$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f.cer File: a205fba0-7ae3-4a3a-b90c-78f89179208f.cer (raw, json) Hash identifier: H1jqW9mAEAySQ9SneBOyyTmotmG+6AiIM+DhSK0PutU= Subject key identifier: 35:C0:1C:AB:D9:D9:CD:F7:15:62:30:FD:49:34:FB:0B:E9:F7:B1:E2 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EE73D4B375B272016F5D4F340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f/a205fba0-7ae3-4a3a-b90c-78f89179208f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Aug 2026 20:43:44 +0000 Certificate not after: Wed 22 Nov 2028 21:43:44 +0000 Subordinate resources: AS: 21611 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:3d:4b:37:5b:27:20:16:f5:d4:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 20 20:43:44 2026 GMT Not After : Nov 22 21:43:44 2028 GMT Subject: CN=a205fba0-7ae3-4a3a-b90c-78f89179208f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:26:9b:55:42:c4:0f:1f:b5:9a:66:ce:bc: 6e:84:83:f6:8a:96:26:50:65:b0:95:19:49:53:03: d7:11:7e:b2:3f:bc:00:c1:01:ec:eb:82:47:6a:9d: 6b:da:eb:c0:6a:11:fd:30:de:13:3f:24:73:76:45: 65:49:87:a0:fb:6f:c0:d9:70:ee:26:2b:55:33:9e: b9:2a:b7:61:7e:73:d7:3a:f5:9c:92:26:db:28:80: 28:03:36:89:0d:09:0b:95:3e:b6:cc:14:06:9c:f0: a0:c0:47:7f:45:83:14:0e:23:97:ec:fe:2b:0f:68: d5:e2:bf:11:e4:f9:ba:f5:cb:50:78:56:2c:a7:c3: 0a:0f:10:af:1f:23:9d:21:d5:75:52:3f:67:26:c2: 9f:09:15:41:30:7d:10:7b:e2:29:70:4b:ff:fa:37: 5c:80:34:f2:22:2a:91:e4:3c:2b:74:43:32:34:ee: 55:a3:d5:da:4d:5a:df:74:08:bb:46:b6:57:39:eb: eb:9d:d9:b8:c1:2b:5e:9b:cf:39:74:f9:2b:d4:00: 44:a3:05:f2:e5:7d:9a:8a:2a:4e:4a:28:8c:3a:88: 03:27:f2:3f:6f:8b:73:55:23:64:87:3a:54:74:e8: d7:46:85:b6:d5:26:d0:53:74:1a:b4:68:f5:b5:38: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C0:1C:AB:D9:D9:CD:F7:15:62:30:FD:49:34:FB:0B:E9:F7:B1:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f/a205fba0-7ae3-4a3a-b90c-78f89179208f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 21611 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:97:e2:1f:cd:42:27:8f:4b:7f:16:60:9f:ac:ed:18:04:fb: 43:3a:e9:1a:ed:fb:c8:69:99:54:57:e2:5c:8d:8b:56:2c:10: 2d:9c:21:b4:52:1a:7b:64:ba:d5:2e:d1:95:dd:c5:fa:b8:9c: d2:99:a7:03:8a:3f:bc:a7:92:e1:69:c4:4d:63:17:26:ce:69: ff:c6:87:94:e8:72:83:1c:50:25:af:69:27:c1:f9:9d:80:b7: 76:4b:2f:ca:70:e7:e2:7a:68:43:e4:a2:7b:d4:3f:00:a0:ce: 51:49:5c:40:fd:be:1c:70:78:7e:bb:c9:a6:2e:b1:b7:5c:48: d9:a8:75:87:bb:19:9c:33:e2:72:18:d6:9f:62:b0:4d:fc:cf: c9:7e:d9:19:27:31:96:41:89:6f:9b:81:33:7a:b5:d2:a5:3d: db:c1:cb:4f:f6:26:ed:7e:98:24:fc:59:fc:d8:8e:9d:4c:da: 8a:e7:1e:6d:5d:69:23:ca:ee:7f:e3:2b:b8:01:90:77:a9:2a: 78:c2:5c:70:1d:c9:6d:68:ee:6c:07:7b:2a:8a:70:bc:a6:a1: e4:f1:36:9c:16:29:b3:ba:10:af:5d:df:78:72:91:8e:a1:44: 27:17:b1:a6:65:ee:d6:c7:9c:d0:24:2c:41:16:2f:54:1e:d0: 08:68:55:e7 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE7nPUs3WycgFvXU80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgyMDIwNDM0NFoXDTI4MTEyMjIxNDM0NFowLzEtMCsGA1UEAxMk YTIwNWZiYTAtN2FlMy00YTNhLWI5MGMtNzhmODkxNzkyMDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWImm1VCxA8ftZpmzrxuhIP2ipYmUGWwlRlJ UwPXEX6yP7wAwQHs64JHap1r2uvAahH9MN4TPyRzdkVlSYeg+2/A2XDuJitVM565 KrdhfnPXOvWckibbKIAoAzaJDQkLlT62zBQGnPCgwEd/RYMUDiOX7P4rD2jV4r8R 5Pm69ctQeFYsp8MKDxCvHyOdIdV1Uj9nJsKfCRVBMH0Qe+IpcEv/+jdcgDTyIiqR 5DwrdEMyNO5Vo9XaTVrfdAi7RrZXOevrndm4wStem885dPkr1ABEowXy5X2aiipO SiiMOogDJ/I/b4tzVSNkhzpUdOjXRoW21SbQU3QatGj1tTjMeQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFDXAHKvZ2c33FWIw/Uk0+wvp97HiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9h MjA1ZmJhMC03YWUzLTRhM2EtYjkwYy03OGY4OTE3OTIwOGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2EyMDVmYmEwLTdhZTMtNGEzYS1i OTBjLTc4Zjg5MTc5MjA4Zi9hMjA1ZmJhMC03YWUzLTRhM2EtYjkwYy03OGY4OTE3 OTIwOGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICVGswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATZfiH81CJ49LfxZgn6ztGAT7Qzrp Gu37yGmZVFfiXI2LViwQLZwhtFIae2S61S7Rld3F+ric0pmnA4o/vKeS4WnETWMX Js5p/8aHlOhygxxQJa9pJ8H5nYC3dksvynDn4npoQ+Sie9Q/AKDOUUlcQP2+HHB4 frvJpi6xt1xI2ah1h7sZnDPichjWn2KwTfzPyX7ZGScxlkGJb5uBM3q10qU928HL T/Ym7X6YJPxZ/NiOnUzaiucebV1pI8ruf+MruAGQd6kqeMJccB3JbWjubAd7Kopw vKah5PE2nBYps7oQr13feHKRjqFEJxexpmXu1sec0CQsQRYvVB7QCGhV5w== -----END CERTIFICATE-----Generated at Tue Aug 25 14:20:51 2026 by rpki-client