$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/db90fb5b-7cb9-4e43-9044-a2d8a77b3f4f.cer File: db90fb5b-7cb9-4e43-9044-a2d8a77b3f4f.cer (raw, json) Hash identifier: acjO1f3qfMnfr9x+WvyXv523cGhdm592RmjME32k+IM= Subject key identifier: 2B:F3:B1:7C:EE:B4:83:1B:26:13:02:07:2A:D4:49:A9:6D:8D:FC:48 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584ED3AEE49E358BA60D2A3CC780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/db90fb5b-7cb9-4e43-9044-a2d8a77b3f4f/db90fb5b-7cb9-4e43-9044-a2d8a77b3f4f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/db90fb5b-7cb9-4e43-9044-a2d8a77b3f4f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Aug 2026 20:36:28 +0000 Certificate not after: Wed 15 Nov 2028 21:36:28 +0000 Subordinate resources: AS: 11926 IP: 198.49.9.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d3:ae:e4:9e:35:8b:a6:0d:2a:3c:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 13 20:36:28 2026 GMT Not After : Nov 15 21:36:28 2028 GMT Subject: CN=db90fb5b-7cb9-4e43-9044-a2d8a77b3f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b5:99:5d:8f:dd:43:e2:51:c4:a0:03:0d:2e: 5a:a1:3c:67:4c:4b:36:7f:15:23:c0:d4:d2:43:77: 76:bf:9f:9e:c1:02:f7:32:65:4b:02:63:9a:f6:75: 56:db:1c:84:bb:94:38:09:c7:e0:b7:70:6b:23:2e: 55:4a:10:1c:13:c7:45:a0:c5:21:b6:b8:1a:db:ca: cb:21:45:ac:fb:c4:cb:8e:8e:89:77:8e:a3:c4:0f: 8f:0a:29:d4:b6:0d:5a:5e:2d:15:42:94:43:c0:31: 67:07:60:e1:d7:7b:73:c2:f9:32:1a:1e:29:b9:05: cc:b8:0b:de:e6:ea:d5:9a:ce:62:b7:2a:ff:da:8e: c8:fa:c0:30:c4:01:bb:64:81:58:90:2d:62:f8:35: d0:d6:67:b9:ee:ea:70:be:68:f6:bf:5d:62:79:7d: a1:cf:e5:b4:fe:25:ad:ef:f8:83:16:0d:a2:ee:1e: d3:35:39:82:92:d6:da:5b:6c:94:1a:36:fd:68:c7: b3:6f:9d:d0:f6:e0:18:5f:59:02:0a:11:20:27:e3: 09:c4:c6:54:a3:be:a0:7f:75:4a:32:d3:c9:45:ef: d7:e8:55:d3:fe:4f:33:f0:61:2b:0c:75:30:7b:e5: e9:8a:d9:a4:4c:32:ba:83:ea:98:37:9c:ea:0b:7e: 27:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F3:B1:7C:EE:B4:83:1B:26:13:02:07:2A:D4:49:A9:6D:8D:FC:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/db90fb5b-7cb9-4e43-9044-a2d8a77b3f4f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/db90fb5b-7cb9-4e43-9044-a2d8a77b3f4f/db90fb5b-7cb9-4e43-9044-a2d8a77b3f4f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 198.49.9.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11926 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c1:db:4c:6f:a0:a4:e4:70:85:68:ff:e1:4c:24:60:16:40: cc:3b:42:a8:4f:12:2e:c7:94:37:41:10:fd:ef:f9:4b:f7:09: 18:67:8f:51:de:4c:77:ff:43:6a:f6:a7:4c:db:40:b0:6f:0a: a3:1a:7b:e1:01:15:29:df:69:80:95:48:81:5b:27:15:f6:cf: cc:20:43:9f:b0:bb:b7:62:b6:40:a1:7d:c7:d0:db:e2:53:71: c6:6e:c3:22:a1:7b:ea:8c:54:e7:7e:bd:78:70:70:34:d7:8d: f5:3b:6c:50:c7:c7:10:97:e5:91:b1:a7:cf:27:56:60:86:0b: 67:18:59:b3:f0:a6:0d:f8:6a:5e:45:95:ee:34:66:95:b4:82: 1a:44:a7:e4:02:83:03:32:ae:05:28:a2:e0:f1:49:e0:7c:bf: 10:02:f7:e6:54:3f:c4:c0:31:1d:f0:1f:36:30:67:8c:36:cd: 44:16:97:1f:7d:e5:65:95:ac:88:2e:91:ed:01:80:84:97:e2: 70:4a:a0:2c:b5:1c:fd:c8:8f:51:60:7e:db:69:82:47:0d:43: e9:0b:0c:5a:a7:30:ea:af:17:fb:ae:d3:5e:86:a7:2f:50:65: fe:18:e5:db:3a:aa:2c:1c:04:d1:db:04:bd:91:5f:d1:52:b7: d6:a3:82:bf -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE7TruSeNYumDSo8x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgxMzIwMzYyOFoXDTI4MTExNTIxMzYyOFowLzEtMCsGA1UEAxMk ZGI5MGZiNWItN2NiOS00ZTQzLTkwNDQtYTJkOGE3N2IzZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirWZXY/dQ+JRxKADDS5aoTxnTEs2fxUjwNTS Q3d2v5+ewQL3MmVLAmOa9nVW2xyEu5Q4Ccfgt3BrIy5VShAcE8dFoMUhtrga28rL IUWs+8TLjo6Jd46jxA+PCinUtg1aXi0VQpRDwDFnB2Dh13tzwvkyGh4puQXMuAve 5urVms5ityr/2o7I+sAwxAG7ZIFYkC1i+DXQ1me57upwvmj2v11ieX2hz+W0/iWt 7/iDFg2i7h7TNTmCktbaW2yUGjb9aMezb53Q9uAYX1kCChEgJ+MJxMZUo76gf3VK MtPJRe/X6FXT/k8z8GErDHUwe+XpitmkTDK6g+qYN5zqC34nUQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFCvzsXzutIMbJhMCByrUSaltjfxIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9k YjkwZmI1Yi03Y2I5LTRlNDMtOTA0NC1hMmQ4YTc3YjNmNGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2RiOTBmYjViLTdjYjktNGU0My05 MDQ0LWEyZDhhNzdiM2Y0Zi9kYjkwZmI1Yi03Y2I5LTRlNDMtOTA0NC1hMmQ4YTc3 YjNmNGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGMQkwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC LpYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAFMHbTG+gpORwhWj/4UwkYBZAzDtCqE8SLseUN0EQ/e/5S/cJ GGePUd5Md/9DavanTNtAsG8Koxp74QEVKd9pgJVIgVsnFfbPzCBDn7C7t2K2QKF9 x9Db4lNxxm7DIqF76oxU5369eHBwNNeN9TtsUMfHEJflkbGnzydWYIYLZxhZs/Cm DfhqXkWV7jRmlbSCGkSn5AKDAzKuBSii4PFJ4Hy/EAL35lQ/xMAxHfAfNjBnjDbN RBaXH33lZZWsiC6R7QGAhJficEqgLLUc/ciPUWB+22mCRw1D6QsMWqcw6q8X+67T XoanL1Bl/hjl2zqqLBwE0dsEvZFf0VK31qOCvw== -----END CERTIFICATE-----Generated at Tue Aug 25 13:40:51 2026 by rpki-client