$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f90242c4-506f-4473-a44a-c16b5562de70.cer File: f90242c4-506f-4473-a44a-c16b5562de70.cer (raw, json) Hash identifier: LLi9wBB/MeNX4bCHEDin0akUvgybWJDO2Gl7+wmo7C8= Subject key identifier: 83:12:42:0A:BC:04:73:2A:9E:74:61:3C:F8:55:C3:73:A0:50:E7:EC Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F0C2C61E6ABDFCDC11DD25E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f90242c4-506f-4473-a44a-c16b5562de70/f90242c4-506f-4473-a44a-c16b5562de70.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f90242c4-506f-4473-a44a-c16b5562de70/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Sep 2026 02:14:35 +0000 Certificate not after: Wed 06 Dec 2028 03:14:35 +0000 Subordinate resources: IP: 192.94.75.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:2c:61:e6:ab:df:cd:c1:1d:d2:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Sep 3 02:14:35 2026 GMT Not After : Dec 6 03:14:35 2028 GMT Subject: CN=f90242c4-506f-4473-a44a-c16b5562de70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1b:64:b1:28:7f:43:29:84:a7:95:0a:7d:99: f8:a4:63:8c:6a:30:a9:3e:90:35:89:d4:28:60:0a: b2:c2:f2:9d:22:bc:7d:08:a0:12:e6:98:6e:58:20: 13:44:f9:91:cd:57:da:65:d1:1c:89:84:00:13:90: 80:06:b3:51:00:90:69:bb:88:82:72:d3:26:fd:27: f8:9e:c5:bb:dc:e2:77:fa:81:88:6d:d5:17:99:48: 56:07:55:11:a3:7e:d5:b6:e1:60:d5:2e:31:5f:01: 71:aa:4f:24:fe:64:a9:52:10:c7:e1:b5:5b:25:36: b4:d0:12:c0:79:3a:e2:46:6f:eb:21:92:77:50:82: e1:fe:66:67:cf:66:d8:77:0b:18:e2:e2:d3:d6:c2: e1:9b:f9:45:a3:36:80:8b:a6:39:b6:a4:c7:5e:9e: d0:69:73:17:82:03:cb:a9:ad:0b:98:c6:42:2c:e8: b4:f1:7e:8a:83:b8:68:9b:35:fd:ce:12:de:0b:7d: 93:16:a3:71:e3:b8:b1:3e:b4:f8:6c:5f:5f:6e:aa: 77:86:84:cd:4d:a3:24:87:96:cf:7d:82:f1:3c:6c: 88:7c:83:0f:73:ec:73:3f:02:36:7b:63:73:1a:97: 5e:de:bb:fa:ec:cc:08:6a:79:27:2d:af:0b:98:2f: d8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:12:42:0A:BC:04:73:2A:9E:74:61:3C:F8:55:C3:73:A0:50:E7:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f90242c4-506f-4473-a44a-c16b5562de70/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f90242c4-506f-4473-a44a-c16b5562de70/f90242c4-506f-4473-a44a-c16b5562de70.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 192.94.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ff:07:79:9f:6a:1d:ea:03:21:8c:03:1f:33:51:18:c6:94: ee:4c:3d:2e:95:8c:d7:b6:a9:09:f9:39:f6:d4:1a:70:79:cb: 8b:68:34:25:8f:38:e5:ec:ff:3d:8b:e7:15:31:1a:36:b3:1f: 19:cc:8b:f7:09:1e:d8:03:80:e8:ff:89:5e:e2:ac:97:cd:a0: 01:fc:72:51:e9:3d:88:ad:22:dc:9d:4d:4e:e0:f7:9b:bc:7b: f5:b4:d8:40:de:83:62:b3:e9:29:52:28:b7:16:73:42:26:db: 70:bf:a4:3d:5b:56:f2:79:26:f6:62:64:e9:45:2a:e3:22:31: 65:f5:0a:47:59:60:ae:52:77:25:9a:28:10:bc:6d:de:15:87: 60:a2:27:6f:40:c2:9c:c5:c0:f6:57:12:97:f3:24:91:99:1b: 72:58:8c:c4:27:84:1c:5a:a0:ca:4d:ff:ce:7e:a9:37:5f:c1: 80:9c:c0:a3:f0:4a:53:78:e5:77:34:88:46:fc:16:ff:41:2f: 9a:b7:5a:37:b7:5b:9d:e5:a9:59:75:bd:39:f3:36:44:06:98: 69:d7:57:bb:9d:6f:35:af:43:1e:9f:10:92:86:03:77:b3:70: 91:0b:f1:ae:15:01:ad:7d:35:8a:3a:7a:d6:97:75:91:46:80: 59:01:a7:99 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE8MLGHmq9/NwR3SXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDkwMzAyMTQzNVoXDTI4MTIwNjAzMTQzNVowLzEtMCsGA1UEAxMk ZjkwMjQyYzQtNTA2Zi00NDczLWE0NGEtYzE2YjU1NjJkZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghtksSh/QymEp5UKfZn4pGOMajCpPpA1idQo YAqywvKdIrx9CKAS5phuWCATRPmRzVfaZdEciYQAE5CABrNRAJBpu4iCctMm/Sf4 nsW73OJ3+oGIbdUXmUhWB1URo37VtuFg1S4xXwFxqk8k/mSpUhDH4bVbJTa00BLA eTriRm/rIZJ3UILh/mZnz2bYdwsY4uLT1sLhm/lFozaAi6Y5tqTHXp7QaXMXggPL qa0LmMZCLOi08X6Kg7homzX9zhLeC32TFqNx47ixPrT4bF9fbqp3hoTNTaMkh5bP fYLxPGyIfIMPc+xzPwI2e2NzGpde3rv67MwIanknLa8LmC/Y2QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIMSQgq8BHMqnnRhPPhVw3OgUOfsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9m OTAyNDJjNC01MDZmLTQ0NzMtYTQ0YS1jMTZiNTU2MmRlNzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2Y5MDI0MmM0LTUwNmYtNDQ3My1h NDRhLWMxNmI1NTYyZGU3MC9mOTAyNDJjNC01MDZmLTQ0NzMtYTQ0YS1jMTZiNTU2 MmRlNzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAXkswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAg/8HeZ9qHeoDIYwDHzNR GMaU7kw9LpWM17apCfk59tQacHnLi2g0JY845ez/PYvnFTEaNrMfGcyL9wke2AOA 6P+JXuKsl82gAfxyUek9iK0i3J1NTuD3m7x79bTYQN6DYrPpKVIotxZzQibbcL+k PVtW8nkm9mJk6UUq4yIxZfUKR1lgrlJ3JZooELxt3hWHYKInb0DCnMXA9lcSl/Mk kZkbcliMxCeEHFqgyk3/zn6pN1/BgJzAo/BKU3jldzSIRvwW/0EvmrdaN7dbneWp WXW9OfM2RAaYaddXu51vNa9DHp8QkoYDd7NwkQvxrhUBrX01ijp61pd1kUaAWQGn mQ== -----END CERTIFICATE-----Generated at Tue Sep 22 08:05:13 2026 by rpki-client