$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558.cer File: 3222ae3e-3a47-4ecc-ac38-ef4126e91558.cer (raw, json) Hash identifier: P3+d17eMyuzS1qehSmzM4z7nvg0kJfj61DIV5m6izPY= Subject key identifier: 25:1F:44:E9:45:9C:13:7B:7B:8A:B2:2F:A5:BA:C7:01:32:1E:36:F0 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584E9BAAB259660CDE10D46497E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558/3222ae3e-3a47-4ecc-ac38-ef4126e91558.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Jul 2026 19:02:44 +0000 Certificate not after: Thu 26 Oct 2028 19:02:44 +0000 Subordinate resources: IP: 137.20.0.0/16 IP: 162.22.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:aa:b2:59:66:0c:de:10:d4:64:97:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Jul 24 19:02:44 2026 GMT Not After : Oct 26 19:02:44 2028 GMT Subject: CN=3222ae3e-3a47-4ecc-ac38-ef4126e91558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:81:99:ef:5c:de:b0:9d:f7:7d:9f:b2:44:1d: 20:4d:f1:42:e7:7d:2b:ac:5b:ef:09:08:55:53:a6: f4:60:70:f3:d9:8c:cd:27:04:99:a3:66:da:60:44: 8c:c1:e2:90:e7:60:b0:2b:bf:c6:7d:81:97:c2:d4: ed:25:99:e1:3e:4a:1d:1d:c1:8a:72:4e:4a:d5:97: 6b:6a:5f:a7:05:0d:e6:9c:55:37:9f:ea:62:98:2f: b7:8d:ae:54:88:24:20:bb:cc:8c:c3:38:69:6c:02: ab:29:d9:5f:0b:ab:73:a1:03:42:4e:36:ca:d8:13: 00:e4:82:10:4e:46:90:22:9c:82:81:8b:60:ab:71: 0e:6c:9b:c8:1b:3d:c6:bb:c9:a6:b4:75:4e:64:92: 71:1a:77:53:ed:c7:c2:8d:33:25:e2:22:64:22:e2: c1:e1:6f:bb:b6:88:87:ce:bb:d5:f5:4e:8f:1f:73: 29:a1:0d:bd:66:26:ff:cb:8b:c4:73:5d:c3:5b:1f: 3b:73:86:c6:83:27:17:7e:f7:80:bd:a9:de:aa:07: 17:b2:27:03:e6:75:6f:ea:b9:03:c4:14:55:75:37: 0f:ae:5c:48:42:34:7f:72:a2:77:90:7e:47:df:f4: aa:a8:2a:4d:62:b0:3b:93:3d:bc:04:f0:6a:62:c0: 70:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1F:44:E9:45:9C:13:7B:7B:8A:B2:2F:A5:BA:C7:01:32:1E:36:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558/3222ae3e-3a47-4ecc-ac38-ef4126e91558.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 137.20.0.0/16 162.22.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:14:ee:45:05:2e:26:09:c8:7e:ed:67:a9:95:53:63:25:e3: a8:f5:8d:d7:0e:49:19:93:66:3c:5d:42:11:a9:55:7e:22:78: 13:c8:5a:d0:ce:59:0d:17:1f:71:4a:a6:a4:a7:99:47:e7:c5: 5f:9f:c1:b5:ff:69:65:c1:f9:c8:60:0b:67:08:49:f6:6b:53: c2:d6:f6:58:72:ac:63:93:c8:c3:da:4a:1a:91:6c:66:08:67: 65:f3:9d:5b:d4:b7:44:f0:82:c8:75:d4:a3:d3:75:47:85:bb: 42:cf:d1:00:67:9c:2c:3e:93:b1:38:f3:51:c1:1a:c8:d9:39: 19:36:34:ea:6a:c1:fc:cd:68:09:f8:c2:b6:33:c9:5a:a7:ad: da:ad:35:d2:4e:6c:a1:c7:ea:05:5c:77:29:68:23:93:79:59: e3:fc:66:32:d8:34:85:93:3c:d1:65:c7:b8:8a:33:f0:c8:bc: bc:d1:6c:39:62:84:d8:82:08:62:87:6f:69:b2:3c:61:1e:97: 7d:f2:07:8a:50:88:01:9e:21:f9:c4:c2:d5:73:6c:68:91:29: c6:20:11:af:13:7e:2c:5e:34:5f:88:8c:d6:7b:eb:8a:36:7c: 98:7f:f6:02:62:d6:7b:97:ea:91:1e:0b:95:1f:3a:7b:0e:42: 23:31:bb:f8 -----BEGIN CERTIFICATE----- MIIG8TCCBdmgAwIBAgIUAQ0Mn0MoWE6bqrJZZgzeENRkl+UwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDcyNDE5MDI0NFoXDTI4MTAyNjE5MDI0NFowLzEtMCsGA1UEAxMk MzIyMmFlM2UtM2E0Ny00ZWNjLWFjMzgtZWY0MTI2ZTkxNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4GZ71zesJ33fZ+yRB0gTfFC530rrFvvCQhV U6b0YHDz2YzNJwSZo2baYESMweKQ52CwK7/GfYGXwtTtJZnhPkodHcGKck5K1Zdr al+nBQ3mnFU3n+pimC+3ja5UiCQgu8yMwzhpbAKrKdlfC6tzoQNCTjbK2BMA5IIQ TkaQIpyCgYtgq3EObJvIGz3Gu8mmtHVOZJJxGndT7cfCjTMl4iJkIuLB4W+7toiH zrvV9U6PH3MpoQ29Zib/y4vEc13DWx87c4bGgycXfveAvaneqgcXsicD5nVv6rkD xBRVdTcPrlxIQjR/cqJ3kH5H3/SqqCpNYrA7kz28BPBqYsBwuwIDAQABo4IEAzCC A/8wHQYDVR0OBBYEFCUfROlFnBN7e4qyL6W6xwEyHjbwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8z MjIyYWUzZS0zYTQ3LTRlY2MtYWMzOC1lZjQxMjZlOTE1NTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzMyMjJhZTNlLTNhNDctNGVjYy1h YzM4LWVmNDEyNmU5MTU1OC8zMjIyYWUzZS0zYTQ3LTRlY2MtYWMzOC1lZjQxMjZl OTE1NTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwIwYIKwYBBQUH AQcBAf8EFDASMBAEAgABMAoDAwCJFAMDAKIWMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC4U7kUFLiYJyH7t Z6mVU2Ml46j1jdcOSRmTZjxdQhGpVX4ieBPIWtDOWQ0XH3FKpqSnmUfnxV+fwbX/ aWXB+chgC2cISfZrU8LW9lhyrGOTyMPaShqRbGYIZ2XznVvUt0Twgsh11KPTdUeF u0LP0QBnnCw+k7E481HBGsjZORk2NOpqwfzNaAn4wrYzyVqnrdqtNdJObKHH6gVc dyloI5N5WeP8ZjLYNIWTPNFlx7iKM/DIvLzRbDlihNiCCGKHb2myPGEel33yB4pQ iAGeIfnEwtVzbGiRKcYgEa8TfixeNF+IjNZ764o2fJh/9gJi1nuX6pEeC5UfOnsO QiMxu/g= -----END CERTIFICATE-----Generated at Tue Jul 28 15:37:38 2026 by rpki-client