$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/326ecee4-251b-4731-b603-84016623ab96.cer File: 326ecee4-251b-4731-b603-84016623ab96.cer (raw, json) Hash identifier: m33VyAs9f/cDEThDh1H+hoPUjOEW3IosHtuNEkJBYF8= Subject key identifier: 37:2A:7B:6B:BF:3D:3F:A3:0E:C4:7E:D0:36:57:4B:34:E7:D1:D1:3B Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F384548123E5BFC3EE3223180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/326ecee4-251b-4731-b603-84016623ab96/326ecee4-251b-4731-b603-84016623ab96.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/326ecee4-251b-4731-b603-84016623ab96/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Sep 2026 21:20:19 +0000 Certificate not after: Thu 21 Dec 2028 22:20:19 +0000 Subordinate resources: AS: 18590 IP: 104.152.176.0/22 IP: 162.213.188.0/22 IP: 162.222.32.0/21 IP: 170.178.144.0/22 IP: 204.80.88.0/21 IP: 208.92.12.0/22 IP: 2606:d600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:38:45:48:12:3e:5b:fc:3e:e3:22:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 18 21:20:19 2026 GMT Not After : Dec 21 22:20:19 2028 GMT Subject: CN=326ecee4-251b-4731-b603-84016623ab96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:96:53:50:fe:ef:41:35:25:98:78:52:30:48: 36:e8:2b:36:49:bf:20:d8:e3:61:2c:32:71:e2:d5: 42:64:26:2d:03:4b:26:f6:5f:50:02:3a:c9:b8:d2: 1b:70:85:49:9c:1b:48:d6:73:7c:0d:69:e6:54:dc: b9:46:19:35:7e:e2:a7:31:91:49:4c:5b:42:df:1c: 05:ed:5e:46:3b:e3:d1:d4:ff:81:8a:a2:ee:c1:49: c2:a6:56:d2:46:bb:c4:aa:31:e3:65:26:9a:c8:8d: af:86:e7:61:6b:32:18:49:af:bb:1c:c6:7e:bc:da: c7:3d:e0:ce:13:57:1f:e8:28:e1:d9:6e:95:86:df: 28:e1:94:1b:d0:37:a4:99:cd:fd:a0:b3:01:83:37: 4d:90:65:4a:64:13:f2:ef:89:fb:b2:d7:75:52:95: 2f:f3:85:5e:e7:cb:df:e8:c9:52:88:73:d4:60:25: 8a:21:ac:77:83:15:cf:78:7c:27:e1:57:ce:2d:39: bb:48:ed:4b:00:49:14:79:d5:3b:e2:d2:6f:95:9a: fb:4c:e6:5c:6e:3f:ba:b6:7c:3c:42:7f:c2:08:f9: 7c:d7:10:c9:17:f1:0b:50:aa:43:f2:72:2f:c2:a6: 39:f1:f4:23:52:a2:4f:3d:e4:29:25:56:d1:0a:0f: 6d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2A:7B:6B:BF:3D:3F:A3:0E:C4:7E:D0:36:57:4B:34:E7:D1:D1:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/326ecee4-251b-4731-b603-84016623ab96/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/326ecee4-251b-4731-b603-84016623ab96/326ecee4-251b-4731-b603-84016623ab96.