$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b.cer File: 7e9de20f-3d15-4f2b-b264-a02ac1f40d1b.cer (raw, json) Hash identifier: p5K5ObZVDDDMugIo1znn8aSdcBdrp+x32TYZgHs50rs= Subject key identifier: 60:FF:17:A6:66:CE:A1:6F:F9:34:FE:80:08:5C:B8:A3:8E:1D:28:AB Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F21A8984AA48BD2AF16875D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Sep 2026 18:56:49 +0000 Certificate not after: Wed 13 Dec 2028 19:56:49 +0000 Subordinate resources: AS: 398880 IP: 23.249.165.0/24 IP: 23.249.167.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:21:a8:98:4a:a4:8b:d2:af:16:87:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Sep 10 18:56:49 2026 GMT Not After : Dec 13 19:56:49 2028 GMT Subject: CN=7e9de20f-3d15-4f2b-b264-a02ac1f40d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:c3:09:1e:2d:1c:99:e6:cf:f6:9a:44:7d: 0e:68:3d:bb:4c:ce:93:1d:1e:54:6e:6b:bf:c9:ca: ff:ca:6e:d3:51:b4:ad:61:6f:50:ac:1e:bd:50:b1: c6:13:bb:dd:92:28:c9:77:10:d2:23:b8:07:b7:1b: d5:b3:c9:27:fa:ee:57:38:58:41:be:6f:13:02:33: 6b:e6:92:9b:a5:66:62:9f:82:22:e6:f5:bb:38:cc: 5e:90:30:65:89:d8:03:eb:9c:b9:36:2c:7e:c0:b1: bb:e5:a9:a8:7c:34:d1:87:32:8f:08:fd:ae:49:3c: ca:91:e4:c9:26:ef:64:ba:60:a5:12:fc:20:58:86: d9:8b:b8:0d:18:6b:69:f8:61:81:7a:99:d1:9c:0d: df:6a:21:c1:d2:d2:af:3d:6c:fb:1a:ba:1d:a1:64: 53:a2:ef:ea:22:ee:d0:d5:38:10:64:f9:d6:86:aa: d5:3d:2d:9f:af:aa:f3:c4:ce:cf:80:45:79:ee:b4: ee:17:58:d0:8f:a8:1d:cf:4f:20:19:45:30:3f:ee: d4:71:73:ab:2b:63:a7:bd:bf:09:36:b9:2c:aa:5d: 2f:b4:5e:12:9d:24:4f:27:12:2a:27:98:a2:57:7c: aa:76:68:e7:22:ee:6a:6d:31:3c:fc:60:16:b6:38: f8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FF:17:A6:66:CE:A1:6F:F9:34:FE:80:08:5C:B8:A3:8E:1D:28:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 23.249.165.0/24 23.249.167.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398880 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:1c:84:fe:d9:90:56:c1:1a:37:c8:2d:67:51:a8:6c:5c:27: de:5d:62:2f:5e:1e:8a:de:02:c0:ee:a8:2b:e5:ea:94:7b:44: 62:e6:2b:30:06:c1:32:71:be:4a:ad:a5:a9:f5:29:f1:ee:37: c6:56:af:e9:00:35:3c:0f:17:f7:d9:64:29:d3:a8:5f:ea:6c: 06:5e:1a:39:cf:25:2b:27:23:7d:4b:f1:0e:73:39:66:b2:87: 10:5f:a4:32:e8:cb:16:ed:76:2b:b4:d3:51:29:f6:72:84:44: a1:d6:6a:71:48:59:e3:9a:40:99:44:7b:93:a3:1a:c6:81:b0: 68:ff:1d:a3:68:23:01:8d:09:fa:de:8f:52:d9:30:a6:bb:c1: e4:4c:21:57:80:a1:b3:80:c7:61:a2:3b:da:f3:b7:fc:df:27: 9e:92:23:94:de:7a:8f:6b:d5:c7:08:d9:bf:55:92:12:ed:d8: 0f:65:dc:dd:a8:ae:c4:65:6b:76:d4:44:0f:77:3c:9a:b0:78: 46:06:53:63:64:23:a1:36:99:bb:55:1a:35:2f:9b:06:fe:46: 4e:44:f3:03:cb:23:7c:3e:e2:b6:f3:5a:fe:0b:73:9f:90:97: 10:9a:c0:7a:15:ef:61:fb:12:a3:01:84:ec:96:ff:44:eb:7b: 26:89:e2:12 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE8hqJhKpIvSrxaHXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDkxMDE4NTY0OVoXDTI4MTIxMzE5NTY0OVowLzEtMCsGA1UEAxMk N2U5ZGUyMGYtM2QxNS00ZjJiLWIyNjQtYTAyYWMxZjQwZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIjDCR4tHJnmz/aaRH0OaD27TM6THR5Ubmu/ ycr/ym7TUbStYW9QrB69ULHGE7vdkijJdxDSI7gHtxvVs8kn+u5XOFhBvm8TAjNr 5pKbpWZin4Ii5vW7OMxekDBlidgD65y5Nix+wLG75amofDTRhzKPCP2uSTzKkeTJ Ju9kumClEvwgWIbZi7gNGGtp+GGBepnRnA3faiHB0tKvPWz7GrodoWRTou/qIu7Q 1TgQZPnWhqrVPS2fr6rzxM7PgEV57rTuF1jQj6gdz08gGUUwP+7UcXOrK2Onvb8J Nrksql0vtF4SnSRPJxIqJ5iiV3yqdmjnIu5qbTE8/GAWtjj4MQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFGD/F6ZmzqFv+TT+gAhcuKOOHSirMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi83 ZTlkZTIwZi0zZDE1LTRmMmItYjI2NC1hMDJhYzFmNDBkMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzdlOWRlMjBmLTNkMTUtNGYyYi1i MjY0LWEwMmFjMWY0MGQxYi83ZTlkZTIwZi0zZDE1LTRmMmItYjI2NC1hMDJhYzFm NDBkMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAAX+aUDBAAX+acwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhYgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHkchP7ZkFbBGjfILWdRqGxcJ95dYi9eHoreAsDu qCvl6pR7RGLmKzAGwTJxvkqtpan1KfHuN8ZWr+kANTwPF/fZZCnTqF/qbAZeGjnP JSsnI31L8Q5zOWayhxBfpDLoyxbtdiu001Ep9nKERKHWanFIWeOaQJlEe5OjGsaB sGj/HaNoIwGNCfrej1LZMKa7weRMIVeAobOAx2GiO9rzt/zfJ56SI5Teeo9r1ccI 2b9VkhLt2A9l3N2orsRla3bURA93PJqweEYGU2NkI6E2mbtVGjUvmwb+Rk5E8wPL I3w+4rbzWv4Lc5+QlxCawHoV72H7EqMBhOyW/0TreyaJ4hI= -----END CERTIFICATE-----Generated at Mon Sep 21 16:57:25 2026 by rpki-client