$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f78f7850-fdd9-45e8-9b25-02262f27109e.cer File: f78f7850-fdd9-45e8-9b25-02262f27109e.cer (raw, json) Hash identifier: yZwds8QEapUGIsnW4yXqUs7g3lrvRCrsuZhxD+2qWE0= Subject key identifier: 8B:F0:3F:27:1F:1A:55:7C:62:3B:14:3A:D6:71:E2:23:B2:69:A9:A9 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F2A37232AFF515CDF5FAF8E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f78f7850-fdd9-45e8-9b25-02262f27109e/f78f7850-fdd9-45e8-9b25-02262f27109e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f78f7850-fdd9-45e8-9b25-02262f27109e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 13 Sep 2026 20:30:30 +0000 Certificate not after: Sat 16 Dec 2028 21:30:30 +0000 Subordinate resources: AS: 22695 IP: 2620:38:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:37:23:2a:ff:51:5c:df:5f:af:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Sep 13 20:30:30 2026 GMT Not After : Dec 16 21:30:30 2028 GMT Subject: CN=f78f7850-fdd9-45e8-9b25-02262f27109e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:71:eb:96:9b:52:be:1e:a4:4e:74:33:af: a7:66:67:2e:1f:de:36:a2:07:3f:bc:ed:86:4b:9c: 78:8b:4f:a9:a0:f1:7b:43:4e:47:1c:78:c8:48:6e: af:49:be:ad:12:39:af:f0:8a:4b:f8:fb:53:d5:d0: 88:d7:74:91:ac:bb:38:7f:0c:a4:e6:9d:96:28:6c: 4f:6e:ca:4f:b7:20:e3:78:f4:14:d3:86:68:d2:33: 19:4b:5f:ec:04:d4:78:fc:91:83:81:42:8e:82:f1: de:5f:2b:25:95:16:85:42:36:a1:68:da:89:bd:b8: 60:fa:d3:b3:7d:11:f0:f2:e5:be:65:f1:94:18:54: 73:0e:bc:19:c0:53:a1:3a:59:10:74:47:b3:9d:50: de:b7:ef:84:92:f4:93:ab:8b:12:3e:3a:af:22:7b: 40:2c:da:1e:2b:85:4e:96:d6:51:a9:a9:1b:78:2e: a1:37:c2:93:af:31:3a:ea:e8:1e:41:58:5f:a9:0f: 28:86:a0:f6:7a:fb:b7:2e:4e:64:40:a2:50:55:38: 33:44:f2:76:5b:73:70:c6:33:f4:2b:b0:16:75:45: 0a:88:07:de:e6:0b:9b:3f:07:19:c4:24:b8:ea:72: 76:7b:b8:83:87:7a:2e:36:ca:2b:f4:27:2c:15:d8: af:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F0:3F:27:1F:1A:55:7C:62:3B:14:3A:D6:71:E2:23:B2:69:A9:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f78f7850-fdd9-45e8-9b25-02262f27109e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f78f7850-fdd9-45e8-9b25-02262f27109e/f78f7850-fdd9-45e8-9b25-02262f27109e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv6: 2620:38:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22695 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:3f:21:34:8d:9b:3a:6f:4c:d9:d6:56:ad:c7:ce:5e:31:1e: 4c:ba:7c:2b:dc:8f:54:e9:09:28:b2:df:52:51:00:0f:16:f8: 4e:6f:a4:88:5f:85:a5:4e:e0:c2:43:92:d8:74:c4:2c:ba:aa: f2:6d:7f:fb:66:56:96:25:fa:4b:9a:26:bd:00:6d:5f:1a:e5: b7:92:08:83:1e:61:1a:ee:72:43:7b:0b:9e:8a:3b:57:fb:81: ce:5e:f0:d9:fb:57:89:1b:ec:e7:f6:50:bd:6f:d3:fe:09:71: ae:70:58:77:61:4e:8e:b8:cc:ef:d9:47:5c:78:dd:af:38:b0: 28:ae:2e:70:1e:3f:71:a7:1d:1e:57:88:df:c4:f8:45:11:26: 59:86:1d:a2:1c:f1:64:39:0e:cc:09:b4:85:b1:5a:20:90:b6: 76:c6:f4:8e:82:f2:5d:57:d9:10:99:2f:ae:a0:31:95:4a:23: 92:6a:7c:72:9d:e8:56:32:37:19:b3:57:ad:c7:3a:bb:20:a1: c6:d7:b6:47:fc:cb:a9:c5:72:ce:1a:a3:14:e1:ce:68:42:a8: 41:0a:d2:d1:50:e0:d0:56:73:fa:a1:60:af:cf:4d:2c:19:c0: a9:5b:a1:7c:ac:37:f9:57:8d:aa:f0:14:05:22:a8:dd:73:fd: ae:e8:e4:9c -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE8qNyMq/1Fc31+vjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDkxMzIwMzAzMFoXDTI4MTIxNjIxMzAzMFowLzEtMCsGA1UEAxMk Zjc4Zjc4NTAtZmRkOS00NWU4LTliMjUtMDIyNjJmMjcxMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQBx65abUr4epE50M6+nZmcuH942ogc/vO2G S5x4i0+poPF7Q05HHHjISG6vSb6tEjmv8IpL+PtT1dCI13SRrLs4fwyk5p2WKGxP bspPtyDjePQU04Zo0jMZS1/sBNR4/JGDgUKOgvHeXysllRaFQjahaNqJvbhg+tOz fRHw8uW+ZfGUGFRzDrwZwFOhOlkQdEeznVDet++EkvSTq4sSPjqvIntALNoeK4VO ltZRqakbeC6hN8KTrzE66ugeQVhfqQ8ohqD2evu3Lk5kQKJQVTgzRPJ2W3NwxjP0 K7AWdUUKiAfe5gubPwcZxCS46nJ2e7iDh3ouNsor9CcsFdivrwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFIvwPycfGlV8YjsUOtZx4iOyaampMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9m NzhmNzg1MC1mZGQ5LTQ1ZTgtOWIyNS0wMjI2MmYyNzEwOWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2Y3OGY3ODUwLWZkZDktNDVlOC05 YjI1LTAyMjYyZjI3MTA5ZS9mNzhmNzg1MC1mZGQ5LTQ1ZTgtOWIyNS0wMjI2MmYy NzEwOWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAA4oAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICWKcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAqz8hNI2bOm9M2dZWrcfOXjEeTLp8K9yPVOkJKLLfUlEA Dxb4Tm+kiF+FpU7gwkOS2HTELLqq8m1/+2ZWliX6S5omvQBtXxrlt5IIgx5hGu5y Q3sLnoo7V/uBzl7w2ftXiRvs5/ZQvW/T/glxrnBYd2FOjrjM79lHXHjdrziwKK4u cB4/cacdHleI38T4RREmWYYdohzxZDkOzAm0hbFaIJC2dsb0joLyXVfZEJkvrqAx lUojkmp8cp3oVjI3GbNXrcc6uyChxte2R/zLqcVyzhqjFOHOaEKoQQrS0VDg0FZz +qFgr89NLBnAqVuhfKw3+VeNqvAUBSKo3XP9rujknA== -----END CERTIFICATE-----Generated at Tue Sep 22 11:19:14 2026 by rpki-client