$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer File: d3de683a-04b1-4e1c-94c5-cb45e983323d.cer (raw, json) Hash identifier: MLWm6MjAJasuQzkRn8iTb/VFfSkF0/swAA66fYn/J9A= Subject key identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FC45EF3C709DD3CA0EDDAF480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Nov 2026 01:45:12 +0000 Certificate not after: Sat 10 Feb 2029 01:45:12 +0000 Subordinate resources: AS: 398888 IP: 128.254.220.0/22 IP: 163.123.216.0/24 IP: 2602:fd02::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c4:5e:f3:c7:09:dd:3c:a0:ed:da:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 8 01:45:12 2026 GMT Not After : Feb 10 01:45:12 2029 GMT Subject: CN=d3de683a-04b1-4e1c-94c5-cb45e983323d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:08:e5:d2:16:32:de:b6:dc:01:60:76:f0: 96:0c:33:15:43:41:b6:fd:3d:06:70:5e:bc:3f:9a: 24:16:7a:53:c5:20:3e:98:43:c7:0b:db:dd:53:77: ac:8c:7c:a1:bc:c0:e1:75:f5:f9:57:1d:f1:d2:08: 41:78:40:8e:df:bf:91:5e:4d:18:3e:c9:3e:27:07: 0e:c5:f8:fb:e6:0f:a6:98:f7:4c:19:06:94:df:78: 3d:a6:41:4b:da:4b:7e:3b:07:53:63:35:46:1b:4b: 78:bb:22:19:88:82:cb:66:77:b8:6b:0b:54:f6:35: 20:cb:b2:1e:a6:ec:0a:5f:ca:51:82:8c:1e:8e:61: 83:67:94:ff:d2:fe:97:83:9f:b8:5d:68:fe:8b:c6: 4b:5b:e1:a7:68:b5:d8:16:58:02:01:58:ad:16:fb: 27:d9:5b:41:e8:d5:ea:51:b3:a7:c2:76:3b:d0:b6: 68:55:3d:53:e4:2b:89:de:e4:70:6f:dc:ab:0d:da: c8:cf:0f:60:59:a9:3a:8d:0c:74:ac:58:9e:7c:01: 68:b4:65:46:14:20:c5:19:06:23:54:10:d9:bf:70: 11:e1:27:f1:d2:8f:e0:3f:a0:b4:58:29:46:4e:fe: d8:61:88:69:99:9a:27:fe:53:57:27:cb:16:51:33: c6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 128.254.220.0/22 163.123.216.0/24 IPv6: 2602:fd02::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398888 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7a:49:f4:e1:c5:3c:63:55:da:03:73:69:4e:e2:e3:73:08: b6:c3:49:39:90:85:f1:ee:74:6a:8f:2f:f8:91:56:9f:00:97: 51:45:69:0f:d9:c6:22:da:75:ce:db:2b:52:67:e9:25:81:7e: 26:a0:d6:33:e4:65:b9:49:16:34:9b:ed:bf:f5:df:f0:c3:cc: 37:74:19:88:27:7a:14:15:53:26:6e:05:df:3c:c9:e8:a0:19: b4:7d:26:fa:23:3a:ea:c2:a5:fc:8c:ff:52:d6:da:ee:f3:c1: 21:9b:fd:01:04:ed:25:e1:5f:4d:73:de:5a:42:f8:91:90:50: 1d:67:87:9d:e6:8f:f9:94:71:d6:e5:66:98:de:ae:f7:4b:43: e9:67:d0:4f:5b:c1:fe:6c:37:5c:8f:d0:75:ab:a6:e2:b9:65: b8:0a:a9:c7:04:de:fa:17:44:00:50:d0:83:fc:23:80:35:07: 62:d9:66:13:4f:b7:3e:48:7f:d7:3f:8c:d2:cd:dd:d0:66:6e: f0:df:d1:0e:8b:38:8f:0f:e2:69:ab:56:61:3b:0c:fd:d9:4e: f8:71:f3:b9:d4:fa:d2:64:73:d2:ec:b9:27:08:60:1b:3b:9f: c0:e3:3e:6b:7c:69:b5:4f:c0:75:cc:0d:61:20:14:1a:44:8e: d2:ec:aa:71 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE/EXvPHCd08oO3a9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTEwODAxNDUxMloXDTI5MDIxMDAxNDUxMlowLzEtMCsGA1UEAxMk ZDNkZTY4M2EtMDRiMS00ZTFjLTk0YzUtY2I0NWU5ODMzMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y0I5dIWMt623AFgdvCWDDMVQ0G2/T0GcF68 P5okFnpTxSA+mEPHC9vdU3esjHyhvMDhdfX5Vx3x0ghBeECO37+RXk0YPsk+JwcO xfj75g+mmPdMGQaU33g9pkFL2kt+OwdTYzVGG0t4uyIZiILLZne4awtU9jUgy7Ie puwKX8pRgowejmGDZ5T/0v6Xg5+4XWj+i8ZLW+GnaLXYFlgCAVitFvsn2VtB6NXq UbOnwnY70LZoVT1T5CuJ3uRwb9yrDdrIzw9gWak6jQx0rFiefAFotGVGFCDFGQYj VBDZv3AR4Sfx0o/gP6C0WClGTv7YYYhpmZon/lNXJ8sWUTPG0QIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFCH9KwgdoWB2o9WQlYuYXT7gm/GkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k M2RlNjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1ZTk4MzMyM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2QzZGU2ODNhLTA0YjEtNGUxYy05 NGM1LWNiNDVlOTgzMzIzZC9kM2RlNjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1ZTk4 MzMyM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAKA/twDBACje9gwDgQCAAIwCAMGBCYC/QIAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYWKDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbekn04cU8Y1XaA3Np TuLjcwi2w0k5kIXx7nRqjy/4kVafAJdRRWkP2cYi2nXO2ytSZ+klgX4moNYz5GW5 SRY0m+2/9d/ww8w3dBmIJ3oUFVMmbgXfPMnooBm0fSb6IzrqwqX8jP9S1tru88Eh m/0BBO0l4V9Nc95aQviRkFAdZ4ed5o/5lHHW5WaY3q73S0PpZ9BPW8H+bDdcj9B1 q6biuWW4CqnHBN76F0QAUNCD/COANQdi2WYTT7c+SH/XP4zSzd3QZm7w39EOiziP D+Jpq1ZhOwz92U74cfO51PrSZHPS7LknCGAbO5/A4z5rfGm1T8B1zA1hIBQaRI7S 7Kpx -----END CERTIFICATE-----Generated at Sun Nov 15 13:10:10 2026 by rpki-client