$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b0239a5b-bc37-4712-ace0-1fb5dcb7bb00.cer File: b0239a5b-bc37-4712-ace0-1fb5dcb7bb00.cer (raw, json) Hash identifier: uH5CZ5khl3+xuVYAx81Zn6fIBky0PlZSOt0qvgdSlYc= Subject key identifier: 21:B2:29:47:D0:C8:1E:59:8C:28:AB:5F:34:8C:98:B8:FC:5F:21:78 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EBA15071358933BDE2E18EA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b0239a5b-bc37-4712-ace0-1fb5dcb7bb00/b0239a5b-bc37-4712-ace0-1fb5dcb7bb00.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b0239a5b-bc37-4712-ace0-1fb5dcb7bb00/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Aug 2026 16:31:14 +0000 Certificate not after: Mon 06 Nov 2028 17:31:14 +0000 Subordinate resources: AS: 5 IP: 192.189.195.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ba:15:07:13:58:93:3b:de:2e:18:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 4 16:31:14 2026 GMT Not After : Nov 6 17:31:14 2028 GMT Subject: CN=b0239a5b-bc37-4712-ace0-1fb5dcb7bb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:18:52:9b:99:c9:6a:1a:e1:2d:89:38:c8:c1: 5f:27:cb:8c:ab:19:cc:77:d9:e2:88:40:16:a5:69: 9d:b8:1c:f2:14:d7:f4:06:82:89:96:20:1d:d3:86: 8b:5a:2a:d1:51:0f:df:da:2f:27:37:a6:31:4a:01: ac:cc:36:3c:57:3b:a8:e5:90:1a:68:85:fe:5c:34: 2f:e1:81:e1:cd:cc:4c:5b:82:19:a5:13:9b:94:7b: 0e:05:09:0d:30:f0:c8:9a:fe:48:c0:71:43:2a:18: ff:de:b2:04:2a:8a:39:61:16:40:0a:a9:be:d3:76: 1a:3a:c4:81:da:3e:9b:e2:c9:f3:c9:ed:a7:6a:af: 51:6c:ee:d5:69:f0:d5:fc:55:1f:62:96:84:67:a4: ad:13:56:f5:06:d1:d3:88:52:a0:77:99:7d:61:c5: 25:14:02:ed:5d:0a:62:d2:44:6f:d3:ae:6c:50:12: a4:88:f3:55:c3:16:ba:3f:87:73:05:49:fc:99:59: 87:60:b1:42:99:2a:03:17:18:a3:95:ee:2b:56:1d: 7f:65:dc:ab:fb:d8:38:9e:bb:44:7d:03:b5:85:c3: fa:f4:2f:de:bc:cf:2f:be:3c:d5:95:8a:99:cc:36: 73:56:03:df:70:4a:ef:41:73:9a:b8:84:cd:36:2c: a8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B2:29:47:D0:C8:1E:59:8C:28:AB:5F:34:8C:98:B8:FC:5F:21:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b0239a5b-bc37-4712-ace0-1fb5dcb7bb00/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b0239a5b-bc37-4712-ace0-1fb5dcb7bb00/b0239a5b-bc37-4712-ace0-1fb5dcb7bb00.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 192.189.195.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:e7:f3:db:2e:19:38:48:b3:92:06:cd:e5:69:43:c0:70:9a: b9:ff:56:90:a5:1e:47:0e:ef:0a:87:47:9e:37:62:a8:72:b6: c7:8e:3c:ab:bc:6a:6c:df:58:78:52:db:18:ec:e7:2e:57:c4: bd:e8:9c:82:3c:5b:91:5d:8f:ab:aa:7c:be:e6:c2:72:24:ee: f6:4b:ba:56:12:ee:80:19:a3:2c:b0:d9:b8:af:57:5c:4d:9b: 24:3b:2d:83:56:17:31:8d:7c:86:e5:e3:88:46:75:77:17:47: 60:f3:c8:00:75:15:9e:53:a1:21:4e:dc:32:28:b6:2c:93:af: a4:0a:0b:fd:d5:71:74:4c:c1:ed:0f:92:fb:2b:61:d1:18:e2: c9:08:d9:fc:25:51:2e:15:7a:82:15:b0:fe:a8:12:15:3b:44: b1:e2:55:dc:eb:d4:f0:8c:2c:78:a4:ed:d2:4c:d2:37:cd:88: bb:d9:f5:09:f5:ed:ca:80:49:8e:ff:04:c5:25:04:6a:5e:c4: fd:dd:05:13:44:1d:b3:eb:95:59:16:d7:75:f3:4e:b9:cd:a4: 2a:70:dd:6c:21:bd:4e:cf:41:89:ec:fb:70:e2:b3:72:d5:5c: d2:41:9d:b7:2d:81:dc:97:33:4c:ec:de:02:96:21:7f:af:56: 2c:3b:b5:5b -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWE66FQcTWJM73i4Y6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgwNDE2MzExNFoXDTI4MTEwNjE3MzExNFowLzEtMCsGA1UEAxMk YjAyMzlhNWItYmMzNy00NzEyLWFjZTAtMWZiNWRjYjdiYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhhSm5nJahrhLYk4yMFfJ8uMqxnMd9niiEAW pWmduBzyFNf0BoKJliAd04aLWirRUQ/f2i8nN6YxSgGszDY8Vzuo5ZAaaIX+XDQv 4YHhzcxMW4IZpROblHsOBQkNMPDImv5IwHFDKhj/3rIEKoo5YRZACqm+03YaOsSB 2j6b4snzye2naq9RbO7VafDV/FUfYpaEZ6StE1b1BtHTiFKgd5l9YcUlFALtXQpi 0kRv065sUBKkiPNVwxa6P4dzBUn8mVmHYLFCmSoDFxijle4rVh1/Zdyr+9g4nrtE fQO1hcP69C/evM8vvjzVlYqZzDZzVgPfcErvQXOauITNNiyozQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFCGyKUfQyB5ZjCirXzSMmLj8XyF4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9i MDIzOWE1Yi1iYzM3LTQ3MTItYWNlMC0xZmI1ZGNiN2JiMDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2IwMjM5YTViLWJjMzctNDcxMi1h Y2UwLTFmYjVkY2I3YmIwMC9iMDIzOWE1Yi1iYzM3LTQ3MTItYWNlMC0xZmI1ZGNi N2JiMDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAvcMwGAYIKwYBBQUHAQgBAf8ECTAHoAUwAwIB BTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQDB5/PbLhk4SLOSBs3laUPAcJq5/1aQpR5HDu8Kh0eeN2KocrbH jjyrvGps31h4UtsY7OcuV8S96JyCPFuRXY+rqny+5sJyJO72S7pWEu6AGaMssNm4 r1dcTZskOy2DVhcxjXyG5eOIRnV3F0dg88gAdRWeU6EhTtwyKLYsk6+kCgv91XF0 TMHtD5L7K2HRGOLJCNn8JVEuFXqCFbD+qBIVO0Sx4lXc69TwjCx4pO3STNI3zYi7 2fUJ9e3KgEmO/wTFJQRqXsT93QUTRB2z65VZFtd18065zaQqcN1sIb1Oz0GJ7Ptw 4rNy1VzSQZ23LYHclzNM7N4CliF/r1YsO7Vb -----END CERTIFICATE-----Generated at Wed Aug 19 21:38:17 2026 by rpki-client