$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5affb4b-d53f-484f-9a5b-3b60dfa33242.cer File: a5affb4b-d53f-484f-9a5b-3b60dfa33242.cer (raw, json) Hash identifier: QYrkx/IUYiQi46qUQrGu/8GrdvN/eiljq+JK3OUspxQ= Subject key identifier: 1C:6A:CF:9C:FD:A1:D6:34:5B:CB:2A:FD:D9:E5:88:6D:64:CC:33:74 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584ED386B73E3888C6C9790E3800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5affb4b-d53f-484f-9a5b-3b60dfa33242/a5affb4b-d53f-484f-9a5b-3b60dfa33242.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5affb4b-d53f-484f-9a5b-3b60dfa33242/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Aug 2026 19:15:31 +0000 Certificate not after: Wed 15 Nov 2028 20:15:31 +0000 Subordinate resources: AS: 402916 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d3:86:b7:3e:38:88:c6:c9:79:0e:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 13 19:15:31 2026 GMT Not After : Nov 15 20:15:31 2028 GMT Subject: CN=a5affb4b-d53f-484f-9a5b-3b60dfa33242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9b:a2:df:a5:e6:f4:87:c0:0b:b6:e3:8f:80: a7:54:dc:40:0a:54:11:7e:5a:a8:1e:50:d0:51:55: bc:2d:71:7b:39:74:69:a6:32:41:90:d8:1b:e2:fe: 4d:14:2b:3b:62:b1:be:89:ba:c8:af:f5:2b:5c:8b: b6:fb:11:aa:3e:53:7d:64:6a:3f:5e:70:6e:6e:ed: e4:f7:99:22:27:67:a8:a1:51:4e:a6:2a:07:00:ac: 46:8c:49:90:be:ac:5c:7a:e9:f1:c5:d1:c2:4a:61: 06:02:d3:f6:55:4c:98:42:ce:db:ba:59:41:00:4c: 21:95:e1:57:4f:ff:f8:1f:1a:ef:38:f7:11:27:56: a4:24:0c:b6:72:81:28:7c:a3:d5:b6:31:0d:e1:dc: 80:5a:02:88:67:16:e8:05:af:ed:30:62:4a:f8:ed: 62:3f:10:96:3c:21:e0:63:08:bf:6a:fb:f4:31:d3: 09:5c:40:60:89:6c:65:82:56:72:47:77:c8:d6:3b: 1d:4c:ad:d9:c0:28:5e:79:6d:15:42:45:c9:16:cf: 20:09:3d:84:1d:03:b9:66:1b:84:d4:eb:ec:f4:fd: ba:c6:e0:f0:83:8e:e7:95:0a:99:c6:1e:ef:bd:a7: a0:d7:bd:60:9d:fd:18:84:f2:20:0c:ed:d9:ad:c7: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6A:CF:9C:FD:A1:D6:34:5B:CB:2A:FD:D9:E5:88:6D:64:CC:33:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5affb4b-d53f-484f-9a5b-3b60dfa33242/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5affb4b-d53f-484f-9a5b-3b60dfa33242/a5affb4b-d53f-484f-9a5b-3b60dfa33242.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 402916 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:e9:44:97:6f:b1:1b:90:85:d5:1f:29:85:ff:88:12:18:44: f8:e9:89:af:49:3e:31:f6:ae:97:c2:6d:15:c7:69:a7:50:bb: a0:f2:fa:3e:63:d8:2c:e5:8a:a6:10:f1:8c:a7:61:d8:e7:a5: d2:bf:27:b7:ef:27:b4:cb:40:a0:44:61:13:fe:fc:a3:c7:49: 9d:2d:74:7d:54:b0:a4:92:e8:67:9a:f0:5b:53:ff:e3:62:cc: 5e:44:71:19:ac:6c:81:31:be:f8:3f:8b:46:5d:ab:e5:6a:8b: 15:d0:7e:76:06:12:90:1d:d2:82:77:1f:12:be:3c:f9:7c:47: 99:74:7c:aa:d6:af:16:63:61:0d:3d:0f:4b:66:27:e5:fd:a5: a7:b1:c1:d0:64:b2:d1:dd:f0:f4:c3:8f:4a:b6:c1:95:33:a0: de:9e:99:b2:3f:ef:e8:ec:6e:1a:16:14:35:33:9f:bd:d1:d3: c7:b5:dc:69:cc:41:8d:27:a2:98:c0:78:02:32:b5:9b:11:2c: df:77:7f:19:ae:ec:a1:5e:11:39:ba:2c:57:8b:e9:d0:ff:69: 41:ec:60:f7:7a:c9:1f:83:d5:e1:da:64:f4:fa:54:36:60:2c: b8:4b:e2:dc:ce:f7:2b:8c:94:7a:e6:1b:51:4b:dc:5e:9b:07: 9f:43:bd:2c -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE7Thrc+OIjGyXkOOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgxMzE5MTUzMVoXDTI4MTExNTIwMTUzMVowLzEtMCsGA1UEAxMk YTVhZmZiNGItZDUzZi00ODRmLTlhNWItM2I2MGRmYTMzMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJui36Xm9IfAC7bjj4CnVNxAClQRflqoHlDQ UVW8LXF7OXRppjJBkNgb4v5NFCs7YrG+ibrIr/UrXIu2+xGqPlN9ZGo/XnBubu3k 95kiJ2eooVFOpioHAKxGjEmQvqxceunxxdHCSmEGAtP2VUyYQs7bullBAEwhleFX T//4HxrvOPcRJ1akJAy2coEofKPVtjEN4dyAWgKIZxboBa/tMGJK+O1iPxCWPCHg Ywi/avv0MdMJXEBgiWxlglZyR3fI1jsdTK3ZwCheeW0VQkXJFs8gCT2EHQO5ZhuE 1Ovs9P26xuDwg47nlQqZxh7vvaeg171gnf0YhPIgDO3Zrcf1uwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFBxqz5z9odY0W8sq/dnliG1kzDN0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9h NWFmZmI0Yi1kNTNmLTQ4NGYtOWE1Yi0zYjYwZGZhMzMyNDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2E1YWZmYjRiLWQ1M2YtNDg0Zi05 YTViLTNiNjBkZmEzMzI0Mi9hNWFmZmI0Yi1kNTNmLTQ4NGYtOWE1Yi0zYjYwZGZh MzMyNDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiXkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALPpRJdvsRuQhdUfKYX/iBIYRPjp ia9JPjH2rpfCbRXHaadQu6Dy+j5j2CzliqYQ8YynYdjnpdK/J7fvJ7TLQKBEYRP+ /KPHSZ0tdH1UsKSS6Gea8FtT/+NizF5EcRmsbIExvvg/i0Zdq+VqixXQfnYGEpAd 0oJ3HxK+PPl8R5l0fKrWrxZjYQ09D0tmJ+X9paexwdBkstHd8PTDj0q2wZUzoN6e mbI/7+jsbhoWFDUzn73R08e13GnMQY0nopjAeAIytZsRLN93fxmu7KFeETm6LFeL 6dD/aUHsYPd6yR+D1eHaZPT6VDZgLLhL4tzO9yuMlHrmG1FL3F6bB59DvSw= -----END CERTIFICATE-----Generated at Wed Aug 26 07:00:02 2026 by rpki-client