$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c.cer File: 487e4be0-3476-4cce-96fa-81ab6243a74c.cer (raw, json) Hash identifier: D5T431vEAQ7b7iJmIAYsv7GTILjOPKEhxRhoe2AqtOQ= Subject key identifier: 5B:D2:FA:EE:04:43:84:3C:69:72:7E:81:99:56:6A:E3:AB:57:52:F9 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F086ABCE38D7DD1862E1CD8A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/487e4be0-3476-4cce-96fa-81ab6243a74c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Sep 2026 17:56:59 +0000 Certificate not after: Mon 04 Dec 2028 18:56:59 +0000 Subordinate resources: AS: 402963 IP: 23.163.28.0/24 IP: 2602:f304::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:6a:bc:e3:8d:7d:d1:86:2e:1c:d8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Sep 1 17:56:59 2026 GMT Not After : Dec 4 18:56:59 2028 GMT Subject: CN=487e4be0-3476-4cce-96fa-81ab6243a74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e1:8f:2e:7f:9f:04:87:aa:0b:0f:22:ee:f5: 3d:ed:e5:80:a5:e1:f3:50:0e:51:2c:71:f0:e2:30: 80:d5:ec:52:c5:5b:39:e4:c4:54:d3:b5:c0:7d:97: bf:94:86:7e:27:18:55:32:f3:a4:09:7f:2c:6f:89: 1b:ed:61:0b:77:16:94:d7:64:6d:91:5d:f4:0d:e5: 0a:43:48:4a:5a:96:91:6e:26:04:09:8e:0f:09:a3: b3:c8:a3:05:72:bb:c1:ba:e1:9a:33:aa:07:41:83: 77:5e:1a:73:90:68:92:2e:d3:1d:12:92:09:9b:11: de:32:93:60:3b:ea:fb:22:8e:bb:0a:12:0a:6f:6c: a5:48:a8:e8:4d:06:35:2e:86:5d:2d:40:34:28:91: 39:47:88:f7:f2:d5:72:53:78:ec:9c:ca:ca:f5:d3: 76:07:88:d9:0b:fb:a5:cb:e7:ce:39:ff:78:bf:fa: ec:d8:ab:3c:f9:9c:a6:5e:10:f3:93:0e:5f:77:e9: c2:eb:c5:d3:cf:6c:43:05:13:5c:54:f1:5e:3d:5d: e3:78:d8:35:84:e3:29:20:21:69:c1:24:37:32:dd: 16:56:37:59:af:f8:18:af:66:2c:99:70:41:a3:2f: 09:37:aa:f0:a0:6b:6f:51:02:f4:13:5c:5c:5b:ff: 27:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D2:FA:EE:04:43:84:3C:69:72:7E:81:99:56:6A:E3:AB:57:52:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/487e4be0-3476-4cce-96fa-81ab6243a74c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 23.163.28.0/24 IPv6: 2602:f304::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402963 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:55:03:70:62:3c:74:03:fb:ed:29:4f:55:c2:88:46:2c:77: e3:d1:2d:74:40:7f:eb:36:e4:05:8f:62:ca:e7:a7:1f:80:a8: 2d:22:ec:6d:cf:f6:2c:bf:f0:fe:b9:38:6e:b2:2f:55:89:fc: 69:c8:ad:b7:0e:f3:78:80:9f:98:4c:f5:bc:fa:5f:56:f3:76: 76:8c:00:c1:20:8d:13:a2:4e:e2:bc:b3:a3:0b:7b:75:39:19: 5a:0b:df:e2:54:97:9c:2d:91:2d:4a:5c:42:42:b4:a4:ba:a2: aa:3c:1e:6f:48:1f:7d:62:57:06:9a:c4:da:1d:cb:1d:69:b9: 73:55:cf:96:69:13:65:52:60:9b:14:aa:eb:46:08:59:1c:99: d9:b5:c8:10:35:c7:46:95:b0:2a:b7:9f:ef:66:5e:8c:3f:7a: bf:45:83:e7:83:81:f2:db:dd:13:6a:21:93:b8:74:9e:66:e5: e7:12:a9:98:ba:b9:28:ef:88:a5:3b:d1:00:03:e5:47:13:01: f1:af:0c:c5:34:3a:8b:d4:08:66:7e:da:1d:f1:25:3b:5f:a7: 67:78:0c:6c:2e:e8:c6:bb:82:46:c3:4b:ed:5a:2c:d2:31:67: 07:7d:29:03:c5:07:fb:fc:6b:2d:c3:3d:ec:c0:52:de:ba:43: 58:3e:4b:3e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE8IarzjjX3Rhi4c2KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDkwMTE3NTY1OVoXDTI4MTIwNDE4NTY1OVowLzEtMCsGA1UEAxMk NDg3ZTRiZTAtMzQ3Ni00Y2NlLTk2ZmEtODFhYjYyNDNhNzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheGPLn+fBIeqCw8i7vU97eWApeHzUA5RLHHw 4jCA1exSxVs55MRU07XAfZe/lIZ+JxhVMvOkCX8sb4kb7WELdxaU12RtkV30DeUK Q0hKWpaRbiYECY4PCaOzyKMFcrvBuuGaM6oHQYN3XhpzkGiSLtMdEpIJmxHeMpNg O+r7Io67ChIKb2ylSKjoTQY1LoZdLUA0KJE5R4j38tVyU3jsnMrK9dN2B4jZC/ul y+fOOf94v/rs2Ks8+ZymXhDzkw5fd+nC68XTz2xDBRNcVPFePV3jeNg1hOMpICFp wSQ3Mt0WVjdZr/gYr2YsmXBBoy8JN6rwoGtvUQL0E1xcW/8nqQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFvS+u4EQ4Q8aXJ+gZlWauOrV1L5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80 ODdlNGJlMC0zNDc2LTRjY2UtOTZmYS04MWFiNjI0M2E3NGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzQ4N2U0YmUwLTM0NzYtNGNjZS05 NmZhLTgxYWI2MjQzYTc0Yy80ODdlNGJlMC0zNDc2LTRjY2UtOTZmYS04MWFiNjI0 M2E3NGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXoxwwDgQCAAIwCAMGBCYC8wQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmEzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAVQNwYjx0A/vtKU9VwohGLHfj 0S10QH/rNuQFj2LK56cfgKgtIuxtz/Ysv/D+uThusi9VifxpyK23DvN4gJ+YTPW8 +l9W83Z2jADBII0Tok7ivLOjC3t1ORlaC9/iVJecLZEtSlxCQrSkuqKqPB5vSB99 YlcGmsTaHcsdablzVc+WaRNlUmCbFKrrRghZHJnZtcgQNcdGlbAqt5/vZl6MP3q/ RYPng4Hy290TaiGTuHSeZuXnEqmYurko74ilO9EAA+VHEwHxrwzFNDqL1Ahmftod 8SU7X6dneAxsLujGu4JGw0vtWizSMWcHfSkDxQf7/Gstwz3swFLeukNYPks+ -----END CERTIFICATE-----Generated at Sun Sep 20 17:54:43 2026 by rpki-client