$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/836a8cb9-edbf-4f92-9c9e-fd6e95e08d4b.cer File: 836a8cb9-edbf-4f92-9c9e-fd6e95e08d4b.cer (raw, json) Hash identifier: ZVnof30IzlJY6c/muOT2sSqlbcHmUUbtL1x2rHHqGRA= Subject key identifier: 69:31:72:1C:4C:7A:D2:3A:38:D8:1D:4E:38:70:ED:0B:EB:EE:D5:73 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F24F6854295306F133E7F0C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/836a8cb9-edbf-4f92-9c9e-fd6e95e08d4b/836a8cb9-edbf-4f92-9c9e-fd6e95e08d4b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/836a8cb9-edbf-4f92-9c9e-fd6e95e08d4b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 11 Sep 2026 23:21:16 +0000 Certificate not after: Thu 07 Dec 2028 16:44:45 +0000 Subordinate resources: AS: 394582 IP: 204.19.134.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:24:f6:85:42:95:30:6f:13:3e:7f:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Sep 11 23:21:16 2026 GMT Not After : Dec 7 16:44:45 2028 GMT Subject: CN=836a8cb9-edbf-4f92-9c9e-fd6e95e08d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:23:a7:de:6c:f8:d2:1e:28:a6:e8:51:98: 87:3c:fb:ea:12:06:0d:32:b6:3c:bd:c8:1d:df:85: d4:fb:e6:d1:b1:54:b2:a3:dc:2b:0f:86:ce:ba:07: 31:ed:c9:86:92:fd:23:70:59:8e:6d:2b:1f:db:9c: 06:d4:0c:56:d2:06:af:20:ef:96:b2:6f:5e:a1:bd: ca:46:d2:ba:9a:5c:48:12:58:ee:c1:60:27:82:93: 32:ad:59:4f:20:7d:d7:31:25:bf:77:4c:cd:c7:2d: 37:b8:6e:de:17:83:ad:a2:68:52:00:83:d2:72:14: f5:63:0d:2f:05:9f:1a:29:0b:32:91:59:ee:df:58: 39:84:25:d4:2f:61:e3:0b:a7:ae:04:98:de:e9:81: 8e:8f:9d:46:fd:9b:98:f7:13:42:6b:05:a4:3c:65: 4c:a0:8b:ba:b7:c2:cd:c4:65:bf:80:91:f5:9e:4b: 1a:15:c6:70:7f:dd:6f:95:e7:d1:cb:6b:a9:eb:7b: 51:cd:fb:e4:ec:a6:4a:ad:6b:37:76:bd:a7:97:ea: da:6e:c1:95:73:4f:bf:1f:98:f4:2e:ad:c8:50:17: 18:14:39:af:32:a2:cd:11:31:5b:fa:17:4e:ff:0d: b8:e2:c2:76:0f:96:d7:cd:53:17:31:de:d6:3d:ad: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:31:72:1C:4C:7A:D2:3A:38:D8:1D:4E:38:70:ED:0B:EB:EE:D5:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/836a8cb9-edbf-4f92-9c9e-fd6e95e08d4b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/836a8cb9-edbf-4f92-9c9e-fd6e95e08d4b/836a8cb9-edbf-4f92-9c9e-fd6e95e08d4b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 204.19.134.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394582 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9b:c0:bf:97:0f:c0:e4:21:71:c1:fa:69:41:3d:44:97:d1: ed:39:07:e1:8e:0a:8f:4e:36:6a:69:8f:fd:06:61:b7:4e:69: 00:96:65:f4:4d:3b:43:18:c6:99:7a:04:e5:5c:94:1a:be:8a: 38:cc:a8:1f:b2:53:41:20:fd:cb:89:fa:18:55:b4:32:e0:ab: f3:e4:ce:e0:09:97:92:e0:59:29:ed:04:ef:32:6c:e5:75:f1: 44:1c:ae:69:6a:da:76:82:8b:57:d6:27:89:d8:39:0f:0e:3a: 8e:3a:8b:05:4d:b0:d8:cc:28:e8:37:7e:30:bd:6b:4c:a5:65: 42:29:a9:fe:e0:fd:1f:25:4f:c5:77:80:52:be:e5:a6:c2:2c: 24:66:68:97:22:81:3f:64:a9:97:8e:cf:4b:25:f7:b9:ad:a8: c9:83:4d:a4:ba:1d:d9:a5:75:53:50:84:e2:48:7a:29:d4:92: 92:d0:44:55:0a:1e:ba:ac:24:16:97:00:a5:e0:1b:ba:7c:eb: 67:63:ad:94:e5:f0:3c:5d:f0:5a:b3:6b:0d:0b:50:ae:c9:a2: 0c:e4:8c:fd:c3:1d:f6:9c:07:e1:dd:f7:9a:54:54:26:9d:4e: e3:ed:c6:3f:3e:b7:5f:4f:05:a7:c5:dc:72:6a:28:18:27:41: eb:c0:63:bd -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE8k9oVClTBvEz5/DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDkxMTIzMjExNloXDTI4MTIwNzE2NDQ0NVowLzEtMCsGA1UEAxMk ODM2YThjYjktZWRiZi00ZjkyLTljOWUtZmQ2ZTk1ZTA4ZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoojp95s+NIeKKboUZiHPPvqEgYNMrY8vcgd 34XU++bRsVSyo9wrD4bOugcx7cmGkv0jcFmObSsf25wG1AxW0gavIO+Wsm9eob3K RtK6mlxIEljuwWAngpMyrVlPIH3XMSW/d0zNxy03uG7eF4OtomhSAIPSchT1Yw0v BZ8aKQsykVnu31g5hCXUL2HjC6euBJje6YGOj51G/ZuY9xNCawWkPGVMoIu6t8LN xGW/gJH1nksaFcZwf91vlefRy2up63tRzfvk7KZKrWs3dr2nl+rabsGVc0+/H5j0 Lq3IUBcYFDmvMqLNETFb+hdO/w244sJ2D5bXzVMXMd7WPa2NswIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFGkxchxMetI6ONgdTjhw7Qvr7tVzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi84 MzZhOGNiOS1lZGJmLTRmOTItOWM5ZS1mZDZlOTVlMDhkNGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzgzNmE4Y2I5LWVkYmYtNGY5Mi05 YzllLWZkNmU5NWUwOGQ0Yi84MzZhOGNiOS1lZGJmLTRmOTItOWM5ZS1mZDZlOTVl MDhkNGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADME4YwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgVWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFubwL+XD8DkIXHB+mlBPUSX0e05B+GOCo9ONmppj/0GYbdO aQCWZfRNO0MYxpl6BOVclBq+ijjMqB+yU0Eg/cuJ+hhVtDLgq/PkzuAJl5LgWSnt BO8ybOV18UQcrmlq2naCi1fWJ4nYOQ8OOo46iwVNsNjMKOg3fjC9a0ylZUIpqf7g /R8lT8V3gFK+5abCLCRmaJcigT9kqZeOz0sl97mtqMmDTaS6HdmldVNQhOJIeinU kpLQRFUKHrqsJBaXAKXgG7p862djrZTl8Dxd8Fqzaw0LUK7JogzkjP3DHfacB+Hd 95pUVCadTuPtxj8+t19PBafF3HJqKBgnQevAY70= -----END CERTIFICATE-----Generated at Sun Sep 20 21:07:58 2026 by rpki-client