$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a41f86-a816-4f07-9403-e93debf3ffac.cer File: d2a41f86-a816-4f07-9403-e93debf3ffac.cer (raw, json) Hash identifier: pYMdfCzCUj+GAW9+6tCYdl388WakTtABOVD/HlQIER4= Subject key identifier: 82:01:5A:11:AE:92:A9:54:9B:2F:98:36:41:09:85:E2:2E:1D:86:D7 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F0DADD27D9770E0CD16FA3C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a41f86-a816-4f07-9403-e93debf3ffac/d2a41f86-a816-4f07-9403-e93debf3ffac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a41f86-a816-4f07-9403-e93debf3ffac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Sep 2026 15:11:11 +0000 Certificate not after: Wed 06 Dec 2028 16:11:11 +0000 Subordinate resources: AS: 402975 IP: 2602:f2f3::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:ad:d2:7d:97:70:e0:cd:16:fa:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Sep 3 15:11:11 2026 GMT Not After : Dec 6 16:11:11 2028 GMT Subject: CN=d2a41f86-a816-4f07-9403-e93debf3ffac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:64:c3:29:b0:0f:30:7b:9e:6c:0d:8b:8b:34: 11:f7:e1:c1:44:3b:74:2f:31:f9:30:b1:15:06:de: 30:78:45:2d:1d:02:f1:7b:47:1a:f7:aa:72:6a:64: a5:e6:39:5e:b5:c6:ad:ac:f7:f6:5d:e9:f1:65:17: 63:1b:02:40:98:0e:8d:cf:44:8a:db:69:32:37:84: 87:60:89:d6:2b:9e:ad:9c:ab:ae:4f:ad:41:5b:95: ac:fb:42:41:c4:27:22:b1:79:a1:15:cc:09:16:be: a9:d0:21:75:6e:95:7a:e6:c1:fb:83:f5:e5:6f:a5: 15:cf:1c:40:67:2c:50:73:95:0e:cf:c3:dd:f9:38: 72:0a:59:92:17:74:d1:95:ea:5b:b9:2b:e3:7f:72: 45:ac:f8:c8:bc:e0:fb:97:59:de:f1:d9:3b:cb:13: 1b:90:c4:f8:0b:d8:3a:24:d4:05:14:51:51:ce:ae: d8:ae:61:9a:71:cc:ba:9c:1e:4f:6c:62:cc:09:71: cf:93:8b:e2:7b:e9:8d:b7:99:b4:a2:91:85:c4:ec: b1:c3:23:4b:91:bf:b6:c1:55:69:1d:c7:b6:da:92: 33:2e:2c:8b:da:23:f2:ec:7f:2d:6c:c9:9b:ed:0e: 13:46:89:85:e2:d0:f6:10:d9:61:57:e3:00:e3:7f: 66:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:01:5A:11:AE:92:A9:54:9B:2F:98:36:41:09:85:E2:2E:1D:86:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a41f86-a816-4f07-9403-e93debf3ffac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d2a41f86-a816-4f07-9403-e93debf3ffac/d2a41f86-a816-4f07-9403-e93debf3ffac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv6: 2602:f2f3::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402975 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6d:2d:d7:4c:70:a9:08:23:d5:f0:8d:b0:c6:c6:ed:cc:ae: 49:e5:7d:ea:4a:1e:89:34:e8:65:67:9c:3d:1b:30:d0:fc:7f: d3:6d:f0:1c:f8:27:01:c4:fe:72:f9:f6:7b:f9:7a:79:f9:72: 25:9f:0a:5f:fd:36:ed:a5:b0:9e:a8:b2:a2:bb:7a:b4:c0:91: 61:50:11:28:1a:13:91:85:a7:fc:5c:58:0c:ce:3b:f6:66:47: 95:19:b7:fe:b4:40:52:48:2a:d7:30:b6:60:05:10:9b:43:d9: b2:59:7a:52:9c:68:83:0b:7f:50:1c:88:a9:d7:fc:ab:68:d5: 2e:83:93:38:cf:2f:c6:0a:8a:91:29:87:a1:25:53:56:83:a7: 7f:3a:ac:3c:b8:76:c8:53:1e:85:75:8f:a5:f6:2a:a7:68:25: bf:4d:73:80:5e:7d:7c:b5:4c:df:14:b8:85:e4:d3:93:17:eb: cd:52:c8:eb:5c:4b:b5:4a:5f:be:28:47:7e:f7:95:82:a6:1c: 00:b2:20:15:85:41:f3:ac:d9:4d:ee:c8:0f:5d:44:73:45:f5: 22:39:03:ee:c1:e4:70:8c:38:58:8c:87:72:0b:07:ab:6e:5d: fb:a6:29:8f:3a:6a:5a:d7:14:ac:f6:48:51:32:87:a5:23:cc: d6:91:4c:41 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE8NrdJ9l3DgzRb6PIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDkwMzE1MTExMVoXDTI4MTIwNjE2MTExMVowLzEtMCsGA1UEAxMk ZDJhNDFmODYtYTgxNi00ZjA3LTk0MDMtZTkzZGViZjNmZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GTDKbAPMHuebA2LizQR9+HBRDt0LzH5MLEV Bt4weEUtHQLxe0ca96pyamSl5jletcatrPf2XenxZRdjGwJAmA6Nz0SK22kyN4SH YInWK56tnKuuT61BW5Ws+0JBxCcisXmhFcwJFr6p0CF1bpV65sH7g/Xlb6UVzxxA ZyxQc5UOz8Pd+ThyClmSF3TRlepbuSvjf3JFrPjIvOD7l1ne8dk7yxMbkMT4C9g6 JNQFFFFRzq7YrmGaccy6nB5PbGLMCXHPk4vie+mNt5m0opGFxOyxwyNLkb+2wVVp Hce22pIzLiyL2iPy7H8tbMmb7Q4TRomF4tD2ENlhV+MA439muQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFIIBWhGukqlUmy+YNkEJheIuHYbXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9k MmE0MWY4Ni1hODE2LTRmMDctOTQwMy1lOTNkZWJmM2ZmYWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2QyYTQxZjg2LWE4MTYtNGYwNy05 NDAzLWU5M2RlYmYzZmZhYy9kMmE0MWY4Ni1hODE2LTRmMDctOTQwMy1lOTNkZWJm M2ZmYWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvLzADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGJh8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAJ20t10xwqQgj1fCNsMbG7cyuSeV96koeiTToZWecPRsw 0Px/023wHPgnAcT+cvn2e/l6eflyJZ8KX/027aWwnqiyort6tMCRYVARKBoTkYWn /FxYDM479mZHlRm3/rRAUkgq1zC2YAUQm0PZsll6Upxogwt/UByIqdf8q2jVLoOT OM8vxgqKkSmHoSVTVoOnfzqsPLh2yFMehXWPpfYqp2glv01zgF59fLVM3xS4heTT kxfrzVLI61xLtUpfvihHfveVgqYcALIgFYVB86zZTe7ID11Ec0X1IjkD7sHkcIw4 WIyHcgsHq25d+6YpjzpqWtcUrPZIUTKHpSPM1pFMQQ== -----END CERTIFICATE-----Generated at Sun Sep 20 19:20:59 2026 by rpki-client