$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ea98b38-d05e-4c24-857f-2c8521df033a.cer File: 3ea98b38-d05e-4c24-857f-2c8521df033a.cer (raw, json) Hash identifier: Oo0JERoa0jG0QWN8oG2yb+gsRapggwDVEqRgXYjihC0= Subject key identifier: 0A:15:FD:77:03:6A:E2:2C:58:36:3D:C9:4B:0F:9D:08:08:DD:52:B1 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F863C16715DBC7D40A822AF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ea98b38-d05e-4c24-857f-2c8521df033a/3ea98b38-d05e-4c24-857f-2c8521df033a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ea98b38-d05e-4c24-857f-2c8521df033a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 Oct 2026 19:34:50 +0000 Certificate not after: Thu 18 Jan 2029 20:34:50 +0000 Subordinate resources: AS: 11367 AS: 62627 IP: 23.249.128.0/20 IP: 24.48.220.0/23 IP: 64.89.0.0/20 IP: 64.89.192.0/20 IP: 67.203.228.0/22 IP: 70.45.96.0/22 IP: 70.45.144.0/22 IP: 104.254.168.0/21 IP: 173.211.176.0/21 IP: 192.30.40.0/22 IP: 196.12.160.0/19 IP: 2605:4700::/32 IP: 2607:ac00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:3c:16:71:5d:bc:7d:40:a8:22:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 16 19:34:50 2026 GMT Not After : Jan 18 20:34:50 2029 GMT Subject: CN=3ea98b38-d05e-4c24-857f-2c8521df033a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bd:16:fd:50:0a:9c:4e:9a:e3:1d:c7:5b:be: e7:41:e4:e2:14:0e:82:14:92:7c:c4:e4:7f:ed:b6: 09:5f:f0:37:73:a2:45:ec:b9:27:0b:a8:6e:4f:f9: b7:b4:5a:33:de:8f:c3:50:61:f7:03:51:c4:e7:85: 41:20:8c:63:b1:3b:ac:1e:d4:e6:5c:66:3a:6e:1e: f9:9a:fd:7f:bd:84:1f:b8:5d:27:f3:2e:3c:a2:a9: 72:a3:60:2e:98:48:e4:66:87:c7:5a:86:93:44:73: 42:0b:5f:97:09:3a:3c:16:85:d5:81:ff:d2:02:8f: e2:a8:a4:05:9a:c5:67:33:68:dc:c5:8e:04:2e:4a: d3:4c:34:44:34:b9:63:79:7b:bf:0e:18:52:87:63: 83:1f:48:e4:56:58:e1:2a:7d:b6:64:bd:15:06:01: f2:6a:c4:18:8d:5a:cd:cc:08:27:8e:82:cb:d7:a8: 5f:a3:34:88:61:e5:69:a7:7f:ee:66:e0:96:73:8e: e1:34:50:64:28:4e:4f:80:1e:f1:45:93:43:07:95: 94:b0:7f:a7:33:5e:04:c1:04:01:cc:75:ee:74:97: 67:c1:ad:d0:4f:94:fd:67:9e:60:ad:ae:4c:a0:51: 47:66:5f:d3:04:af:2b:ba:d7:81:bc:9e:f0:9b:09: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:15:FD:77:03:6A:E2:2C:58:36:3D:C9:4B:0F:9D:08:08:DD:52:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ea98b38-d05e-4c24-857f-2c8521df033a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ea98b38-d05e-4c24-857f-2c8521df033a/3ea98b38-d05e-4c24-857f-2c8521df033a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.249.128.0/20 24.48.220.0/23 64.89.0.0/20 64.89.192.0/20 67.203.228.0/22 70.45.96.0/22 70.45.144.0/22 104.254.168.0/21 173.211.176.0/21 192.30.40.0/22 196.12.160.0/19 