$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2.cer File: 23a33a5f-da0f-4c5a-910f-1f508872bef2.cer (raw, json) Hash identifier: 9T5xYSEE/mfVKUAlhwe3Zwt+NmynnXkNBXq4i2xHjPY= Subject key identifier: 74:B3:7F:AD:3B:3A:6C:F4:BD:03:4C:90:EF:A1:C6:5E:9F:1F:BE:60 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584ED32A07632836A3AD24CAB080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Aug 2026 16:08:45 +0000 Certificate not after: Wed 15 Nov 2028 17:08:45 +0000 Subordinate resources: AS: 2640 IP: 147.155.0.0/16 IP: 192.245.178.0/24 IP: 192.245.180.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d3:2a:07:63:28:36:a3:ad:24:ca:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 13 16:08:45 2026 GMT Not After : Nov 15 17:08:45 2028 GMT Subject: CN=23a33a5f-da0f-4c5a-910f-1f508872bef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fe:ba:26:ae:26:bc:d8:b0:8e:15:ae:16:c7: b6:da:88:12:ea:92:09:79:ae:01:8a:78:61:74:ed: ae:fc:11:ad:62:bc:0a:86:73:24:60:fb:76:ec:4b: 77:99:9d:14:ce:75:e3:99:54:8c:7b:6a:42:4b:cc: f3:5e:a7:7b:aa:f3:7e:6c:92:f2:f3:db:bf:48:80: 1c:2c:fa:8e:55:ad:46:2e:85:25:32:f3:26:76:c7: 2b:b5:f4:a6:41:46:e3:22:c8:c0:c6:cf:53:44:3a: 98:f5:d5:7c:e2:54:ef:19:5b:68:88:aa:91:f0:3c: 1a:48:38:14:fb:a9:85:b5:23:b1:d8:14:ea:0e:f3: 44:79:62:a0:62:75:c9:5a:05:58:ee:c7:97:96:c4: 06:09:bc:0a:a2:f6:f9:6d:3f:3f:06:23:01:f2:a9: 12:ed:f6:97:f6:7c:de:e2:1f:94:37:d6:a3:25:0e: e0:b1:1d:61:f1:2d:54:b0:77:2c:72:30:fd:9d:08: d5:90:09:e0:97:a8:ce:2c:f8:18:e5:d8:c3:b4:38: 5d:8a:a6:61:a1:2a:a2:92:11:d1:9b:7a:30:7f:7c: 13:80:4f:80:31:f3:f2:fc:25:eb:ca:87:cf:43:d8: 2c:6e:67:92:42:69:73:6e:f4:a4:05:99:b6:66:46: 7d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B3:7F:AD:3B:3A:6C:F4:BD:03:4C:90:EF:A1:C6:5E:9F:1F:BE:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/23a33a5f-da0f-4c5a-910f-1f508872bef2/23a33a5f-da0f-4c5a-910f-1f508872bef2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 147.155.0.0/16 192.245.178.0/24 192.245.180.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2640 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:0c:46:62:55:6a:c1:46:40:b9:cc:46:c9:3f:6b:7f:47:d6: 0c:e8:ec:51:65:38:20:90:4b:79:fb:c7:06:f4:e7:d4:02:38: c4:91:f7:43:e0:f3:06:1f:a4:f8:a3:0f:10:3a:dd:eb:9c:ab: a9:e8:95:3f:0c:d7:ed:28:9f:6f:2b:d8:f2:60:42:c2:0e:29: 64:ac:83:87:07:ab:62:aa:88:0b:a0:d2:45:b6:83:6b:48:56: 21:d4:f9:00:ed:57:2f:59:d3:aa:c5:fc:11:4c:60:0a:d9:b1: 4d:38:f1:ab:c5:48:8b:8c:65:db:90:5d:29:75:b8:c3:58:ad: 5a:bf:47:f7:b4:59:7a:ed:20:cf:af:7c:2e:ee:6e:d9:07:dc: 6d:87:36:18:28:3f:35:e0:4a:99:8c:13:ed:bf:ae:ad:5d:eb: e8:ea:02:46:0a:96:6f:89:56:68:aa:4d:34:93:0d:d9:3c:db: 6a:96:7f:69:94:08:25:20:4e:35:c0:42:d1:f9:a4:54:0e:9a: 54:ea:67:4f:b6:4c:37:9a:bb:d3:8b:04:8d:8d:07:7f:f7:3a: 31:84:e6:88:00:1f:ce:1b:8b:22:8e:3f:dd:8e:9d:54:05:8e: cc:5b:1d:3b:27:04:23:27:6f:b2:af:7a:c8:48:d1:0a:e1:d4: 2e:40:d5:ac -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWE7TKgdjKDajrSTKsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgxMzE2MDg0NVoXDTI4MTExNTE3MDg0NVowLzEtMCsGA1UEAxMk MjNhMzNhNWYtZGEwZi00YzVhLTkxMGYtMWY1MDg4NzJiZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP66Jq4mvNiwjhWuFse22ogS6pIJea4Binhh dO2u/BGtYrwKhnMkYPt27Et3mZ0UznXjmVSMe2pCS8zzXqd7qvN+bJLy89u/SIAc LPqOVa1GLoUlMvMmdscrtfSmQUbjIsjAxs9TRDqY9dV84lTvGVtoiKqR8DwaSDgU +6mFtSOx2BTqDvNEeWKgYnXJWgVY7seXlsQGCbwKovb5bT8/BiMB8qkS7faX9nze 4h+UN9ajJQ7gsR1h8S1UsHcscjD9nQjVkAngl6jOLPgY5djDtDhdiqZhoSqikhHR m3owf3wTgE+AMfPy/CXryofPQ9gsbmeSQmlzbvSkBZm2ZkZ9nQIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFHSzf607Omz0vQNMkO+hxl6fH75gMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8y M2EzM2E1Zi1kYTBmLTRjNWEtOTEwZi0xZjUwODg3MmJlZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzIzYTMzYTVmLWRhMGYtNGM1YS05 MTBmLTFmNTA4ODcyYmVmMi8yM2EzM2E1Zi1kYTBmLTRjNWEtOTEwZi0xZjUwODg3 MmJlZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwCTmwMEAMD1sgMEAMD1tDAZBggrBgEFBQcBCAEB /wQKMAigBjAEAgIKUDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcDEZiVWrBRkC5zEbJP2t/R9YM6OxRZTgg kEt5+8cG9OfUAjjEkfdD4PMGH6T4ow8QOt3rnKup6JU/DNftKJ9vK9jyYELCDilk rIOHB6tiqogLoNJFtoNrSFYh1PkA7VcvWdOqxfwRTGAK2bFNOPGrxUiLjGXbkF0p dbjDWK1av0f3tFl67SDPr3wu7m7ZB9xthzYYKD814EqZjBPtv66tXevo6gJGCpZv iVZoqk00kw3ZPNtqln9plAglIE41wELR+aRUDppU6mdPtkw3mrvTiwSNjQd/9zox hOaIAB/OG4sijj/djp1UBY7MWx07JwQjJ2+yr3rISNEK4dQuQNWs -----END CERTIFICATE-----Generated at Tue Aug 25 07:52:57 2026 by rpki-client