$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.cer File: 1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.cer (raw, json) Hash identifier: 7tV01FHGCOb9vRxC2/g1ND2jPTwUY9SwyvcX87u2cLg= Subject key identifier: F9:63:99:2F:D9:38:EF:61:DA:5E:1C:07:5D:D5:10:BA:FD:12:AD:22 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584ECF9773373DE971E918C45180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Aug 2026 09:26:00 +0000 Certificate not after: Tue 14 Nov 2028 10:26:00 +0000 Subordinate resources: IP: 140.232.76.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cf:97:73:37:3d:e9:71:e9:18:c4:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 12 09:26:00 2026 GMT Not After : Nov 14 10:26:00 2028 GMT Subject: CN=1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:b6:d0:ca:a9:12:3a:7d:b8:9b:d1:00:9b: fc:5b:66:60:da:d6:ae:df:b1:dc:3d:89:d8:59:20: 50:91:0b:db:cf:e7:4f:f6:65:d0:35:10:fe:e6:da: be:51:33:50:16:ed:41:9f:e9:4a:21:ff:ed:a3:96: 82:16:30:aa:d4:b8:ef:ce:86:a1:69:6e:42:81:da: c4:61:af:34:5d:49:2f:99:2c:3a:7e:1e:77:9b:76: 05:98:bc:c4:3b:d0:79:7a:41:e6:08:b7:f0:f7:d6: 80:f4:e0:00:7c:38:c8:9d:1e:ed:d2:40:d9:38:ca: 70:78:47:66:47:73:cf:10:9f:84:74:aa:56:a8:cb: f8:75:60:c2:0f:b3:04:27:56:39:35:1a:88:fd:af: cd:32:2c:e1:d0:0c:48:9d:48:90:42:d2:8e:00:3d: e5:33:af:b6:92:cc:a0:42:ba:af:81:16:ad:d6:76: cc:90:46:4f:38:fd:dc:c0:a0:22:b8:ff:e3:65:8f: d8:cb:ec:e0:8c:76:da:8b:e8:f1:a1:64:c6:3f:e4: bf:bb:cb:93:f3:07:8c:97:d4:9e:46:fd:89:16:52: 4a:78:47:1d:86:ba:1f:6c:13:23:ba:da:4d:f0:36: 62:42:75:e0:c2:af:92:35:e6:f7:1e:de:64:0b:d8: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:63:99:2F:D9:38:EF:61:DA:5E:1C:07:5D:D5:10:BA:FD:12:AD:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 140.232.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:6c:4b:ce:b9:57:9a:3f:c1:00:cd:88:a3:8a:cd:8b:65:72: 41:50:4c:b3:30:ad:13:86:cf:55:4b:ce:3a:57:45:8b:dd:17: af:d7:3a:a8:78:9c:09:eb:57:22:7b:7a:ee:37:8a:84:6d:14: fe:b1:c5:ca:37:b8:0c:75:79:cd:50:42:f6:2e:13:d0:33:20: b9:c9:c1:60:d0:97:f8:af:04:d2:e2:92:24:d6:73:2e:4c:9e: 69:3e:1c:20:2f:2a:a0:74:08:19:8a:f6:f4:ba:9d:69:f1:ad: d1:cb:5f:7e:44:9d:07:3d:df:cd:52:52:4f:24:78:9c:85:81: 86:30:c0:ce:dd:c1:10:ee:bf:f2:77:8b:5b:9c:65:db:8d:78: 9a:4d:de:dc:a1:b8:fe:38:72:02:46:b0:36:bc:55:06:4e:9e: c9:da:0d:cf:f4:e7:51:33:b5:35:7c:79:5b:08:9b:fa:cc:36: 9c:6d:86:13:ad:66:39:ce:11:91:69:e7:f1:41:ea:4f:0e:bd: d2:8c:12:1b:8f:e9:4d:6c:df:4e:29:e3:bb:b7:1a:c7:b5:f6: b0:aa:fa:84:8b:79:84:9f:40:e8:d3:5e:19:ba:7f:5b:6e:0f: ad:09:6b:14:50:9c:b3:98:da:53:0e:f4:4f:46:69:78:49:e9: 24:b8:89:b3 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE7Pl3M3Pelx6RjEUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgxMjA5MjYwMFoXDTI4MTExNDEwMjYwMFowLzEtMCsGA1UEAxMk MWM3ZDFjZjYtY2E1NS00ZDRmLWE1MWQtNzM1ZDA4ZTNkNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplW20MqpEjp9uJvRAJv8W2Zg2tau37HcPYnY WSBQkQvbz+dP9mXQNRD+5tq+UTNQFu1Bn+lKIf/to5aCFjCq1LjvzoahaW5CgdrE Ya80XUkvmSw6fh53m3YFmLzEO9B5ekHmCLfw99aA9OAAfDjInR7t0kDZOMpweEdm R3PPEJ+EdKpWqMv4dWDCD7MEJ1Y5NRqI/a/NMizh0AxInUiQQtKOAD3lM6+2ksyg QrqvgRat1nbMkEZPOP3cwKAiuP/jZY/Yy+zgjHbai+jxoWTGP+S/u8uT8weMl9Se Rv2JFlJKeEcdhrofbBMjutpN8DZiQnXgwq+SNeb3Ht5kC9jSJQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPljmS/ZOO9h2l4cB13VELr9Eq0iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8x YzdkMWNmNi1jYTU1LTRkNGYtYTUxZC03MzVkMDhlM2Q2NmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzFjN2QxY2Y2LWNhNTUtNGQ0Zi1h NTFkLTczNWQwOGUzZDY2YS8xYzdkMWNmNi1jYTU1LTRkNGYtYTUxZC03MzVkMDhl M2Q2NmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGM6EwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqGxLzrlXmj/BAM2Io4rN i2VyQVBMszCtE4bPVUvOOldFi90Xr9c6qHicCetXInt67jeKhG0U/rHFyje4DHV5 zVBC9i4T0DMgucnBYNCX+K8E0uKSJNZzLkyeaT4cIC8qoHQIGYr29LqdafGt0ctf fkSdBz3fzVJSTyR4nIWBhjDAzt3BEO6/8neLW5xl2414mk3e3KG4/jhyAkawNrxV Bk6eydoNz/TnUTO1NXx5Wwib+sw2nG2GE61mOc4RkWnn8UHqTw690owSG4/pTWzf Tinju7cax7X2sKr6hIt5hJ9A6NNeGbp/W24PrQlrFFCcs5jaUw70T0ZpeEnpJLiJ sw== -----END CERTIFICATE-----Generated at Thu Aug 20 23:30:55 2026 by rpki-client