$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3.cer File: 30af253c-c940-47f2-b5af-bae3d8d908f3.cer (raw, json) Hash identifier: GFi6SK9S35PJ+K0MDFKpuT9fXBeI+9d5fca/rnZIZIc= Subject key identifier: 34:18:6C:44:CA:74:BE:F7:38:EE:68:89:F6:0D:70:6B:6E:AC:37:8B Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F589D2488E1E70A9A68DE50C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3/30af253c-c940-47f2-b5af-bae3d8d908f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Sep 2026 11:23:12 +0000 Certificate not after: Tue 02 Jan 2029 12:23:12 +0000 Subordinate resources: AS: 31897 AS: 33226 IP: 198.99.152.0/24 IP: 199.83.64.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:9d:24:88:e1:e7:0a:9a:68:de:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 30 11:23:12 2026 GMT Not After : Jan 2 12:23:12 2029 GMT Subject: CN=30af253c-c940-47f2-b5af-bae3d8d908f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:44:18:68:3a:a5:04:98:9e:aa:14:f0:42: a0:e0:55:49:50:7d:87:91:f9:81:7b:d1:84:6c:44: ab:98:14:d9:5b:b6:72:fd:a2:6f:26:44:db:38:d9: 74:6a:70:ca:35:8a:bd:8f:80:eb:3b:2b:03:bb:10: 9b:93:c5:5a:ff:01:96:29:95:b9:93:1e:14:f3:4b: ad:bf:0e:54:34:76:7b:78:bc:56:f8:01:21:ef:47: c6:a7:5c:9f:6e:32:84:0c:67:75:9d:ce:42:5e:2b: 45:a2:5e:3a:2b:af:de:a6:41:42:e8:69:43:af:69: 20:55:be:97:8b:ff:bf:b9:46:e7:d2:3c:49:58:a1: 33:fe:44:80:8f:e0:d0:95:fd:ce:9d:ff:2e:f9:57: 9a:05:f2:ca:53:d2:2d:25:17:0c:97:62:fd:bf:e2: 14:7a:a0:48:d8:73:f2:bb:09:97:f3:79:09:83:d0: a5:ad:0c:95:cb:29:54:69:ce:44:83:ce:6f:c8:da: dd:52:c7:d9:5c:df:e7:d6:06:0f:57:bf:05:0a:f1: 10:99:6e:f8:33:a4:3f:a3:58:08:52:7f:5d:d2:d2: 7e:8e:76:58:96:42:56:9c:6c:44:91:c2:58:58:61: 9d:28:2c:ad:c1:eb:10:73:83:a4:41:22:10:dc:fc: 17:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:18:6C:44:CA:74:BE:F7:38:EE:68:89:F6:0D:70:6B:6E:AC:37:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/30af253c-c940-47f2-b5af-bae3d8d908f3/30af253c-c940-47f2-b5af-bae3d8d908f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.99.152.0/24 199.83.64.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31897 33226 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:87:06:1a:c0:2b:96:00:c8:c4:96:7a:43:bf:78:d4:fa:d8: 74:ab:03:04:36:df:58:bb:ac:a0:14:ca:28:8c:0a:7e:29:dd: 47:cf:0a:c6:da:09:61:f1:25:08:6d:18:5f:32:44:01:6b:e0: 75:46:85:00:eb:44:1c:d8:59:ae:ba:d2:9e:4c:76:f8:92:47: f5:cb:34:ce:c7:01:3e:7b:06:fd:aa:b3:7c:e3:38:29:6f:05: 4f:b7:23:a0:bb:75:ff:32:9d:c1:0d:f5:d6:16:65:8e:a7:69: 23:18:95:86:1a:b3:18:df:d7:62:58:6f:6d:58:d8:93:bb:3b: 01:48:b3:6b:13:8e:f1:0f:e1:f4:66:68:04:81:c7:ba:69:02: eb:b9:d9:17:85:4a:9a:9d:8e:ef:f8:97:20:83:b4:6e:d7:78: f9:21:b1:bc:b5:07:25:6b:bb:1f:c0:3d:df:15:bb:d6:4d:26: c8:3e:70:6b:35:4b:05:21:bb:72:a0:61:24:51:45:7b:84:83: 0c:ac:df:dd:87:75:5c:af:2a:27:19:5d:fd:be:67:00:5c:90: 1b:38:4c:b3:ce:fa:62:0d:05:91:a1:7e:fc:02:56:64:0b:7f: 2e:a7:29:27:36:f4:d4:08:45:e7:b1:cf:fb:19:1d:54:98:c3: dd:ed:9e:cb -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWE9YnSSI4ecKmmjeUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkzMDExMjMxMloXDTI5MDEwMjEyMjMxMlowLzEtMCsGA1UEAxMk MzBhZjI1M2MtYzk0MC00N2YyLWI1YWYtYmFlM2Q4ZDkwOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrlEGGg6pQSYnqoU8EKg4FVJUH2HkfmBe9GE bESrmBTZW7Zy/aJvJkTbONl0anDKNYq9j4DrOysDuxCbk8Va/wGWKZW5kx4U80ut vw5UNHZ7eLxW+AEh70fGp1yfbjKEDGd1nc5CXitFol46K6/epkFC6GlDr2kgVb6X i/+/uUbn0jxJWKEz/kSAj+DQlf3Onf8u+VeaBfLKU9ItJRcMl2L9v+IUeqBI2HPy uwmX83kJg9ClrQyVyylUac5Eg85vyNrdUsfZXN/n1gYPV78FCvEQmW74M6Q/o1gI Un9d0tJ+jnZYlkJWnGxEkcJYWGGdKCytwesQc4OkQSIQ3PwXVwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFDQYbETKdL73OO5oifYNcGturDeLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z MGFmMjUzYy1jOTQwLTQ3ZjItYjVhZi1iYWUzZDhkOTA4ZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzMwYWYyNTNjLWM5NDAtNDdmMi1i NWFmLWJhZTNkOGQ5MDhmMy8zMGFmMjUzYy1jOTQwLTQ3ZjItYjVhZi1iYWUzZDhk OTA4ZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGY5gDBATHU0AwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICfJkCAwCByjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqhwYawCuWAMjElnpDv3jU+th0qwMENt9Y u6ygFMoojAp+Kd1HzwrG2glh8SUIbRhfMkQBa+B1RoUA60Qc2FmuutKeTHb4kkf1 yzTOxwE+ewb9qrN84zgpbwVPtyOgu3X/Mp3BDfXWFmWOp2kjGJWGGrMY39diWG9t WNiTuzsBSLNrE47xD+H0ZmgEgce6aQLrudkXhUqanY7v+Jcgg7Ru13j5IbG8tQcl a7sfwD3fFbvWTSbIPnBrNUsFIbtyoGEkUUV7hIMMrN/dh3VcryonGV39vmcAXJAb OEyzzvpiDQWRoX78AlZkC38upyknNvTUCEXnsc/7GR1UmMPd7Z7L -----END CERTIFICATE-----Generated at Fri Oct 23 07:12:57 2026 by rpki-client