$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7d56ab76-51cf-4211-81eb-159de1a0d29b.cer File: 7d56ab76-51cf-4211-81eb-159de1a0d29b.cer (raw, json) Hash identifier: 2Dim86oHnjquetpLz41J85cMzgL8Wdo7jdWblxMiuxk= Subject key identifier: 96:F4:13:56:84:DF:AD:62:E2:4A:84:5A:F7:A2:43:0B:77:25:EA:20 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EA8E696F7B0F7D632591E1600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7d56ab76-51cf-4211-81eb-159de1a0d29b/7d56ab76-51cf-4211-81eb-159de1a0d29b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7d56ab76-51cf-4211-81eb-159de1a0d29b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jul 2026 12:48:55 +0000 Certificate not after: Tue 31 Oct 2028 12:48:55 +0000 Subordinate resources: AS: 25987 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:e6:96:f7:b0:f7:d6:32:59:1e:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Jul 29 12:48:55 2026 GMT Not After : Oct 31 12:48:55 2028 GMT Subject: CN=7d56ab76-51cf-4211-81eb-159de1a0d29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fa:f7:5d:be:e7:87:d7:a6:07:86:79:4e:b8: 36:ce:27:e1:26:42:94:73:0e:12:4a:6c:a7:fe:f5: 16:6f:d1:e5:c4:99:31:f6:60:47:f7:63:51:b1:5f: 75:18:01:d2:74:89:51:5f:18:47:08:cc:34:94:a6: 41:ef:50:5b:74:6e:4b:75:b2:79:38:b9:29:be:2e: 7a:55:a8:9f:04:ca:e4:5f:36:d7:e1:30:e0:fc:a3: 68:c7:20:65:28:23:3b:32:82:a1:4d:b7:00:f4:76: 06:96:fb:a6:37:a1:bc:46:b4:b8:97:b9:a5:f2:27: 6d:d2:c7:44:5d:38:bc:e2:a6:99:7f:00:cd:bb:e2: c8:ed:90:9e:76:5b:76:b2:c1:5c:8d:e2:43:56:ed: 29:2e:21:d5:ab:95:65:71:36:da:3c:07:0d:75:db: 2c:51:6c:8c:ac:00:08:3e:0f:ae:cb:b5:90:b6:67: 98:c7:b2:63:44:5d:4d:6c:bc:c2:1a:41:84:bd:d2: 71:84:94:7c:41:da:b9:17:72:41:ae:21:bb:73:f3: 18:15:0b:3a:d7:90:8b:62:b4:91:cd:2f:33:d2:2a: 01:a1:e6:4c:6d:23:da:6e:4a:2b:42:a8:e9:db:0b: cc:c6:c5:c5:b9:89:6d:f7:84:a4:5d:32:ca:f3:df: 7e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F4:13:56:84:DF:AD:62:E2:4A:84:5A:F7:A2:43:0B:77:25:EA:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7d56ab76-51cf-4211-81eb-159de1a0d29b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7d56ab76-51cf-4211-81eb-159de1a0d29b/7d56ab76-51cf-4211-81eb-159de1a0d29b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 25987 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:5c:2b:0b:a3:5d:a2:87:3c:13:d9:70:84:45:72:db:c8:8a: 48:78:08:30:9b:3f:8f:d9:0f:2b:df:d4:c7:ac:66:d9:7e:6f: 00:60:d2:28:29:94:85:c0:93:67:a8:94:44:54:c6:0e:dd:ae: ac:c3:32:e4:4d:82:87:88:dc:04:53:4a:4c:f7:00:9d:db:fb: 6e:21:ad:0d:3d:c2:df:8d:29:7d:4a:09:35:ea:c0:74:f0:9a: 90:e0:1b:ab:75:8d:25:4b:ab:61:6a:9e:41:6f:11:82:3a:92: 5b:f2:07:a9:94:0f:05:37:fc:55:74:70:cb:08:99:07:9f:45: 74:9c:50:42:7f:d9:be:89:c6:63:a2:3e:32:36:6f:8f:7e:55: 2c:4d:0f:68:95:df:4e:f9:8a:38:1e:3e:cf:4d:cd:a1:f1:ad: 23:3c:69:b3:cc:b5:dd:70:81:91:8d:a6:80:0b:34:23:a5:dc: 95:90:01:3b:70:21:33:a2:5a:c0:e9:31:3d:ea:62:06:8c:2b: ae:88:4c:8a:e7:2b:34:0c:52:4e:60:8a:03:08:0f:75:c7:54: e0:85:b7:0d:13:ad:47:d4:8e:de:3b:1f:72:ba:61:b6:73:37: 58:ff:b9:12:df:c1:e0:48:23:88:44:73:f8:ff:ba:6f:72:60: 7d:dc:f8:a1 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE6o5pb3sPfWMlkeFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDcyOTEyNDg1NVoXDTI4MTAzMTEyNDg1NVowLzEtMCsGA1UEAxMk N2Q1NmFiNzYtNTFjZi00MjExLTgxZWItMTU5ZGUxYTBkMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivr3Xb7nh9emB4Z5Trg2zifhJkKUcw4SSmyn /vUWb9HlxJkx9mBH92NRsV91GAHSdIlRXxhHCMw0lKZB71BbdG5LdbJ5OLkpvi56 VaifBMrkXzbX4TDg/KNoxyBlKCM7MoKhTbcA9HYGlvumN6G8RrS4l7ml8idt0sdE XTi84qaZfwDNu+LI7ZCedlt2ssFcjeJDVu0pLiHVq5VlcTbaPAcNddssUWyMrAAI Pg+uy7WQtmeYx7JjRF1NbLzCGkGEvdJxhJR8Qdq5F3JBriG7c/MYFQs615CLYrSR zS8z0ioBoeZMbSPabkorQqjp2wvMxsXFuYlt94SkXTLK899+4wIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFJb0E1aE361i4kqEWveiQwt3JeogMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi83 ZDU2YWI3Ni01MWNmLTQyMTEtODFlYi0xNTlkZTFhMGQyOWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzdkNTZhYjc2LTUxY2YtNDIxMS04 MWViLTE1OWRlMWEwZDI5Yi83ZDU2YWI3Ni01MWNmLTQyMTEtODFlYi0xNTlkZTFh MGQyOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZYMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArVwrC6Ndooc8E9lwhEVy28iKSHgI MJs/j9kPK9/Ux6xm2X5vAGDSKCmUhcCTZ6iURFTGDt2urMMy5E2Ch4jcBFNKTPcA ndv7biGtDT3C340pfUoJNerAdPCakOAbq3WNJUurYWqeQW8RgjqSW/IHqZQPBTf8 VXRwywiZB59FdJxQQn/ZvonGY6I+MjZvj35VLE0PaJXfTvmKOB4+z03NofGtIzxp s8y13XCBkY2mgAs0I6XclZABO3AhM6JawOkxPepiBowrrohMiucrNAxSTmCKAwgP dcdU4IW3DROtR9SO3jsfcrphtnM3WP+5Et/B4EgjiERz+P+6b3Jgfdz4oQ== -----END CERTIFICATE-----Generated at Tue Aug 25 07:54:55 2026 by rpki-client