$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer File: 70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer (raw, json) Hash identifier: AfcY0ZZpHKe9VC37dcUGpP78d/IlIG1HOj8oWEpcs6Q= Subject key identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F4AD068E9EE887DA0069B1280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Sep 2026 12:45:11 +0000 Certificate not after: Thu 28 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 395185 IP: 23.137.184.0/24 IP: 2620:ac:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d0:68:e9:ee:88:7d:a0:06:9b:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 25 12:45:11 2026 GMT Not After : Dec 28 13:45:11 2028 GMT Subject: CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:3c:3f:ad:fe:dc:42:c4:ac:02:5c:45:86: 5e:30:b3:6c:ed:31:f7:96:f8:3a:bd:16:e2:bf:06: 7a:78:e5:87:14:38:f2:5b:eb:15:ef:83:6d:f7:82: 2c:03:36:53:53:e7:99:33:a8:9e:76:52:b1:1c:e3: e8:e6:54:3b:2f:95:70:b2:d0:ff:1e:a5:be:0b:6c: 02:cc:1b:32:5a:26:4f:7d:23:c5:66:4d:cc:e9:8a: 77:8f:80:f8:f7:5a:a9:f1:99:dc:8c:e5:f4:57:26: d5:ea:0f:a9:c7:ba:d0:96:32:8c:fd:b8:61:0f:8a: 76:62:22:9c:12:61:40:6d:0e:37:81:a9:21:e9:db: fb:51:d5:0e:bd:ad:f0:73:50:1f:65:a2:26:75:81: 06:bc:c7:03:f2:08:5c:f7:e2:14:cc:08:36:c1:c2: 98:86:3e:69:7d:95:68:be:c0:e3:12:cc:4a:13:4c: 66:b0:c8:84:e3:8f:e9:39:58:59:66:19:4f:1d:af: 4d:09:dd:39:c4:c8:f0:7b:97:c6:a0:01:d6:32:b0: aa:17:fc:b3:b1:74:85:c4:4e:81:21:2a:61:bf:b4: 9f:38:2d:bb:30:36:3c:e8:31:ac:68:ac:32:a4:14: 90:11:fe:f9:5f:6d:ca:8b:e5:dd:3a:77:c2:39:2a: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.137.184.0/24 IPv6: 2620:ac:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395185 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e6:7f:c6:ff:91:6b:16:c5:53:c4:f9:39:72:6f:54:53:9c: 0e:63:cd:1e:88:15:39:60:86:11:79:88:af:0a:77:ba:58:a9: 94:6b:6e:b9:8f:e7:15:b0:71:79:e2:53:6f:40:86:5f:84:f1: 56:01:f1:2c:0f:f1:57:83:03:4d:94:d8:6e:60:f0:52:c4:b8: a8:69:9b:7b:15:ae:8f:54:9f:e7:68:19:73:36:cb:47:d8:f5: 98:9e:a6:61:a2:db:69:3f:d7:8a:4b:59:3e:fe:02:fb:10:90: 82:8a:96:b4:6b:bd:eb:59:8d:93:b9:63:4f:b6:e1:42:05:d7: 14:ce:e8:8d:27:45:85:eb:ed:3c:ab:6e:fd:75:10:e8:e0:ce: 97:c7:e8:90:b7:26:32:53:d4:11:1a:3a:a6:67:67:42:f7:65: d6:20:a7:6b:64:dd:7b:86:fe:3f:d9:17:67:1c:01:c6:5d:1a: 67:c4:c8:fd:56:92:f2:47:e6:e4:29:7e:92:21:89:f9:26:b1: ca:e4:9c:97:d0:0a:b3:9d:cd:2e:47:90:b6:f2:7b:fe:9c:cd: db:57:2d:54:c4:86:af:14:46:90:2e:d9:41:e0:90:03:18:da: 7f:e8:01:c5:0e:d8:23:19:ba:5e:b0:1d:42:84:50:de:da:12: 7c:d5:ad:b4 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE9K0Gjp7oh9oAabEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkyNTEyNDUxMVoXDTI4MTIyODEzNDUxMVowLzEtMCsGA1UEAxMk NzBjMWJmNjgtOWRjOS00ZDBmLWExN2ItM2QwZjg0NWJiZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6U8P63+3ELErAJcRYZeMLNs7TH3lvg6vRbi vwZ6eOWHFDjyW+sV74Nt94IsAzZTU+eZM6iedlKxHOPo5lQ7L5VwstD/HqW+C2wC zBsyWiZPfSPFZk3M6Yp3j4D491qp8ZncjOX0VybV6g+px7rQljKM/bhhD4p2YiKc EmFAbQ43gakh6dv7UdUOva3wc1AfZaImdYEGvMcD8ghc9+IUzAg2wcKYhj5pfZVo vsDjEsxKE0xmsMiE44/pOVhZZhlPHa9NCd05xMjwe5fGoAHWMrCqF/yzsXSFxE6B ISphv7SfOC27MDY86DGsaKwypBSQEf75X23Ki+XdOnfCOSqonQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFDO8BmBVfvkrGv6fAuLm9uitJjHgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 MGMxYmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBmODQ1YmJkMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzcwYzFiZjY4LTlkYzktNGQwZi1h MTdiLTNkMGY4NDViYmQwZi83MGMxYmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBmODQ1 YmJkMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXibgwDwQCAAIwCQMHACYgAKygADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGB7EwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfeZ/xv+RaxbFU8T5OXJvVFOc DmPNHogVOWCGEXmIrwp3uliplGtuuY/nFbBxeeJTb0CGX4TxVgHxLA/xV4MDTZTY bmDwUsS4qGmbexWuj1Sf52gZczbLR9j1mJ6mYaLbaT/XiktZPv4C+xCQgoqWtGu9 61mNk7ljT7bhQgXXFM7ojSdFhevtPKtu/XUQ6ODOl8fokLcmMlPUERo6pmdnQvdl 1iCna2Tde4b+P9kXZxwBxl0aZ8TI/VaS8kfm5Cl+kiGJ+SaxyuScl9AKs53NLkeQ tvJ7/pzN21ctVMSGrxRGkC7ZQeCQAxjaf+gBxQ7YIxm6XrAdQoRQ3toSfNWttA== -----END CERTIFICATE-----Generated at Fri Oct 2 12:30:21 2026 by rpki-client