$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6.cer File: 015b5d4f-9c30-41d6-b021-48574f07c8a6.cer (raw, json) Hash identifier: TupqV7JoPcKtbomyvhvGlaIyUcoKLCVcvn9J0kdxHf4= Subject key identifier: 6A:1A:DD:34:41:7D:21:A7:E0:13:47:2C:4B:1C:ED:10:68:46:0E:E2 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584FB7CEE3E7BC7DD2DD71B5CC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/015b5d4f-9c30-41d6-b021-48574f07c8a6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Nov 2026 13:45:14 +0000 Certificate not after: Mon 05 Feb 2029 13:45:14 +0000 Subordinate resources: AS: 398962 IP: 23.171.240.0/24 IP: 76.76.2.0/24 IP: 76.76.10.0/24 IP: 147.185.34.0/24 IP: 206.253.88.0/22 IP: 209.205.236.0/23 IP: 2606:1a40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b7:ce:e3:e7:bc:7d:d2:dd:71:b5:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Nov 3 13:45:14 2026 GMT Not After : Feb 5 13:45:14 2029 GMT Subject: CN=015b5d4f-9c30-41d6-b021-48574f07c8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:17:7a:8a:ef:88:23:24:49:4e:b2:da:d8: 03:eb:eb:19:b9:b2:90:65:31:12:74:37:23:c8:04: 63:b3:93:57:87:74:8d:30:95:fb:b7:3c:3e:09:36: e2:35:07:60:98:09:df:c6:40:fb:80:74:76:c2:86: 2b:65:43:5d:05:ee:04:9a:75:b7:d3:e2:68:1c:c3: 76:f6:c4:b1:5d:c5:27:ee:7f:d5:91:4b:c1:6a:17: f4:40:cd:00:2c:c3:8e:4d:52:ec:fd:39:d6:a5:d8: 75:7e:2a:90:e4:e0:a7:82:de:03:fe:fb:56:9c:e8: a9:0d:63:a3:2b:31:e7:61:7e:c8:d0:a7:78:cc:20: 92:63:31:9c:54:f3:3d:cf:e4:9b:5b:d8:2d:91:fb: 9f:83:22:c3:ee:7b:a2:61:6c:43:ca:85:7d:1b:ee: 56:03:22:71:5c:6b:a2:ab:df:65:2d:7e:d7:70:9d: e3:7c:5b:00:4a:a9:e8:21:44:8e:88:9d:1f:03:90: e2:88:88:a4:fb:f6:01:ff:9b:13:cf:11:bb:99:cd: 9b:25:e2:82:3b:87:b0:0e:64:bb:e5:c9:e1:db:53: 88:c3:e9:67:a3:7d:79:33:e9:0c:56:9b:7b:29:50: c9:b8:97:aa:7a:ad:7d:fd:ae:26:46:75:0d:2b:50: 59:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1A:DD:34:41:7D:21:A7:E0:13:47:2C:4B:1C:ED:10:68:46:0E:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/015b5d4f-9c30-41d6-b021-48574f07c8a6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.171.240.0/24 76.76.2.0/24 76.76.10.0/24 147.185.34.0/24 206.253.88.0/22 209.205.236.0/23 IPv6: 2606:1a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398962 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:25:e8:49:99:be:80:f8:36:72:20:63:b1:f1:62:73:44:a6: b7:a2:47:b1:c9:57:05:02:fc:ab:cd:d5:86:d4:75:85:f4:e5: b4:d1:92:b0:eb:26:62:25:0f:15:b5:7e:50:b6:d6:8d:77:c2: 59:ab:db:eb:c4:1d:7f:77:68:c8:8f:6f:26:e3:f3:36:e9:8b: f8:58:92:5f:f1:73:21:70:7f:bb:f0:c1:fd:a3:4c:b8:78:d7: 6a:6e:08:ce:c8:02:b7:c6:df:2e:b3:38:e3:64:92:a3:43:b6: 7f:3c:13:03:d7:f6:a7:62:95:fe:81:01:bd:f2:e0:64:55:71: 3d:f8:48:08:1f:6d:d4:7c:da:f6:cd:27:5a:2c:90:55:2e:3b: 88:2a:6a:af:e3:55:bf:e9:d5:0c:f5:08:a5:8f:eb:78:48:af: f3:75:d2:7b:88:2b:3c:8c:b6:01:1b:5a:f7:d3:fe:23:f8:06: df:51:a9:e5:58:42:0b:37:9a:80:4d:43:97:cd:d3:84:6f:26: 5a:9f:ed:93:43:db:72:d1:fb:2d:8e:37:92:94:dd:36:2c:60: d9:63:6f:9a:00:29:f7:b2:cc:2f:03:45:54:2e:0f:0c:1f:92: c3:a4:4f:8d:7a:e3:3c:73:36:4c:d6:84:24:a0:8b:f6:d2:58: 9c:20:44:f0 -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWE+3zuPnvH3S3XG1zIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTEwMzEzNDUxNFoXDTI5MDIwNTEzNDUxNFowLzEtMCsGA1UEAxMk MDE1YjVkNGYtOWMzMC00MWQ2LWIwMjEtNDg1NzRmMDdjOGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprAXeorviCMkSU6y2tgD6+sZubKQZTESdDcj yARjs5NXh3SNMJX7tzw+CTbiNQdgmAnfxkD7gHR2woYrZUNdBe4EmnW30+JoHMN2 9sSxXcUn7n/VkUvBahf0QM0ALMOOTVLs/TnWpdh1fiqQ5OCngt4D/vtWnOipDWOj KzHnYX7I0Kd4zCCSYzGcVPM9z+SbW9gtkfufgyLD7nuiYWxDyoV9G+5WAyJxXGui q99lLX7XcJ3jfFsASqnoIUSOiJ0fA5DiiIik+/YB/5sTzxG7mc2bJeKCO4ewDmS7 5cnh21OIw+lno315M+kMVpt7KVDJuJeqeq19/a4mRnUNK1BZgwIDAQABo4IESDCC BEQwHQYDVR0OBBYEFGoa3TRBfSGn4BNHLEsc7RBoRg7iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8w MTViNWQ0Zi05YzMwLTQxZDYtYjAyMS00ODU3NGYwN2M4YTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzAxNWI1ZDRmLTljMzAtNDFkNi1i MDIxLTQ4NTc0ZjA3YzhhNi8wMTViNWQ0Zi05YzMwLTQxZDYtYjAyMS00ODU3NGYw N2M4YTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAAXq/ADBABMTAIDBABMTAoDBACTuSIDBALO/VgD BAHRzewwDQQCAAIwBwMFACYGGkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhZy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4l6EmZvoD4NnIgY7HxYnNEpreiR7HJVwUC/KvN1YbUdYX05bTR krDrJmIlDxW1flC21o13wlmr2+vEHX93aMiPbybj8zbpi/hYkl/xcyFwf7vwwf2j TLh412puCM7IArfG3y6zOONkkqNDtn88EwPX9qdilf6BAb3y4GRVcT34SAgfbdR8 2vbNJ1oskFUuO4gqaq/jVb/p1Qz1CKWP63hIr/N10nuIKzyMtgEbWvfT/iP4Bt9R qeVYQgs3moBNQ5fN04RvJlqf7ZND23LR+y2ON5KU3TYsYNljb5oAKfeyzC8DRVQu DwwfksOkT4164zxzNkzWhCSgi/bSWJwgRPA= -----END CERTIFICATE-----Generated at Sun Nov 15 11:26:40 2026 by rpki-client