$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.cer File: ebf10f16-5f3c-4b91-8d9d-40a9535563bb.cer (raw, json) Hash identifier: q3aUKIzFwdZ/evvseNg3XhEegQ9fIIYExsPAn3w6G0s= Subject key identifier: 21:70:A7:D4:B5:C5:D2:40:F1:E8:24:81:59:80:9B:00:C6:63:B2:9C Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F9E90F02C7A438DDDE5E35E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 25 Oct 2026 12:45:12 +0000 Certificate not after: Sat 27 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 397529 AS: 401028 AS: 401301 IP: 23.132.144.0/24 IP: 2620:6f:2000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:90:f0:2c:7a:43:8d:dd:e5:e3:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 25 12:45:12 2026 GMT Not After : Jan 27 13:45:12 2029 GMT Subject: CN=ebf10f16-5f3c-4b91-8d9d-40a9535563bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:7a:93:c3:00:58:d5:bf:c1:d1:c3:ac:78: fa:50:e5:5e:37:83:e2:cd:32:43:2f:fc:de:f9:bc: df:6d:23:29:9b:8b:07:90:d6:1c:e2:72:dd:d2:bd: fd:fd:78:b1:16:e5:db:e6:73:7b:b3:a7:61:f9:24: 85:a5:3c:3a:af:33:c3:64:09:dc:c5:41:26:be:28: ca:c4:82:90:40:86:6c:7a:ee:8e:97:03:63:3d:a3: ae:fd:b9:ff:7b:c6:49:d2:e0:e1:91:0c:e0:36:30: f4:e9:10:de:40:19:78:e0:13:e4:6f:0f:96:ea:a1: c4:06:02:66:dc:51:2c:07:d0:58:4e:37:eb:84:bb: 74:70:26:bb:16:6c:f5:7b:e5:0a:29:4e:f1:86:00: 08:a0:d4:e8:7d:b4:8d:14:52:47:f6:96:e2:d8:9f: 4a:9a:6b:b9:1b:6c:00:d0:61:9c:40:bc:ba:cb:32: 2f:24:54:9e:c3:ae:4a:7f:dc:ac:df:e8:85:d7:64: 32:53:95:a2:7e:bd:7b:5b:bf:c2:17:07:b4:57:00: ba:9b:05:4a:ff:58:32:63:e2:94:6c:23:50:90:af: 51:ec:f4:df:a1:6d:7a:10:42:e6:33:13:c3:2d:04: 79:ae:4f:53:5d:ac:f9:89:7e:7b:27:74:4a:39:00: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:70:A7:D4:B5:C5:D2:40:F1:E8:24:81:59:80:9B:00:C6:63:B2:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.132.144.0/24 IPv6: 2620:6f:2000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397529 401028 401301 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2d:26:3a:9c:e3:32:99:4a:4f:7d:74:94:9f:dc:7b:be:c0: a8:67:03:ed:a2:59:0d:21:10:48:f2:89:ce:8d:bc:4a:a2:70: 30:57:76:28:4e:4f:b7:8d:ec:3e:9b:db:0b:54:b2:24:d2:33: 9d:fc:91:61:cd:fb:02:24:7b:0a:86:66:26:1d:fc:95:18:d6: 8a:2f:c3:6f:f3:9e:25:b2:66:a4:8e:30:49:27:c1:c4:0c:8e: 05:95:90:8e:aa:b4:82:75:66:3a:9e:2e:b1:71:cb:50:ab:af: e3:6d:07:b1:34:c3:c5:15:60:73:72:22:58:9c:af:6a:75:7c: 07:4c:43:22:08:49:b2:f0:f0:cf:57:7c:f0:fc:d9:34:cd:e1: bc:79:4c:d2:6b:7f:1b:85:60:81:cb:b5:cf:ee:c0:42:0e:5f: c6:b6:7a:46:7a:6a:2c:2a:3b:88:92:d9:5c:a8:db:e3:81:c5: 58:c7:59:91:9d:96:72:f1:4b:f2:7d:7e:51:9e:7f:e9:ac:d2: 8c:c0:bf:fc:b5:f8:bc:e2:ac:da:76:fc:be:6d:34:43:2d:e9: ae:b3:8a:e4:c9:2f:1c:01:7d:5d:f6:50:c6:9c:d0:4e:10:c4: e4:65:38:5d:40:30:66:f5:9d:b5:e0:58:4e:ba:03:d9:89:e3: 2a:43:17:a5 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE+ekPAsekON3eXjXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAyNTEyNDUxMloXDTI5MDEyNzEzNDUxMlowLzEtMCsGA1UEAxMk ZWJmMTBmMTYtNWYzYy00YjkxLThkOWQtNDBhOTUzNTU2M2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrZ6k8MAWNW/wdHDrHj6UOVeN4PizTJDL/ze +bzfbSMpm4sHkNYc4nLd0r39/XixFuXb5nN7s6dh+SSFpTw6rzPDZAncxUEmvijK xIKQQIZseu6OlwNjPaOu/bn/e8ZJ0uDhkQzgNjD06RDeQBl44BPkbw+W6qHEBgJm 3FEsB9BYTjfrhLt0cCa7Fmz1e+UKKU7xhgAIoNTofbSNFFJH9pbi2J9Kmmu5G2wA 0GGcQLy6yzIvJFSew65Kf9ys3+iF12QyU5Wifr17W7/CFwe0VwC6mwVK/1gyY+KU bCNQkK9R7PTfoW16EELmMxPDLQR5rk9TXaz5iX57J3RKOQB8yQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFCFwp9S1xdJA8egkgVmAmwDGY7KcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l YmYxMGYxNi01ZjNjLTRiOTEtOGQ5ZC00MGE5NTM1NTYzYmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2ViZjEwZjE2LTVmM2MtNGI5MS04 ZDlkLTQwYTk1MzU1NjNiYi9lYmYxMGYxNi01ZjNjLTRiOTEtOGQ5ZC00MGE5NTM1 NTYzYmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXhJAwDwQCAAIwCQMHBCYgAG8gADAkBggrBgEF BQcBCAEB/wQVMBOgETAPAgMGENkCAwYehAIDBh+VMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIYtJjqc4zKZ Sk99dJSf3Hu+wKhnA+2iWQ0hEEjyic6NvEqicDBXdihOT7eN7D6b2wtUsiTSM538 kWHN+wIkewqGZiYd/JUY1oovw2/zniWyZqSOMEknwcQMjgWVkI6qtIJ1ZjqeLrFx y1Crr+NtB7E0w8UVYHNyIlicr2p1fAdMQyIISbLw8M9XfPD82TTN4bx5TNJrfxuF YIHLtc/uwEIOX8a2ekZ6aiwqO4iS2Vyo2+OBxVjHWZGdlnLxS/J9flGef+ms0ozA v/y1+LzirNp2/L5tNEMt6a6ziuTJLxwBfV32UMac0E4QxORlOF1AMGb1nbXgWE66 A9mJ4ypDF6U= -----END CERTIFICATE-----Generated at Sat Oct 31 08:18:05 2026 by rpki-client