$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f.cer File: 3720f4aa-0347-4fbd-ad6b-420d575f5d9f.cer (raw, json) Hash identifier: /1EEwaaQ6iNYVj8+g2JUnmtWHrr6d9Kyaah4mE7ERBw= Subject key identifier: 0A:AC:CD:7C:20:B5:DF:A2:79:F2:4F:A0:93:F2:13:10:9E:7E:A2:3A Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F9681FA0959F17F88EF258740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f/3720f4aa-0347-4fbd-ad6b-420d575f5d9f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 Oct 2026 15:28:35 +0000 Certificate not after: Wed 24 Jan 2029 16:28:35 +0000 Subordinate resources: AS: 402835 IP: 103.110.126.0/24 IP: 2602:f332::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:81:fa:09:59:f1:7f:88:ef:25:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 22 15:28:35 2026 GMT Not After : Jan 24 16:28:35 2029 GMT Subject: CN=3720f4aa-0347-4fbd-ad6b-420d575f5d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:89:09:fd:a1:04:8b:9e:82:a1:42:40:d4: ae:27:8d:b6:7f:cc:f3:64:0f:d8:39:2b:b7:7f:bf: 2a:5a:df:95:11:b4:66:ed:0d:0e:4d:d0:22:e4:a5: 15:3e:15:82:8f:4f:64:24:03:1c:50:2c:26:d0:62: 0d:be:26:ef:c3:ba:2e:c9:13:b4:53:26:dd:87:7d: 35:c5:21:42:1d:e3:0e:7e:45:4f:d1:8d:8d:79:86: 9b:f9:6d:96:1a:04:86:e3:7d:d0:7a:b2:58:81:bf: 8a:1f:20:b5:89:66:f1:a1:07:3f:c5:9d:8b:86:8c: e1:ce:75:4e:68:9b:07:54:77:c3:45:91:18:be:02: 56:ab:3b:46:8c:8e:d5:14:37:81:58:f7:cf:b9:6f: 35:80:90:79:8a:3b:cb:bd:ac:cc:ea:e6:3a:8e:88: f9:9e:74:69:ac:c5:ef:a3:14:5e:8f:fb:6f:86:8c: f6:e5:1e:b2:5f:86:f2:97:80:32:b8:69:e6:37:70: ce:fd:3a:a8:44:35:d5:7d:39:73:34:d7:89:b6:80: 5e:93:9c:e4:1e:fc:74:b0:c1:77:ff:5c:b2:4c:57: 6c:f7:93:bc:77:4e:d3:74:38:1e:9c:16:9c:af:05: e4:1b:63:c2:c1:39:e2:e2:43:40:4e:6b:9f:e1:38: 45:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AC:CD:7C:20:B5:DF:A2:79:F2:4F:A0:93:F2:13:10:9E:7E:A2:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3720f4aa-0347-4fbd-ad6b-420d575f5d9f/3720f4aa-0347-4fbd-ad6b-420d575f5d9f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 103.110.126.0/24 IPv6: 2602:f332::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402835 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ae:8d:d9:6b:4a:60:6e:52:62:ab:0c:75:ee:ef:80:12:5d: 7c:1a:81:d0:ae:f6:15:4e:44:89:ff:24:eb:4b:03:28:aa:65: b0:99:28:c7:31:f5:68:10:38:5b:58:98:29:22:27:62:80:5f: c0:7d:81:6b:94:65:56:49:79:fb:0a:1b:a9:13:d5:4e:b7:f8: b2:ce:a4:a7:e3:96:ee:b6:2f:94:d4:4e:99:99:d5:30:f5:4b: 06:af:61:16:ac:71:e6:76:c6:da:08:c3:01:7a:6b:8d:3e:68: c5:09:45:0c:30:9e:d2:06:9b:9d:39:10:1b:09:d3:14:82:45: 52:67:92:f4:cd:66:65:1b:87:4e:84:44:c0:fb:6c:ba:f3:b4: e0:db:d4:53:22:e7:5d:e2:9c:1a:5c:ef:57:78:8e:9a:d5:ce: 60:01:53:30:bb:f9:4e:e4:df:25:56:6c:19:38:cf:c2:ee:c8: 6e:e4:5a:59:91:9c:a0:99:e0:4a:33:fa:58:f1:32:10:14:5c: a9:a0:41:44:dd:40:10:77:5c:0d:f0:d6:81:1c:09:51:12:79: 00:f6:f9:37:1f:11:7a:b2:5d:1b:f9:37:9d:05:bc:16:63:88: e1:2d:05:be:6d:07:94:78:f3:86:3c:81:0f:25:64:9f:fa:4f: 75:98:45:3d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+WgfoJWfF/iO8lh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMjE1MjgzNVoXDTI5MDEyNDE2MjgzNVowLzEtMCsGA1UEAxMk MzcyMGY0YWEtMDM0Ny00ZmJkLWFkNmItNDIwZDU3NWY1ZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkCJCf2hBIuegqFCQNSuJ422f8zzZA/YOSu3 f78qWt+VEbRm7Q0OTdAi5KUVPhWCj09kJAMcUCwm0GINvibvw7ouyRO0Uybdh301 xSFCHeMOfkVP0Y2NeYab+W2WGgSG433QerJYgb+KHyC1iWbxoQc/xZ2LhozhznVO aJsHVHfDRZEYvgJWqztGjI7VFDeBWPfPuW81gJB5ijvLvazM6uY6joj5nnRprMXv oxRej/tvhoz25R6yX4byl4AyuGnmN3DO/TqoRDXVfTlzNNeJtoBek5zkHvx0sMF3 /1yyTFds95O8d07TdDgenBacrwXkG2PCwTni4kNATmuf4ThFfQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAqszXwgtd+iefJPoJPyExCefqI6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z NzIwZjRhYS0wMzQ3LTRmYmQtYWQ2Yi00MjBkNTc1ZjVkOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzM3MjBmNGFhLTAzNDctNGZiZC1h ZDZiLTQyMGQ1NzVmNWQ5Zi8zNzIwZjRhYS0wMzQ3LTRmYmQtYWQ2Yi00MjBkNTc1 ZjVkOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABnbn4wDgQCAAIwCAMGACYC8zIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYlkzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGro3Za0pgblJiqwx17u+AEl18 GoHQrvYVTkSJ/yTrSwMoqmWwmSjHMfVoEDhbWJgpIidigF/AfYFrlGVWSXn7Chup E9VOt/iyzqSn45buti+U1E6ZmdUw9UsGr2EWrHHmdsbaCMMBemuNPmjFCUUMMJ7S BpudORAbCdMUgkVSZ5L0zWZlG4dOhETA+2y687Tg29RTIudd4pwaXO9XeI6a1c5g AVMwu/lO5N8lVmwZOM/C7shu5FpZkZygmeBKM/pY8TIQFFypoEFE3UAQd1wN8NaB HAlREnkA9vk3HxF6sl0b+TedBbwWY4jhLQW+bQeUePOGPIEPJWSf+k91mEU9 -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:46 2026 by rpki-client