$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/48701730-80da-4e96-a7dc-696caaff8f78.cer File: 48701730-80da-4e96-a7dc-696caaff8f78.cer (raw, json) Hash identifier: JH8cQoW51IqTbWvL88sioMVqj4hI21iK5nRg86zMj0c= Subject key identifier: 6B:60:EB:93:24:77:9B:5E:8E:32:30:0C:CD:30:28:66:F6:F0:06:87 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584ECBF49E5CF9E600A4C3F97900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/48701730-80da-4e96-a7dc-696caaff8f78/48701730-80da-4e96-a7dc-696caaff8f78.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/48701730-80da-4e96-a7dc-696caaff8f78/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Aug 2026 02:10:29 +0000 Certificate not after: Mon 13 Nov 2028 03:10:29 +0000 Subordinate resources: IP: 198.22.43.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:f4:9e:5c:f9:e6:00:a4:c3:f9:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 11 02:10:29 2026 GMT Not After : Nov 13 03:10:29 2028 GMT Subject: CN=48701730-80da-4e96-a7dc-696caaff8f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:47:8d:36:c1:1d:9a:ba:89:57:f8:b3:4c:f6: c8:10:cf:79:e4:51:6c:ca:b6:d7:56:e4:4f:52:68: 53:64:d8:d8:86:65:bc:34:3c:5d:62:2e:5a:07:dd: b5:37:65:81:61:f8:cf:93:d0:2e:54:5e:fd:4e:2b: bc:dd:fc:55:b2:ba:f6:65:88:29:1f:a2:a4:d8:c9: d4:df:77:eb:09:e9:cb:a5:a4:f7:61:02:e8:3a:ce: cc:ae:51:d5:db:4b:90:f2:94:0f:0d:bd:34:60:47: 81:60:17:41:0b:dc:c1:a9:ba:72:21:bd:4d:07:f6: 1f:3f:3d:19:fb:ca:79:ac:76:d9:aa:79:7d:e9:77: c7:69:7d:e5:27:17:2a:45:34:b0:13:a4:68:58:20: ef:75:69:40:80:0e:82:d2:57:c2:66:d7:8d:8a:73: 04:be:fa:d9:68:67:e6:9b:c4:e5:17:bb:f6:17:05: 19:7a:0c:b8:9b:90:05:17:ad:42:59:bd:39:3f:b5: e1:ce:04:23:4e:5e:47:71:58:21:85:4f:78:df:74: 75:a6:aa:15:dc:ae:22:53:76:f7:aa:66:7a:8c:5f: 31:77:d9:55:66:a4:b2:80:e4:86:f2:db:3c:5d:85: d6:95:e8:21:94:c4:3d:3f:bb:32:84:27:b7:7b:9b: 8c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:60:EB:93:24:77:9B:5E:8E:32:30:0C:CD:30:28:66:F6:F0:06:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/48701730-80da-4e96-a7dc-696caaff8f78/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/48701730-80da-4e96-a7dc-696caaff8f78/48701730-80da-4e96-a7dc-696caaff8f78.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 198.22.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:bd:31:2c:e0:0c:a4:47:66:ea:5f:eb:97:31:db:05:8e:64: 03:6d:f1:cc:ba:55:4d:0a:01:e7:8a:a1:d9:2d:df:39:b0:5f: 53:21:a7:32:55:0a:8d:08:5c:54:01:f6:83:8b:52:01:fe:6c: f3:52:3c:f3:95:95:92:d9:04:2d:9c:7b:14:92:1d:7d:eb:43: 04:d6:ff:af:ef:1c:2c:4d:27:7a:83:f2:73:bc:b3:e5:98:11: 33:23:8a:31:e6:bd:82:f6:e0:a1:ad:db:1b:f7:bc:af:8b:87: 6c:71:c4:84:63:cb:24:4b:17:ac:25:5c:0c:c4:04:82:02:52: c9:2c:13:01:a7:a0:f7:ca:a5:0e:d1:d7:5e:42:59:9f:92:0a: 22:3b:21:85:a3:82:a9:47:07:ef:d9:c9:92:6d:54:33:78:7c: bf:65:4b:3c:66:b6:ea:4f:92:00:02:b5:05:e5:53:f4:77:ce: 95:2e:d0:63:6c:33:f6:ec:04:f8:8c:6d:aa:c6:96:91:cf:a3: ed:4e:0c:da:9e:03:58:23:5d:fc:8a:44:43:4c:6e:47:24:a6: 0d:49:4a:cc:e1:45:c9:0e:9b:f2:c4:a5:e1:f3:fa:62:c3:93: 79:d1:07:da:bb:4b:cb:47:4e:7d:9d:75:08:68:aa:3f:75:c8: 7d:b0:ad:1c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE7L9J5c+eYApMP5eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgxMTAyMTAyOVoXDTI4MTExMzAzMTAyOVowLzEtMCsGA1UEAxMk NDg3MDE3MzAtODBkYS00ZTk2LWE3ZGMtNjk2Y2FhZmY4Zjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4keNNsEdmrqJV/izTPbIEM955FFsyrbXVuRP UmhTZNjYhmW8NDxdYi5aB921N2WBYfjPk9AuVF79Tiu83fxVsrr2ZYgpH6Kk2MnU 33frCenLpaT3YQLoOs7MrlHV20uQ8pQPDb00YEeBYBdBC9zBqbpyIb1NB/YfPz0Z +8p5rHbZqnl96XfHaX3lJxcqRTSwE6RoWCDvdWlAgA6C0lfCZteNinMEvvrZaGfm m8TlF7v2FwUZegy4m5AFF61CWb05P7XhzgQjTl5HcVghhU9433R1pqoV3K4iU3b3 qmZ6jF8xd9lVZqSygOSG8ts8XYXWleghlMQ9P7syhCe3e5uMZwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGtg65Mkd5tejjIwDM0wKGb28AaHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80 ODcwMTczMC04MGRhLTRlOTYtYTdkYy02OTZjYWFmZjhmNzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzQ4NzAxNzMwLTgwZGEtNGU5Ni1h N2RjLTY5NmNhYWZmOGY3OC80ODcwMTczMC04MGRhLTRlOTYtYTdkYy02OTZjYWFm ZjhmNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGFiswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAL0xLOAMpEdm6l/rlzHb BY5kA23xzLpVTQoB54qh2S3fObBfUyGnMlUKjQhcVAH2g4tSAf5s81I885WVktkE LZx7FJIdfetDBNb/r+8cLE0neoPyc7yz5ZgRMyOKMea9gvbgoa3bG/e8r4uHbHHE hGPLJEsXrCVcDMQEggJSySwTAaeg98qlDtHXXkJZn5IKIjshhaOCqUcH79nJkm1U M3h8v2VLPGa26k+SAAK1BeVT9HfOlS7QY2wz9uwE+IxtqsaWkc+j7U4M2p4DWCNd /IpEQ0xuRySmDUlKzOFFyQ6b8sSl4fP6YsOTedEH2rtLy0dOfZ11CGiqP3XIfbCt HA== -----END CERTIFICATE-----Generated at Tue Aug 25 13:47:40 2026 by rpki-client