$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4.cer File: 3e882936-e9b9-454e-95ee-bc71b6cac2a4.cer (raw, json) Hash identifier: UHyDWrdGzuXtuP8Flqs2crvZPl8x0aA2Wd0rzlIvzF8= Subject key identifier: 3C:6C:47:9C:D0:01:9C:26:01:BE:25:62:F9:39:2D:48:36:93:F5:96 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EDA25C1F58658772023ED8A60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4/3e882936-e9b9-454e-95ee-bc71b6cac2a4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 16 Aug 2026 04:10:49 +0000 Certificate not after: Sat 18 Nov 2028 05:10:49 +0000 Subordinate resources: AS: 402007 IP: 23.144.252.0/24 IP: 2602:f575::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:da:25:c1:f5:86:58:77:20:23:ed:8a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 16 04:10:49 2026 GMT Not After : Nov 18 05:10:49 2028 GMT Subject: CN=3e882936-e9b9-454e-95ee-bc71b6cac2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:b3:e0:18:14:1c:fe:03:79:c0:87:2f:45: 91:56:41:0d:fe:e2:95:11:21:8b:19:73:9c:27:90: 6b:1f:2d:f1:a5:6d:3e:31:b9:89:f7:65:c3:0d:5d: c9:18:7c:21:4e:9e:35:51:84:88:3c:12:51:93:3c: 57:64:fa:17:d1:16:91:3c:0d:e4:27:c7:f2:cf:52: da:e6:8a:2b:aa:32:67:c2:4d:4c:d4:cb:c3:49:38: 05:96:e6:84:42:2b:fb:d3:ee:d8:69:8f:4b:e4:47: f3:74:62:41:00:f2:cd:e8:51:0b:07:75:88:7d:e2: 51:91:14:3c:29:c4:d7:c4:79:fe:6c:b5:2a:03:43: 04:c0:88:ef:81:d9:70:ca:ac:e0:dd:c0:18:44:d8: 49:a7:bd:5c:7a:25:83:fa:0f:05:43:63:fa:4a:77: 1d:71:6a:a8:44:8c:b2:96:30:3e:f5:3a:ea:d6:27: 40:49:6e:c4:ff:0a:a9:fd:77:df:50:43:6e:49:fd: dc:d8:bd:80:fe:51:13:88:cd:5a:d3:23:a1:e9:e3: a3:01:d9:35:e2:71:cc:da:e3:30:fd:3a:61:14:bf: 09:6c:ee:ec:09:94:e3:5f:6b:e0:e2:a7:4f:22:33: 85:a3:5e:64:18:9a:23:8a:c8:35:d0:0e:69:1c:29: 4e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6C:47:9C:D0:01:9C:26:01:BE:25:62:F9:39:2D:48:36:93:F5:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4/3e882936-e9b9-454e-95ee-bc71b6cac2a4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 23.144.252.0/24 IPv6: 2602:f575::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402007 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:72:e8:2d:b0:66:61:fc:5a:4f:3a:e4:5a:b7:b2:58:a7:f7: 51:28:f1:17:f1:80:be:28:6f:82:f8:e8:b9:a2:1d:0a:22:17: 6b:13:f9:14:83:fb:a3:85:ae:75:eb:d8:ba:88:2f:c2:be:05: 6e:a4:77:07:a7:63:ec:90:76:58:bb:3c:7b:6d:35:2b:71:93: 4e:87:0f:5c:14:8a:a5:7d:a7:c3:61:e6:9e:b2:21:9c:f6:a9: 19:07:41:7c:9e:59:61:91:a4:56:df:b0:48:fd:69:62:53:82: 2c:3b:27:e6:da:5f:0f:42:3a:2d:05:94:36:3b:ca:1f:da:8a: af:12:06:4e:9a:a5:9b:5f:1c:30:55:9e:48:db:48:ee:10:f2: e1:82:2b:b8:88:e5:8a:c4:43:34:12:18:d2:55:e3:df:93:7b: d7:c3:9c:45:a9:cd:aa:30:2b:9a:7a:85:cf:5d:9b:5b:05:76: 47:39:f9:a9:d9:ee:69:1a:96:bb:7c:aa:9e:ae:31:b4:6e:b8: 35:dc:d4:92:69:87:5c:64:ec:ce:81:28:1d:c0:86:f6:e2:7c: 9b:d9:e6:e5:29:89:95:37:2d:70:c7:fd:46:2d:0f:70:55:c5: f7:3c:d7:76:dc:2f:94:19:c1:0a:54:52:b5:83:c7:3d:d1:d5: f3:df:34:bf -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE7aJcH1hlh3ICPtimAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgxNjA0MTA0OVoXDTI4MTExODA1MTA0OVowLzEtMCsGA1UEAxMk M2U4ODI5MzYtZTliOS00NTRlLTk1ZWUtYmM3MWI2Y2FjMmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOmz4BgUHP4DecCHL0WRVkEN/uKVESGLGXOc J5BrHy3xpW0+MbmJ92XDDV3JGHwhTp41UYSIPBJRkzxXZPoX0RaRPA3kJ8fyz1La 5oorqjJnwk1M1MvDSTgFluaEQiv70+7YaY9L5EfzdGJBAPLN6FELB3WIfeJRkRQ8 KcTXxHn+bLUqA0MEwIjvgdlwyqzg3cAYRNhJp71ceiWD+g8FQ2P6SncdcWqoRIyy ljA+9Trq1idASW7E/wqp/XffUENuSf3c2L2A/lETiM1a0yOh6eOjAdk14nHM2uMw /TphFL8JbO7sCZTjX2vg4qdPIjOFo15kGJojisg10A5pHClO4QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDxsR5zQAZwmAb4lYvk5LUg2k/WWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8z ZTg4MjkzNi1lOWI5LTQ1NGUtOTVlZS1iYzcxYjZjYWMyYTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzNlODgyOTM2LWU5YjktNDU0ZS05 NWVlLWJjNzFiNmNhYzJhNC8zZTg4MjkzNi1lOWI5LTQ1NGUtOTVlZS1iYzcxYjZj YWMyYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkPwwDgQCAAIwCAMGACYC9XUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiVzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDQcugtsGZh/FpPOuRat7JYp/dR KPEX8YC+KG+C+Oi5oh0KIhdrE/kUg/ujha5169i6iC/CvgVupHcHp2PskHZYuzx7 bTUrcZNOhw9cFIqlfafDYeaesiGc9qkZB0F8nllhkaRW37BI/WliU4IsOyfm2l8P QjotBZQ2O8of2oqvEgZOmqWbXxwwVZ5I20juEPLhgiu4iOWKxEM0EhjSVePfk3vX w5xFqc2qMCuaeoXPXZtbBXZHOfmp2e5pGpa7fKqerjG0brg13NSSaYdcZOzOgSgd wIb24nyb2eblKYmVNy1wx/1GLQ9wVcX3PNd23C+UGcEKVFK1g8c90dXz3zS/ -----END CERTIFICATE-----Generated at Tue Aug 25 16:34:26 2026 by rpki-client