$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/effb776d-626f-4908-bd45-667c75f254aa.cer File: effb776d-626f-4908-bd45-667c75f254aa.cer (raw, json) Hash identifier: VaQ8HLTbeKHt33ybto/WINklDz2TTtatFAkRiUmUaB4= Subject key identifier: A2:99:3B:FF:2F:8B:A7:9E:21:45:21:1F:F5:78:85:2A:F9:9C:65:28 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F5F35187F618E6E409544F840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/effb776d-626f-4908-bd45-667c75f254aa/effb776d-626f-4908-bd45-667c75f254aa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/effb776d-626f-4908-bd45-667c75f254aa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 20:04:13 +0000 Certificate not after: Thu 04 Jan 2029 21:04:13 +0000 Subordinate resources: AS: 17104 IP: 52.144.30.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:35:18:7f:61:8e:6e:40:95:44:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 2 20:04:13 2026 GMT Not After : Jan 4 21:04:13 2029 GMT Subject: CN=effb776d-626f-4908-bd45-667c75f254aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:98:6e:f6:f9:a9:14:9a:10:2b:0d:ed:a7: 2f:47:27:d9:ed:98:b5:31:fd:a5:af:10:f0:0a:f0: 8b:1e:bf:d6:73:99:c4:8b:f6:a0:8c:2d:da:81:47: 78:63:5d:01:7f:eb:6d:75:b2:1c:18:c4:5d:63:f6: 77:5a:d3:5b:ca:53:3e:1d:2b:db:12:c9:50:5c:6c: 5b:8d:91:e9:40:ff:b1:1a:c3:26:df:57:15:18:fd: f5:a5:5c:8c:d4:22:fd:b6:6c:34:22:7c:c6:2d:1e: d0:9f:8b:c3:99:01:5e:c8:cb:c3:91:5a:c3:87:e2: dd:59:be:72:80:dd:af:2a:84:6b:7c:1c:5e:c8:ba: 68:ed:3b:72:39:19:69:fb:c5:36:91:9f:dc:15:22: b6:3a:89:cd:d1:a8:d3:94:f7:e1:0f:d8:dd:77:46: 71:8e:9e:a7:0d:f3:34:4f:ac:2f:c8:3c:3c:e4:5c: 00:8a:b8:90:d3:49:40:6d:df:b9:a8:7d:d5:6c:bd: f0:50:14:e8:c4:e2:84:a0:3d:8f:45:c5:90:bb:3c: d5:21:aa:a9:48:db:ce:bb:ce:e2:f1:75:54:4a:48: 3c:a1:33:24:62:da:05:f7:97:58:99:fa:90:3e:61: 9a:15:e9:ac:14:b9:6c:6e:0d:82:10:d6:d9:45:4d: b7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:99:3B:FF:2F:8B:A7:9E:21:45:21:1F:F5:78:85:2A:F9:9C:65:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/effb776d-626f-4908-bd45-667c75f254aa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/effb776d-626f-4908-bd45-667c75f254aa/effb776d-626f-4908-bd45-667c75f254aa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 52.144.30.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17104 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9e:91:32:50:52:d0:de:c6:6b:40:f3:53:8e:38:37:83:9c: d9:da:43:60:87:56:4e:d4:b7:ed:7b:b4:f5:53:11:36:12:e8: 5b:a2:ac:e3:7f:1e:50:33:80:00:39:6b:4e:44:43:a0:4e:2f: 6b:9d:ea:b1:ae:3a:6d:14:f4:b1:39:4f:2a:bb:e8:75:56:c7: 82:13:95:45:be:5c:7c:04:04:47:94:28:2b:6f:12:7f:5c:99: 92:c3:06:cc:f6:32:23:c0:1b:02:e5:cc:56:31:f0:b6:6e:8c: 43:3e:f6:1c:5d:ec:c2:00:61:cc:1f:cf:2e:ce:d3:0e:08:a0: 12:6d:1f:80:f2:73:4f:fa:ba:1d:02:af:4b:8c:ca:b3:46:dd: 9f:73:e7:26:82:00:8e:75:0e:76:0a:90:02:93:53:12:63:7e: d7:c0:13:49:57:03:b8:c1:96:51:38:7f:ee:b4:80:e2:cc:3f: bb:b3:ee:b3:0e:b8:e9:bb:01:6e:78:62:b9:06:f9:77:9c:fb: 8f:30:31:63:fc:d6:3f:76:c6:9b:6d:82:39:5c:c6:1c:a9:64: dd:bb:aa:88:f9:e2:00:4f:c3:40:1f:47:14:5e:94:ca:0a:a9: 70:d2:06:d6:06:41:48:00:96:5d:8b:c5:a2:32:ed:95:bf:8c: 8e:e9:25:43 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE9fNRh/YY5uQJVE+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwMjIwMDQxM1oXDTI5MDEwNDIxMDQxM1owLzEtMCsGA1UEAxMk ZWZmYjc3NmQtNjI2Zi00OTA4LWJkNDUtNjY3Yzc1ZjI1NGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslyYbvb5qRSaECsN7acvRyfZ7Zi1Mf2lrxDw CvCLHr/Wc5nEi/agjC3agUd4Y10Bf+ttdbIcGMRdY/Z3WtNbylM+HSvbEslQXGxb jZHpQP+xGsMm31cVGP31pVyM1CL9tmw0InzGLR7Qn4vDmQFeyMvDkVrDh+LdWb5y gN2vKoRrfBxeyLpo7TtyORlp+8U2kZ/cFSK2OonN0ajTlPfhD9jdd0Zxjp6nDfM0 T6wvyDw85FwAiriQ00lAbd+5qH3VbL3wUBToxOKEoD2PRcWQuzzVIaqpSNvOu87i 8XVUSkg8oTMkYtoF95dYmfqQPmGaFemsFLlsbg2CENbZRU23QwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFKKZO/8vi6eeIUUhH/V4hSr5nGUoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9l ZmZiNzc2ZC02MjZmLTQ5MDgtYmQ0NS02NjdjNzVmMjU0YWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2VmZmI3NzZkLTYyNmYtNDkwOC1i ZDQ1LTY2N2M3NWYyNTRhYS9lZmZiNzc2ZC02MjZmLTQ5MDgtYmQ0NS02NjdjNzVm MjU0YWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAA0kB4wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC QtAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYp6RMlBS0N7Ga0DzU444N4Oc2dpDYIdWTtS37Xu09VMRNhLo W6Ks438eUDOAADlrTkRDoE4va53qsa46bRT0sTlPKrvodVbHghOVRb5cfAQER5Qo K28Sf1yZksMGzPYyI8AbAuXMVjHwtm6MQz72HF3swgBhzB/PLs7TDgigEm0fgPJz T/q6HQKvS4zKs0bdn3PnJoIAjnUOdgqQApNTEmN+18ATSVcDuMGWUTh/7rSA4sw/ u7Pusw646bsBbnhiuQb5d5z7jzAxY/zWP3bGm22COVzGHKlk3buqiPniAE/DQB9H FF6UygqpcNIG1gZBSACWXYvFojLtlb+MjuklQw== -----END CERTIFICATE-----Generated at Sun Nov 1 17:30:40 2026 by rpki-client