$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/060a7b33-9745-4f5c-8cb2-4e67ff27932e.cer File: 060a7b33-9745-4f5c-8cb2-4e67ff27932e.cer (raw, json) Hash identifier: rStMvs/dgR9f7tU7bOXbNBclNO5k/JdL/TL2VX8/ayQ= Subject key identifier: BA:90:33:8B:15:8C:FD:9E:5D:E0:56:E6:DE:C0:06:E1:07:D0:EC:AE Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584E9B9FB4BD1F183D86197FB800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/060a7b33-9745-4f5c-8cb2-4e67ff27932e/060a7b33-9745-4f5c-8cb2-4e67ff27932e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/060a7b33-9745-4f5c-8cb2-4e67ff27932e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Jul 2026 18:40:36 +0000 Certificate not after: Thu 26 Oct 2028 18:40:36 +0000 Subordinate resources: AS: 35893 IP: 162.0.0.0/17 IP: 162.0.144.0/21 IP: 162.0.248.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:9f:b4:bd:1f:18:3d:86:19:7f:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Jul 24 18:40:36 2026 GMT Not After : Oct 26 18:40:36 2028 GMT Subject: CN=060a7b33-9745-4f5c-8cb2-4e67ff27932e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:f5:2f:1e:e3:22:47:a4:be:69:b9:04:e8: 6c:c5:64:f9:f4:41:8a:64:b1:be:31:2e:ae:9b:62: 4c:35:9f:41:f0:3b:76:a8:d4:9d:cd:97:f7:ed:42: ca:e3:c2:0c:60:48:1a:88:e5:6b:7b:45:dc:52:55: 5d:d3:c6:76:fb:3b:e2:70:5e:57:8d:b2:eb:0c:6f: 9e:2c:ac:1e:58:b4:8c:37:53:4c:2b:66:cb:fd:83: a6:e7:e6:8d:e5:ac:f0:52:d1:0f:ea:a6:34:7b:fe: 55:e5:18:08:87:0d:6b:42:bd:d1:f6:e0:86:69:84: 25:04:1e:93:5d:78:aa:41:d9:0d:01:35:76:12:61: 28:92:7b:fd:f8:de:fa:f0:1a:18:66:f9:56:3c:44: fa:67:98:30:b4:36:57:8c:f6:01:16:89:26:20:23: 8c:2e:bb:e9:3d:fb:7a:f3:0f:50:1e:5a:9c:9a:c4: 65:f1:4e:e8:3b:e0:ea:ba:1c:bf:be:4b:99:de:8a: 2c:02:ca:d2:be:96:2f:2a:fb:3a:db:4a:c5:c3:a7: d5:fb:9d:06:71:e3:92:bf:49:f0:f6:37:80:b5:a3: 47:a6:5e:14:da:ad:04:3b:64:2c:3a:9e:64:70:4c: 01:d0:ed:c5:39:86:f6:9d:5d:40:6b:49:b3:39:d8: 55:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:90:33:8B:15:8C:FD:9E:5D:E0:56:E6:DE:C0:06:E1:07:D0:EC:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/060a7b33-9745-4f5c-8cb2-4e67ff27932e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/060a7b33-9745-4f5c-8cb2-4e67ff27932e/060a7b33-9745-4f5c-8cb2-4e67ff27932e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 162.0.0.0/17 162.0.144.0/21 162.0.248.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35893 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d7:e9:0a:4b:06:18:1d:65:cf:9b:d2:53:c8:2f:34:3c:f4: 3d:d5:4f:5e:0a:92:d7:d4:8c:6f:f5:65:c1:b2:06:97:f6:f2: 58:dd:46:0f:c6:1e:4f:0d:f0:40:e5:43:04:e1:db:c7:95:43: 94:80:d3:cb:d6:d4:c2:0e:99:d4:a1:19:2a:5e:0a:c4:91:eb: 0f:2a:37:5b:63:78:d8:df:fa:a3:5c:04:77:24:92:4c:8a:4f: d6:7f:59:d8:f1:bc:cc:47:fe:23:09:40:64:c9:b6:41:5d:85: 05:64:ca:49:1c:9d:b4:d2:dd:9e:0b:fb:5f:c6:46:8b:e8:71: ba:05:8e:d2:9b:fc:56:a9:7a:e6:86:0c:12:7e:46:3e:59:fd: b4:82:70:56:fa:77:e9:be:f6:5c:72:6a:18:97:dc:82:fc:89: e7:2c:9c:32:eb:a3:63:dc:bc:1b:89:02:a3:b4:11:3e:4b:a6: 4c:85:ee:ac:5d:7e:2f:ac:f1:57:3a:13:2d:62:2c:38:ad:88: 3e:90:11:77:76:16:55:55:96:85:87:7e:11:38:97:fe:5f:ad: a6:be:f0:3f:d6:6f:5b:cc:a6:c9:b8:25:e1:91:84:92:d6:ac: 58:a4:da:80:6c:0e:8e:18:35:22:c7:df:1a:46:c7:42:70:4b: c6:09:e2:f8 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWE6bn7S9Hxg9hhl/uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDcyNDE4NDAzNloXDTI4MTAyNjE4NDAzNlowLzEtMCsGA1UEAxMk MDYwYTdiMzMtOTc0NS00ZjVjLThjYjItNGU2N2ZmMjc5MzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuov1Lx7jIkekvmm5BOhsxWT59EGKZLG+MS6u m2JMNZ9B8Dt2qNSdzZf37ULK48IMYEgaiOVre0XcUlVd08Z2+zvicF5XjbLrDG+e LKweWLSMN1NMK2bL/YOm5+aN5azwUtEP6qY0e/5V5RgIhw1rQr3R9uCGaYQlBB6T XXiqQdkNATV2EmEoknv9+N768BoYZvlWPET6Z5gwtDZXjPYBFokmICOMLrvpPft6 8w9QHlqcmsRl8U7oO+Dquhy/vkuZ3oosAsrSvpYvKvs620rFw6fV+50GceOSv0nw 9jeAtaNHpl4U2q0EO2QsOp5kcEwB0O3FOYb2nV1Aa0mzOdhV0QIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFLqQM4sVjP2eXeBW5t7ABuEH0OyuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8w NjBhN2IzMy05NzQ1LTRmNWMtOGNiMi00ZTY3ZmYyNzkzMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzA2MGE3YjMzLTk3NDUtNGY1Yy04 Y2IyLTRlNjdmZjI3OTMyZS8wNjBhN2IzMy05NzQ1LTRmNWMtOGNiMi00ZTY3ZmYy NzkzMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAeiAAADBAOiAJADBAOiAPgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAIw1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJnX6QpLBhgdZc+b0lPILzQ89D3VT14K ktfUjG/1ZcGyBpf28ljdRg/GHk8N8EDlQwTh28eVQ5SA08vW1MIOmdShGSpeCsSR 6w8qN1tjeNjf+qNcBHckkkyKT9Z/WdjxvMxH/iMJQGTJtkFdhQVkykkcnbTS3Z4L +1/GRovocboFjtKb/FapeuaGDBJ+Rj5Z/bSCcFb6d+m+9lxyahiX3IL8iecsnDLr o2PcvBuJAqO0ET5LpkyF7qxdfi+s8Vc6Ey1iLDitiD6QEXd2FlVVloWHfhE4l/5f raa+8D/Wb1vMpsm4JeGRhJLWrFik2oBsDo4YNSLH3xpGx0JwS8YJ4vg= -----END CERTIFICATE-----Generated at Tue Jul 28 14:40:46 2026 by rpki-client