$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d.cer File: cf31a15f-52b3-4240-9d85-0433b7d5171d.cer (raw, json) Hash identifier: zH0H7/oCowCxLum/TcPu8advyHQauoWM+Je744A+v6Q= Subject key identifier: 9F:CF:3B:88:EA:F9:9B:CA:F6:B9:7D:46:EF:AF:C7:DD:02:C8:2F:16 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584E98E5E4E8FA7055D9CC128580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/cf31a15f-52b3-4240-9d85-0433b7d5171d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Jul 2026 19:14:35 +0000 Certificate not after: Wed 25 Oct 2028 19:14:35 +0000 Subordinate resources: IP: 23.246.152.0/22 IP: 2602:f35c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:98:e5:e4:e8:fa:70:55:d9:cc:12:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Jul 23 19:14:35 2026 GMT Not After : Oct 25 19:14:35 2028 GMT Subject: CN=cf31a15f-52b3-4240-9d85-0433b7d5171d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:35:5b:7e:2a:99:f3:cc:19:39:07:ca:bb:54: ca:96:8e:ba:3f:32:06:6f:06:fc:2a:91:a8:8c:ec: ca:19:ab:8c:e5:59:13:1b:42:60:a6:1c:20:d8:e3: b8:34:71:06:7b:2f:f4:2d:a2:64:d5:67:90:30:8d: 02:66:71:d1:81:6b:d4:1f:aa:61:d6:6a:41:12:ea: 75:04:25:98:0b:5a:eb:08:71:b5:81:23:1d:6b:5c: 99:24:ac:b1:39:c4:55:5e:31:8b:fb:2b:4e:84:4f: 53:b2:9c:05:09:d8:24:cc:76:34:93:f7:4e:ca:7b: ea:f3:a4:fb:e6:f2:9f:dd:89:3d:4f:7b:96:12:72: 7a:f6:14:d0:cf:00:36:e5:94:b8:02:8d:c4:53:73: d0:20:04:bf:09:b5:b7:b6:1a:b4:e5:fe:9c:29:01: f5:22:3e:06:54:45:4a:b2:6b:f2:cf:fb:b8:a0:0d: d4:92:a7:ce:31:6c:92:71:d7:21:93:8c:e6:f8:cf: c0:6a:e2:92:31:87:af:48:b8:74:cb:7d:74:c7:b0: af:cd:81:2a:49:90:2a:95:a2:b6:a2:c1:a1:72:26: e5:54:77:f0:c9:7c:88:ce:bc:c7:fc:98:b0:ff:b6: 56:40:74:f8:92:b2:47:2c:4c:d2:ff:7b:c8:fa:0f: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CF:3B:88:EA:F9:9B:CA:F6:B9:7D:46:EF:AF:C7:DD:02:C8:2F:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/cf31a15f-52b3-4240-9d85-0433b7d5171d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 23.246.152.0/22 IPv6: 2602:f35c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:cb:59:d5:b9:4e:c5:af:29:db:f8:d1:77:92:9e:b3:5c:9d: a0:e9:f2:b6:ed:12:6e:97:48:77:39:f8:ca:1c:1f:0b:33:f6: 1d:b9:77:84:8c:55:f3:21:03:0f:4e:d4:6b:e9:e9:80:58:55: dd:96:f8:f2:d8:2a:f4:1d:7c:5f:0f:a0:ae:59:cc:12:d6:26: 2a:d7:44:c6:46:3f:e0:c4:92:d6:c7:c2:07:82:4d:13:3b:36: a5:c1:47:94:9d:e1:92:ee:2e:07:3c:76:eb:69:b7:16:50:6c: 00:a7:ee:c3:87:76:36:b8:e5:5d:27:1e:72:ca:97:9f:e5:30: 0b:b3:80:dd:fa:76:bd:a2:9f:8f:1c:18:67:cf:de:88:64:31: 5b:ec:69:d5:a1:31:a5:ed:5e:38:50:2c:9e:a2:fb:c2:c5:32: 5c:f3:52:5f:7b:39:59:d3:0c:9f:e3:c8:0f:be:b0:83:ba:ac: ec:a9:0a:77:04:3a:49:e7:d5:e2:19:07:71:96:28:b3:e2:38: 5d:07:5c:92:be:2c:8f:b4:a7:aa:58:db:7d:9a:79:b1:a4:a3: 2d:9a:52:09:af:e0:d1:81:21:4b:8f:30:12:9d:e5:30:d4:42: cb:e1:1f:6e:ed:94:dd:98:fa:7a:b4:5c:c0:a9:c6:78:b2:84: 59:9f:84:10 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE6Y5eTo+nBV2cwShYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDcyMzE5MTQzNVoXDTI4MTAyNTE5MTQzNVowLzEtMCsGA1UEAxMk Y2YzMWExNWYtNTJiMy00MjQwLTlkODUtMDQzM2I3ZDUxNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzVbfiqZ88wZOQfKu1TKlo66PzIGbwb8KpGo jOzKGauM5VkTG0Jgphwg2OO4NHEGey/0LaJk1WeQMI0CZnHRgWvUH6ph1mpBEup1 BCWYC1rrCHG1gSMda1yZJKyxOcRVXjGL+ytOhE9TspwFCdgkzHY0k/dOynvq86T7 5vKf3Yk9T3uWEnJ69hTQzwA25ZS4Ao3EU3PQIAS/CbW3thq05f6cKQH1Ij4GVEVK smvyz/u4oA3UkqfOMWyScdchk4zm+M/AauKSMYevSLh0y310x7CvzYEqSZAqlaK2 osGhciblVHfwyXyIzrzH/Jiw/7ZWQHT4krJHLEzS/3vI+g/UuwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFJ/PO4jq+ZvK9rl9Ru+vx90CyC8WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9j ZjMxYTE1Zi01MmIzLTQyNDAtOWQ4NS0wNDMzYjdkNTE3MWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2NmMzFhMTVmLTUyYjMtNDI0MC05 ZDg1LTA0MzNiN2Q1MTcxZC9jZjMxYTE1Zi01MmIzLTQyNDAtOWQ4NS0wNDMzYjdk NTE3MWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAIX9pgwDgQCAAIwCAMGBCYC81wAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AK3LWdW5TsWvKdv40XeSnrNcnaDp8rbtEm6XSHc5+MocHwsz9h25d4SMVfMhAw9O 1Gvp6YBYVd2W+PLYKvQdfF8PoK5ZzBLWJirXRMZGP+DEktbHwgeCTRM7NqXBR5Sd 4ZLuLgc8dutptxZQbACn7sOHdja45V0nHnLKl5/lMAuzgN36dr2in48cGGfP3ohk MVvsadWhMaXtXjhQLJ6i+8LFMlzzUl97OVnTDJ/jyA++sIO6rOypCncEOknn1eIZ B3GWKLPiOF0HXJK+LI+0p6pY232aebGkoy2aUgmv4NGBIUuPMBKd5TDUQsvhH27t lN2Y+nq0XMCpxniyhFmfhBA= -----END CERTIFICATE-----Generated at Tue Jul 28 15:39:01 2026 by rpki-client