$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f.cer File: ddb1cbfc-9205-4ac6-b895-207a65f4fa8f.cer (raw, json) Hash identifier: UpKehLJ1WcsNZpgl+72N0iwkhiEeFtk4I1ZRbDR6Mqw= Subject key identifier: 36:FA:E2:11:D5:67:27:60:09:BB:D8:E3:CB:6C:0E:AB:EC:D8:EA:4A Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584ED0FC45950C3B3C812A6C0A70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Aug 2026 21:24:57 +0000 Certificate not after: Tue 14 Nov 2028 22:24:57 +0000 Subordinate resources: AS: 400592 IP: 167.94.54.0/24 IP: 167.94.64.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:fc:45:95:0c:3b:3c:81:2a:6c:0a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 12 21:24:57 2026 GMT Not After : Nov 14 22:24:57 2028 GMT Subject: CN=ddb1cbfc-9205-4ac6-b895-207a65f4fa8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:83:8e:bc:1a:a7:7b:12:59:20:a2:ac:af:c4: d4:4e:43:52:82:3d:75:c6:6a:28:1a:f2:56:96:b9: 0e:00:6a:0f:46:83:40:00:56:21:ee:c4:e6:d8:18: 9c:c5:c1:0d:4f:ca:31:6f:0b:59:f9:fa:f0:d6:9e: b9:f4:a3:98:fc:35:68:c9:77:e3:63:64:c8:60:22: 6e:d4:1e:3c:11:a5:9a:11:a3:ea:06:37:09:85:9c: 52:79:cb:e7:27:8a:45:b7:87:ff:47:66:ff:07:c6: 8f:df:9a:e6:16:91:7b:5a:61:33:29:7f:b2:dc:bb: 7e:1d:ed:3e:c5:e7:dd:3b:d0:51:bb:4e:f7:a6:a2: 46:74:0b:e1:83:b7:ce:47:75:cb:53:20:77:b2:4c: 07:3f:97:84:ea:4a:75:72:53:e9:5c:39:bb:76:66: 42:89:cd:ae:8f:6d:f3:1a:19:97:f5:9c:f5:8e:11: b3:a8:2e:9c:fa:56:00:90:1a:8c:2d:74:57:2f:05: c3:9e:61:c6:e6:09:fa:00:63:32:7a:88:59:84:c8: 8f:a7:51:ee:8d:b5:6f:28:f8:dd:db:6d:06:5c:09: a1:00:11:85:a9:88:a2:ff:36:00:5a:87:0d:9a:62: 6a:7e:d2:28:5c:1c:5b:cd:6d:8d:14:49:e7:bb:8e: a3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FA:E2:11:D5:67:27:60:09:BB:D8:E3:CB:6C:0E:AB:EC:D8:EA:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f/ddb1cbfc-9205-4ac6-b895-207a65f4fa8f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 167.94.54.0/24 167.94.64.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400592 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ba:48:83:d5:1a:57:5b:ac:bd:4b:d6:cc:57:72:b1:da:c4: 53:61:7b:d4:47:bf:c8:0e:e1:f1:ae:e4:38:af:6c:33:59:b6: 5e:18:6b:a7:5d:49:28:95:e9:37:08:c7:f0:14:b8:a9:d8:d5: 16:b3:8e:03:45:4a:7e:ca:25:e8:46:ff:e3:d0:d2:58:99:7b: b4:1e:e5:3b:db:e6:d7:8b:bd:4f:be:db:f4:ef:a6:08:76:0b: a9:d5:8e:97:cf:bd:f1:65:81:0a:bd:06:13:fb:4b:0e:3c:54: e4:a9:8a:50:7c:87:f5:bf:6d:02:4d:ed:51:f3:73:bd:59:56: ae:b3:9b:6b:fc:64:fd:c2:07:1c:94:bd:df:41:8b:f2:0d:1e: fd:f8:e4:98:51:97:66:1c:87:52:40:21:33:32:57:2c:ec:9f: 65:8e:4c:32:0a:63:0c:99:7a:15:ff:4f:a9:15:1e:cf:bb:bf: a4:63:c0:2a:9e:ce:a3:43:02:b6:96:42:19:e2:9e:59:86:ea: 3d:a5:6c:35:70:c0:8e:4c:3f:de:97:49:af:1c:41:1a:31:e4: ce:b5:05:29:00:b8:3d:88:a3:c3:2d:3b:88:bd:72:92:cf:3f: 92:8d:32:dd:26:e9:8f:e8:e5:67:c3:34:da:3f:ad:53:ab:3b: 9e:95:be:4b -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE7Q/EWVDDs8gSpsCnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgxMjIxMjQ1N1oXDTI4MTExNDIyMjQ1N1owLzEtMCsGA1UEAxMk ZGRiMWNiZmMtOTIwNS00YWM2LWI4OTUtMjA3YTY1ZjRmYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oOOvBqnexJZIKKsr8TUTkNSgj11xmooGvJW lrkOAGoPRoNAAFYh7sTm2BicxcENT8oxbwtZ+frw1p659KOY/DVoyXfjY2TIYCJu 1B48EaWaEaPqBjcJhZxSecvnJ4pFt4f/R2b/B8aP35rmFpF7WmEzKX+y3Lt+He0+ xefdO9BRu073pqJGdAvhg7fOR3XLUyB3skwHP5eE6kp1clPpXDm7dmZCic2uj23z GhmX9Zz1jhGzqC6c+lYAkBqMLXRXLwXDnmHG5gn6AGMyeohZhMiPp1HujbVvKPjd 220GXAmhABGFqYii/zYAWocNmmJqftIoXBxbzW2NFEnnu46jdQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFDb64hHVZydgCbvY48tsDqvs2OpKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9k ZGIxY2JmYy05MjA1LTRhYzYtYjg5NS0yMDdhNjVmNGZhOGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2RkYjFjYmZjLTkyMDUtNGFjNi1i ODk1LTIwN2E2NWY0ZmE4Zi9kZGIxY2JmYy05MjA1LTRhYzYtYjg5NS0yMDdhNjVm NGZhOGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACnXjYDBACnXkAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhzQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFm6SIPVGldbrL1L1sxXcrHaxFNhe9RHv8gO4fGu 5DivbDNZtl4Ya6ddSSiV6TcIx/AUuKnY1RazjgNFSn7KJehG/+PQ0liZe7Qe5Tvb 5teLvU++2/Tvpgh2C6nVjpfPvfFlgQq9BhP7Sw48VOSpilB8h/W/bQJN7VHzc71Z Vq6zm2v8ZP3CBxyUvd9Bi/INHv345JhRl2Ych1JAITMyVyzsn2WOTDIKYwyZehX/ T6kVHs+7v6RjwCqezqNDAraWQhninlmG6j2lbDVwwI5MP96XSa8cQRox5M61BSkA uD2Io8MtO4i9cpLPP5KNMt0m6Y/o5WfDNNo/rVOrO56Vvks= -----END CERTIFICATE-----Generated at Wed Aug 26 07:59:57 2026 by rpki-client