$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60.cer File: ca3bedc6-e937-4195-9e25-d048122e2f60.cer (raw, json) Hash identifier: 30BK/n2uQASuvKehKRqWWiWlKdMgbD1UhxsXxyB40wo= Subject key identifier: AB:2C:FD:17:8D:D9:EE:A8:16:10:19:82:D1:00:56:11:0C:28:75:AF Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EF48C4342D7B1F4A34293B200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Aug 2026 15:08:22 +0000 Certificate not after: Mon 27 Nov 2028 16:08:22 +0000 Subordinate resources: IP: 128.233.0.0/16 IP: 192.75.63.0/24 IP: 192.75.171.0/24 IP: 192.139.75.0 -- 192.139.76.255 IP: 198.169.12.0 -- 198.169.19.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:8c:43:42:d7:b1:f4:a3:42:93:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 25 15:08:22 2026 GMT Not After : Nov 27 16:08:22 2028 GMT Subject: CN=ca3bedc6-e937-4195-9e25-d048122e2f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c4:1f:c6:7d:db:d4:29:97:8a:3c:95:35:9d: 20:c5:28:09:5e:a1:2c:de:cf:16:a6:2b:b5:e5:96: 41:c5:9b:f5:9b:92:f2:2f:c7:e1:26:f9:92:b1:1b: fd:30:6d:73:8b:6e:e7:c0:6a:c9:f4:a5:02:83:ca: ce:0a:56:21:78:8b:a9:73:8a:cb:9d:a5:a8:32:2a: 58:28:79:c0:c4:73:8d:af:06:1b:f5:10:62:98:86: 00:40:5c:46:6e:0b:9a:af:18:13:49:1d:d8:d3:30: 70:68:cf:f2:27:ba:4a:ea:9d:5e:61:a9:c3:04:4d: 60:d0:28:c9:ed:67:97:c5:6c:eb:c0:81:6e:f3:50: 61:5a:fa:8f:9b:a2:bc:26:61:28:04:f2:02:26:d2: 05:33:b4:f3:ee:4f:1e:ab:43:a1:22:42:e5:68:ae: 9c:98:90:1b:31:31:f2:13:63:9f:c8:e4:70:bd:1c: 5f:d7:a0:4b:e9:92:bf:2c:21:97:6c:8c:c4:24:d2: a8:84:5f:ec:19:46:29:ad:cd:21:98:68:23:69:db: d1:7d:94:e2:b1:1c:12:52:dc:3f:53:ab:ff:9a:c6: 83:52:1e:0a:d2:30:92:19:e6:ae:e0:14:c4:31:f8: 3a:c2:9d:7f:4f:c0:67:aa:cc:c5:43:71:2f:ff:37: c9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2C:FD:17:8D:D9:EE:A8:16:10:19:82:D1:00:56:11:0C:28:75:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ca3bedc6-e937-4195-9e25-d048122e2f60/ca3bedc6-e937-4195-9e25-d048122e2f60.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 128.233.0.0/16 192.75.63.0/24 192.75.171.0/24 192.139.75.0-192.139.76.255 198.169.12.0-198.169.19.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:b5:77:b8:f1:0b:0c:d2:a1:66:c8:ea:90:be:71:2a:20:6f: c7:df:35:cb:7b:ce:74:cf:9e:d7:69:97:7b:22:2c:e5:b1:03: ab:ab:f5:1c:03:8f:17:03:b4:88:26:f2:b6:21:09:4c:1c:e0: 4e:c0:2e:1a:98:cc:d1:fc:45:6a:26:53:1e:0a:bd:04:15:ea: be:1f:f4:a4:3f:9b:9e:3f:a9:44:d3:c2:88:90:cd:34:68:e9: 47:96:76:84:89:f2:9f:fa:c9:66:3e:df:e1:55:5c:ce:eb:4e: 40:2f:bc:b7:e8:13:ef:24:9c:e2:17:ac:db:aa:18:84:7c:5b: 0c:a9:d4:e3:88:c7:d1:e2:f8:5c:46:fd:28:a3:11:bd:a2:90: c0:d6:82:86:e0:7d:bc:1c:cb:64:b5:57:72:8e:8d:a9:89:e2: 2c:4b:24:42:c1:6c:83:15:41:18:9d:e7:19:7a:81:7f:bd:14: dc:bb:26:23:f7:19:62:2a:29:b8:1e:ed:6e:3d:c3:d0:1d:99: 7a:a0:24:e4:ae:ec:6e:cf:19:aa:ad:03:0d:c0:e0:df:b9:a4: 75:86:07:61:32:62:75:0e:40:41:2d:ee:58:34:32:1c:1a:d0: fa:b5:12:c8:b9:c7:8c:6d:28:4a:76:ed:2a:96:b7:65:24:0f: ea:71:e0:2f -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE70jENC17H0o0KTsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgyNTE1MDgyMloXDTI4MTEyNzE2MDgyMlowLzEtMCsGA1UEAxMk Y2EzYmVkYzYtZTkzNy00MTk1LTllMjUtZDA0ODEyMmUyZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Qfxn3b1CmXijyVNZ0gxSgJXqEs3s8Wpiu1 5ZZBxZv1m5LyL8fhJvmSsRv9MG1zi27nwGrJ9KUCg8rOClYheIupc4rLnaWoMipY KHnAxHONrwYb9RBimIYAQFxGbguarxgTSR3Y0zBwaM/yJ7pK6p1eYanDBE1g0CjJ 7WeXxWzrwIFu81BhWvqPm6K8JmEoBPICJtIFM7Tz7k8eq0OhIkLlaK6cmJAbMTHy E2OfyORwvRxf16BL6ZK/LCGXbIzEJNKohF/sGUYprc0hmGgjadvRfZTisRwSUtw/ U6v/msaDUh4K0jCSGeau4BTEMfg6wp1/T8BnqszFQ3Ev/zfJMwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFKss/ReN2e6oFhAZgtEAVhEMKHWvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9j YTNiZWRjNi1lOTM3LTQxOTUtOWUyNS1kMDQ4MTIyZTJmNjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2NhM2JlZGM2LWU5MzctNDE5NS05 ZTI1LWQwNDgxMjJlMmY2MC9jYTNiZWRjNi1lOTM3LTQxOTUtOWUyNS1kMDQ4MTIy ZTJmNjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MDMEAgABMC0DAwCA6QMEAMBLPwMEAMBLqzAMAwQAwItLAwQAwItM MAwDBALGqQwDBALGqRAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAwbV3uPELDNKhZsjqkL5xKiBvx981y3vO dM+e12mXeyIs5bEDq6v1HAOPFwO0iCbytiEJTBzgTsAuGpjM0fxFaiZTHgq9BBXq vh/0pD+bnj+pRNPCiJDNNGjpR5Z2hInyn/rJZj7f4VVczutOQC+8t+gT7ySc4hes 26oYhHxbDKnU44jH0eL4XEb9KKMRvaKQwNaChuB9vBzLZLVXco6NqYniLEskQsFs gxVBGJ3nGXqBf70U3LsmI/cZYiopuB7tbj3D0B2ZeqAk5K7sbs8Zqq0DDcDg37mk dYYHYTJidQ5AQS3uWDQyHBrQ+rUSyLnHjG0oSnbtKpa3ZSQP6nHgLw== -----END CERTIFICATE-----Generated at Sat Sep 12 16:35:43 2026 by rpki-client