$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc.cer File: 3ce84811-817f-451f-816f-42649a6940cc.cer (raw, json) Hash identifier: cJUGg0Pwm+0TZM0of5eYuHrctmmLBQ2EBKd+fUKtKK0= Subject key identifier: A0:75:63:54:D1:EF:03:85:4D:43:C7:35:AD:6D:B0:CB:C4:E9:6B:58 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584FC00B3C0EF74D9D0F6D7221A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/3ce84811-817f-451f-816f-42649a6940cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Nov 2026 12:33:17 +0000 Certificate not after: Sun 28 Jan 2029 19:30:29 +0000 Subordinate resources: AS: 17290 AS: 40064 AS: 40419 AS: 403201 IP: 23.190.216.0/24 IP: 142.249.174.0/24 IP: 149.112.177.0/24 IP: 2602:fa86::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c0:0b:3c:0e:f7:4d:9d:0f:6d:72:21:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Nov 6 12:33:17 2026 GMT Not After : Jan 28 19:30:29 2029 GMT Subject: CN=3ce84811-817f-451f-816f-42649a6940cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:83:08:e3:d7:c0:ae:ed:9e:ec:40:1a:13: c1:b3:fa:1c:e0:4f:ae:55:08:6a:b6:b3:13:11:8f: 7c:b5:b7:95:70:d0:71:d4:ac:cf:ad:e2:e8:cf:25: e8:51:c6:62:8e:9a:11:86:9f:6d:8c:d1:58:43:1d: 52:19:60:33:02:06:7b:22:63:df:b9:16:30:a7:55: 36:23:03:72:76:ae:d3:54:ca:ed:7d:c9:0e:a4:58: 89:f4:1c:f3:a4:ef:43:fe:5e:cc:64:11:80:1b:f1: 2d:26:0f:40:0a:ec:45:a6:d0:2e:46:07:65:2e:77: c0:66:94:4e:3d:f3:69:79:d8:bd:f6:3d:e1:18:73: 8c:5d:be:56:80:6b:d8:26:89:44:84:e0:6b:40:15: 78:03:6e:74:43:51:28:03:86:e7:41:fc:fc:9e:38: cf:1d:5a:57:d7:42:41:55:16:3c:28:9e:66:66:13: 87:ba:69:9a:57:65:cc:e4:52:0a:ef:f4:44:f6:d6: 35:b1:80:4e:6e:9f:ae:19:43:be:3f:aa:c4:93:7e: 50:30:57:aa:8c:bb:68:ed:f1:3c:50:56:09:fb:52: 1f:d2:c9:7f:5f:03:d5:59:64:25:9e:58:a3:fa:3a: 4b:40:dd:50:af:cc:d5:6f:4c:65:77:90:2b:a8:51: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:75:63:54:D1:EF:03:85:4D:43:C7:35:AD:6D:B0:CB:C4:E9:6B:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/3ce84811-817f-451f-816f-42649a6940cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.190.216.0/24 142.249.174.0/24 149.112.177.0/24 IPv6: 2602:fa86::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17290 40064 40419 403201 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e8:d6:1d:06:99:99:4b:d2:92:30:5f:67:62:02:17:61:3e: 38:00:73:e8:b7:9c:58:f9:20:b9:55:02:a7:2e:0a:c4:7f:eb: eb:69:80:14:54:81:92:4e:ce:cc:d4:82:61:21:14:a0:c8:c6: 42:73:b5:0f:86:36:5d:f0:da:44:69:c6:9c:16:ed:75:7c:cf: 09:57:48:17:4f:48:eb:2d:bc:e3:cc:f6:4b:db:80:ca:55:c2: 23:df:68:e6:46:b1:ff:e7:39:31:fd:29:f3:52:c1:46:a2:de: 7e:44:0c:87:b0:df:5f:2d:50:d8:29:5d:11:c3:6c:2e:e9:b3: 53:a0:e0:7e:57:58:13:01:60:d4:fd:40:5a:4d:f9:18:7f:9a: 3c:4b:ce:fe:08:63:f5:1b:67:a7:50:59:dd:60:ce:8b:3a:c2: 0b:a2:0f:c2:58:98:eb:e2:4c:6e:48:ea:37:11:92:48:9a:d0: f7:04:82:42:8c:8d:c6:46:7a:e3:48:29:81:da:7e:39:5a:52: 9e:55:67:20:0a:85:66:a9:84:50:41:19:f7:a5:f2:fb:65:96: 53:60:15:29:f2:38:3d:21:27:d7:a1:d6:07:4c:a6:8e:d6:9f: 9c:8d:8e:0e:8b:f4:b8:47:05:66:7f:b2:1a:c1:18:9b:7d:3c: 97:9e:81:6f -----BEGIN CERTIFICATE----- MIIHMzCCBhugAwIBAgIUAQ0Mn0MoWE/ACzwO902dD21yIagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTEwNjEyMzMxN1oXDTI5MDEyODE5MzAyOVowLzEtMCsGA1UEAxMk M2NlODQ4MTEtODE3Zi00NTFmLTgxNmYtNDI2NDlhNjk0MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOWDCOPXwK7tnuxAGhPBs/oc4E+uVQhqtrMT EY98tbeVcNBx1KzPreLozyXoUcZijpoRhp9tjNFYQx1SGWAzAgZ7ImPfuRYwp1U2 IwNydq7TVMrtfckOpFiJ9BzzpO9D/l7MZBGAG/EtJg9ACuxFptAuRgdlLnfAZpRO PfNpedi99j3hGHOMXb5WgGvYJolEhOBrQBV4A250Q1EoA4bnQfz8njjPHVpX10JB VRY8KJ5mZhOHummaV2XM5FIK7/RE9tY1sYBObp+uGUO+P6rEk35QMFeqjLto7fE8 UFYJ+1If0sl/XwPVWWQlnlij+jpLQN1Qr8zVb0xld5ArqFGBtQIDAQABo4IERTCC BEEwHQYDVR0OBBYEFKB1Y1TR7wOFTUPHNa1tsMvE6WtYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z Y2U4NDgxMS04MTdmLTQ1MWYtODE2Zi00MjY0OWE2OTQwY2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzNjZTg0ODExLTgxN2YtNDUxZi04 MTZmLTQyNjQ5YTY5NDBjYy8zY2U4NDgxMS04MTdmLTQ1MWYtODE2Zi00MjY0OWE2 OTQwY2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXvtgDBACO+a4DBACVcLEwDgQCAAIwCAMGBCYC +oYAMCgGCCsGAQUFBwEIAQH/BBkwF6AVMBMCAkOKAgMAnIACAwCd4wIDBicBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELo1h0GmZlL0pIwX2diAhdhPjgAc+i3nFj5ILlVAqcuCsR/6+tpgBRU gZJOzszUgmEhFKDIxkJztQ+GNl3w2kRpxpwW7XV8zwlXSBdPSOstvOPM9kvbgMpV wiPfaOZGsf/nOTH9KfNSwUai3n5EDIew318tUNgpXRHDbC7ps1Og4H5XWBMBYNT9 QFpN+Rh/mjxLzv4IY/UbZ6dQWd1gzos6wguiD8JYmOviTG5I6jcRkkia0PcEgkKM jcZGeuNIKYHafjlaUp5VZyAKhWaphFBBGfel8vtlllNgFSnyOD0hJ9eh1gdMpo7W n5yNjg6L9LhHBWZ/shrBGJt9PJeegW8= -----END CERTIFICATE-----Generated at Sun Nov 15 18:46:36 2026 by rpki-client