$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3dc4fba9-c1e4-4a81-9c22-e868ad31530f.cer File: 3dc4fba9-c1e4-4a81-9c22-e868ad31530f.cer (raw, json) Hash identifier: FQOGxCZLtg9jZ6ckNgxhbny3iLw/rI7jM6CFWB9v9RM= Subject key identifier: B1:31:96:CE:55:C8:39:5B:34:6B:8C:4D:51:FB:BF:E4:DC:98:CC:7C Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EBD4FDF6C549D3B838D5FB6D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3dc4fba9-c1e4-4a81-9c22-e868ad31530f/3dc4fba9-c1e4-4a81-9c22-e868ad31530f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3dc4fba9-c1e4-4a81-9c22-e868ad31530f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Aug 2026 20:17:13 +0000 Certificate not after: Tue 07 Nov 2028 21:17:13 +0000 Subordinate resources: AS: 402679 IP: 192.104.159.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:4f:df:6c:54:9d:3b:83:8d:5f:b6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 5 20:17:13 2026 GMT Not After : Nov 7 21:17:13 2028 GMT Subject: CN=3dc4fba9-c1e4-4a81-9c22-e868ad31530f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:88:6d:1d:97:4e:b6:96:d2:85:4e:d7:ac: fd:98:a7:ab:bd:2d:34:81:e0:82:a9:33:3d:80:b7: 96:be:fe:9e:61:de:90:db:e3:6a:39:b6:b3:40:26: 3f:3f:49:de:17:cb:23:7d:60:0d:af:72:e5:ed:ea: 85:85:00:d5:47:28:b7:27:96:92:0e:3b:1e:e6:48: 40:48:5c:6e:74:7a:2a:1f:90:f2:bb:88:75:19:2e: 83:5d:81:69:81:a4:f0:64:85:1c:26:f2:07:4c:e6: c1:5d:e4:e1:98:41:68:0c:e3:c1:de:0f:2b:d4:1b: 4b:26:e6:21:1a:be:e6:f3:29:60:22:2b:3c:17:63: f9:67:c3:83:ab:4b:78:91:67:1c:90:28:62:69:d8: 7e:50:23:b6:35:13:25:8a:56:3f:47:65:e3:9b:87: e5:5c:17:e9:f4:94:1d:33:a3:a4:43:de:17:08:3a: 82:2b:67:be:43:e7:19:b9:03:42:79:3c:67:e9:37: 7a:6b:99:6c:d0:fc:12:c8:6d:bb:7c:da:cf:dd:fc: ea:0f:a1:07:62:58:07:ba:e5:7b:4e:75:04:2f:bd: 88:f2:20:5a:e2:ab:f7:ca:5e:50:d6:ac:13:6b:09: a4:fb:d6:b4:25:26:95:ec:2a:05:ec:a1:de:f0:f2: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:31:96:CE:55:C8:39:5B:34:6B:8C:4D:51:FB:BF:E4:DC:98:CC:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3dc4fba9-c1e4-4a81-9c22-e868ad31530f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3dc4fba9-c1e4-4a81-9c22-e868ad31530f/3dc4fba9-c1e4-4a81-9c22-e868ad31530f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 192.104.159.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402679 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:75:e6:98:1b:87:d5:7c:6c:36:ed:1f:d7:3f:13:70:0a:8e: a2:7d:53:fc:26:f6:f9:21:e3:e8:f3:0d:3b:ac:cc:ce:33:d4: 41:be:e1:16:9c:df:a9:c0:01:0b:b3:6d:f5:f3:a4:5a:01:11: 9f:c2:46:8e:ea:17:4e:c9:7b:a7:9a:ff:44:4d:72:90:f3:cf: a2:a9:2c:ff:50:fa:11:06:82:f6:47:b4:be:bc:0b:fe:93:ef: 71:fc:0b:28:1e:14:c6:17:e6:35:ff:1f:7f:a6:09:c8:ed:c8: 20:d9:f2:d8:22:23:32:bd:b5:85:2d:84:ef:3e:58:85:29:fa: 02:99:fb:b2:ff:73:4d:59:f3:b6:f3:2b:c3:ec:fd:4a:b6:06: 89:60:9a:45:34:87:24:04:4c:c8:e1:4c:c9:e4:c9:60:a5:bf: da:4b:f3:02:88:1b:d2:1a:68:de:bc:60:93:71:dc:a4:42:29: e3:b5:ca:66:94:a3:8f:17:36:f8:83:85:5a:fa:53:99:65:80: 4c:a8:65:51:0a:ba:e2:5e:49:99:c1:99:cb:8a:34:36:63:98: 7b:0d:c5:e8:c4:68:f2:b4:8a:65:fd:a6:52:51:73:cb:49:19: fa:01:7b:7c:4a:6e:1f:ab:48:c7:a1:75:c9:b3:df:a4:21:a6: 02:c2:5a:65 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE69T99sVJ07g41fttAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgwNTIwMTcxM1oXDTI4MTEwNzIxMTcxM1owLzEtMCsGA1UEAxMk M2RjNGZiYTktYzFlNC00YTgxLTljMjItZTg2OGFkMzE1MzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4SIbR2XTraW0oVO16z9mKervS00geCCqTM9 gLeWvv6eYd6Q2+NqObazQCY/P0neF8sjfWANr3Ll7eqFhQDVRyi3J5aSDjse5khA SFxudHoqH5Dyu4h1GS6DXYFpgaTwZIUcJvIHTObBXeThmEFoDOPB3g8r1BtLJuYh Gr7m8ylgIis8F2P5Z8ODq0t4kWcckChiadh+UCO2NRMlilY/R2Xjm4flXBfp9JQd M6OkQ94XCDqCK2e+Q+cZuQNCeTxn6Td6a5ls0PwSyG27fNrP3fzqD6EHYlgHuuV7 TnUEL72I8iBa4qv3yl5Q1qwTawmk+9a0JSaV7CoF7KHe8PIx/QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFLExls5VyDlbNGuMTVH7v+TcmMx8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8z ZGM0ZmJhOS1jMWU0LTRhODEtOWMyMi1lODY4YWQzMTUzMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzNkYzRmYmE5LWMxZTQtNGE4MS05 YzIyLWU4NjhhZDMxNTMwZi8zZGM0ZmJhOS1jMWU0LTRhODEtOWMyMi1lODY4YWQz MTUzMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAaJ8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiT3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEN15pgbh9V8bDbtH9c/E3AKjqJ9U/wm9vkh4+jzDTuszM4z 1EG+4Rac36nAAQuzbfXzpFoBEZ/CRo7qF07Je6ea/0RNcpDzz6KpLP9Q+hEGgvZH tL68C/6T73H8CygeFMYX5jX/H3+mCcjtyCDZ8tgiIzK9tYUthO8+WIUp+gKZ+7L/ c01Z87bzK8Ps/Uq2BolgmkU0hyQETMjhTMnkyWClv9pL8wKIG9IaaN68YJNx3KRC KeO1ymaUo48XNviDhVr6U5llgEyoZVEKuuJeSZnBmcuKNDZjmHsNxejEaPK0imX9 plJRc8tJGfoBe3xKbh+rSMehdcmz36QhpgLCWmU= -----END CERTIFICATE-----Generated at Tue Aug 25 20:24:32 2026 by rpki-client