$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aea0f65b-9eb8-4e34-aee5-850921b71a39.cer File: aea0f65b-9eb8-4e34-aee5-850921b71a39.cer (raw, json) Hash identifier: z42k2jCukp8w3xqtttE4cnDvQRdR0ZdohvhA3GOjZdg= Subject key identifier: D5:FC:93:C8:1C:D6:41:7A:3B:45:77:37:41:09:1D:18:8A:FA:B9:ED Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F66B3D83CE8FB7FA2DE1A1700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aea0f65b-9eb8-4e34-aee5-850921b71a39/aea0f65b-9eb8-4e34-aee5-850921b71a39.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aea0f65b-9eb8-4e34-aee5-850921b71a39/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 12:30:16 +0000 Certificate not after: Fri 20 Oct 2028 05:23:20 +0000 Subordinate resources: AS: 402632 IP: 198.140.196.0/24 IP: 2602:f38a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:b3:d8:3c:e8:fb:7f:a2:de:1a:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Oct 5 12:30:16 2026 GMT Not After : Oct 20 05:23:20 2028 GMT Subject: CN=aea0f65b-9eb8-4e34-aee5-850921b71a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:bf:10:4f:86:1d:ee:9d:4e:ee:dc:42:2f: 28:1f:28:89:2c:2b:fe:9f:eb:1b:de:1c:98:7e:09: 30:40:3b:63:e1:4f:a8:3e:ce:81:75:90:f9:33:09: 9d:2b:df:7e:9a:23:c2:3b:9d:4c:21:93:61:c2:a9: 57:a4:ae:09:e8:a0:74:ac:f9:54:53:ea:a5:ef:c8: 85:66:30:b0:9f:3f:82:fa:c9:ed:61:b4:02:06:c1: 81:42:a8:f2:2f:45:b3:1b:e3:e1:b9:46:11:4e:dd: 49:b3:68:f4:60:77:ba:76:c4:33:a2:d2:84:b9:6d: 0f:b8:2f:08:55:25:34:00:f0:96:f3:d7:6b:72:12: 00:ea:ce:90:9d:4c:9f:57:ce:c7:3c:c8:ab:79:aa: 48:ab:a3:e6:2b:2d:ee:7b:a7:74:24:54:32:22:34: 98:4b:49:be:81:20:a3:dc:24:11:e2:f4:60:8b:d1: d4:c9:e2:e9:13:b5:c7:38:29:2f:f3:e4:a1:87:47: fe:52:fa:29:b6:74:c5:42:1d:4d:7b:e0:14:a8:26: 3e:e8:99:f5:db:ea:ba:5b:84:e4:16:74:5b:59:7d: 50:49:98:8c:ac:2c:65:b1:75:a5:c5:9a:c2:18:79: eb:99:5a:a9:d6:3b:27:d2:89:a7:8f:f5:da:30:74: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FC:93:C8:1C:D6:41:7A:3B:45:77:37:41:09:1D:18:8A:FA:B9:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aea0f65b-9eb8-4e34-aee5-850921b71a39/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aea0f65b-9eb8-4e34-aee5-850921b71a39/aea0f65b-9eb8-4e34-aee5-850921b71a39.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 198.140.196.0/24 IPv6: 2602:f38a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402632 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ac:f7:88:bf:9f:4d:eb:83:4d:ca:c4:f2:d3:b0:5d:1c:9b: 37:00:73:58:76:94:5a:80:e7:b7:12:1d:e1:c2:01:78:e0:42: c1:21:7d:ce:bd:2c:e4:23:13:10:aa:3e:30:9f:0e:97:5c:43: 0b:1e:ae:c6:dc:4b:65:85:54:11:01:2e:27:b0:dd:ee:6b:ed: 22:e9:76:4d:42:b4:f9:cf:1f:90:b0:80:66:31:b2:40:46:c2: 29:a7:f7:4c:cd:91:71:99:ab:b8:2f:61:55:41:05:a7:fb:8b: 58:68:9c:f2:97:f5:f4:03:d1:10:59:e0:7e:6a:88:33:0a:f1: b3:bd:86:85:0f:39:61:3c:19:d0:02:39:3e:0b:55:12:a3:7b: 1d:d1:00:13:c9:bb:99:dd:3b:f3:7e:75:20:e2:34:45:5e:65: 50:4d:75:44:62:06:fc:a1:f2:9e:8b:24:e3:7f:01:8b:2c:e8: a5:f9:df:ea:dc:5b:4b:32:fc:de:18:8f:4e:30:6a:5d:99:48: 31:9a:5a:7b:31:ef:84:28:bf:46:15:89:74:07:b0:74:5b:05: aa:2a:67:5b:23:b6:12:5a:c8:91:76:23:24:5a:77:bf:de:d2: e3:35:ce:ea:6f:8e:11:8d:09:36:45:4a:65:ab:24:24:44:2c: 2f:eb:57:ac -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9ms9g86Pt/ot4aFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MTAwNTEyMzAxNloXDTI4MTAyMDA1MjMyMFowLzEtMCsGA1UEAxMk YWVhMGY2NWItOWViOC00ZTM0LWFlZTUtODUwOTIxYjcxYTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6O/EE+GHe6dTu7cQi8oHyiJLCv+n+sb3hyY fgkwQDtj4U+oPs6BdZD5MwmdK99+miPCO51MIZNhwqlXpK4J6KB0rPlUU+ql78iF ZjCwnz+C+sntYbQCBsGBQqjyL0WzG+PhuUYRTt1Js2j0YHe6dsQzotKEuW0PuC8I VSU0APCW89drchIA6s6QnUyfV87HPMireapIq6PmKy3ue6d0JFQyIjSYS0m+gSCj 3CQR4vRgi9HUyeLpE7XHOCkv8+Shh0f+UvoptnTFQh1Ne+AUqCY+6Jn12+q6W4Tk FnRbWX1QSZiMrCxlsXWlxZrCGHnrmVqp1jsn0omnj/XaMHTd8QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNX8k8gc1kF6O0V3N0EJHRiK+rntMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9h ZWEwZjY1Yi05ZWI4LTRlMzQtYWVlNS04NTA5MjFiNzFhMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2FlYTBmNjViLTllYjgtNGUzNC1h ZWU1LTg1MDkyMWI3MWEzOS9hZWEwZjY1Yi05ZWI4LTRlMzQtYWVlNS04NTA5MjFi NzFhMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGjMQwDgQCAAIwCAMGACYC84oAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkyDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOrPeIv59N64NNysTy07BdHJs3 AHNYdpRagOe3Eh3hwgF44ELBIX3OvSzkIxMQqj4wnw6XXEMLHq7G3EtlhVQRAS4n sN3ua+0i6XZNQrT5zx+QsIBmMbJARsIpp/dMzZFxmau4L2FVQQWn+4tYaJzyl/X0 A9EQWeB+aogzCvGzvYaFDzlhPBnQAjk+C1USo3sd0QATybuZ3TvzfnUg4jRFXmVQ TXVEYgb8ofKeiyTjfwGLLOil+d/q3FtLMvzeGI9OMGpdmUgxmlp7Me+EKL9GFYl0 B7B0WwWqKmdbI7YSWsiRdiMkWne/3tLjNc7qb44RjQk2RUplqyQkRCwv61es -----END CERTIFICATE-----Generated at Sun Nov 15 12:14:26 2026 by rpki-client