$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c.cer File: 487e4be0-3476-4cce-96fa-81ab6243a74c.cer (raw, json) Hash identifier: fofqGbsqn1QWoJ8p3Jtc7Qd9pVnOJuQhL3xPymYC5Vs= Subject key identifier: 5B:D2:FA:EE:04:43:84:3C:69:72:7E:81:99:56:6A:E3:AB:57:52:F9 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F69FD170C7952503B71E24400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/487e4be0-3476-4cce-96fa-81ab6243a74c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 16:45:16 +0000 Certificate not after: Mon 04 Dec 2028 18:56:59 +0000 Subordinate resources: AS: 402963 IP: 23.163.28.0/24 IP: 204.209.187.0/24 IP: 2602:f304::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:fd:17:0c:79:52:50:3b:71:e2:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Oct 6 16:45:16 2026 GMT Not After : Dec 4 18:56:59 2028 GMT Subject: CN=487e4be0-3476-4cce-96fa-81ab6243a74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e1:8f:2e:7f:9f:04:87:aa:0b:0f:22:ee:f5: 3d:ed:e5:80:a5:e1:f3:50:0e:51:2c:71:f0:e2:30: 80:d5:ec:52:c5:5b:39:e4:c4:54:d3:b5:c0:7d:97: bf:94:86:7e:27:18:55:32:f3:a4:09:7f:2c:6f:89: 1b:ed:61:0b:77:16:94:d7:64:6d:91:5d:f4:0d:e5: 0a:43:48:4a:5a:96:91:6e:26:04:09:8e:0f:09:a3: b3:c8:a3:05:72:bb:c1:ba:e1:9a:33:aa:07:41:83: 77:5e:1a:73:90:68:92:2e:d3:1d:12:92:09:9b:11: de:32:93:60:3b:ea:fb:22:8e:bb:0a:12:0a:6f:6c: a5:48:a8:e8:4d:06:35:2e:86:5d:2d:40:34:28:91: 39:47:88:f7:f2:d5:72:53:78:ec:9c:ca:ca:f5:d3: 76:07:88:d9:0b:fb:a5:cb:e7:ce:39:ff:78:bf:fa: ec:d8:ab:3c:f9:9c:a6:5e:10:f3:93:0e:5f:77:e9: c2:eb:c5:d3:cf:6c:43:05:13:5c:54:f1:5e:3d:5d: e3:78:d8:35:84:e3:29:20:21:69:c1:24:37:32:dd: 16:56:37:59:af:f8:18:af:66:2c:99:70:41:a3:2f: 09:37:aa:f0:a0:6b:6f:51:02:f4:13:5c:5c:5b:ff: 27:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D2:FA:EE:04:43:84:3C:69:72:7E:81:99:56:6A:E3:AB:57:52:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/487e4be0-3476-4cce-96fa-81ab6243a74c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 23.163.28.0/24 204.209.187.0/24 IPv6: 2602:f304::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402963 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:72:a5:0d:cb:7e:0c:3a:8b:ce:de:63:82:1f:5a:d5:b3:36: aa:58:1c:75:41:7f:d9:a2:e5:fa:28:6d:c9:8a:95:0f:34:83: 1d:f6:9c:9f:25:d6:07:23:4f:4c:f9:19:6c:08:81:03:91:d1: 5c:c1:1b:37:99:9d:3a:0c:c4:3a:99:af:0e:53:8e:42:42:82: 19:fc:bd:c2:4b:cf:15:6e:da:8d:88:34:35:d1:d4:f9:02:65: 76:9b:df:46:03:0d:55:26:8e:18:56:fb:d2:e1:93:0e:38:37: 4d:fc:24:e5:6f:ae:78:48:42:33:07:1f:c9:d7:97:96:46:2c: ab:51:73:e5:ff:17:dd:0c:86:f7:96:e9:1f:88:4f:d9:00:64: ed:73:41:b5:74:54:2c:4d:13:dd:87:d8:cf:69:b6:54:2a:fe: 6e:3b:bd:b8:7e:ae:f7:1d:13:ec:7e:8c:b0:bd:a3:e3:be:b7: 31:78:11:25:27:cf:e9:6a:9b:77:2f:3a:df:cc:75:3e:61:cc: 10:8a:a6:fc:1f:91:f2:69:de:73:06:d4:29:3a:d9:5a:9e:3f: 91:69:e9:5c:e2:ed:69:48:f0:d4:f7:c4:df:89:25:cc:6f:1a: b5:6e:57:5f:ea:21:22:d8:86:ba:a9:a0:10:8b:bc:1f:5a:a0: 6b:05:d5:f5 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE9p/RcMeVJQO3HiRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MTAwNjE2NDUxNloXDTI4MTIwNDE4NTY1OVowLzEtMCsGA1UEAxMk NDg3ZTRiZTAtMzQ3Ni00Y2NlLTk2ZmEtODFhYjYyNDNhNzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheGPLn+fBIeqCw8i7vU97eWApeHzUA5RLHHw 4jCA1exSxVs55MRU07XAfZe/lIZ+JxhVMvOkCX8sb4kb7WELdxaU12RtkV30DeUK Q0hKWpaRbiYECY4PCaOzyKMFcrvBuuGaM6oHQYN3XhpzkGiSLtMdEpIJmxHeMpNg O+r7Io67ChIKb2ylSKjoTQY1LoZdLUA0KJE5R4j38tVyU3jsnMrK9dN2B4jZC/ul y+fOOf94v/rs2Ks8+ZymXhDzkw5fd+nC68XTz2xDBRNcVPFePV3jeNg1hOMpICFp wSQ3Mt0WVjdZr/gYr2YsmXBBoy8JN6rwoGtvUQL0E1xcW/8nqQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFFvS+u4EQ4Q8aXJ+gZlWauOrV1L5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80 ODdlNGJlMC0zNDc2LTRjY2UtOTZmYS04MWFiNjI0M2E3NGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzQ4N2U0YmUwLTM0NzYtNGNjZS05 NmZhLTgxYWI2MjQzYTc0Yy80ODdlNGJlMC0zNDc2LTRjY2UtOTZmYS04MWFiNjI0 M2E3NGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXoxwDBADM0bswDgQCAAIwCAMGBCYC8wQAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYmEzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACcqUNy34MOovO3mOC H1rVszaqWBx1QX/ZouX6KG3JipUPNIMd9pyfJdYHI09M+RlsCIEDkdFcwRs3mZ06 DMQ6ma8OU45CQoIZ/L3CS88VbtqNiDQ10dT5AmV2m99GAw1VJo4YVvvS4ZMOODdN /CTlb654SEIzBx/J15eWRiyrUXPl/xfdDIb3lukfiE/ZAGTtc0G1dFQsTRPdh9jP abZUKv5uO724fq73HRPsfoywvaPjvrcxeBElJ8/papt3LzrfzHU+YcwQiqb8H5Hy ad5zBtQpOtlanj+Raelc4u1pSPDU98TfiSXMbxq1bldf6iEi2Ia6qaAQi7wfWqBr BdX1 -----END CERTIFICATE-----Generated at Sat Oct 10 19:08:39 2026 by rpki-client