$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/38b01983-27ad-4f8e-b32d-2e50d2abf14d.cer File: 38b01983-27ad-4f8e-b32d-2e50d2abf14d.cer (raw, json) Hash identifier: +oA6TjkMEfcDpIF/ufTEoSOCIycvp1iFUyvQjMyt4bs= Subject key identifier: 6D:6B:D3:FC:27:15:2B:1C:A8:6C:9C:7A:4D:AF:C8:93:C0:6F:B8:AD Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F0AC47418A9F2AD61F007F000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/38b01983-27ad-4f8e-b32d-2e50d2abf14d/38b01983-27ad-4f8e-b32d-2e50d2abf14d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/38b01983-27ad-4f8e-b32d-2e50d2abf14d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Sep 2026 14:09:22 +0000 Certificate not after: Tue 05 Dec 2028 15:09:22 +0000 Subordinate resources: AS: 11005 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:c4:74:18:a9:f2:ad:61:f0:07:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Sep 2 14:09:22 2026 GMT Not After : Dec 5 15:09:22 2028 GMT Subject: CN=38b01983-27ad-4f8e-b32d-2e50d2abf14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:b0:d0:f7:fe:9a:da:2d:89:46:ca:56:e7: 92:fc:d3:b2:cb:8c:99:ef:c8:61:30:7c:da:35:55: 35:f6:e5:4c:1b:e8:0b:60:81:fd:14:11:14:94:8e: 9d:90:7c:f5:08:11:cd:00:e0:4b:54:6e:6a:43:0c: 2a:70:5b:e7:52:a9:8e:ca:90:5a:bc:ea:82:1f:55: c4:e8:31:a3:20:c7:af:67:3e:c9:3b:ad:93:a8:90: 65:06:99:1f:dd:a3:85:99:09:ce:5e:2a:ae:ae:d1: 3f:a9:b3:66:2b:bd:09:b9:b9:b7:07:7d:a0:68:57: 57:8f:df:fb:6d:60:48:83:8f:ab:6b:0c:a8:43:35: 94:d2:70:94:4d:8a:5c:2e:54:50:8c:b5:27:cf:6f: c7:9a:8c:e0:15:ac:b9:73:0d:87:f3:94:71:81:5d: 7d:1e:d7:b2:2e:a6:b2:3b:eb:0e:94:5d:9b:8c:47: e2:30:6c:77:29:d7:41:26:23:a0:53:6d:c2:e1:48: f7:ab:ae:44:1c:55:dc:d5:7d:3c:e1:ab:67:f2:5d: c9:17:a3:8e:20:02:29:d9:8b:9e:45:77:e0:db:ce: 78:a6:38:af:44:f8:84:08:5b:d0:c8:f8:0f:75:61: 7b:d1:78:ba:3f:ba:71:fb:c3:d9:00:96:7f:5e:3d: 7b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6B:D3:FC:27:15:2B:1C:A8:6C:9C:7A:4D:AF:C8:93:C0:6F:B8:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/38b01983-27ad-4f8e-b32d-2e50d2abf14d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/38b01983-27ad-4f8e-b32d-2e50d2abf14d/38b01983-27ad-4f8e-b32d-2e50d2abf14d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 11005 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:c7:f8:80:9c:51:6f:24:d4:58:e5:c0:49:97:02:60:4a:97: 5f:80:75:09:df:d8:5f:ce:f6:27:d0:6b:11:19:09:0a:99:4c: a5:4c:1e:81:20:da:44:98:41:04:14:24:bd:ba:86:21:20:54: 75:71:b3:9b:16:90:8e:00:34:5f:a7:75:a3:6e:68:0c:01:15: 08:f2:4f:4c:80:a0:03:7b:5f:e9:01:6d:30:64:a1:ea:bb:36: c8:44:27:a4:a0:3e:92:e3:a4:9d:e7:77:4a:57:2a:1e:5e:60: a9:6d:d0:15:da:fc:f9:64:cf:a6:2e:39:99:fe:57:f5:dc:4e: d5:36:6b:74:f7:d8:7d:c6:53:9c:f6:f5:16:0d:3d:47:c1:10: a2:a5:c2:a6:1f:4c:5f:35:42:b4:d4:78:23:d3:18:e0:36:18: b2:e7:c9:26:73:66:a9:15:f0:9e:fa:0c:d7:6e:af:00:ad:a8: 67:25:51:2b:a2:36:08:aa:41:1f:9a:97:c8:2b:e9:8d:29:00: d6:67:e2:83:f9:90:9f:02:2c:9e:d2:d0:03:8a:a2:50:fc:29: 03:59:e1:08:78:1e:08:21:97:42:39:28:40:16:ff:11:a7:d2: a8:c0:c8:e8:d8:09:3c:c3:82:72:41:48:49:0a:17:19:53:73: 81:14:ba:36 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE8KxHQYqfKtYfAH8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDkwMjE0MDkyMloXDTI4MTIwNTE1MDkyMlowLzEtMCsGA1UEAxMk MzhiMDE5ODMtMjdhZC00ZjhlLWIzMmQtMmU1MGQyYWJmMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAiw0Pf+mtotiUbKVueS/NOyy4yZ78hhMHza NVU19uVMG+gLYIH9FBEUlI6dkHz1CBHNAOBLVG5qQwwqcFvnUqmOypBavOqCH1XE 6DGjIMevZz7JO62TqJBlBpkf3aOFmQnOXiqurtE/qbNmK70Jubm3B32gaFdXj9/7 bWBIg4+rawyoQzWU0nCUTYpcLlRQjLUnz2/HmozgFay5cw2H85RxgV19HteyLqay O+sOlF2bjEfiMGx3KddBJiOgU23C4Uj3q65EHFXc1X084atn8l3JF6OOIAIp2Yue RXfg2854pjivRPiECFvQyPgPdWF70Xi6P7px+8PZAJZ/Xj17bQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFG1r0/wnFSscqGycek2vyJPAb7itMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8z OGIwMTk4My0yN2FkLTRmOGUtYjMyZC0yZTUwZDJhYmYxNGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzM4YjAxOTgzLTI3YWQtNGY4ZS1i MzJkLTJlNTBkMmFiZjE0ZC8zOGIwMTk4My0yN2FkLTRmOGUtYjMyZC0yZTUwZDJh YmYxNGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICKv0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAt8f4gJxRbyTUWOXASZcCYEqXX4B1 Cd/YX872J9BrERkJCplMpUwegSDaRJhBBBQkvbqGISBUdXGzmxaQjgA0X6d1o25o DAEVCPJPTICgA3tf6QFtMGSh6rs2yEQnpKA+kuOkned3SlcqHl5gqW3QFdr8+WTP pi45mf5X9dxO1TZrdPfYfcZTnPb1Fg09R8EQoqXCph9MXzVCtNR4I9MY4DYYsufJ JnNmqRXwnvoM126vAK2oZyVRK6I2CKpBH5qXyCvpjSkA1mfig/mQnwIsntLQA4qi UPwpA1nhCHgeCCGXQjkoQBb/EafSqMDI6NgJPMOCckFISQoXGVNzgRS6Ng== -----END CERTIFICATE-----Generated at Sun Sep 20 21:08:25 2026 by rpki-client