$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer File: ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer (raw, json) Hash identifier: /f2UXSRd0jB/2+p8wMmmEKq91apr87wNDgDBYMPV7o8= Subject key identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F3CDAFD12865B1A6089394700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Sep 2026 12:45:11 +0000 Certificate not after: Sat 23 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 399525 IP: 23.185.176.0/23 IP: 2602:fc9e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:da:fd:12:86:5b:1a:60:89:39:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 20 12:45:11 2026 GMT Not After : Dec 23 13:45:11 2028 GMT Subject: CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:25:cd:2d:be:e1:73:17:91:81:29:59:e4: fe:b7:ec:41:08:4f:1b:5f:50:e4:1f:dd:02:43:c2: 53:98:8d:70:b0:da:3f:f7:7e:cd:58:7f:5c:4c:fe: 51:6d:9a:a8:39:14:6c:2d:f1:73:8e:19:32:1b:0f: 09:22:83:44:9b:c4:62:1a:fc:7a:61:81:46:4c:73: f4:dc:5d:ef:7e:f2:f1:51:45:1e:28:78:83:25:6f: f2:53:f1:af:4b:4f:d9:26:04:3d:ce:a4:dd:59:13: 57:02:17:9f:72:c9:9d:20:32:25:43:45:5a:91:83: 1f:6f:ac:db:a7:da:09:84:56:cd:56:ec:d2:37:89: 85:17:07:1b:2d:63:a8:6b:fc:a1:a9:34:93:eb:05: c4:31:bb:2f:fb:23:04:09:53:2a:9f:cd:f6:eb:63: f0:75:fb:7e:3f:4a:99:8c:14:66:42:b7:9b:41:32: 79:11:1e:c1:35:db:6e:a1:1a:99:f5:d8:50:ba:c3: f2:a5:7e:af:7e:7e:47:36:e1:5f:08:2b:76:1f:20: db:15:eb:a6:9d:be:99:7a:7b:17:bd:2d:e2:7f:48: 10:97:47:cc:18:fd:f1:c5:9a:1d:82:de:07:5a:4e: 81:20:42:84:4c:7c:c6:d1:10:65:1c:23:3b:74:3c: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.185.176.0/23 IPv6: 2602:fc9e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399525 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9d:9c:17:b5:cc:62:a7:bd:c5:43:db:df:0e:86:9a:3a:cd: ba:d2:fb:c1:e4:10:aa:09:84:be:e5:44:21:a2:e4:ca:8c:68: 6b:7c:a1:da:31:0f:5d:12:8a:7d:35:da:df:c0:ff:37:db:bc: 3d:d6:6f:f5:49:51:eb:32:39:75:2c:73:91:e2:28:1c:f3:e3: e8:d0:14:c6:20:fd:d7:32:9b:dd:d8:4f:33:fd:3e:fa:4b:75: 42:df:25:d4:2a:76:95:32:89:40:54:13:e9:c2:c1:78:3f:aa: 2c:2e:cf:46:0d:00:7d:b2:8c:2a:60:b8:d9:ba:dd:b1:f5:ea: 0b:70:78:45:1a:32:d8:b0:95:e4:21:be:8a:95:9c:56:34:36: 15:57:43:42:41:72:2a:62:af:dd:1e:7c:ae:99:e4:96:42:da: 06:ee:0f:04:95:b2:ac:43:f8:56:70:30:b8:76:e0:7b:b2:be: ba:d2:f6:26:01:3a:47:e8:90:46:ef:be:17:48:cc:49:50:9c: 24:15:6d:b3:fb:9c:ef:d2:0c:31:c6:98:a4:2f:40:ca:a3:eb: c7:1c:06:99:14:5e:35:62:a8:13:f6:aa:c7:00:3e:ea:e7:32: 1a:8e:1e:1c:11:44:ff:61:f4:39:72:b5:aa:c9:1a:69:1b:9e: 4f:01:95:cf -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE882v0ShlsaYIk5RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkyMDEyNDUxMVoXDTI4MTIyMzEzNDUxMVowLzEtMCsGA1UEAxMk ZWYxMjM5ZTYtM2FlNy00M2JlLTk2NmItMmY1Yjk2NzFjMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlMlzS2+4XMXkYEpWeT+t+xBCE8bX1DkH90C Q8JTmI1wsNo/937NWH9cTP5RbZqoORRsLfFzjhkyGw8JIoNEm8RiGvx6YYFGTHP0 3F3vfvLxUUUeKHiDJW/yU/GvS0/ZJgQ9zqTdWRNXAhefcsmdIDIlQ0VakYMfb6zb p9oJhFbNVuzSN4mFFwcbLWOoa/yhqTST6wXEMbsv+yMECVMqn83262Pwdft+P0qZ jBRmQrebQTJ5ER7BNdtuoRqZ9dhQusPypX6vfn5HNuFfCCt2HyDbFeumnb6ZensX vS3if0gQl0fMGP3xxZodgt4HWk6BIEKETHzG0RBlHCM7dDwvlQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPy9G7KKWe22u1Sdg8nMvKxDt7TJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l ZjEyMzllNi0zYWU3LTQzYmUtOTY2Yi0yZjViOTY3MWMyOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2VmMTIzOWU2LTNhZTctNDNiZS05 NjZiLTJmNWI5NjcxYzI5ZC9lZjEyMzllNi0zYWU3LTQzYmUtOTY2Yi0yZjViOTY3 MWMyOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAEXubAwDgQCAAIwCAMGBCYC/J4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYYpTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAynZwXtcxip73FQ9vfDoaaOs26 0vvB5BCqCYS+5UQhouTKjGhrfKHaMQ9dEop9NdrfwP8327w91m/1SVHrMjl1LHOR 4igc8+Po0BTGIP3XMpvd2E8z/T76S3VC3yXUKnaVMolAVBPpwsF4P6osLs9GDQB9 sowqYLjZut2x9eoLcHhFGjLYsJXkIb6KlZxWNDYVV0NCQXIqYq/dHnyumeSWQtoG 7g8ElbKsQ/hWcDC4duB7sr660vYmATpH6JBG774XSMxJUJwkFW2z+5zv0gwxxpik L0DKo+vHHAaZFF41YqgT9qrHAD7q5zIajh4cEUT/YfQ5crWqyRppG55PAZXP -----END CERTIFICATE-----Generated at Mon Sep 21 18:55:04 2026 by rpki-client