$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.cer File: fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.cer (raw, json) Hash identifier: fQLb2Zxe/NCI0mc2llF5uRCUCgrCVAsEldWDw8kGRww= Subject key identifier: 47:BA:AE:CC:ED:22:9C:D5:B6:9E:64:92:39:8E:4D:24:16:73:E8:11 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EBD05C5BF6456F75127248320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Aug 2026 17:47:55 +0000 Certificate not after: Tue 07 Nov 2028 18:47:55 +0000 Subordinate resources: IP: 159.126.0.0/16 IP: 204.126.134.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:05:c5:bf:64:56:f7:51:27:24:83:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 5 17:47:55 2026 GMT Not After : Nov 7 18:47:55 2028 GMT Subject: CN=fa588bad-d5a1-4de3-bb59-5ab19df8c1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:24:6e:db:dc:70:12:aa:06:bc:a0:64:34: 99:d3:09:8f:20:d3:88:37:21:19:c2:2a:5b:6e:6d: 63:bf:1e:5d:1f:a3:e0:9f:4b:05:5b:d7:47:ac:81: 35:81:81:d1:7d:1b:7c:9b:3b:f7:8a:46:e8:27:8d: 45:cc:f6:a3:9a:cf:98:1a:14:5e:e3:49:42:ed:5b: b6:e5:63:42:a0:7e:7e:5f:b7:76:a9:cc:a5:37:3f: a1:30:37:50:48:28:c1:60:04:0e:31:80:2b:4b:55: a3:8f:97:6a:60:48:2e:9b:fe:9b:7b:83:22:96:66: 8c:9e:8d:b7:a2:60:66:9f:d2:b9:27:74:2f:dc:04: 29:ca:53:eb:59:45:6f:4f:f7:50:aa:88:43:bc:65: 43:83:be:96:39:63:96:0f:d5:2e:96:94:c1:2e:a5: 77:3b:a3:10:df:6a:15:1c:a2:42:a8:ad:b2:67:4f: 26:ba:b7:ba:d8:80:18:26:80:db:e8:38:b7:99:90: 8e:11:1e:5f:ba:14:93:0f:2e:8a:33:d4:0f:89:61: dc:23:9b:06:7c:9c:90:01:39:bc:25:3b:f7:b3:e6: e7:6f:d7:f1:b2:f6:e0:18:23:c1:0b:66:25:d6:8d: c8:81:02:8b:0a:46:0a:17:85:85:ea:6d:82:38:51: ab:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BA:AE:CC:ED:22:9C:D5:B6:9E:64:92:39:8E:4D:24:16:73:E8:11 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0/fa588bad-d5a1-4de3-bb59-5ab19df8c1f0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 159.126.0.0/16 204.126.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d1:16:31:5c:22:47:68:b9:58:18:d6:da:97:a0:ab:c5:23: f4:cc:98:c3:c5:c8:6c:8f:8c:fe:c6:b1:12:1d:5a:a2:a1:df: cb:f4:d1:f7:13:ea:4d:9b:3e:d9:d7:7a:19:94:19:d1:c3:27: fc:22:b2:14:f7:37:d8:75:de:2a:e4:e8:cd:e7:d0:f3:de:c3: 15:9a:db:52:d4:fe:bc:e3:b6:f9:dd:87:96:c0:9b:28:b2:7f: f8:59:21:49:9f:67:0f:5c:37:00:ca:d6:3a:22:67:f4:49:63: 91:7a:1d:d0:e1:64:d9:a3:bb:9b:10:2d:30:b1:c1:89:f7:c5: 46:69:ea:7d:c6:77:db:9b:e5:ad:23:4c:fb:ac:0d:c1:ce:c8: bb:85:29:ba:c1:1a:4e:e0:7b:bf:89:df:83:f2:ae:e6:72:72: e8:2a:8d:bc:1e:32:38:5e:0d:28:a0:af:a6:b8:f9:d1:7d:16: 71:1b:ce:6c:c4:3d:1c:06:7b:ca:b1:76:4b:89:a2:6d:ac:e1: 72:6d:90:35:10:32:98:77:11:ea:84:e3:6a:83:75:08:0f:a8: 65:d6:ac:9a:9c:af:18:93:31:2f:f7:b9:42:d3:bb:25:dc:2b: 3a:72:92:a9:0b:10:ec:73:70:b0:65:13:69:3e:91:2e:a5:cf: fc:00:5e:42 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWE69BcW/ZFb3USckgyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgwNTE3NDc1NVoXDTI4MTEwNzE4NDc1NVowLzEtMCsGA1UEAxMk ZmE1ODhiYWQtZDVhMS00ZGUzLWJiNTktNWFiMTlkZjhjMWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFkkbtvccBKqBrygZDSZ0wmPINOINyEZwipb bm1jvx5dH6Pgn0sFW9dHrIE1gYHRfRt8mzv3ikboJ41FzPajms+YGhRe40lC7Vu2 5WNCoH5+X7d2qcylNz+hMDdQSCjBYAQOMYArS1Wjj5dqYEgum/6be4MilmaMno23 omBmn9K5J3Qv3AQpylPrWUVvT/dQqohDvGVDg76WOWOWD9UulpTBLqV3O6MQ32oV HKJCqK2yZ08mure62IAYJoDb6Di3mZCOER5fuhSTDy6KM9QPiWHcI5sGfJyQATm8 JTv3s+bnb9fxsvbgGCPBC2Yl1o3IgQKLCkYKF4WF6m2COFGrHQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFEe6rsztIpzVtp5kkjmOTSQWc+gRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9m YTU4OGJhZC1kNWExLTRkZTMtYmI1OS01YWIxOWRmOGMxZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2ZhNTg4YmFkLWQ1YTEtNGRlMy1i YjU5LTVhYjE5ZGY4YzFmMC9mYTU4OGJhZC1kNWExLTRkZTMtYmI1OS01YWIxOWRm OGMxZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCffgMEAcx+hjBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCP0RYxXCJHaLlY GNbal6CrxSP0zJjDxchsj4z+xrESHVqiod/L9NH3E+pNmz7Z13oZlBnRwyf8IrIU 9zfYdd4q5OjN59Dz3sMVmttS1P6847b53YeWwJsosn/4WSFJn2cPXDcAytY6Imf0 SWOReh3Q4WTZo7ubEC0wscGJ98VGaep9xnfbm+WtI0z7rA3Bzsi7hSm6wRpO4Hu/ id+D8q7mcnLoKo28HjI4Xg0ooK+muPnRfRZxG85sxD0cBnvKsXZLiaJtrOFybZA1 EDKYdxHqhONqg3UID6hl1qyanK8YkzEv97lC07sl3Cs6cpKpCxDsc3CwZRNpPpEu pc/8AF5C -----END CERTIFICATE-----Generated at Wed Aug 26 04:47:43 2026 by rpki-client