$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a4fbc946-b41f-476f-bcc8-5f3f374512e7.cer File: a4fbc946-b41f-476f-bcc8-5f3f374512e7.cer (raw, json) Hash identifier: 71Jnt8aPy2e5PJwMVheBDzFXXPTLmYR87t1sUqnHCJM= Subject key identifier: 8E:C0:44:A5:BB:B2:8A:62:20:EF:81:9A:17:21:21:32:A6:E3:28:59 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EE4536828539CDC641F4D0100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a4fbc946-b41f-476f-bcc8-5f3f374512e7/a4fbc946-b41f-476f-bcc8-5f3f374512e7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a4fbc946-b41f-476f-bcc8-5f3f374512e7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Aug 2026 19:40:52 +0000 Certificate not after: Tue 21 Nov 2028 20:40:52 +0000 Subordinate resources: AS: 401694 IP: 23.139.180.0/24 IP: 2602:f62d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:53:68:28:53:9c:dc:64:1f:4d:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 19 19:40:52 2026 GMT Not After : Nov 21 20:40:52 2028 GMT Subject: CN=a4fbc946-b41f-476f-bcc8-5f3f374512e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0a:ac:71:a2:92:06:6e:39:4e:0f:72:b2:49: 03:9e:b1:f0:89:3f:67:de:70:20:02:57:14:76:15: fe:c3:0b:3d:5b:aa:e1:bd:62:c1:5c:ae:4d:f6:72: 61:56:36:a3:68:af:76:5e:98:ec:c7:43:8c:c1:34: 53:63:db:a3:58:9b:2e:c5:4e:64:b4:3d:ea:3a:52: 0f:84:3b:ec:8b:40:1b:2f:84:fc:61:a8:91:99:89: 2b:e6:f8:9a:a5:8f:03:53:a7:b2:53:d7:55:42:a7: 92:c6:ec:ff:f4:5f:b7:bc:41:f0:0d:28:c7:c6:a1: 95:4f:32:5b:cb:f2:68:bb:74:a7:16:2e:e4:74:d7: 27:e1:c1:d5:7b:41:71:c5:a3:bc:1b:9f:ac:71:33: 49:f2:0e:c9:36:13:c0:8b:cc:aa:ed:34:f6:18:97: ee:e1:19:02:0b:28:58:d2:51:d4:d4:98:f1:65:bd: 3a:75:66:b3:d2:52:ea:1d:ec:89:d9:79:71:01:81: 7e:b2:f8:aa:f3:87:f3:a6:80:de:d6:da:0d:eb:80: 15:8a:af:86:b2:23:a6:71:4f:2d:24:f5:12:e3:53: 58:74:5b:28:e4:9a:9b:b9:e2:bc:9e:44:5b:aa:f5: bc:6d:68:7a:c5:cc:a3:b4:4e:8a:4f:26:1d:c8:fa: dd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C0:44:A5:BB:B2:8A:62:20:EF:81:9A:17:21:21:32:A6:E3:28:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a4fbc946-b41f-476f-bcc8-5f3f374512e7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a4fbc946-b41f-476f-bcc8-5f3f374512e7/a4fbc946-b41f-476f-bcc8-5f3f374512e7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 23.139.180.0/24 IPv6: 2602:f62d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401694 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d7:a8:3a:73:a0:13:d6:09:3c:33:2f:cd:3c:66:dd:02:06: f7:95:7f:91:f2:da:09:83:34:86:02:32:f6:6a:66:7b:0d:33: 4b:fd:dc:3f:12:6d:e3:af:62:23:c7:f8:69:0f:77:09:b9:ee: 37:a6:67:a0:68:94:3d:ae:23:37:f2:22:32:4f:d5:4a:1b:23: d2:dc:ff:12:43:a9:d9:6e:68:6e:eb:a3:38:0e:e9:2e:07:f1: 12:b5:e5:fe:64:51:6c:13:6f:31:43:70:9d:6d:eb:a1:d8:52: b3:5b:7e:88:ca:60:4e:2f:a6:c4:91:8c:78:3a:76:5f:ba:76: bc:b6:31:94:58:0b:91:20:bd:63:da:5f:0e:4c:c8:5b:14:80: c5:4d:34:72:86:7c:8d:0d:58:07:87:0e:96:93:07:70:bf:d5: a2:11:4b:50:07:43:2f:0d:10:83:d6:91:a4:38:bf:c8:4e:26: 96:9c:d6:e3:24:48:64:f7:c7:18:cc:9c:49:e3:f6:7f:b7:7a: 7f:f2:13:a6:82:2b:c0:4d:98:b3:68:e8:dd:8b:d2:60:0d:7b: f3:bb:75:c6:7d:fe:89:3b:81:19:11:a7:73:13:cd:d6:0c:e7: 41:88:14:e4:f4:8d:be:dc:0c:39:e8:95:9e:c6:a6:45:77:34: 2a:0d:78:67 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE7kU2goU5zcZB9NAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgxOTE5NDA1MloXDTI4MTEyMTIwNDA1MlowLzEtMCsGA1UEAxMk YTRmYmM5NDYtYjQxZi00NzZmLWJjYzgtNWYzZjM3NDUxMmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgqscaKSBm45Tg9yskkDnrHwiT9n3nAgAlcU dhX+wws9W6rhvWLBXK5N9nJhVjajaK92Xpjsx0OMwTRTY9ujWJsuxU5ktD3qOlIP hDvsi0AbL4T8YaiRmYkr5viapY8DU6eyU9dVQqeSxuz/9F+3vEHwDSjHxqGVTzJb y/Jou3SnFi7kdNcn4cHVe0FxxaO8G5+scTNJ8g7JNhPAi8yq7TT2GJfu4RkCCyhY 0lHU1JjxZb06dWaz0lLqHeyJ2XlxAYF+sviq84fzpoDe1toN64AViq+GsiOmcU8t JPUS41NYdFso5JqbueK8nkRbqvW8bWh6xcyjtE6KTyYdyPrd6QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFI7ARKW7sopiIO+BmhchITKm4yhZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9h NGZiYzk0Ni1iNDFmLTQ3NmYtYmNjOC01ZjNmMzc0NTEyZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2E0ZmJjOTQ2LWI0MWYtNDc2Zi1i Y2M4LTVmM2YzNzQ1MTJlNy9hNGZiYzk0Ni1iNDFmLTQ3NmYtYmNjOC01ZjNmMzc0 NTEyZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXi7QwDgQCAAIwCAMGBCYC9i0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYhHjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAn16g6c6AT1gk8My/NPGbdAgb3 lX+R8toJgzSGAjL2amZ7DTNL/dw/Em3jr2Ijx/hpD3cJue43pmegaJQ9riM38iIy T9VKGyPS3P8SQ6nZbmhu66M4DukuB/ESteX+ZFFsE28xQ3Cdbeuh2FKzW36IymBO L6bEkYx4OnZfuna8tjGUWAuRIL1j2l8OTMhbFIDFTTRyhnyNDVgHhw6Wkwdwv9Wi EUtQB0MvDRCD1pGkOL/ITiaWnNbjJEhk98cYzJxJ4/Z/t3p/8hOmgivATZizaOjd i9JgDXvzu3XGff6JO4EZEadzE83WDOdBiBTk9I2+3Aw56JWexqZFdzQqDXhn -----END CERTIFICATE-----Generated at Tue Aug 25 20:23:36 2026 by rpki-client