IPv6: 2605:4700::/32 2607:ac00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11367 62627 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:5e:a8:33:12:90:11:4a:5e:39:2d:41:d3:97:4c:00:0d:94: ef:d2:23:fb:57:ab:e8:ee:cd:ef:91:cb:47:72:5e:78:4c:7d: a5:f9:47:b3:3d:c9:2e:9f:a5:43:ec:1b:40:05:4a:94:bf:3b: 48:7b:4c:13:e3:30:36:a0:8e:85:f4:aa:71:4e:fc:29:c6:0d: 17:d4:ef:cc:c8:40:56:d1:a8:df:3c:ca:46:8f:f8:5e:64:d7: 49:b6:26:46:d0:f8:25:3c:39:79:bc:08:64:69:a9:d9:79:93: 6b:f5:8d:08:23:0a:5b:fc:98:3c:f8:41:77:8e:31:76:55:61: 89:bb:1a:05:9e:ea:42:e3:09:d3:30:a6:e0:7e:92:4e:f8:17: 9e:32:14:fb:ef:97:6c:7d:89:ac:7e:88:93:aa:a7:b6:ac:93: 9b:13:49:16:92:24:f7:39:22:56:fe:8a:18:91:0a:ec:05:14: 6b:b9:a0:4c:e1:1a:b5:7c:52:f2:e2:0b:8b:ed:96:27:04:d0: 6c:91:23:cc:3f:aa:6d:53:d0:2d:13:27:bb:b9:e2:7d:fc:6c: c3:63:5f:2e:21:58:3b:49:82:83:b6:0f:11:2e:05:43:5d:1e: 10:58:32:bb:e9:3b:1f:c1:d9:90:c4:20:66:04:38:e0:ff:af: 7a:20:9e:7e -----BEGIN CERTIFICATE----- MIIHXzCCBkegAwIBAgIUAQ0Mn0MoWE+GPBZxXbx9QKgirwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNjE5MzQ1MFoXDTI5MDExODIwMzQ1MFowLzEtMCsGA1UEAxMk M2VhOThiMzgtZDA1ZS00YzI0LTg1N2YtMmM4NTIxZGYwMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi70W/VAKnE6a4x3HW77nQeTiFA6CFJJ8xOR/ 7bYJX/A3c6JF7LknC6huT/m3tFoz3o/DUGH3A1HE54VBIIxjsTusHtTmXGY6bh75 mv1/vYQfuF0n8y48oqlyo2AumEjkZofHWoaTRHNCC1+XCTo8FoXVgf/SAo/iqKQF msVnM2jcxY4ELkrTTDRENLljeXu/DhhSh2ODH0jkVljhKn22ZL0VBgHyasQYjVrN zAgnjoLL16hfozSIYeVpp3/uZuCWc47hNFBkKE5PgB7xRZNDB5WUsH+nM14EwQQB zHXudJdnwa3QT5T9Z55gra5MoFFHZl/TBK8ruteBvJ7wmwkQ9wIDAQABo4IEcTCC BG0wHQYDVR0OBBYEFAoV/XcDauIsWDY9yUsPnQgI3VKxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z ZWE5OGIzOC1kMDVlLTRjMjQtODU3Zi0yYzg1MjFkZjAzM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzNlYTk4YjM4LWQwNWUtNGMyNC04 NTdmLTJjODUyMWRmMDMzYS8zZWE5OGIzOC1kMDVlLTRjMjQtODU3Zi0yYzg1MjFk ZjAzM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwcQYIKwYBBQUH AQcBAf8EYjBgMEgEAgABMEIDBAQX+YADBAEYMNwDBARAWQADBARAWcADBAJDy+QD BAJGLWADBAJGLZADBANo/qgDBAOt07ADBALAHigDBAXEDKAwFAQCAAIwDgMFACYF RwADBQAmB6wAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAixnAgMA9KMwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAFl6oMxKQEUpeOS1B05dMAA2U79Ij+1er6O7N75HLR3JeeEx9pflHsz3JLp+l Q+wbQAVKlL87SHtME+MwNqCOhfSqcU78KcYNF9TvzMhAVtGo3zzKRo/4XmTXSbYm RtD4JTw5ebwIZGmp2XmTa/WNCCMKW/yYPPhBd44xdlVhibsaBZ7qQuMJ0zCm4H6S TvgXnjIU+++XbH2JrH6Ik6qntqyTmxNJFpIk9zkiVv6KGJEK7AUUa7mgTOEatXxS 8uILi+2WJwTQbJEjzD+qbVPQLRMnu7niffxsw2NfLiFYO0mCg7YPES4FQ10eEFgy u+k7H8HZkMQgZgQ44P+veiCefg== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:19 2026 by rpki-client