$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8.cer File: 3ee846dd-02ea-4d61-870d-fcc258b39cf8.cer (raw, json) Hash identifier: hE1k0voXKrd4FQnhBE0O7R4HygQeTUMMPbI0c12jkUA= Subject key identifier: 75:82:52:27:DB:3E:E9:32:1C:D6:C6:F1:2F:10:8C:BA:F2:11:C7:E0 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7FEB296DD9AF8FB83454A680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8/3ee846dd-02ea-4d61-870d-fcc258b39cf8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Oct 2026 13:16:56 +0000 Certificate not after: Tue 16 Jan 2029 14:16:56 +0000 Subordinate resources: AS: 33390 IP: 204.238.254.0/24 IP: 2620:ee::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:eb:29:6d:d9:af:8f:b8:34:54:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 14 13:16:56 2026 GMT Not After : Jan 16 14:16:56 2029 GMT Subject: CN=3ee846dd-02ea-4d61-870d-fcc258b39cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:18:10:00:48:a6:5b:9e:60:a2:8a:81:ab:eb: b9:a3:f5:d1:0a:1a:9e:79:6b:d7:ce:bb:62:17:b0: 38:65:09:b5:e1:81:96:ea:a9:7c:84:c3:c8:2c:51: 76:0a:92:72:a0:bb:c3:a2:be:48:af:0f:b9:e6:87: fc:c8:f8:c3:7f:80:19:09:06:2b:6a:7a:c9:2c:d0: b0:a4:0e:49:e1:f8:be:b0:41:15:2a:47:11:ed:a1: fc:03:29:de:07:98:0a:45:47:1d:f0:69:c4:5f:d0: 69:80:1f:5e:c0:7c:4f:9a:9a:32:8f:cd:1c:db:64: b7:a5:99:90:d4:e1:9f:ec:6b:29:b3:16:67:b8:ed: b6:37:ce:be:fa:20:af:7a:50:ba:79:76:dc:91:09: 8f:b4:f0:e8:e2:ec:51:7d:aa:29:2c:ca:7c:00:d5: a7:69:9f:31:58:cb:e8:3f:43:14:f9:6d:08:07:0c: 57:f2:e5:e1:c9:a9:9c:c0:0a:bb:09:72:94:b5:19: d6:d4:d3:fc:90:e4:ae:39:b4:af:11:26:ef:b4:dc: 47:54:4f:ad:07:8c:77:24:13:dd:a8:56:bf:6d:5e: 6a:86:41:f7:68:d8:1a:a7:55:dd:97:5d:7c:18:d7: 4b:64:cd:4a:a8:e6:f6:b2:cb:8f:b6:5b:b2:cd:71: db:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:82:52:27:DB:3E:E9:32:1C:D6:C6:F1:2F:10:8C:BA:F2:11:C7:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8/3ee846dd-02ea-4d61-870d-fcc258b39cf8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 204.238.254.0/24 IPv6: 2620:ee::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33390 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:57:34:8c:78:a5:22:7f:55:e7:0c:ce:7b:ba:35:0d:f8:35: f8:2e:2c:ca:2e:e5:7b:da:39:77:1e:2a:a9:d2:20:d3:9b:f3: 02:4c:87:c3:c3:ba:aa:a9:3a:60:8d:00:13:b6:55:02:98:51: 65:e2:fe:0e:26:bc:86:e0:67:e2:73:d9:f5:f4:22:d3:d4:4f: 40:07:fc:44:bc:89:f9:45:05:cc:74:90:46:77:68:da:80:c1: e7:c3:e0:f9:e3:e2:36:45:4a:80:be:94:5b:d7:37:31:93:91: 44:d7:6d:01:8f:79:4c:e5:77:be:7d:09:ef:fb:2f:41:3f:48: 36:cd:b0:9d:cc:04:fe:04:04:8d:46:f0:4c:35:79:b9:3f:b2: e0:80:54:4d:53:ca:9b:3e:19:1b:bc:3f:34:21:13:6c:20:75: 0a:0a:9e:fe:34:bd:77:88:37:ac:9c:a2:56:1a:2e:fb:4e:5f: 96:58:d8:3f:b8:18:8b:30:2f:49:bd:10:22:c1:ce:3a:85:93: 80:37:b1:ee:75:8e:3b:28:fb:8c:4b:03:79:f3:47:1f:b5:86: 2e:87:6b:5b:d8:58:d8:f2:50:43:c8:5f:2e:6e:61:af:06:c7: 9e:c8:c0:42:89:37:d8:21:d4:14:71:82:da:cd:68:d1:79:45: c9:4c:e8:6c -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE9/6ylt2a+PuDRUpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNDEzMTY1NloXDTI5MDExNjE0MTY1NlowLzEtMCsGA1UEAxMk M2VlODQ2ZGQtMDJlYS00ZDYxLTg3MGQtZmNjMjU4YjM5Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRgQAEimW55gooqBq+u5o/XRChqeeWvXzrti F7A4ZQm14YGW6ql8hMPILFF2CpJyoLvDor5Irw+55of8yPjDf4AZCQYranrJLNCw pA5J4fi+sEEVKkcR7aH8AyneB5gKRUcd8GnEX9BpgB9ewHxPmpoyj80c22S3pZmQ 1OGf7GspsxZnuO22N86++iCvelC6eXbckQmPtPDo4uxRfaopLMp8ANWnaZ8xWMvo P0MU+W0IBwxX8uXhyamcwAq7CXKUtRnW1NP8kOSuObSvESbvtNxHVE+tB4x3JBPd qFa/bV5qhkH3aNgap1Xdl118GNdLZM1KqOb2ssuPtluyzXHbWwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFHWCUifbPukyHNbG8S8QjLryEcfgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z ZWU4NDZkZC0wMmVhLTRkNjEtODcwZC1mY2MyNThiMzljZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzNlZTg0NmRkLTAyZWEtNGQ2MS04 NzBkLWZjYzI1OGIzOWNmOC8zZWU4NDZkZC0wMmVhLTRkNjEtODcwZC1mY2MyNThi MzljZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADM7v4wDwQCAAIwCQMHACYgAO4AADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAgm4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWVc0jHilIn9V5wzOe7o1Dfg1 +C4syi7le9o5dx4qqdIg05vzAkyHw8O6qqk6YI0AE7ZVAphRZeL+Dia8huBn4nPZ 9fQi09RPQAf8RLyJ+UUFzHSQRndo2oDB58Pg+ePiNkVKgL6UW9c3MZORRNdtAY95 TOV3vn0J7/svQT9INs2wncwE/gQEjUbwTDV5uT+y4IBUTVPKmz4ZG7w/NCETbCB1 Cgqe/jS9d4g3rJyiVhou+05flljYP7gYizAvSb0QIsHOOoWTgDex7nWOOyj7jEsD efNHH7WGLodrW9hY2PJQQ8hfLm5hrwbHnsjAQok32CHUFHGC2s1o0XlFyUzobA== -----END CERTIFICATE-----Generated at Sun Nov 1 14:35:24 2026 by rpki-client