$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4bec9805-f4ac-4adc-860b-937dd8f0711b.cer File: 4bec9805-f4ac-4adc-860b-937dd8f0711b.cer (raw, json) Hash identifier: Sn/K1C80KwpuLBZjZU0tyHzAk8FZ02yGS9h0Rc92Mfw= Subject key identifier: 37:C3:3F:15:AE:A4:C6:FC:A8:CE:89:3F:3D:25:D3:77:17:6A:9A:17 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EF8121534B3096DF90ED92100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4bec9805-f4ac-4adc-860b-937dd8f0711b/4bec9805-f4ac-4adc-860b-937dd8f0711b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4bec9805-f4ac-4adc-860b-937dd8f0711b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Aug 2026 21:25:25 +0000 Certificate not after: Tue 28 Nov 2028 22:25:25 +0000 Subordinate resources: IP: 2607:d2c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:12:15:34:b3:09:6d:f9:0e:d9:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 26 21:25:25 2026 GMT Not After : Nov 28 22:25:25 2028 GMT Subject: CN=4bec9805-f4ac-4adc-860b-937dd8f0711b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:86:b7:e3:5c:77:bd:94:e3:7a:1d:05:2d:6f: 2d:76:d4:ac:3d:a5:db:52:16:14:f5:57:df:bc:56: 30:ea:91:79:8c:be:2a:b9:55:db:48:44:ca:e8:ae: f0:1a:47:14:b5:1b:14:22:d2:c2:d5:f6:8c:3a:70: 9a:b4:22:1a:fa:64:34:4b:f8:54:ec:a8:69:d6:31: 39:f6:2d:1f:ce:c3:1a:6f:47:56:04:cc:0c:05:c9: aa:72:9f:de:99:a3:c4:9a:0a:a0:03:b3:9e:54:cb: 12:08:d0:ff:0e:89:f8:e1:7f:7b:fc:3c:04:b3:ae: b9:ec:b8:44:3b:07:2c:5d:94:d0:89:a4:0e:e1:68: 37:00:8b:d3:6e:aa:4b:eb:e6:25:21:77:41:74:f6: b9:28:27:c3:08:3a:56:bb:0d:5b:b5:bd:c6:fc:80: a3:22:ef:73:9c:e5:1d:8b:04:6f:2e:cc:d6:d9:b7: 1c:e6:e5:a9:b9:96:98:99:3b:e9:70:d1:4a:00:2c: e6:82:b7:30:eb:6c:a4:82:f2:48:98:73:2a:7e:e2: a3:1e:7d:26:11:51:09:16:1f:34:6c:cf:6a:a5:c8: 28:13:9a:1b:f5:0a:b5:3d:83:a5:b1:1e:5b:a0:09: d0:22:d3:e1:aa:d3:b1:f6:6b:01:f0:31:f3:4a:5e: a7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C3:3F:15:AE:A4:C6:FC:A8:CE:89:3F:3D:25:D3:77:17:6A:9A:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4bec9805-f4ac-4adc-860b-937dd8f0711b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4bec9805-f4ac-4adc-860b-937dd8f0711b/4bec9805-f4ac-4adc-860b-937dd8f0711b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv6: 2607:d2c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:32:a2:46:d6:2d:78:b8:b8:03:77:7d:46:2a:6a:d9:0e:8c: f7:0c:f2:11:a9:4d:93:50:c4:4a:c1:59:b4:0a:13:a1:7d:41: 16:ad:59:16:a2:30:ac:fd:b6:a7:87:b5:f1:a3:c1:55:b0:c8: 08:1b:66:b2:5d:ef:5e:94:f9:29:d3:25:99:d4:dc:60:49:5b: 8f:58:0e:6a:4a:4e:4a:89:3c:bb:08:01:e0:13:e3:d9:47:59: 3c:d0:58:45:fc:ac:98:18:9f:04:62:e8:20:51:96:ab:db:67: a0:9e:dd:3b:cb:42:6e:89:13:81:75:92:61:1d:b0:0d:ad:d5: d1:eb:d1:38:3b:a3:b3:ea:39:1f:0a:86:83:e8:0d:eb:88:79: 79:60:9d:c2:22:fb:ae:11:14:c8:35:ef:f2:09:8c:a9:b4:9a: 6c:a4:a9:3d:00:85:c6:68:7b:00:19:07:8d:94:26:34:70:d6: 25:56:23:34:06:2e:7b:a8:08:af:59:8e:a3:03:75:7b:f9:8c: af:99:21:ee:1d:6e:d7:f5:e1:da:11:41:c5:b6:cf:01:d2:06: c7:27:ac:3f:48:02:a2:5e:39:52:cd:7b:2d:d7:3c:e0:66:44: 8e:9a:e6:92:35:c0:61:70:0f:73:80:33:52:84:8c:2d:9e:37: d5:f4:bf:71 -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWE74EhU0swlt+Q7ZIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgyNjIxMjUyNVoXDTI4MTEyODIyMjUyNVowLzEtMCsGA1UEAxMk NGJlYzk4MDUtZjRhYy00YWRjLTg2MGItOTM3ZGQ4ZjA3MTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ia341x3vZTjeh0FLW8tdtSsPaXbUhYU9Vff vFYw6pF5jL4quVXbSETK6K7wGkcUtRsUItLC1faMOnCatCIa+mQ0S/hU7Khp1jE5 9i0fzsMab0dWBMwMBcmqcp/emaPEmgqgA7OeVMsSCND/Don44X97/DwEs6657LhE OwcsXZTQiaQO4Wg3AIvTbqpL6+YlIXdBdPa5KCfDCDpWuw1btb3G/ICjIu9znOUd iwRvLszW2bcc5uWpuZaYmTvpcNFKACzmgrcw62ykgvJImHMqfuKjHn0mEVEJFh80 bM9qpcgoE5ob9Qq1PYOlsR5boAnQItPhqtOx9msB8DHzSl6ndwIDAQABo4IEADCC A/wwHQYDVR0OBBYEFDfDPxWupMb8qM6JPz0l03cXapoXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80 YmVjOTgwNS1mNGFjLTRhZGMtODYwYi05MzdkZDhmMDcxMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzRiZWM5ODA1LWY0YWMtNGFkYy04 NjBiLTkzN2RkOGYwNzExYi80YmVjOTgwNS1mNGFjLTRhZGMtODYwYi05MzdkZDhm MDcxMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB9LAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBANoyokbWLXi4uAN3fUYq atkOjPcM8hGpTZNQxErBWbQKE6F9QRatWRaiMKz9tqeHtfGjwVWwyAgbZrJd716U +SnTJZnU3GBJW49YDmpKTkqJPLsIAeAT49lHWTzQWEX8rJgYnwRi6CBRlqvbZ6Ce 3TvLQm6JE4F1kmEdsA2t1dHr0Tg7o7PqOR8KhoPoDeuIeXlgncIi+64RFMg17/IJ jKm0mmykqT0AhcZoewAZB42UJjRw1iVWIzQGLnuoCK9ZjqMDdXv5jK+ZIe4dbtf1 4doRQcW2zwHSBscnrD9IAqJeOVLNey3XPOBmRI6a5pI1wGFwD3OAM1KEjC2eN9X0 v3E= -----END CERTIFICATE-----Generated at Mon Sep 21 13:06:19 2026 by rpki-client