$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7a302195-f227-406e-98d4-3f4ea3688ec8.cer File: 7a302195-f227-406e-98d4-3f4ea3688ec8.cer (raw, json) Hash identifier: yzJwsELcRH3AM18ulhrzN8i8m9tAmKdsN8qNjjAVit8= Subject key identifier: F6:83:9D:61:1F:F6:14:0C:70:4D:D5:D5:40:8A:8E:33:19:15:EF:C4 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584F089B2857F5B335DE06936D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7a302195-f227-406e-98d4-3f4ea3688ec8/7a302195-f227-406e-98d4-3f4ea3688ec8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7a302195-f227-406e-98d4-3f4ea3688ec8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Sep 2026 19:34:32 +0000 Certificate not after: Mon 04 Dec 2028 20:34:32 +0000 Subordinate resources: AS: 402503 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:9b:28:57:f5:b3:35:de:06:93:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Sep 1 19:34:32 2026 GMT Not After : Dec 4 20:34:32 2028 GMT Subject: CN=7a302195-f227-406e-98d4-3f4ea3688ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:bc:4e:67:68:11:62:8d:0d:ec:7d:15:f7: 7e:ef:4b:8c:32:ff:77:c5:2a:e5:1c:58:47:b5:b5: 07:2e:8f:1d:6a:e9:c2:0c:55:ce:69:fd:28:a5:c1: 40:2a:e2:63:36:8b:fb:6e:4b:6c:dc:3e:e1:7c:19: 6a:f4:4b:ed:12:3d:89:c7:52:6f:a1:89:5c:5f:ad: 3c:88:61:8e:5e:fc:52:ef:8d:97:d0:9d:db:2a:d3: 5e:91:d7:58:8f:65:d0:3a:69:d1:62:46:cc:55:11: 37:43:c1:ee:f0:5c:b7:fd:d1:d4:3d:e6:59:0e:9f: b1:6a:9a:b0:f1:94:a0:a4:0b:76:b7:11:7b:af:cb: e1:7e:ab:49:20:f6:73:91:1d:e5:93:d2:f3:49:08: a6:43:cd:a4:0e:26:f6:01:09:d1:68:e6:3d:6a:96: d4:02:26:92:33:76:4d:ba:4d:0c:84:63:8d:3c:dc: b4:8f:2e:18:67:42:e1:67:95:b0:12:4b:a4:9c:1b: da:a4:63:4c:aa:77:7e:f1:cf:9b:f1:c1:10:be:36: 7a:55:60:a2:39:50:ab:08:15:48:37:0d:ab:0b:b3: 5c:cc:ee:d0:9b:14:82:99:65:c6:b4:1e:c5:47:97: 62:4f:ce:be:d2:96:86:ce:46:b1:d9:64:b4:57:5e: 1c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:83:9D:61:1F:F6:14:0C:70:4D:D5:D5:40:8A:8E:33:19:15:EF:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7a302195-f227-406e-98d4-3f4ea3688ec8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7a302195-f227-406e-98d4-3f4ea3688ec8/7a302195-f227-406e-98d4-3f4ea3688ec8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 402503 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:28:ec:72:a4:d4:5b:e1:3e:0d:f2:0c:fa:aa:de:ac:eb:a1: bd:18:54:6f:0a:a6:cf:16:c7:27:e2:a1:d9:7c:e2:a7:1a:18: fd:eb:90:12:c8:ed:bc:00:f2:f7:28:aa:a0:d7:6f:f8:57:de: 75:e2:5f:cf:b3:a4:1c:d4:41:32:23:0e:21:37:b8:0a:fc:1b: b2:5f:32:35:14:63:c1:e7:a3:dd:62:4b:6a:a3:41:3c:c5:5c: cf:14:81:dd:e3:9e:e6:a9:47:ea:80:8e:f5:20:ce:28:51:14: 3a:4a:cd:d3:9c:f5:b6:dd:4f:e2:b4:1c:94:99:8d:91:aa:53: 28:8d:06:81:e1:10:ca:46:65:3e:a1:55:97:56:81:12:26:3c: 98:b2:68:17:ba:af:34:86:69:44:b3:e7:4c:cc:77:4f:a6:b9: d2:16:cc:f8:e2:9f:b3:32:ff:81:0a:df:da:2c:73:99:12:bd: bf:22:a3:43:e1:34:09:f2:d3:ea:c6:80:1e:bc:a5:5b:b5:a2: 5b:54:90:38:96:44:a3:8e:e9:19:f8:d1:0b:69:53:fc:b0:0b: 7c:6f:e4:85:2e:a8:72:d5:0a:35:65:29:8c:ca:78:89:f1:b4: 39:3b:f7:11:9e:e8:85:42:59:06:0b:ca:04:7e:e0:ab:cb:4b: 3f:13:17:7c -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE8ImyhX9bM13gaTbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDkwMTE5MzQzMloXDTI4MTIwNDIwMzQzMlowLzEtMCsGA1UEAxMk N2EzMDIxOTUtZjIyNy00MDZlLTk4ZDQtM2Y0ZWEzNjg4ZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohG8TmdoEWKNDex9Ffd+70uMMv93xSrlHFhH tbUHLo8daunCDFXOaf0opcFAKuJjNov7bkts3D7hfBlq9EvtEj2Jx1JvoYlcX608 iGGOXvxS742X0J3bKtNekddYj2XQOmnRYkbMVRE3Q8Hu8Fy3/dHUPeZZDp+xapqw 8ZSgpAt2txF7r8vhfqtJIPZzkR3lk9LzSQimQ82kDib2AQnRaOY9apbUAiaSM3ZN uk0MhGONPNy0jy4YZ0LhZ5WwEkuknBvapGNMqnd+8c+b8cEQvjZ6VWCiOVCrCBVI Nw2rC7NczO7QmxSCmWXGtB7FR5diT86+0paGzkax2WS0V14cDwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFPaDnWEf9hQMcE3V1UCKjjMZFe/EMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi83 YTMwMjE5NS1mMjI3LTQwNmUtOThkNC0zZjRlYTM2ODhlYzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzdhMzAyMTk1LWYyMjctNDA2ZS05 OGQ0LTNmNGVhMzY4OGVjOC83YTMwMjE5NS1mMjI3LTQwNmUtOThkNC0zZjRlYTM2 ODhlYzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiRHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHQo7HKk1FvhPg3yDPqq3qzrob0Y VG8Kps8Wxyfiodl84qcaGP3rkBLI7bwA8vcoqqDXb/hX3nXiX8+zpBzUQTIjDiE3 uAr8G7JfMjUUY8Hno91iS2qjQTzFXM8Ugd3jnuapR+qAjvUgzihRFDpKzdOc9bbd T+K0HJSZjZGqUyiNBoHhEMpGZT6hVZdWgRImPJiyaBe6rzSGaUSz50zMd0+mudIW zPjin7My/4EK39osc5kSvb8io0PhNAny0+rGgB68pVu1oltUkDiWRKOO6Rn40Qtp U/ywC3xv5IUuqHLVCjVlKYzKeInxtDk79xGe6IVCWQYLygR+4KvLSz8TF3w= -----END CERTIFICATE-----Generated at Sun Sep 20 12:38:04 2026 by rpki-client