$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc.cer File: 3ce84811-817f-451f-816f-42649a6940cc.cer (raw, json) Hash identifier: kWNA9GQgPArJTyu2ytVxezCe7LFA9HqV5lf48nLyQFM= Subject key identifier: A0:75:63:54:D1:EF:03:85:4D:43:C7:35:AD:6D:B0:CB:C4:E9:6B:58 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584FA206FDFEFFDB62CF0AF1B080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/3ce84811-817f-451f-816f-42649a6940cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Oct 2026 18:30:29 +0000 Certificate not after: Sun 28 Jan 2029 19:30:29 +0000 Subordinate resources: AS: 17290 AS: 40064 AS: 40419 IP: 23.190.216.0/24 IP: 142.249.174.0/24 IP: 149.112.177.0/24 IP: 2602:fa86::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:06:fd:fe:ff:db:62:cf:0a:f1:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 26 18:30:29 2026 GMT Not After : Jan 28 19:30:29 2029 GMT Subject: CN=3ce84811-817f-451f-816f-42649a6940cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:83:08:e3:d7:c0:ae:ed:9e:ec:40:1a:13: c1:b3:fa:1c:e0:4f:ae:55:08:6a:b6:b3:13:11:8f: 7c:b5:b7:95:70:d0:71:d4:ac:cf:ad:e2:e8:cf:25: e8:51:c6:62:8e:9a:11:86:9f:6d:8c:d1:58:43:1d: 52:19:60:33:02:06:7b:22:63:df:b9:16:30:a7:55: 36:23:03:72:76:ae:d3:54:ca:ed:7d:c9:0e:a4:58: 89:f4:1c:f3:a4:ef:43:fe:5e:cc:64:11:80:1b:f1: 2d:26:0f:40:0a:ec:45:a6:d0:2e:46:07:65:2e:77: c0:66:94:4e:3d:f3:69:79:d8:bd:f6:3d:e1:18:73: 8c:5d:be:56:80:6b:d8:26:89:44:84:e0:6b:40:15: 78:03:6e:74:43:51:28:03:86:e7:41:fc:fc:9e:38: cf:1d:5a:57:d7:42:41:55:16:3c:28:9e:66:66:13: 87:ba:69:9a:57:65:cc:e4:52:0a:ef:f4:44:f6:d6: 35:b1:80:4e:6e:9f:ae:19:43:be:3f:aa:c4:93:7e: 50:30:57:aa:8c:bb:68:ed:f1:3c:50:56:09:fb:52: 1f:d2:c9:7f:5f:03:d5:59:64:25:9e:58:a3:fa:3a: 4b:40:dd:50:af:cc:d5:6f:4c:65:77:90:2b:a8:51: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:75:63:54:D1:EF:03:85:4D:43:C7:35:AD:6D:B0:CB:C4:E9:6B:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/3ce84811-817f-451f-816f-42649a6940cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.190.216.0/24 142.249.174.0/24 149.112.177.0/24 IPv6: 2602:fa86::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17290 40064 40419 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:66:02:88:44:70:6a:08:75:dd:0e:e1:3d:11:db:1f:b9:95: 63:23:08:05:d4:9e:18:2c:85:e5:50:c0:04:7b:ae:eb:36:30: 70:af:93:d8:7c:94:33:c9:00:59:19:6d:da:2c:4a:7e:d0:c9: aa:9f:43:e9:50:fa:cb:08:ce:cb:34:62:8f:b8:3c:07:05:a6: ac:8b:29:fa:0b:67:f6:3f:03:6b:40:e9:73:42:eb:32:1a:7e: 8e:57:33:ec:78:a4:c7:f1:9a:08:9a:f0:7c:fd:65:c4:94:21: 51:84:b5:04:ce:c5:03:88:df:03:71:81:fa:34:bc:d5:a9:86: 9c:c0:a0:b6:ac:e2:9a:e8:e8:d3:b3:5f:2d:d1:db:95:54:39: 28:0e:55:db:d2:ec:35:f6:90:21:bb:15:7a:dc:fc:1e:01:24: 54:fd:b5:6b:cd:8e:af:d3:ac:11:c9:c2:b7:72:dc:cc:57:3c: e7:ec:52:42:a3:99:df:ca:43:35:50:55:58:60:4b:81:3b:c9: 64:9c:77:8c:00:46:83:1d:df:04:bb:a5:46:9a:4f:eb:24:02: 42:d1:aa:47:02:27:d7:dc:71:34:7e:e0:e5:15:f1:cb:5a:89: a7:a2:81:60:bd:28:73:e6:8b:76:c9:d1:a2:db:47:2e:3d:88: 17:fa:e0:4d -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWE+iBv3+/9tizwrxsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyNjE4MzAyOVoXDTI5MDEyODE5MzAyOVowLzEtMCsGA1UEAxMk M2NlODQ4MTEtODE3Zi00NTFmLTgxNmYtNDI2NDlhNjk0MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOWDCOPXwK7tnuxAGhPBs/oc4E+uVQhqtrMT EY98tbeVcNBx1KzPreLozyXoUcZijpoRhp9tjNFYQx1SGWAzAgZ7ImPfuRYwp1U2 IwNydq7TVMrtfckOpFiJ9BzzpO9D/l7MZBGAG/EtJg9ACuxFptAuRgdlLnfAZpRO PfNpedi99j3hGHOMXb5WgGvYJolEhOBrQBV4A250Q1EoA4bnQfz8njjPHVpX10JB VRY8KJ5mZhOHummaV2XM5FIK7/RE9tY1sYBObp+uGUO+P6rEk35QMFeqjLto7fE8 UFYJ+1If0sl/XwPVWWQlnlij+jpLQN1Qr8zVb0xld5ArqFGBtQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFKB1Y1TR7wOFTUPHNa1tsMvE6WtYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z Y2U4NDgxMS04MTdmLTQ1MWYtODE2Zi00MjY0OWE2OTQwY2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzNjZTg0ODExLTgxN2YtNDUxZi04 MTZmLTQyNjQ5YTY5NDBjYy8zY2U4NDgxMS04MTdmLTQ1MWYtODE2Zi00MjY0OWE2 OTQwY2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXvtgDBACO+a4DBACVcLEwDgQCAAIwCAMGBCYC +oYAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAkOKAgMAnIACAwCd4zBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQB1ZgKIRHBqCHXdDuE9EdsfuZVjIwgF1J4YLIXlUMAEe67rNjBwr5PYfJQzyQBZ GW3aLEp+0Mmqn0PpUPrLCM7LNGKPuDwHBaasiyn6C2f2PwNrQOlzQusyGn6OVzPs eKTH8ZoImvB8/WXElCFRhLUEzsUDiN8DcYH6NLzVqYacwKC2rOKa6OjTs18t0duV VDkoDlXb0uw19pAhuxV63PweASRU/bVrzY6v06wRycK3ctzMVzzn7FJCo5nfykM1 UFVYYEuBO8lknHeMAEaDHd8Eu6VGmk/rJAJC0apHAifX3HE0fuDlFfHLWomnooFg vShz5ot2ydGi20cuPYgX+uBN -----END CERTIFICATE-----Generated at Mon Nov 2 14:27:53 2026 by rpki-client