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 104.152.176.0/22 162.213.188.0/22 162.222.32.0/21 170.178.144.0/22 204.80.88.0/21 208.92.12.0/22 IPv6: 2606:d600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18590 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1a:b0:85:56:6b:29:d9:8e:e3:91:45:c8:e4:7a:69:91:04: 50:51:a1:9f:64:39:48:da:1a:63:af:59:50:69:15:c8:7f:6f: 3c:38:8b:28:36:fe:9e:78:05:29:4a:44:b7:da:4b:6d:ef:22: 93:4a:0d:30:16:3a:51:dc:f8:a8:5c:72:d5:3e:ec:32:ab:74: 49:09:1e:29:b6:9a:48:d7:0e:fa:51:f9:58:21:e6:46:ed:82: 50:eb:11:6f:25:34:ce:90:90:7a:cd:5f:95:13:ec:cf:c2:b2: 64:fa:eb:31:8e:f4:bf:5a:04:f2:63:2d:31:31:e9:5a:05:0b: f5:fe:fa:a7:1c:69:2d:fc:9d:82:15:a6:75:49:e6:01:33:2e: d2:f5:8d:18:ed:19:c9:ce:bc:7f:f3:7d:d6:c2:38:1e:5b:91: 33:c8:64:57:8c:1b:30:e4:1f:12:2c:28:22:9a:0e:4a:ef:06: f4:2a:90:db:cc:91:f4:9c:12:73:a5:09:ba:02:d6:95:18:84: 84:65:02:aa:3b:eb:03:37:50:0d:4e:ec:eb:c0:18:ff:1f:b7: 65:b6:53:7c:f8:8b:78:ec:f5:cc:e2:bf:95:81:66:21:d2:ef: 39:e4:47:c9:a6:9f:7a:b5:e0:cf:5b:71:12:66:17:fa:e3:f4: a4:0e:f0:cc -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWE84RUgSPlv8PuMiMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkxODIxMjAxOVoXDTI4MTIyMTIyMjAxOVowLzEtMCsGA1UEAxMk MzI2ZWNlZTQtMjUxYi00NzMxLWI2MDMtODQwMTY2MjNhYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJZTUP7vQTUlmHhSMEg26Cs2Sb8g2ONhLDJx 4tVCZCYtA0sm9l9QAjrJuNIbcIVJnBtI1nN8DWnmVNy5Rhk1fuKnMZFJTFtC3xwF 7V5GO+PR1P+BiqLuwUnCplbSRrvEqjHjZSaayI2vhudhazIYSa+7HMZ+vNrHPeDO E1cf6Cjh2W6Vht8o4ZQb0Dekmc39oLMBgzdNkGVKZBPy74n7std1UpUv84Ve58vf 6MlSiHPUYCWKIax3gxXPeHwn4VfOLTm7SO1LAEkUedU74tJvlZr7TOZcbj+6tnw8 Qn/CCPl81xDJF/ELUKpD8nIvwqY58fQjUqJPPeQpJVbRCg9tCQIDAQABo4IERzCC BEMwHQYDVR0OBBYEFDcqe2u/PT+jDsR+0DZXSzTn0dE7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z MjZlY2VlNC0yNTFiLTQ3MzEtYjYwMy04NDAxNjYyM2FiOTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzMyNmVjZWU0LTI1MWItNDczMS1i NjAzLTg0MDE2NjIzYWI5Ni8zMjZlY2VlNC0yNTFiLTQ3MzEtYjYwMy04NDAxNjYy M2FiOTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAJomLADBAKi1bwDBAOi3iADBAKqspADBAPMUFgD BALQXAwwDQQCAAIwBwMFACYG1gAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICSJ4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAShqwhVZrKdmO45FFyOR6aZEEUFGhn2Q5SNoaY69ZUGkVyH9vPDiL KDb+nngFKUpEt9pLbe8ik0oNMBY6Udz4qFxy1T7sMqt0SQkeKbaaSNcO+lH5WCHm Ru2CUOsRbyU0zpCQes1flRPsz8KyZPrrMY70v1oE8mMtMTHpWgUL9f76pxxpLfyd ghWmdUnmATMu0vWNGO0Zyc68f/N91sI4HluRM8hkV4wbMOQfEiwoIpoOSu8G9CqQ 28yR9JwSc6UJugLWlRiEhGUCqjvrAzdQDU7s68AY/x+3ZbZTfPiLeOz1zOK/lYFm IdLvOeRHyaaferXgz1txEmYX+uP0pA7wzA== -----END CERTIFICATE-----Generated at Sun Sep 20 16:16:12 2026 by rpki-client