$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b1ad2070-c3c9-4e1e-9996-0566d15259b1.cer File: b1ad2070-c3c9-4e1e-9996-0566d15259b1.cer (raw, json) Hash identifier: C0Yk+Sz/qdD9aVT4Qx/KHUJ1HYnu+0M3MvrUb8wSTUU= Subject key identifier: 1B:C6:F5:65:A8:3A:0E:84:B4:DF:08:83:D2:80:CE:78:21:52:65:1D Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F69B8995FA6D010E165BFB080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b1ad2070-c3c9-4e1e-9996-0566d15259b1/b1ad2070-c3c9-4e1e-9996-0566d15259b1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b1ad2070-c3c9-4e1e-9996-0566d15259b1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 14:27:16 +0000 Certificate not after: Thu 26 Oct 2028 07:16:10 +0000 Subordinate resources: AS: 402790 IP: 198.135.100.0/24 IP: 2602:f33c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:b8:99:5f:a6:d0:10:e1:65:bf:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Oct 6 14:27:16 2026 GMT Not After : Oct 26 07:16:10 2028 GMT Subject: CN=b1ad2070-c3c9-4e1e-9996-0566d15259b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:bf:5c:9a:bb:2a:84:34:a8:86:69:c2:c6: 6f:f3:44:23:20:5f:ef:a1:e0:37:18:1b:9c:24:69: c4:5e:d6:8a:f3:11:af:9b:b7:3e:92:c6:02:77:05: 11:9f:35:04:b5:0c:23:73:af:07:4c:39:74:12:de: 03:aa:ac:0a:d4:fd:d5:cc:f1:c9:ef:04:49:a4:59: 41:87:b9:46:53:16:72:dd:6c:3c:ea:6d:9c:67:90: e4:fb:1b:ac:db:fe:95:a9:75:f0:f2:ff:87:24:09: d5:69:dd:69:85:89:97:64:a3:20:08:80:da:9a:08: 8e:50:bf:cc:cb:27:6d:a5:1a:8b:56:49:c2:f0:4e: ee:be:77:a1:e4:8a:73:15:2f:a4:89:1b:81:8f:44: 7c:00:33:a3:51:da:73:b2:60:33:af:36:08:df:aa: 96:fc:ae:77:b3:f4:a8:c4:d1:a9:ec:80:9b:a0:07: 7d:bd:33:85:ec:a6:29:b5:0d:c3:d2:60:01:25:65: 3f:57:b9:e0:f1:1a:7b:e5:d0:9c:4c:cb:84:7e:9d: 66:7e:b7:a9:17:de:cd:73:0c:6b:6d:b0:9a:f1:e4: dc:ef:05:44:dc:4c:be:3d:2c:b7:2a:ae:9d:71:d0: bf:50:37:5d:95:be:c8:0e:44:7a:3d:87:6c:0e:81: 94:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C6:F5:65:A8:3A:0E:84:B4:DF:08:83:D2:80:CE:78:21:52:65:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b1ad2070-c3c9-4e1e-9996-0566d15259b1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b1ad2070-c3c9-4e1e-9996-0566d15259b1/b1ad2070-c3c9-4e1e-9996-0566d15259b1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 198.135.100.0/24 IPv6: 2602:f33c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402790 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c7:d2:5a:c5:16:ba:b7:92:d3:0c:62:12:35:7c:6a:ee:0f: 5c:7d:3b:4f:98:db:07:20:4b:73:39:24:bc:f2:3c:43:b7:12: e3:05:3e:b0:91:e9:de:5a:aa:8e:28:b3:8d:a6:e6:e8:78:2d: 3b:0e:00:c2:8c:8d:fa:d1:fe:79:cd:c8:35:64:fa:00:b4:33: e7:5d:37:bf:c2:ce:8f:69:5d:b8:4a:0e:ca:5a:97:4b:5b:99: 51:6b:ec:d6:7e:28:cf:43:9a:e8:6f:cb:1d:78:d5:a3:68:c3: 5f:d9:bf:c8:28:d8:c4:82:44:6f:b2:69:2e:fc:a2:f3:e7:a6: 53:cb:43:c4:66:5c:8e:70:ad:1c:b6:f8:69:b8:32:d9:22:6b: d6:95:bb:cc:0f:7c:05:57:71:d6:2f:e9:ac:eb:33:27:a3:e8: 36:58:0c:3e:e4:e5:49:0a:83:90:87:bc:24:19:8e:ec:0e:f2: b5:c5:92:37:c3:36:05:7c:c8:96:50:6d:95:ac:16:12:c3:73: c2:12:21:12:fd:5e:92:21:cd:1c:dc:ac:bb:fc:cb:bc:90:59: d0:4d:98:ec:31:43:fd:58:c9:8d:95:06:b6:ae:43:93:39:58: 5b:bd:80:15:19:2a:d8:5e:4a:28:bc:8d:6c:fc:8c:71:ce:8c: 3e:d0:40:d1 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9puJlfptAQ4WW/sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MTAwNjE0MjcxNloXDTI4MTAyNjA3MTYxMFowLzEtMCsGA1UEAxMk YjFhZDIwNzAtYzNjOS00ZTFlLTk5OTYtMDU2NmQxNTI1OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuy/XJq7KoQ0qIZpwsZv80QjIF/voeA3GBuc JGnEXtaK8xGvm7c+ksYCdwURnzUEtQwjc68HTDl0Et4DqqwK1P3VzPHJ7wRJpFlB h7lGUxZy3Ww86m2cZ5Dk+xus2/6VqXXw8v+HJAnVad1phYmXZKMgCIDamgiOUL/M yydtpRqLVknC8E7uvneh5IpzFS+kiRuBj0R8ADOjUdpzsmAzrzYI36qW/K53s/So xNGp7ICboAd9vTOF7KYptQ3D0mABJWU/V7ng8Rp75dCcTMuEfp1mfrepF97Ncwxr bbCa8eTc7wVE3Ey+PSy3Kq6dcdC/UDddlb7IDkR6PYdsDoGUtwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBvG9WWoOg6EtN8Ig9KAznghUmUdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9i MWFkMjA3MC1jM2M5LTRlMWUtOTk5Ni0wNTY2ZDE1MjU5YjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2IxYWQyMDcwLWMzYzktNGUxZS05 OTk2LTA1NjZkMTUyNTliMS9iMWFkMjA3MC1jM2M5LTRlMWUtOTk5Ni0wNTY2ZDE1 MjU5YjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGh2QwDgQCAAIwCAMGACYC8zwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYlZjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkx9JaxRa6t5LTDGISNXxq7g9c fTtPmNsHIEtzOSS88jxDtxLjBT6wkeneWqqOKLONpuboeC07DgDCjI360f55zcg1 ZPoAtDPnXTe/ws6PaV24Sg7KWpdLW5lRa+zWfijPQ5rob8sdeNWjaMNf2b/IKNjE gkRvsmku/KLz56ZTy0PEZlyOcK0ctvhpuDLZImvWlbvMD3wFV3HWL+ms6zMno+g2 WAw+5OVJCoOQh7wkGY7sDvK1xZI3wzYFfMiWUG2VrBYSw3PCEiES/V6SIc0c3Ky7 /Mu8kFnQTZjsMUP9WMmNlQa2rkOTOVhbvYAVGSrYXkoovI1s/Ixxzow+0EDR -----END CERTIFICATE-----Generated at Sun Oct 11 15:10:38 2026 by rpki-client