$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84f2ee4e-ef0b-4667-afa0-f01eac139fee.cer File: 84f2ee4e-ef0b-4667-afa0-f01eac139fee.cer (raw, json) Hash identifier: yoz2K4eaALUl8ogefNkJ4pzMnFp22UWHkfFK+AXhqQ0= Subject key identifier: 0B:D4:5A:F1:CD:A8:40:A4:8D:C8:FC:38:70:F6:EC:E7:66:E0:F7:73 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EA6879ABEEDF6082113B82900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84f2ee4e-ef0b-4667-afa0-f01eac139fee/84f2ee4e-ef0b-4667-afa0-f01eac139fee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84f2ee4e-ef0b-4667-afa0-f01eac139fee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Jul 2026 16:25:55 +0000 Certificate not after: Mon 30 Oct 2028 16:25:55 +0000 Subordinate resources: AS: 3777 IP: 165.82.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:87:9a:be:ed:f6:08:21:13:b8:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Jul 28 16:25:55 2026 GMT Not After : Oct 30 16:25:55 2028 GMT Subject: CN=84f2ee4e-ef0b-4667-afa0-f01eac139fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fa:82:7b:3d:d3:f7:2f:e9:09:a0:ff:c9:80: da:c3:ca:c7:31:72:74:8a:09:52:17:1a:91:ca:28: 23:27:d2:fd:a4:19:c3:60:60:37:79:49:8a:6a:a9: 7f:8c:33:ae:b7:4d:3a:a3:59:37:3f:0e:28:19:62: a7:a0:e9:ad:fe:53:e0:61:ed:e8:ac:11:5c:e1:d0: 7b:cd:3b:15:2f:86:fc:25:50:f9:4a:b1:7b:90:5e: d7:45:ba:c0:76:6c:85:76:a0:44:f8:2f:19:c5:a0: cf:85:b7:5f:07:00:8d:64:5b:dd:f0:7c:97:6c:f2: 9d:2c:98:60:c6:e1:9e:4f:ec:46:0f:73:c4:fe:b8: f7:cd:84:a3:39:14:93:77:cc:1a:c4:12:c4:89:f3: d3:2e:06:3e:07:93:44:b4:10:01:d4:f3:01:56:f6: 87:cd:84:8e:97:a9:3e:69:c3:4f:ac:ea:30:e9:f0: 85:ba:74:65:2a:51:aa:6c:b1:e7:68:84:2d:5a:3e: 06:6d:cc:c3:b3:de:be:f6:70:26:5d:30:e5:dc:a8: 71:e3:60:62:d6:b8:62:4b:b9:1a:ac:67:ad:b7:0f: 68:a6:2f:cb:e5:4b:07:bd:d7:6c:68:89:16:de:f3: b3:01:1a:db:7f:81:01:b2:64:8a:05:aa:6e:ee:d6: b9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D4:5A:F1:CD:A8:40:A4:8D:C8:FC:38:70:F6:EC:E7:66:E0:F7:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84f2ee4e-ef0b-4667-afa0-f01eac139fee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84f2ee4e-ef0b-4667-afa0-f01eac139fee/84f2ee4e-ef0b-4667-afa0-f01eac139fee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 165.82.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3777 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:b4:38:8b:15:b7:db:d5:00:2b:51:7a:26:b4:8b:03:10:fc: d4:65:27:3a:02:f5:41:3f:65:6a:01:5c:c8:59:e2:11:d3:4a: 05:f6:a1:f8:b9:73:49:42:0e:71:ae:77:11:ae:5e:c1:e4:bd: 1d:65:d0:ee:e8:a1:d7:cb:81:74:25:c0:f6:26:18:c9:7a:bb: e4:09:08:28:7f:58:5e:4f:e2:65:63:bf:83:1e:7c:e8:fb:74: c9:42:68:fa:a1:cc:15:e5:4d:38:f1:c2:37:8c:6b:48:7a:c9: 61:70:b9:20:27:b6:54:c4:77:27:a0:90:56:f9:3c:83:27:23: a4:e5:8c:94:22:6d:2d:35:cf:ed:84:6a:1e:46:db:41:dd:33: ec:64:21:99:34:36:cb:9c:cb:11:47:e5:8a:cb:ac:56:88:38: af:bb:1b:50:87:fe:d8:c1:0e:6a:53:c5:da:95:54:65:98:91: 15:c7:bc:5d:4c:c7:db:1e:49:82:2d:48:52:0b:f9:2a:ac:41: b7:cd:99:b8:57:f5:5d:a2:1e:15:02:ea:da:6b:7e:0b:c7:7f: 8c:27:2e:4e:1b:fd:64:29:81:b9:d4:18:de:a0:f1:34:69:fb: a9:6f:55:97:36:a9:13:a0:b6:4d:cd:71:2c:97:fb:a6:4f:f3: c7:f3:d7:95 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWE6mh5q+7fYIIRO4KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDcyODE2MjU1NVoXDTI4MTAzMDE2MjU1NVowLzEtMCsGA1UEAxMk ODRmMmVlNGUtZWYwYi00NjY3LWFmYTAtZjAxZWFjMTM5ZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/qCez3T9y/pCaD/yYDaw8rHMXJ0iglSFxqR yigjJ9L9pBnDYGA3eUmKaql/jDOut006o1k3Pw4oGWKnoOmt/lPgYe3orBFc4dB7 zTsVL4b8JVD5SrF7kF7XRbrAdmyFdqBE+C8ZxaDPhbdfBwCNZFvd8HyXbPKdLJhg xuGeT+xGD3PE/rj3zYSjORSTd8waxBLEifPTLgY+B5NEtBAB1PMBVvaHzYSOl6k+ acNPrOow6fCFunRlKlGqbLHnaIQtWj4GbczDs96+9nAmXTDl3Khx42Bi1rhiS7ka rGettw9opi/L5UsHvddsaIkW3vOzARrbf4EBsmSKBapu7ta5vwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFAvUWvHNqECkjcj8OHD27Odm4PdzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi84 NGYyZWU0ZS1lZjBiLTQ2NjctYWZhMC1mMDFlYWMxMzlmZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzg0ZjJlZTRlLWVmMGItNDY2Ny1h ZmEwLWYwMWVhYzEzOWZlZS84NGYyZWU0ZS1lZjBiLTQ2NjctYWZhMC1mMDFlYWMx MzlmZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwClUjAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIO wTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQDFtDiLFbfb1QArUXomtIsDEPzUZSc6AvVBP2VqAVzIWeIR00oF 9qH4uXNJQg5xrncRrl7B5L0dZdDu6KHXy4F0JcD2JhjJervkCQgof1heT+JlY7+D Hnzo+3TJQmj6ocwV5U048cI3jGtIeslhcLkgJ7ZUxHcnoJBW+TyDJyOk5YyUIm0t Nc/thGoeRttB3TPsZCGZNDbLnMsRR+WKy6xWiDivuxtQh/7YwQ5qU8XalVRlmJEV x7xdTMfbHkmCLUhSC/kqrEG3zZm4V/Vdoh4VAuraa34Lx3+MJy5OG/1kKYG51Bje oPE0afupb1WXNqkToLZNzXEsl/umT/PH89eV -----END CERTIFICATE-----Generated at Tue Aug 25 20:23:32 2026 by rpki-client