$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62.cer File: 5d1ab285-6e35-49f4-a20f-0ef6f4885a62.cer (raw, json) Hash identifier: KDIBF9FAZLBnWCAixcMJ0ec++/onbQBs0VBM2/9VKZA= Subject key identifier: 73:E7:0E:53:EE:BE:43:60:4A:20:84:CE:58:C1:69:15:61:62:17:42 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F1F3B4D735FE63373BC6DDA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/5d1ab285-6e35-49f4-a20f-0ef6f4885a62.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Sep 2026 22:05:00 +0000 Certificate not after: Tue 12 Dec 2028 23:05:00 +0000 Subordinate resources: AS: 402968 IP: 23.163.116.0/24 IP: 2602:f2ff::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:3b:4d:73:5f:e6:33:73:bc:6d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Sep 9 22:05:00 2026 GMT Not After : Dec 12 23:05:00 2028 GMT Subject: CN=5d1ab285-6e35-49f4-a20f-0ef6f4885a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7d:d3:a6:8e:4a:89:83:48:ab:5e:e1:14:08: 91:56:91:8a:2c:13:db:22:f9:b5:38:00:74:aa:7d: ce:51:4f:9c:d5:ce:6e:15:1d:8a:94:bb:00:1c:c2: 63:34:50:27:49:ec:a1:1c:c6:c2:61:6e:c3:5a:49: cc:4d:8b:b9:dd:3e:9f:b2:8f:ee:99:9e:7e:93:f4: 0a:ae:2d:76:d1:88:e5:c7:1f:37:72:ee:86:f8:66: 43:99:6e:4b:b9:21:58:32:e9:99:40:79:e6:6e:29: 99:c5:00:71:fd:cf:19:b5:f0:89:19:d8:5d:d4:ed: 48:ce:1e:25:d9:21:23:f9:c0:b7:0f:05:6c:77:73: f2:02:70:c5:00:47:52:c4:ab:b3:b9:71:4d:fd:29: d5:cb:57:50:3b:07:6d:9d:77:f2:c7:36:97:94:dc: 6e:36:e0:00:05:fa:92:54:c1:ca:1d:d6:f3:76:28: a4:17:01:8c:cd:c5:1f:c4:a3:ca:74:57:54:31:2c: a0:55:6d:6c:b5:68:c3:0f:11:71:36:c3:a3:f1:27: 7c:86:48:c7:5b:d2:78:3e:23:a6:92:db:1b:3a:5d: cb:6d:83:7a:bd:89:9f:3e:42:6f:ff:15:75:f5:50: 17:1d:95:9e:88:eb:31:93:dc:16:cb:c2:54:90:fd: f6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E7:0E:53:EE:BE:43:60:4A:20:84:CE:58:C1:69:15:61:62:17:42 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/5d1ab285-6e35-49f4-a20f-0ef6f4885a62.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 23.163.116.0/24 IPv6: 2602:f2ff::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402968 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:e5:fe:60:b4:a4:53:b5:ef:d7:53:97:6b:ef:7f:34:49:69: 9a:76:12:5c:bf:7c:28:5f:60:0a:62:04:d5:9b:87:08:8f:4e: 2b:98:ad:ca:26:71:e2:c7:be:c8:80:32:65:96:d1:ba:37:ab: d6:cf:92:5f:a3:da:9c:00:21:74:c2:4f:f8:fd:ac:49:b7:9d: a5:69:64:f9:4e:33:4f:39:aa:1d:b0:2f:b0:7b:5b:ce:c4:57: 8e:33:68:19:4a:d8:e1:e6:11:5e:30:3a:20:cc:c5:4b:27:49: 6a:d4:b4:79:94:2d:89:0f:f4:4b:b2:8b:c8:76:00:b5:ed:3f: 97:27:a3:d8:27:05:ed:ac:56:a9:d2:e7:02:13:9e:2e:61:a4: 03:4a:48:34:e9:50:45:ca:c6:af:e7:0b:1a:22:5e:ff:9b:b9: 14:b3:17:b2:be:6d:60:d9:f5:d9:8b:0c:2d:d7:ed:8e:1e:c4: 1d:57:7d:ff:85:4c:8f:58:0b:40:f5:95:4f:d7:ca:12:c2:1f: f5:46:de:2d:3f:92:05:56:02:c1:6b:31:10:88:e3:94:0d:af: b0:ec:35:8a:ba:b2:31:36:1b:f3:d9:f0:05:79:9b:f7:a4:12: 08:43:4b:39:72:ff:43:cd:1f:49:1c:cb:75:81:49:3a:c3:c5: 46:70:90:fc -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE8fO01zX+Yzc7xt2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDkwOTIyMDUwMFoXDTI4MTIxMjIzMDUwMFowLzEtMCsGA1UEAxMk NWQxYWIyODUtNmUzNS00OWY0LWEyMGYtMGVmNmY0ODg1YTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX3Tpo5KiYNIq17hFAiRVpGKLBPbIvm1OAB0 qn3OUU+c1c5uFR2KlLsAHMJjNFAnSeyhHMbCYW7DWknMTYu53T6fso/umZ5+k/QK ri120Yjlxx83cu6G+GZDmW5LuSFYMumZQHnmbimZxQBx/c8ZtfCJGdhd1O1Izh4l 2SEj+cC3DwVsd3PyAnDFAEdSxKuzuXFN/SnVy1dQOwdtnXfyxzaXlNxuNuAABfqS VMHKHdbzdiikFwGMzcUfxKPKdFdUMSygVW1stWjDDxFxNsOj8Sd8hkjHW9J4PiOm ktsbOl3LbYN6vYmfPkJv/xV19VAXHZWeiOsxk9wWy8JUkP32uQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHPnDlPuvkNgSiCEzljBaRVhYhdCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi81 ZDFhYjI4NS02ZTM1LTQ5ZjQtYTIwZi0wZWY2ZjQ4ODVhNjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzVkMWFiMjg1LTZlMzUtNDlmNC1h MjBmLTBlZjZmNDg4NWE2Mi81ZDFhYjI4NS02ZTM1LTQ5ZjQtYTIwZi0wZWY2ZjQ4 ODVhNjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXo3QwDgQCAAIwCAMGACYC8v8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmGDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDe5f5gtKRTte/XU5dr7380SWma dhJcv3woX2AKYgTVm4cIj04rmK3KJnHix77IgDJlltG6N6vWz5Jfo9qcACF0wk/4 /axJt52laWT5TjNPOaodsC+we1vOxFeOM2gZStjh5hFeMDogzMVLJ0lq1LR5lC2J D/RLsovIdgC17T+XJ6PYJwXtrFap0ucCE54uYaQDSkg06VBFysav5wsaIl7/m7kU sxeyvm1g2fXZiwwt1+2OHsQdV33/hUyPWAtA9ZVP18oSwh/1Rt4tP5IFVgLBazEQ iOOUDa+w7DWKurIxNhvz2fAFeZv3pBIIQ0s5cv9DzR9JHMt1gUk6w8VGcJD8 -----END CERTIFICATE-----Generated at Tue Sep 15 14:00:00 2026 by rpki-client