$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231.cer File: 3e1d3dca-2f2f-49aa-a65b-05f26be89231.cer (raw, json) Hash identifier: 57fWbZyCnoKybvd2/+MySAgSFiZcLrc8GDAjTwpZ440= Subject key identifier: B5:D7:5C:57:C0:C7:39:34:AF:E7:53:41:88:A0:F9:C7:96:32:BC:F8 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F37324D59295953E4BA7E0E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231/3e1d3dca-2f2f-49aa-a65b-05f26be89231.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Sep 2026 12:06:16 +0000 Certificate not after: Mon 06 Nov 2028 19:13:08 +0000 Subordinate resources: AS: 399962 IP: 66.79.208.0/21 IP: 199.195.60.0/22 IP: 206.220.160.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:32:4d:59:29:59:53:e4:ba:7e:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Sep 18 12:06:16 2026 GMT Not After : Nov 6 19:13:08 2028 GMT Subject: CN=3e1d3dca-2f2f-49aa-a65b-05f26be89231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:b0:21:8e:ff:63:70:e6:40:b5:e0:ed:67: a8:f4:12:c3:c7:99:99:a8:c7:e4:7e:22:a7:29:3a: 87:35:7e:04:2e:8c:11:f5:03:d2:30:f6:ab:0d:f0: cd:ed:bb:a0:eb:8c:91:c5:8f:fe:bb:1a:88:1d:91: 95:0c:60:44:54:9f:b6:25:03:6d:6b:4e:6b:25:76: 00:a3:d5:2f:a0:bc:34:cc:6f:68:16:77:6f:e4:34: 6c:2e:ad:3f:60:0c:3e:8e:f8:da:fc:2d:b6:62:b8: 22:76:10:05:02:30:73:b3:1a:25:86:08:f4:e1:2a: 27:39:d4:31:bf:a5:44:b4:da:ad:c6:45:94:ea:10: 22:3e:f0:a4:67:8a:eb:1f:ca:08:54:73:83:ea:0e: fc:f5:f4:d7:c6:4b:1c:65:94:49:3a:95:8f:a8:70: 56:7b:01:84:0d:b9:87:a0:2c:ac:48:c6:f8:ae:f0: 91:00:22:e3:14:cf:7e:db:f9:dd:58:4a:fd:f4:61: f6:25:00:e3:c9:f8:9c:6a:ee:8e:f4:4d:89:0a:85: 77:ec:ee:0d:aa:13:c6:dc:e9:b7:ad:89:69:99:49: 5e:4a:6e:53:d2:ae:94:fa:af:29:15:4c:1e:2a:e2: 0f:37:9f:98:e2:27:04:7b:c9:65:01:28:06:1b:3c: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D7:5C:57:C0:C7:39:34:AF:E7:53:41:88:A0:F9:C7:96:32:BC:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231/3e1d3dca-2f2f-49aa-a65b-05f26be89231.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 66.79.208.0/21 199.195.60.0/22 206.220.160.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399962 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:d7:71:3b:65:51:03:49:a7:be:0f:56:30:c2:a4:ed:9e:87: ff:80:41:91:d2:88:95:a0:e6:87:72:83:f8:5e:ff:41:4d:70: 29:4d:67:11:d7:be:f0:d8:c7:a6:57:b7:10:e1:39:38:19:5c: 0e:06:50:ca:f0:a4:43:6e:95:1b:2b:8b:51:38:d1:20:e2:8a: 9c:68:30:c6:9d:b4:f8:2c:7f:b2:81:e6:e2:51:1f:e3:30:88: 55:fe:12:2f:8d:60:b0:b8:70:25:a8:89:1e:a2:29:d5:dc:bd: 32:9c:25:c7:69:61:68:cf:5b:b9:f0:23:a5:95:24:d9:9e:8c: 6e:c8:c8:d8:a3:6f:90:8c:4a:19:67:24:02:d1:2f:c4:d4:bc: a0:1d:41:28:7e:b3:a2:04:fa:d1:59:7d:0c:79:4d:ba:6d:24: fd:d5:25:aa:f7:6c:22:b5:06:56:3b:41:2a:dc:fb:84:28:34: 16:d5:ff:d3:52:35:4a:d9:a4:db:d3:a9:d7:91:40:7c:f1:15: 3c:43:35:c1:02:be:65:38:06:cf:54:51:67:1c:4b:63:50:ec: 83:bf:44:e7:bc:58:78:d5:76:5a:4f:90:45:c1:12:3f:29:42: b4:af:0c:b3:09:24:3a:9e:dc:ab:cd:eb:60:cb:40:30:13:f4: 36:92:0c:e4 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWE83Mk1ZKVlT5Lp+DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDkxODEyMDYxNloXDTI4MTEwNjE5MTMwOFowLzEtMCsGA1UEAxMk M2UxZDNkY2EtMmYyZi00OWFhLWE2NWItMDVmMjZiZTg5MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso2wIY7/Y3DmQLXg7Weo9BLDx5mZqMfkfiKn KTqHNX4ELowR9QPSMParDfDN7bug64yRxY/+uxqIHZGVDGBEVJ+2JQNta05rJXYA o9UvoLw0zG9oFndv5DRsLq0/YAw+jvja/C22YrgidhAFAjBzsxolhgj04SonOdQx v6VEtNqtxkWU6hAiPvCkZ4rrH8oIVHOD6g789fTXxkscZZRJOpWPqHBWewGEDbmH oCysSMb4rvCRACLjFM9+2/ndWEr99GH2JQDjyficau6O9E2JCoV37O4NqhPG3Om3 rYlpmUleSm5T0q6U+q8pFUweKuIPN5+Y4icEe8llASgGGzyVgwIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFLXXXFfAxzk0r+dTQYig+ceWMrz4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8z ZTFkM2RjYS0yZjJmLTQ5YWEtYTY1Yi0wNWYyNmJlODkyMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzNlMWQzZGNhLTJmMmYtNDlhYS1h NjViLTA1ZjI2YmU4OTIzMS8zZTFkM2RjYS0yZjJmLTQ5YWEtYTY1Yi0wNWYyNmJl ODkyMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBANCT9ADBALHwzwDBALO3KAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBhpaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBALvXcTtlUQNJp74PVjDCpO2eh/+AQZHS iJWg5odyg/he/0FNcClNZxHXvvDYx6ZXtxDhOTgZXA4GUMrwpENulRsri1E40SDi ipxoMMadtPgsf7KB5uJRH+MwiFX+Ei+NYLC4cCWoiR6iKdXcvTKcJcdpYWjPW7nw I6WVJNmejG7IyNijb5CMShlnJALRL8TUvKAdQSh+s6IE+tFZfQx5TbptJP3VJar3 bCK1BlY7QSrc+4QoNBbV/9NSNUrZpNvTqdeRQHzxFTxDNcECvmU4Bs9UUWccS2NQ 7IO/ROe8WHjVdlpPkEXBEj8pQrSvDLMJJDqe3KvN62DLQDAT9DaSDOQ= -----END CERTIFICATE-----Generated at Mon Sep 21 23:01:30 2026 by rpki-client