$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c5a85c2-e37e-40d1-90e0-2d3ee7ba03b3.cer File: 2c5a85c2-e37e-40d1-90e0-2d3ee7ba03b3.cer (raw, json) Hash identifier: muoOoSww3hA1IbGgedRDnhKXoVG0Q5l9rO+a/cbQfVo= Subject key identifier: 24:A0:63:32:06:28:6D:0B:06:FE:48:DB:18:88:30:7E:C5:52:E8:C0 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F2CECDDA1820894FF478825D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c5a85c2-e37e-40d1-90e0-2d3ee7ba03b3/2c5a85c2-e37e-40d1-90e0-2d3ee7ba03b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c5a85c2-e37e-40d1-90e0-2d3ee7ba03b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Sep 2026 19:48:16 +0000 Certificate not after: Mon 27 Nov 2028 17:13:36 +0000 Subordinate resources: AS: 402936 IP: 23.163.196.0/24 IP: 2602:f308::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:ec:dd:a1:82:08:94:ff:47:88:25:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Sep 14 19:48:16 2026 GMT Not After : Nov 27 17:13:36 2028 GMT Subject: CN=2c5a85c2-e37e-40d1-90e0-2d3ee7ba03b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b8:04:4a:1b:ce:8b:1e:67:0a:e4:b6:b9:c2: c2:99:90:04:74:91:12:a4:6d:6c:c7:97:62:3d:3a: 03:17:3a:92:d9:2f:69:d6:45:7e:d4:74:98:ce:6b: bb:96:e0:b1:a0:e0:d9:fc:41:08:2a:62:f3:4e:37: 06:0f:86:7a:00:1c:b3:37:33:b8:00:7a:85:c6:d5: 5b:28:63:95:35:0e:67:db:ce:01:fa:86:c0:b9:ff: 7e:cb:fc:11:96:ed:35:16:42:10:58:e2:3b:4a:cb: 46:77:7e:fb:b2:98:0b:1e:1b:7f:fe:8e:03:bc:d4: 4d:ca:90:c8:b6:77:5d:4a:18:8e:37:53:ae:18:2d: 08:2c:db:25:80:9b:a3:89:ca:91:f3:a2:51:ac:61: d1:3b:0c:ba:3e:56:43:bf:59:76:5f:6e:a4:93:43: 70:4c:a3:86:fe:cf:5a:ce:f5:11:74:cd:ec:44:26: b7:3e:83:56:ad:d6:2b:ff:35:9d:a2:0b:7d:84:87: ea:d5:59:38:01:fd:a5:27:b1:72:25:d8:08:98:96: 55:e2:76:86:0a:af:e3:cf:02:30:3a:08:99:57:37: fe:2e:92:71:9f:f0:7a:74:ba:82:a6:01:59:4b:7f: 11:53:0f:3d:57:9b:b2:b3:26:9e:a1:5e:7e:b2:a8: a2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A0:63:32:06:28:6D:0B:06:FE:48:DB:18:88:30:7E:C5:52:E8:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c5a85c2-e37e-40d1-90e0-2d3ee7ba03b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c5a85c2-e37e-40d1-90e0-2d3ee7ba03b3/2c5a85c2-e37e-40d1-90e0-2d3ee7ba03b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 23.163.196.0/24 IPv6: 2602:f308::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402936 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:15:ac:0a:2c:3e:c5:3f:01:2b:21:06:85:6b:ca:84:6f:6b: 6a:f7:0d:0f:07:78:e6:e0:62:f3:bb:3f:9b:e9:39:8d:b4:0f: 9a:e2:c4:ff:a7:b9:14:5d:c9:c7:fb:30:d4:ba:57:a4:d4:83: 83:6b:8d:9a:0a:67:fb:56:33:90:9b:35:1c:75:cb:31:e3:2a: e4:d1:1a:46:0c:52:f0:30:4a:21:2a:e8:85:f3:a7:6d:7a:4b: 42:99:97:77:86:a3:b7:2c:64:f3:05:05:0e:3a:ae:dd:57:ac: 60:fb:4b:5a:1a:f1:1c:8d:8a:bf:7d:4d:25:87:e4:d9:ae:fa: 68:43:8e:69:5f:31:f4:29:ec:53:12:bc:79:52:af:da:f8:ea: b3:0b:5f:f8:53:58:c2:eb:ff:e8:37:b9:f2:c7:07:b3:84:e9: 13:c6:fd:22:38:ae:31:9e:83:b2:74:73:33:cd:71:72:ea:c2: 49:47:e2:90:8b:e8:bf:4d:64:db:04:63:f0:d0:b8:7f:49:6b: 9b:e4:7f:88:ad:3c:62:20:84:6d:25:6d:c6:d8:e7:2f:1c:94: a6:fb:96:c6:8d:83:7f:82:f2:60:2d:71:2b:07:ce:de:a4:e7: 96:e1:7a:ad:6a:0f:5c:60:1e:3f:40:0f:71:79:b9:6f:b3:36: 36:00:12:38 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE8s7N2hggiU/0eIJdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDkxNDE5NDgxNloXDTI4MTEyNzE3MTMzNlowLzEtMCsGA1UEAxMk MmM1YTg1YzItZTM3ZS00MGQxLTkwZTAtMmQzZWU3YmEwM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7gEShvOix5nCuS2ucLCmZAEdJESpG1sx5di PToDFzqS2S9p1kV+1HSYzmu7luCxoODZ/EEIKmLzTjcGD4Z6AByzNzO4AHqFxtVb KGOVNQ5n284B+obAuf9+y/wRlu01FkIQWOI7SstGd377spgLHht//o4DvNRNypDI tnddShiON1OuGC0ILNslgJujicqR86JRrGHROwy6PlZDv1l2X26kk0NwTKOG/s9a zvURdM3sRCa3PoNWrdYr/zWdogt9hIfq1Vk4Af2lJ7FyJdgImJZV4naGCq/jzwIw OgiZVzf+LpJxn/B6dLqCpgFZS38RUw89V5uysyaeoV5+sqii/wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCSgYzIGKG0LBv5I2xiIMH7FUujAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8y YzVhODVjMi1lMzdlLTQwZDEtOTBlMC0yZDNlZTdiYTAzYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzJjNWE4NWMyLWUzN2UtNDBkMS05 MGUwLTJkM2VlN2JhMDNiMy8yYzVhODVjMi1lMzdlLTQwZDEtOTBlMC0yZDNlZTdi YTAzYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXo8QwDgQCAAIwCAMGACYC8wgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYl+DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCyFawKLD7FPwErIQaFa8qEb2tq 9w0PB3jm4GLzuz+b6TmNtA+a4sT/p7kUXcnH+zDUulek1IODa42aCmf7VjOQmzUc dcsx4yrk0RpGDFLwMEohKuiF86dtektCmZd3hqO3LGTzBQUOOq7dV6xg+0taGvEc jYq/fU0lh+TZrvpoQ45pXzH0KexTErx5Uq/a+OqzC1/4U1jC6//oN7nyxwezhOkT xv0iOK4xnoOydHMzzXFy6sJJR+KQi+i/TWTbBGPw0Lh/SWub5H+IrTxiIIRtJW3G 2OcvHJSm+5bGjYN/gvJgLXErB87epOeW4Xqtag9cYB4/QA9xeblvszY2ABI4 -----END CERTIFICATE-----Generated at Tue Sep 22 12:23:30 2026 by rpki-client