$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a637c62-8b89-4de2-8d81-3f3589b2ffb8.cer File: 4a637c62-8b89-4de2-8d81-3f3589b2ffb8.cer (raw, json) Hash identifier: sMuQ7lGG0NDDgHcQyflDKOjrIDg2FPk4k/S/Z8kdbik= Subject key identifier: 27:A8:AB:E2:5D:71:0F:3A:1C:43:51:27:73:78:81:82:FD:D2:C9:0D Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EAC83A494B0D5035ABE231780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a637c62-8b89-4de2-8d81-3f3589b2ffb8/4a637c62-8b89-4de2-8d81-3f3589b2ffb8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a637c62-8b89-4de2-8d81-3f3589b2ffb8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Jul 2026 19:52:48 +0000 Certificate not after: Wed 01 Nov 2028 19:52:48 +0000 Subordinate resources: AS: 401282 IP: 64.239.74.0/24 IP: 2602:f850::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ac:83:a4:94:b0:d5:03:5a:be:23:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Jul 30 19:52:48 2026 GMT Not After : Nov 1 19:52:48 2028 GMT Subject: CN=4a637c62-8b89-4de2-8d81-3f3589b2ffb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:63:16:30:91:93:dc:91:ff:96:5e:5b:03:5e: af:44:18:89:26:c8:70:82:ef:4f:7f:7b:0c:d2:40: 31:a2:65:9c:56:76:f3:58:76:4e:92:f3:d3:53:d6: b6:98:05:97:25:51:5f:7c:8f:b2:90:ec:e4:67:70: 4f:25:38:cd:07:4b:c6:57:26:46:96:98:19:a8:3c: 66:7a:1a:ce:2e:89:06:06:24:dd:94:e8:76:b2:67: 38:32:7a:cb:ba:52:b4:d4:f7:35:03:05:94:ff:9f: d8:45:fc:6e:a1:af:f4:9d:ef:b6:ce:25:9e:c1:63: 80:9b:72:bd:ad:75:80:87:4f:ab:f8:17:0c:ad:58: 94:76:81:bc:f7:cc:72:9f:ef:ea:ed:05:f1:68:7d: a5:2f:81:31:24:0d:ec:c8:00:e1:0d:c9:50:8e:b9: a5:e4:e9:f0:8d:58:17:e7:5e:c6:84:77:6b:8a:03: b5:9b:10:21:de:61:29:9d:b6:46:ee:bb:52:60:7e: 6e:df:96:7c:7b:2f:c8:6f:09:74:f0:41:f1:a7:5d: 02:c0:2e:cd:c1:13:89:fe:ba:36:b6:87:c1:11:43: bf:91:51:71:65:81:24:da:0a:35:62:53:05:a2:57: 66:9a:ba:6c:0c:98:be:0f:e3:d6:6a:8a:e0:20:10: 23:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A8:AB:E2:5D:71:0F:3A:1C:43:51:27:73:78:81:82:FD:D2:C9:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a637c62-8b89-4de2-8d81-3f3589b2ffb8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a637c62-8b89-4de2-8d81-3f3589b2ffb8/4a637c62-8b89-4de2-8d81-3f3589b2ffb8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 64.239.74.0/24 IPv6: 2602:f850::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401282 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:2a:26:eb:68:00:98:2e:ed:2d:af:14:cc:44:5f:03:6c:c5: 23:c6:fa:af:e9:a3:f5:32:af:83:ab:31:58:50:cb:5f:11:df: 4d:10:e1:67:36:bb:69:d0:94:36:bb:ba:82:b7:95:bb:aa:11: 85:b7:64:74:4d:00:dd:d5:66:f3:9c:5e:b7:de:70:66:7c:68: d2:8d:4d:35:3a:70:24:5d:eb:ce:6c:77:e2:70:db:33:ab:b5: 68:08:69:1c:8d:55:48:49:2f:43:07:06:a0:4e:c9:1f:60:e2: 7d:8c:5f:5f:0d:0c:0d:93:e8:b7:2c:fe:e1:0a:04:af:6f:82: d1:02:5f:9b:34:86:28:e9:ab:c2:ec:07:af:15:b4:50:28:ea: 36:b2:41:3c:0a:a1:07:05:4e:04:18:a9:1e:a9:7e:af:ac:69: 1b:35:4b:cf:69:6a:08:8e:72:bc:a0:2c:64:87:cb:7b:91:68: b5:38:24:29:76:ae:76:4d:d1:2b:0a:16:ec:32:54:50:fc:b3: 7c:20:3b:58:d7:10:c8:66:fd:72:68:63:67:b3:ab:59:d1:71: d1:b6:b8:fd:ee:50:cf:8a:d5:b9:f2:88:36:b6:8f:a2:9f:45: 46:7c:3c:de:a7:25:e8:03:3a:dc:67:1f:42:54:2b:b9:5c:2b: 7b:a4:d8:3c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE6sg6SUsNUDWr4jF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDczMDE5NTI0OFoXDTI4MTEwMTE5NTI0OFowLzEtMCsGA1UEAxMk NGE2MzdjNjItOGI4OS00ZGUyLThkODEtM2YzNTg5YjJmZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWMWMJGT3JH/ll5bA16vRBiJJshwgu9Pf3sM 0kAxomWcVnbzWHZOkvPTU9a2mAWXJVFffI+ykOzkZ3BPJTjNB0vGVyZGlpgZqDxm ehrOLokGBiTdlOh2smc4MnrLulK01Pc1AwWU/5/YRfxuoa/0ne+2ziWewWOAm3K9 rXWAh0+r+BcMrViUdoG898xyn+/q7QXxaH2lL4ExJA3syADhDclQjrml5OnwjVgX 517GhHdrigO1mxAh3mEpnbZG7rtSYH5u35Z8ey/Ibwl08EHxp10CwC7NwROJ/ro2 tofBEUO/kVFxZYEk2go1YlMFoldmmrpsDJi+D+PWaorgIBAjHQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCeoq+JdcQ86HENRJ3N4gYL90skNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80 YTYzN2M2Mi04Yjg5LTRkZTItOGQ4MS0zZjM1ODliMmZmYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzRhNjM3YzYyLThiODktNGRlMi04 ZDgxLTNmMzU4OWIyZmZiOC80YTYzN2M2Mi04Yjg5LTRkZTItOGQ4MS0zZjM1ODli MmZmYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABA70owDgQCAAIwCAMGACYC+FAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYfgjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAKibraACYLu0trxTMRF8DbMUj xvqv6aP1Mq+DqzFYUMtfEd9NEOFnNrtp0JQ2u7qCt5W7qhGFt2R0TQDd1WbznF63 3nBmfGjSjU01OnAkXevObHficNszq7VoCGkcjVVISS9DBwagTskfYOJ9jF9fDQwN k+i3LP7hCgSvb4LRAl+bNIYo6avC7AevFbRQKOo2skE8CqEHBU4EGKkeqX6vrGkb NUvPaWoIjnK8oCxkh8t7kWi1OCQpdq52TdErChbsMlRQ/LN8IDtY1xDIZv1yaGNn s6tZ0XHRtrj97lDPitW58og2to+in0VGfDzepyXoAzrcZx9CVCu5XCt7pNg8 -----END CERTIFICATE-----Generated at Thu Aug 13 07:56:25 2026 by rpki-client