$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bcac2cfc-1a7f-48cd-b481-4a3cfabfc02c.cer File: bcac2cfc-1a7f-48cd-b481-4a3cfabfc02c.cer (raw, json) Hash identifier: G8PHp3Q0HvKMcVR4YNfH5fCf4NPd/NTw9MxTYD2avyY= Subject key identifier: CA:F0:E1:F2:AC:F9:56:6E:CE:77:05:54:EE:5B:50:F5:4C:A9:62:21 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584EEAF3EDB02B2E72DCF8DFF300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bcac2cfc-1a7f-48cd-b481-4a3cfabfc02c/bcac2cfc-1a7f-48cd-b481-4a3cfabfc02c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bcac2cfc-1a7f-48cd-b481-4a3cfabfc02c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 22 Aug 2026 04:39:09 +0000 Certificate not after: Fri 24 Nov 2028 05:39:09 +0000 Subordinate resources: AS: 33015 IP: 192.170.100.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:f3:ed:b0:2b:2e:72:dc:f8:df:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 22 04:39:09 2026 GMT Not After : Nov 24 05:39:09 2028 GMT Subject: CN=bcac2cfc-1a7f-48cd-b481-4a3cfabfc02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:69:8d:3b:e2:45:d4:50:e3:be:59:5f:79:ea: 1f:3b:ee:56:a4:47:17:82:d8:f5:e0:62:2c:b0:75: 75:3a:d0:76:dc:ca:07:ff:2f:1a:95:a9:d4:f4:c5: a8:89:20:37:f3:14:ac:72:c4:b0:4d:e6:30:01:70: 05:13:10:5b:2a:a7:9e:65:ca:f0:17:b4:95:6c:68: e4:eb:77:7c:fe:e4:0c:ee:f8:e4:f1:86:40:2e:87: 3c:84:9e:b3:0b:55:0d:a4:ed:8f:03:0e:8b:3b:39: 17:52:b1:c8:29:55:53:20:86:81:99:49:10:db:23: bd:6d:27:a9:34:94:17:89:e9:f5:f6:b1:03:8e:5c: 99:9c:9a:b9:16:e9:03:eb:f0:62:63:43:1a:36:55: 09:82:1d:09:2f:f5:ba:7c:d8:b6:db:31:96:25:eb: a7:bc:a7:2f:75:d5:41:6a:7d:47:2e:c3:2b:fe:15: e6:4c:f2:38:e2:6a:50:d3:22:d0:a8:d1:13:89:22: 73:81:df:1e:b6:f0:b7:12:85:b3:f5:9e:b8:a4:8d: 69:1a:ed:05:f9:11:c3:af:d7:b3:c2:b6:a3:71:8a: d2:ef:9e:9e:f2:4e:64:38:16:eb:3d:fa:47:60:bc: 41:fa:35:58:b7:84:ac:89:bd:01:2e:3d:bb:2f:d7: a1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F0:E1:F2:AC:F9:56:6E:CE:77:05:54:EE:5B:50:F5:4C:A9:62:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bcac2cfc-1a7f-48cd-b481-4a3cfabfc02c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bcac2cfc-1a7f-48cd-b481-4a3cfabfc02c/bcac2cfc-1a7f-48cd-b481-4a3cfabfc02c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 192.170.100.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33015 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:8f:ec:28:e6:2e:8d:b8:f5:56:44:e5:c1:8b:23:a1:d9:4a: 4a:2f:6c:b7:cd:fc:bb:ee:46:4b:4e:ef:f2:09:cf:d9:5b:92: 0c:e9:31:6a:c0:68:ab:85:ae:e5:d0:17:f5:c4:96:1a:47:3d: 38:d2:59:c0:5c:f3:eb:02:fc:f4:6b:33:4a:ff:8a:3f:40:97: 52:7c:02:5c:43:16:a1:83:f7:1c:ae:dc:59:96:f4:18:e1:3c: 79:b1:13:4b:37:41:aa:31:c0:15:be:89:83:00:7a:42:19:4b: 72:a2:04:46:ff:2b:55:fd:2a:76:97:14:d0:d1:07:4e:ae:46: 93:2d:99:93:a2:98:a5:ce:c7:21:0a:ea:94:d6:2e:1c:3e:d7: 98:02:76:cf:a9:a1:71:cf:0d:0e:2a:82:be:e9:f9:58:ea:8e: 5d:d1:a9:df:b4:1d:22:be:86:db:fa:a4:85:76:25:ec:14:8c: 80:54:d7:dc:bc:79:95:b1:76:3a:3f:aa:a3:d3:30:7b:3b:86: 3c:f4:dd:7d:72:89:97:8f:40:c7:4c:5e:a1:f9:f7:07:01:34: 5b:7a:af:fb:a6:10:7a:41:73:fe:2f:68:b0:10:9f:f0:d8:1a: 28:1d:31:20:2d:6e:db:79:32:63:fb:90:02:ef:32:c7:68:eb: 66:47:1f:06 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE7q8+2wKy5y3Pjf8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgyMjA0MzkwOVoXDTI4MTEyNDA1MzkwOVowLzEtMCsGA1UEAxMk YmNhYzJjZmMtMWE3Zi00OGNkLWI0ODEtNGEzY2ZhYmZjMDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2mNO+JF1FDjvllfeeofO+5WpEcXgtj14GIs sHV1OtB23MoH/y8alanU9MWoiSA38xSscsSwTeYwAXAFExBbKqeeZcrwF7SVbGjk 63d8/uQM7vjk8YZALoc8hJ6zC1UNpO2PAw6LOzkXUrHIKVVTIIaBmUkQ2yO9bSep NJQXien19rEDjlyZnJq5FukD6/BiY0MaNlUJgh0JL/W6fNi22zGWJeunvKcvddVB an1HLsMr/hXmTPI44mpQ0yLQqNETiSJzgd8etvC3EoWz9Z64pI1pGu0F+RHDr9ez wrajcYrS756e8k5kOBbrPfpHYLxB+jVYt4Ssib0BLj27L9eh2wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFMrw4fKs+VZuzncFVO5bUPVMqWIhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9i Y2FjMmNmYy0xYTdmLTQ4Y2QtYjQ4MS00YTNjZmFiZmMwMmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2JjYWMyY2ZjLTFhN2YtNDhjZC1i NDgxLTRhM2NmYWJmYzAyYy9iY2FjMmNmYy0xYTdmLTQ4Y2QtYjQ4MS00YTNjZmFi ZmMwMmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALAqmQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AID3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGKP7CjmLo249VZE5cGLI6HZSkovbLfN/LvuRktO7/IJz9lb kgzpMWrAaKuFruXQF/XElhpHPTjSWcBc8+sC/PRrM0r/ij9Al1J8AlxDFqGD9xyu 3FmW9BjhPHmxE0s3QaoxwBW+iYMAekIZS3KiBEb/K1X9KnaXFNDRB06uRpMtmZOi mKXOxyEK6pTWLhw+15gCds+poXHPDQ4qgr7p+Vjqjl3Rqd+0HSK+htv6pIV2JewU jIBU19y8eZWxdjo/qqPTMHs7hjz03X1yiZePQMdMXqH59wcBNFt6r/umEHpBc/4v aLAQn/DYGigdMSAtbtt5MmP7kALvMsdo62ZHHwY= -----END CERTIFICATE-----Generated at Tue Aug 25 08:32:50 2026 by rpki-client