$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f.cer File: ffc8f214-096e-4b32-9ae2-3506c0f50e1f.cer (raw, json) Hash identifier: sQu8BLxRSNXdSzeEZs6RIIcPY16zQD301kUkwdEmQ8s= Subject key identifier: EA:65:F7:AE:A3:81:CF:54:58:50:B0:27:D3:13:8A:E5:FC:58:72:54 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F94670B8324532E67CDC33940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f/ffc8f214-096e-4b32-9ae2-3506c0f50e1f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Oct 2026 21:22:43 +0000 Certificate not after: Tue 23 Jan 2029 22:22:43 +0000 Subordinate resources: AS: 35970 IP: 199.79.190.0/24 IP: 208.81.240.0/21 IP: 2605:4d40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:67:0b:83:24:53:2e:67:cd:c3:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Oct 21 21:22:43 2026 GMT Not After : Jan 23 22:22:43 2029 GMT Subject: CN=ffc8f214-096e-4b32-9ae2-3506c0f50e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:6e:a0:40:e5:99:a4:8d:07:9a:78:b7:cc: 43:28:ab:f5:47:38:57:cb:b4:16:e8:ac:bb:60:a2: 97:b3:78:45:0c:ab:00:1c:53:c9:60:4b:be:f5:42: fd:f3:02:2c:9a:7a:69:f1:24:8e:27:3d:aa:03:a9: 18:60:2c:b9:53:b5:a8:64:18:c9:31:e3:98:76:46: f3:64:e8:f5:f6:c2:54:c7:94:43:0f:a7:7d:c5:b1: e6:27:eb:af:4a:aa:22:05:3a:c3:c6:ad:0a:e8:84: dc:6f:c1:0c:bc:0f:f1:67:db:e2:98:3a:4b:b6:12: c7:a1:e2:e2:46:c4:0b:63:5d:b1:69:00:bf:65:a1: fe:fb:28:8f:39:ca:b0:fd:b7:9b:43:51:b0:c6:93: f3:0b:77:60:05:88:60:0d:80:0b:cd:f5:51:be:9b: a1:d2:33:2c:cd:dc:6c:17:60:dc:36:57:0d:57:dc: c7:89:d1:ce:f4:a8:24:9f:e4:fe:7a:73:a2:74:f9: 7b:db:23:1c:92:3a:7d:50:6c:4c:fa:f4:69:c9:a4: 12:9c:ab:18:3f:38:70:5b:3e:0a:93:95:73:f0:d8: b7:60:b6:c2:79:db:73:44:c5:2c:1a:76:7c:1a:db: a6:42:a7:03:82:d4:06:7b:11:fd:1c:97:56:1b:24: f2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:65:F7:AE:A3:81:CF:54:58:50:B0:27:D3:13:8A:E5:FC:58:72:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f/ffc8f214-096e-4b32-9ae2-3506c0f50e1f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 199.79.190.0/24 208.81.240.0/21 IPv6: 2605:4d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35970 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b8:ba:49:5f:72:96:b2:8d:22:c0:98:7e:72:bc:c8:11:15: 13:2f:de:30:8b:1b:08:ca:97:68:37:0a:0c:74:df:fa:b5:2e: 63:3e:86:75:92:47:30:d1:f3:e5:3e:20:1d:88:ab:d4:f1:cb: c9:ca:c9:ed:94:db:35:d4:02:80:63:d7:30:86:04:fd:e2:a0: a8:fc:6a:e2:eb:d8:4c:b5:1f:2a:01:d2:4e:e3:31:1c:e5:99: 44:33:0c:c3:76:41:95:64:49:f0:38:db:52:7d:32:c5:27:46: 5a:0a:fe:b2:71:91:96:c7:a4:ea:ec:48:05:1a:50:6f:d4:7f: b7:09:aa:fa:65:5c:41:35:ee:f1:91:36:62:52:8f:44:d0:d7: e0:06:5d:26:33:1a:d7:8c:45:5f:49:a3:c9:6b:9c:de:03:de: dd:a0:cc:13:1b:4a:ed:e3:6c:da:5f:13:04:1d:71:da:18:e5: 90:2f:c1:7c:64:31:0d:68:3f:b1:9c:88:d3:09:79:5d:74:62: 76:c2:d8:46:d3:66:86:1c:d8:3d:08:8e:90:2b:97:74:06:a0: 17:48:5c:6a:76:32:b3:aa:06:a3:86:71:9f:29:d3:ae:14:17: a6:f4:d4:4d:c8:07:9f:ae:72:90:43:b1:de:35:f5:22:93:32: d2:ca:d3:f8 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE+UZwuDJFMuZ83DOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MTAyMTIxMjI0M1oXDTI5MDEyMzIyMjI0M1owLzEtMCsGA1UEAxMk ZmZjOGYyMTQtMDk2ZS00YjMyLTlhZTItMzUwNmMwZjUwZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8luoEDlmaSNB5p4t8xDKKv1RzhXy7QW6Ky7 YKKXs3hFDKsAHFPJYEu+9UL98wIsmnpp8SSOJz2qA6kYYCy5U7WoZBjJMeOYdkbz ZOj19sJUx5RDD6d9xbHmJ+uvSqoiBTrDxq0K6ITcb8EMvA/xZ9vimDpLthLHoeLi RsQLY12xaQC/ZaH++yiPOcqw/bebQ1GwxpPzC3dgBYhgDYALzfVRvpuh0jMszdxs F2DcNlcNV9zHidHO9Kgkn+T+enOidPl72yMckjp9UGxM+vRpyaQSnKsYPzhwWz4K k5Vz8Ni3YLbCedtzRMUsGnZ8GtumQqcDgtQGexH9HJdWGyTyWwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFOpl966jgc9UWFCwJ9MTiuX8WHJUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9m ZmM4ZjIxNC0wOTZlLTRiMzItOWFlMi0zNTA2YzBmNTBlMWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2ZmYzhmMjE0LTA5NmUtNGIzMi05 YWUyLTM1MDZjMGY1MGUxZi9mZmM4ZjIxNC0wOTZlLTRiMzItOWFlMi0zNTA2YzBm NTBlMWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBADHT74DBAPQUfAwDQQCAAIwBwMFACYFTUAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAIyCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH+4uklfcpayjSLAmH5y vMgRFRMv3jCLGwjKl2g3Cgx03/q1LmM+hnWSRzDR8+U+IB2Iq9Txy8nKye2U2zXU AoBj1zCGBP3ioKj8auLr2Ey1HyoB0k7jMRzlmUQzDMN2QZVkSfA421J9MsUnRloK /rJxkZbHpOrsSAUaUG/Uf7cJqvplXEE17vGRNmJSj0TQ1+AGXSYzGteMRV9Jo8lr nN4D3t2gzBMbSu3jbNpfEwQdcdoY5ZAvwXxkMQ1oP7GciNMJeV10YnbC2EbTZoYc 2D0IjpArl3QGoBdIXGp2MrOqBqOGcZ8p064UF6b01E3IB5+ucpBDsd419SKTMtLK 0/g= -----END CERTIFICATE-----Generated at Fri Oct 30 10:15:34 2026 by rpki-client