$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04aa80fc-f44d-4cc3-bab1-a79f2fa2ba3e.cer File: 04aa80fc-f44d-4cc3-bab1-a79f2fa2ba3e.cer (raw, json) Hash identifier: SnUSxZbNY9GDys+Oc2XWHJv3ivUsX2HuSKeUgm8oGHo= Subject key identifier: 2C:1B:10:61:61:B3:00:BF:3D:C2:E7:C4:97:ED:51:7D:B2:0A:2F:33 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EFAB2A81E0005F948FB4721E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04aa80fc-f44d-4cc3-bab1-a79f2fa2ba3e/04aa80fc-f44d-4cc3-bab1-a79f2fa2ba3e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04aa80fc-f44d-4cc3-bab1-a79f2fa2ba3e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Aug 2026 20:00:34 +0000 Certificate not after: Wed 29 Nov 2028 21:00:34 +0000 Subordinate resources: AS: 4980 IP: 74.118.56.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:b2:a8:1e:00:05:f9:48:fb:47:21:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 27 20:00:34 2026 GMT Not After : Nov 29 21:00:34 2028 GMT Subject: CN=04aa80fc-f44d-4cc3-bab1-a79f2fa2ba3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:1e:30:1a:2e:30:a7:d8:21:d6:cf:9e:1f: 2a:96:f3:c2:ed:ed:94:6e:90:d2:ac:f9:73:86:7a: d5:0c:68:77:46:6e:da:a2:23:db:a1:2b:d6:44:f9: cb:86:d4:8b:7b:69:d0:5f:9c:63:ef:89:34:67:c1: 3c:b5:1e:3e:aa:18:0f:b3:69:ce:e3:1a:f8:2f:60: dd:20:aa:34:a4:b7:a8:02:f2:25:f8:d4:e4:31:49: 1e:90:8d:b0:c7:18:3a:be:58:0f:ed:d9:91:66:43: ca:7c:af:03:7b:0f:8f:88:c6:66:59:24:bf:22:ee: 08:e4:2a:a4:e2:82:3b:92:30:2b:3a:b5:81:13:80: d6:e2:7c:2f:3b:9f:1d:be:62:d4:c6:e5:ba:da:7d: e0:ca:e0:fe:a1:1a:64:48:b8:2d:31:cb:fb:2f:7e: 7f:dd:20:35:bd:5b:a4:c5:9a:ca:9a:15:2b:91:99: da:0e:59:5f:db:7a:85:38:54:eb:22:76:7b:cb:0b: ea:16:f4:62:f9:51:3a:3d:ad:7a:91:30:02:35:63: c3:79:e0:fa:47:c5:74:9e:c3:0d:00:5a:03:9d:25: c4:ae:55:5f:e6:b8:a6:88:77:ef:2b:fc:f7:be:4e: e7:38:2b:6c:40:c5:8a:ec:1a:d6:09:b5:d7:a7:c0: f3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1B:10:61:61:B3:00:BF:3D:C2:E7:C4:97:ED:51:7D:B2:0A:2F:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04aa80fc-f44d-4cc3-bab1-a79f2fa2ba3e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04aa80fc-f44d-4cc3-bab1-a79f2fa2ba3e/04aa80fc-f44d-4cc3-bab1-a79f2fa2ba3e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 74.118.56.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4980 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b1:5f:ea:e1:45:c6:52:e3:0f:d0:4e:3b:e9:3c:9f:d2:13: 66:a8:e3:35:02:5e:21:b2:d2:2d:df:c9:a6:d2:e2:8f:cd:77: 1e:8a:eb:1f:f8:4e:b2:28:2d:60:fe:1e:93:aa:cb:1b:f1:37: 54:1f:c4:bf:6e:aa:be:90:15:bd:c2:95:68:1a:a5:0f:d0:1d: bc:07:82:50:1d:7f:7e:52:d7:60:52:86:3a:25:60:d0:05:fd: 0b:d9:59:4e:50:f5:7e:0b:ce:43:b3:cf:dc:d8:66:59:e7:26: ba:34:16:4e:a6:55:36:0b:93:e1:89:a3:32:cc:6c:29:6d:2a: 1c:fe:4b:a0:ab:f0:67:14:89:cb:21:2c:63:ec:af:d3:0d:e0: 91:14:98:d9:4c:8f:c7:92:bf:fc:fb:a1:e6:b2:1c:f0:b1:bc: 5a:b4:67:4f:6f:4e:7d:d5:d3:34:7c:45:db:a2:1c:2d:bd:e8: eb:ef:3d:3f:1c:cf:9a:e9:58:c9:cf:54:28:3b:6c:4e:25:2b: de:6b:72:09:5b:18:5e:71:b4:d0:ac:13:36:ed:1d:27:6c:1d: 7b:ff:79:f4:4e:3b:6f:e7:70:a7:ab:66:2d:5e:80:1e:f8:0a: 1b:e4:b7:0c:1f:58:dd:62:d8:52:c0:40:84:6a:94:13:f0:1f: c2:f0:22:f7 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE76sqgeAAX5SPtHIeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgyNzIwMDAzNFoXDTI4MTEyOTIxMDAzNFowLzEtMCsGA1UEAxMk MDRhYTgwZmMtZjQ0ZC00Y2MzLWJhYjEtYTc5ZjJmYTJiYTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXYeMBouMKfYIdbPnh8qlvPC7e2UbpDSrPlz hnrVDGh3Rm7aoiPboSvWRPnLhtSLe2nQX5xj74k0Z8E8tR4+qhgPs2nO4xr4L2Dd IKo0pLeoAvIl+NTkMUkekI2wxxg6vlgP7dmRZkPKfK8Dew+PiMZmWSS/Iu4I5Cqk 4oI7kjArOrWBE4DW4nwvO58dvmLUxuW62n3gyuD+oRpkSLgtMcv7L35/3SA1vVuk xZrKmhUrkZnaDllf23qFOFTrInZ7ywvqFvRi+VE6Pa16kTACNWPDeeD6R8V0nsMN AFoDnSXErlVf5rimiHfvK/z3vk7nOCtsQMWK7BrWCbXXp8DzMwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFCwbEGFhswC/PcLnxJftUX2yCi8zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8w NGFhODBmYy1mNDRkLTRjYzMtYmFiMS1hNzlmMmZhMmJhM2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzA0YWE4MGZjLWY0NGQtNGNjMy1i YWIxLWE3OWYyZmEyYmEzZS8wNGFhODBmYy1mNDRkLTRjYzMtYmFiMS1hNzlmMmZh MmJhM2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKdjgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC E3QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAjLFf6uFFxlLjD9BOO+k8n9ITZqjjNQJeIbLSLd/JptLij813 HorrH/hOsigtYP4ek6rLG/E3VB/Ev26qvpAVvcKVaBqlD9AdvAeCUB1/flLXYFKG OiVg0AX9C9lZTlD1fgvOQ7PP3NhmWecmujQWTqZVNguT4YmjMsxsKW0qHP5LoKvw ZxSJyyEsY+yv0w3gkRSY2UyPx5K//Puh5rIc8LG8WrRnT29OfdXTNHxF26IcLb3o 6+89PxzPmulYyc9UKDtsTiUr3mtyCVsYXnG00KwTNu0dJ2wde/959E47b+dwp6tm LV6AHvgKG+S3DB9Y3WLYUsBAhGqUE/AfwvAi9w== -----END CERTIFICATE-----Generated at Sun Sep 20 21:08:36 2026 by rpki-client