$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5affb4b-d53f-484f-9a5b-3b60dfa33242.cer File: a5affb4b-d53f-484f-9a5b-3b60dfa33242.cer (raw, json) Hash identifier: J3IwfU2F8wK0OncRawDM6fyic5X3IyjMOniB5PveTtM= Subject key identifier: 1C:6A:CF:9C:FD:A1:D6:34:5B:CB:2A:FD:D9:E5:88:6D:64:CC:33:74 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584FACF78CF50CF1BF0B55F95A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5affb4b-d53f-484f-9a5b-3b60dfa33242/a5affb4b-d53f-484f-9a5b-3b60dfa33242.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5affb4b-d53f-484f-9a5b-3b60dfa33242/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Oct 2026 16:33:16 +0000 Certificate not after: Wed 15 Nov 2028 20:15:31 +0000 Subordinate resources: AS: 402916 IP: 198.134.239.0/24 IP: 2602:f284::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ac:f7:8c:f5:0c:f1:bf:0b:55:f9:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Oct 30 16:33:16 2026 GMT Not After : Nov 15 20:15:31 2028 GMT Subject: CN=a5affb4b-d53f-484f-9a5b-3b60dfa33242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9b:a2:df:a5:e6:f4:87:c0:0b:b6:e3:8f:80: a7:54:dc:40:0a:54:11:7e:5a:a8:1e:50:d0:51:55: bc:2d:71:7b:39:74:69:a6:32:41:90:d8:1b:e2:fe: 4d:14:2b:3b:62:b1:be:89:ba:c8:af:f5:2b:5c:8b: b6:fb:11:aa:3e:53:7d:64:6a:3f:5e:70:6e:6e:ed: e4:f7:99:22:27:67:a8:a1:51:4e:a6:2a:07:00:ac: 46:8c:49:90:be:ac:5c:7a:e9:f1:c5:d1:c2:4a:61: 06:02:d3:f6:55:4c:98:42:ce:db:ba:59:41:00:4c: 21:95:e1:57:4f:ff:f8:1f:1a:ef:38:f7:11:27:56: a4:24:0c:b6:72:81:28:7c:a3:d5:b6:31:0d:e1:dc: 80:5a:02:88:67:16:e8:05:af:ed:30:62:4a:f8:ed: 62:3f:10:96:3c:21:e0:63:08:bf:6a:fb:f4:31:d3: 09:5c:40:60:89:6c:65:82:56:72:47:77:c8:d6:3b: 1d:4c:ad:d9:c0:28:5e:79:6d:15:42:45:c9:16:cf: 20:09:3d:84:1d:03:b9:66:1b:84:d4:eb:ec:f4:fd: ba:c6:e0:f0:83:8e:e7:95:0a:99:c6:1e:ef:bd:a7: a0:d7:bd:60:9d:fd:18:84:f2:20:0c:ed:d9:ad:c7: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6A:CF:9C:FD:A1:D6:34:5B:CB:2A:FD:D9:E5:88:6D:64:CC:33:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5affb4b-d53f-484f-9a5b-3b60dfa33242/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5affb4b-d53f-484f-9a5b-3b60dfa33242/a5affb4b-d53f-484f-9a5b-3b60dfa33242.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 198.134.239.0/24 IPv6: 2602:f284::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402916 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:45:6d:3d:0c:94:4f:0f:d7:eb:43:75:07:7a:5a:12:4a:2e: e3:5b:f8:bf:8a:b3:ff:e3:e9:3a:93:77:ed:dd:45:f5:22:6f: 56:f3:46:64:26:b9:61:35:0d:b2:98:e5:3a:41:3c:ad:92:18: bf:e9:66:84:ee:c2:a1:57:2e:c5:4b:15:3b:b5:d5:7e:ef:fb: ad:b8:7e:d9:61:a7:a1:e4:12:ac:93:6b:e1:10:4d:d6:32:08: 2d:88:5c:9f:90:87:6d:e7:20:8f:d2:24:04:e3:0a:05:b4:8c: f5:d4:27:1b:5f:e5:2d:be:11:19:7d:38:0f:cf:36:52:a5:e8: 49:15:e7:47:b7:d8:de:60:b5:c4:33:9e:d3:53:bd:54:3f:59: c9:d8:8f:88:1c:f6:16:cd:10:d4:4e:2a:90:a2:45:8c:ab:b6: 36:ea:5c:06:8e:8c:0c:06:bb:00:f3:53:71:8c:f7:a1:ee:fa: ee:b2:ed:d7:13:52:88:ff:9a:76:c1:4d:b2:30:43:6e:c0:79: f2:b5:9c:fc:9f:65:74:9d:44:42:bc:9f:68:ce:39:29:38:46: 36:e2:e7:55:3b:ba:34:d0:d4:0f:e1:17:e8:45:07:9c:c9:19: 1f:14:1a:b1:e1:aa:90:7f:38:76:91:95:97:db:39:84:00:14: 9e:20:8f:67 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+s94z1DPG/C1X5WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MTAzMDE2MzMxNloXDTI4MTExNTIwMTUzMVowLzEtMCsGA1UEAxMk YTVhZmZiNGItZDUzZi00ODRmLTlhNWItM2I2MGRmYTMzMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJui36Xm9IfAC7bjj4CnVNxAClQRflqoHlDQ UVW8LXF7OXRppjJBkNgb4v5NFCs7YrG+ibrIr/UrXIu2+xGqPlN9ZGo/XnBubu3k 95kiJ2eooVFOpioHAKxGjEmQvqxceunxxdHCSmEGAtP2VUyYQs7bullBAEwhleFX T//4HxrvOPcRJ1akJAy2coEofKPVtjEN4dyAWgKIZxboBa/tMGJK+O1iPxCWPCHg Ywi/avv0MdMJXEBgiWxlglZyR3fI1jsdTK3ZwCheeW0VQkXJFs8gCT2EHQO5ZhuE 1Ovs9P26xuDwg47nlQqZxh7vvaeg171gnf0YhPIgDO3Zrcf1uwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBxqz5z9odY0W8sq/dnliG1kzDN0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9h NWFmZmI0Yi1kNTNmLTQ4NGYtOWE1Yi0zYjYwZGZhMzMyNDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2E1YWZmYjRiLWQ1M2YtNDg0Zi05 YTViLTNiNjBkZmEzMzI0Mi9hNWFmZmI0Yi1kNTNmLTQ4NGYtOWE1Yi0zYjYwZGZh MzMyNDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGhu8wDgQCAAIwCAMGACYC8oQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYl5DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC0RW09DJRPD9frQ3UHeloSSi7j W/i/irP/4+k6k3ft3UX1Im9W80ZkJrlhNQ2ymOU6QTytkhi/6WaE7sKhVy7FSxU7 tdV+7/utuH7ZYaeh5BKsk2vhEE3WMggtiFyfkIdt5yCP0iQE4woFtIz11CcbX+Ut vhEZfTgPzzZSpehJFedHt9jeYLXEM57TU71UP1nJ2I+IHPYWzRDUTiqQokWMq7Y2 6lwGjowMBrsA81NxjPeh7vrusu3XE1KI/5p2wU2yMENuwHnytZz8n2V0nURCvJ9o zjkpOEY24udVO7o00NQP4RfoRQecyRkfFBqx4aqQfzh2kZWX2zmEABSeII9n -----END CERTIFICATE-----Generated at Thu Nov 5 04:34:49 2026 by rpki-client