$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/086f1e6c-0fc9-465c-97bd-1d88d68cb4d7.cer File: 086f1e6c-0fc9-465c-97bd-1d88d68cb4d7.cer (raw, json) Hash identifier: kZc8AsMrQ3R1s3Ux+sqgeV8ACdV7V00Vcy95plhSlS8= Subject key identifier: 1F:D7:AA:26:37:9B:05:AE:7F:60:C4:A4:6A:1C:59:72:72:A8:1C:DE Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584ED6BBC7879E5C4A200FA7EA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/086f1e6c-0fc9-465c-97bd-1d88d68cb4d7/086f1e6c-0fc9-465c-97bd-1d88d68cb4d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/086f1e6c-0fc9-465c-97bd-1d88d68cb4d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Aug 2026 22:49:51 +0000 Certificate not after: Thu 16 Nov 2028 23:49:51 +0000 Subordinate resources: AS: 398280 IP: 23.154.240.0/24 IP: 2602:fd5b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d6:bb:c7:87:9e:5c:4a:20:0f:a7:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 14 22:49:51 2026 GMT Not After : Nov 16 23:49:51 2028 GMT Subject: CN=086f1e6c-0fc9-465c-97bd-1d88d68cb4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:a6:a6:e5:14:63:d1:7b:4a:1e:e8:d7:8f: ff:29:16:4e:d8:2f:4f:e9:23:f3:3d:4b:17:95:7c: ae:a4:f6:6f:cd:3f:90:1d:f3:f4:6b:9e:5e:0a:44: fc:75:26:f9:2a:99:6c:1b:e4:fa:30:1b:c2:05:be: 36:9c:f5:fb:13:a7:c2:c6:e4:98:1f:63:9d:cb:81: b7:c8:2c:dc:ad:12:55:8e:cf:c2:47:45:94:35:8d: 00:66:55:d2:85:22:3c:25:90:f8:96:04:aa:93:bf: 31:c4:43:4e:8b:bd:57:f0:ea:d9:3c:a2:aa:be:a2: b1:eb:16:e3:99:65:50:86:dd:51:14:f5:2a:13:d3: d2:9f:6d:dd:f8:a7:2a:45:1c:0b:90:88:e6:c4:94: 1d:a5:64:6a:a9:ad:b9:c1:9f:02:d0:d3:61:33:0c: c0:6a:30:24:09:78:77:f0:da:a7:17:aa:59:09:6a: 45:78:3c:31:23:d9:28:56:71:a1:8a:cd:42:80:a7: 3a:41:a7:26:b1:e5:7b:9e:61:b3:95:22:24:47:6a: 2e:96:06:d7:09:33:f6:8a:ad:99:59:80:da:8d:30: 52:38:13:df:1e:40:10:81:1b:4d:9a:74:d6:f2:08: 2c:b6:71:d5:21:0a:82:87:22:fd:34:08:1d:1f:67: 65:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D7:AA:26:37:9B:05:AE:7F:60:C4:A4:6A:1C:59:72:72:A8:1C:DE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/086f1e6c-0fc9-465c-97bd-1d88d68cb4d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/086f1e6c-0fc9-465c-97bd-1d88d68cb4d7/086f1e6c-0fc9-465c-97bd-1d88d68cb4d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 23.154.240.0/24 IPv6: 2602:fd5b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398280 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3b:f7:4e:40:db:77:24:65:51:5b:dd:a5:13:cd:bc:bf:ae: 28:3a:cd:f5:ee:91:9d:2b:38:8e:75:5f:9c:84:d5:69:94:8f: 6a:47:13:47:ca:13:2a:17:9f:47:24:b5:86:61:a4:51:1d:70: af:e5:0b:5e:46:b8:0e:01:5b:af:d0:ef:da:44:0f:a1:0a:9b: d6:59:09:ab:1b:91:3a:49:f3:fb:fe:71:ea:f9:23:ea:82:ca: 78:b3:7a:87:40:a3:e7:75:52:2b:9a:5e:e5:50:5e:dd:ba:2c: dd:35:a2:8e:dc:18:ba:72:1c:6c:a1:43:29:ae:11:a5:f4:0b: e8:74:b3:2d:97:20:00:4b:38:0b:b3:4a:a2:ff:ac:a4:c9:15: 4b:51:6c:71:22:dd:6f:5f:23:79:b7:00:21:50:64:27:6f:5e: 86:62:b8:ef:9a:34:b6:f2:80:e4:25:1e:d9:ad:0f:77:16:37: ee:73:bb:0c:ff:7e:ce:1e:1a:86:e9:4c:2b:0d:18:ca:af:4c: 80:7a:e8:ed:18:92:39:21:8d:d1:2d:2b:87:ac:4f:1f:4c:65: b2:45:05:cf:88:35:5f:ad:0d:fe:da:b1:4b:8d:a7:24:3d:68: 3f:6d:5d:1f:aa:d8:d4:63:6b:f2:e5:a3:23:bb:30:a8:12:c3: e9:5b:7b:87 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE7Wu8eHnlxKIA+n6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgxNDIyNDk1MVoXDTI4MTExNjIzNDk1MVowLzEtMCsGA1UEAxMk MDg2ZjFlNmMtMGZjOS00NjVjLTk3YmQtMWQ4OGQ2OGNiNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGempuUUY9F7Sh7o14//KRZO2C9P6SPzPUsX lXyupPZvzT+QHfP0a55eCkT8dSb5KplsG+T6MBvCBb42nPX7E6fCxuSYH2Ody4G3 yCzcrRJVjs/CR0WUNY0AZlXShSI8JZD4lgSqk78xxENOi71X8OrZPKKqvqKx6xbj mWVQht1RFPUqE9PSn23d+KcqRRwLkIjmxJQdpWRqqa25wZ8C0NNhMwzAajAkCXh3 8NqnF6pZCWpFeDwxI9koVnGhis1CgKc6QacmseV7nmGzlSIkR2oulgbXCTP2iq2Z WYDajTBSOBPfHkAQgRtNmnTW8ggstnHVIQqChyL9NAgdH2dlUwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFB/XqiY3mwWuf2DEpGocWXJyqBzeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8w ODZmMWU2Yy0wZmM5LTQ2NWMtOTdiZC0xZDg4ZDY4Y2I0ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzA4NmYxZTZjLTBmYzktNDY1Yy05 N2JkLTFkODhkNjhjYjRkNy8wODZmMWU2Yy0wZmM5LTQ2NWMtOTdiZC0xZDg4ZDY4 Y2I0ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmvAwDgQCAAIwCAMGBCYC/VsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYTyDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwO/dOQNt3JGVRW92lE828v64o Os317pGdKziOdV+chNVplI9qRxNHyhMqF59HJLWGYaRRHXCv5QteRrgOAVuv0O/a RA+hCpvWWQmrG5E6SfP7/nHq+SPqgsp4s3qHQKPndVIrml7lUF7duizdNaKO3Bi6 chxsoUMprhGl9AvodLMtlyAASzgLs0qi/6ykyRVLUWxxIt1vXyN5twAhUGQnb16G YrjvmjS28oDkJR7ZrQ93Fjfuc7sM/37OHhqG6UwrDRjKr0yAeujtGJI5IY3RLSuH rE8fTGWyRQXPiDVfrQ3+2rFLjackPWg/bV0fqtjUY2vy5aMjuzCoEsPpW3uH -----END CERTIFICATE-----Generated at Tue Aug 25 07:53:22 2026 by rpki-client