmJhLWE0MzVhZGViNzJjYi8zNjFhMTZkMy1mM2NmLTQ2NGMtOGZiYS1hNDM1YWRl YjcyY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAGolygwDwQCAAIwCQMHACYgAEcgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGA+4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmrumdooDFbgbNnAssWCPaMw3 dp4FfYkhixVkWqm85Qpvh9/oSja7U9OGtrGc1zSHueHVoC2Kih1JjfvZD63DKdjU to1ojLPgE3AY/5D2+ekidxBDLOuznQjg2TXDsRdkozK7KVEB8/cEE70BXFNM1P7u QQ68NVNxzJvQ6f4N7ZxcJlMH+u2j3UpcVoEMxDkudqCwV0VZiGU7FuyFh9UjcWwc k5JRPHWDlfnDlyYHXBNGCry68hScq+8YStfMMNadVavFE5ihtpz0sDSw0gxxxkW2 EP9xwc/qAv1+VoutrbLKc/anLvhFCz7rKxQjh0KwuwMvJupz7cffJvdlfMQiPg== -----END CERTIFICATE-----Generated at Thu Nov 5 03:52:59 2026 by rpki-client