$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/34cba566-5af2-45e3-829c-df43c792670f.cer File: 34cba566-5af2-45e3-829c-df43c792670f.cer (raw, json) Hash identifier: sepxXdwL1e1XZxZrOpWq+FIDfEBvXNycVQRocQlETc0= Subject key identifier: 55:E3:72:6C:EA:42:93:66:42:40:AA:28:7C:7B:08:4B:A8:7B:12:28 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EFAB40E1B7861B61904DDB600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/34cba566-5af2-45e3-829c-df43c792670f/34cba566-5af2-45e3-829c-df43c792670f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/34cba566-5af2-45e3-829c-df43c792670f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Aug 2026 20:03:23 +0000 Certificate not after: Wed 29 Nov 2028 21:03:23 +0000 Subordinate resources: IP: 199.246.34.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:b4:0e:1b:78:61:b6:19:04:dd:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 27 20:03:23 2026 GMT Not After : Nov 29 21:03:23 2028 GMT Subject: CN=34cba566-5af2-45e3-829c-df43c792670f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d8:da:63:f7:c0:82:66:fe:8d:a2:7b:58:ed: 0b:7d:f6:6b:d7:b6:61:51:5f:6a:47:6e:89:c2:1f: c5:76:3f:a1:12:41:52:6f:bf:4b:21:e1:b4:44:ba: e7:27:cc:27:40:55:2e:53:a8:df:1a:a4:f4:c9:a9: 8e:0a:2a:b6:33:d3:95:5d:6c:46:43:3f:54:ee:66: bc:7b:aa:b4:8b:23:20:9b:c6:e9:17:a7:c4:d5:c6: f0:21:f7:dc:03:43:c4:5c:6b:f2:29:42:92:4f:dc: ce:ed:f1:3a:5d:27:b1:59:ad:b0:95:a6:73:c4:e1: 35:ad:da:ee:c5:b9:b5:54:25:b3:a8:f8:8d:29:fc: dd:cd:31:34:b7:b9:ee:e7:b5:f8:25:3c:34:ff:fe: 3f:b5:86:c2:c0:19:04:15:a1:2e:ce:f1:d6:1f:bb: 22:4a:4c:c9:8a:06:7a:39:30:a0:a0:75:05:2c:d2: 01:28:43:fc:11:3b:1f:65:e4:7a:35:1b:4d:f0:cf: 35:8d:a7:e6:43:c3:4f:d3:bb:64:70:1a:14:7f:b7: 85:c5:59:2f:4a:8d:9d:29:3d:b2:db:09:97:e8:3d: 9e:1d:11:66:89:d8:40:c8:44:6f:2d:ee:27:41:64: 21:53:3c:10:f2:3c:a9:b5:a1:53:b8:4b:1f:1a:4b: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E3:72:6C:EA:42:93:66:42:40:AA:28:7C:7B:08:4B:A8:7B:12:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/34cba566-5af2-45e3-829c-df43c792670f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/34cba566-5af2-45e3-829c-df43c792670f/34cba566-5af2-45e3-829c-df43c792670f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 199.246.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ee:97:18:4d:32:19:6f:ff:0e:44:66:5b:92:7b:25:aa:19: eb:21:0d:25:cf:41:25:a4:f0:8f:44:d1:6f:bd:67:5d:29:61: c3:f9:a1:10:c9:e4:0f:e4:51:45:d3:04:b4:37:c1:f0:ba:37: 9c:30:6e:52:de:30:08:8f:df:c8:6f:69:18:11:3b:1b:96:63: 11:e6:0a:1d:bc:d2:fe:ad:82:b1:df:f5:0c:20:95:58:c4:20: e7:57:f5:a0:9c:11:0d:19:d8:45:d6:67:64:46:1a:a3:50:db: ac:8a:9a:c9:b0:1d:02:3c:15:aa:0a:e1:cc:5a:c8:23:9a:c8: b1:f4:80:da:9a:a9:2e:05:51:03:cb:aa:f3:ad:45:f8:5e:af: b7:3f:5b:45:f8:5c:e5:43:3c:d5:53:bc:28:96:1b:1a:c6:d6: 26:b8:10:4a:8f:a6:04:5c:f3:9c:25:d0:e0:46:2d:22:6b:0a: 37:b1:e1:1e:cb:83:33:7a:b7:64:43:14:6a:08:ca:54:20:7c: 9a:64:2b:8b:ae:40:99:5c:d3:d0:e9:7c:ff:11:90:72:d9:57: 73:fb:07:40:c8:43:0d:58:36:e3:22:03:4c:8e:af:29:6b:83: 5d:7b:43:f0:f2:7d:c0:30:89:19:ac:b3:d0:a2:2c:51:2a:87: 94:4d:d4:9b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE76tA4beGG2GQTdtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgyNzIwMDMyM1oXDTI4MTEyOTIxMDMyM1owLzEtMCsGA1UEAxMk MzRjYmE1NjYtNWFmMi00NWUzLTgyOWMtZGY0M2M3OTI2NzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9jaY/fAgmb+jaJ7WO0LffZr17ZhUV9qR26J wh/Fdj+hEkFSb79LIeG0RLrnJ8wnQFUuU6jfGqT0yamOCiq2M9OVXWxGQz9U7ma8 e6q0iyMgm8bpF6fE1cbwIffcA0PEXGvyKUKST9zO7fE6XSexWa2wlaZzxOE1rdru xbm1VCWzqPiNKfzdzTE0t7nu57X4JTw0//4/tYbCwBkEFaEuzvHWH7siSkzJigZ6 OTCgoHUFLNIBKEP8ETsfZeR6NRtN8M81jafmQ8NP07tkcBoUf7eFxVkvSo2dKT2y 2wmX6D2eHRFmidhAyERvLe4nQWQhUzwQ8jyptaFTuEsfGkvSuwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFXjcmzqQpNmQkCqKHx7CEuoexIoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8z NGNiYTU2Ni01YWYyLTQ1ZTMtODI5Yy1kZjQzYzc5MjY3MGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzM0Y2JhNTY2LTVhZjItNDVlMy04 MjljLWRmNDNjNzkyNjcwZi8zNGNiYTU2Ni01YWYyLTQ1ZTMtODI5Yy1kZjQzYzc5 MjY3MGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADH9iIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAoe6XGE0yGW//DkRmW5J7 JaoZ6yENJc9BJaTwj0TRb71nXSlhw/mhEMnkD+RRRdMEtDfB8Lo3nDBuUt4wCI/f yG9pGBE7G5ZjEeYKHbzS/q2Csd/1DCCVWMQg51f1oJwRDRnYRdZnZEYao1DbrIqa ybAdAjwVqgrhzFrII5rIsfSA2pqpLgVRA8uq861F+F6vtz9bRfhc5UM81VO8KJYb GsbWJrgQSo+mBFzznCXQ4EYtImsKN7HhHsuDM3q3ZEMUagjKVCB8mmQri65AmVzT 0Ol8/xGQctlXc/sHQMhDDVg24yIDTI6vKWuDXXtD8PJ9wDCJGayz0KIsUSqHlE3U mw== -----END CERTIFICATE-----Generated at Wed Sep 23 10:19:22 2026 by rpki-client