$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1a0a7bc8-1a30-41a5-85f0-a0337198a524.cer File: 1a0a7bc8-1a30-41a5-85f0-a0337198a524.cer (raw, json) Hash identifier: 0+Svf8wBYBilMh0uhTyacWwPp9Z/lj5uK/IumOZcTcs= Subject key identifier: 2A:93:2E:1F:07:FA:A7:F9:88:F3:78:79:F5:CB:2B:D4:1F:14:1A:70 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584E7F8920904E5E041ACD7A8A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1a0a7bc8-1a30-41a5-85f0-a0337198a524/1a0a7bc8-1a30-41a5-85f0-a0337198a524.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1a0a7bc8-1a30-41a5-85f0-a0337198a524/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jul 2026 17:12:28 +0000 Certificate not after: Mon 16 Oct 2028 17:12:28 +0000 Subordinate resources: AS: 27029 IP: 198.244.47.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:89:20:90:4e:5e:04:1a:cd:7a:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Jul 14 17:12:28 2026 GMT Not After : Oct 16 17:12:28 2028 GMT Subject: CN=1a0a7bc8-1a30-41a5-85f0-a0337198a524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a5:23:e1:31:2f:84:1d:f3:0f:61:b8:f2:01: 75:2d:94:1a:49:57:80:5e:40:36:66:cf:77:27:e4: 43:2f:10:ea:d8:c6:7a:9e:8a:ee:1a:65:06:3d:18: 34:d8:b0:b5:27:7c:99:c0:b1:da:01:85:90:7e:95: b6:26:0b:e9:c7:87:6c:82:dd:59:8c:5e:46:1f:fb: c2:58:e0:67:4f:16:91:44:9d:4d:3c:9a:5a:bf:1e: 60:58:b0:d5:02:b3:82:5e:33:6c:ea:4f:2f:00:66: 41:1c:b0:99:71:8a:95:24:28:4e:2c:f4:c5:2d:22: 5e:b0:00:56:b8:19:ae:49:44:d6:ad:32:a5:01:98: 1b:9e:83:9c:22:c0:ea:1e:92:df:e3:2b:4b:42:fa: 8a:ed:8a:14:46:81:7a:7c:1a:cc:bf:0e:a7:8c:41: 93:ac:a3:28:41:06:a7:f1:bc:5d:0a:e8:f3:81:f6: 0f:d8:58:6f:e0:54:ee:72:84:cf:15:74:73:63:f6: 4b:a8:21:1a:3d:e7:1e:09:b4:14:e4:51:09:b1:c8: e9:46:80:ea:7c:ed:04:ee:ed:fe:08:29:95:e6:72: 68:6c:f6:b2:76:a7:a1:28:2d:7c:51:df:74:32:69: 41:d9:b9:14:d3:5d:6d:e2:c8:d9:d5:ef:7f:74:8f: d0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:93:2E:1F:07:FA:A7:F9:88:F3:78:79:F5:CB:2B:D4:1F:14:1A:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1a0a7bc8-1a30-41a5-85f0-a0337198a524/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1a0a7bc8-1a30-41a5-85f0-a0337198a524/1a0a7bc8-1a30-41a5-85f0-a0337198a524.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 198.244.47.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27029 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:df:47:ed:df:f1:40:82:e6:cd:c6:f3:61:ff:93:f4:5a:9b: b2:5d:c0:4b:43:e1:be:2a:80:f4:1a:14:33:91:b8:bd:a2:f3: 71:8e:41:74:bb:c6:d6:63:de:f5:90:ea:a0:f4:ff:41:10:08: 35:fd:0f:99:b1:e3:a3:0d:42:1b:12:f2:ff:4f:dd:f1:15:28: 87:22:6a:d2:69:38:f7:9f:8a:a0:bb:c0:47:fc:0d:72:93:e4: 5c:73:39:e8:46:0d:c8:f7:92:50:9a:8a:1c:e4:e3:ff:64:2b: 96:bc:15:28:83:0f:6a:10:f4:08:4c:c0:c0:85:71:d1:a3:60: 96:26:9e:93:b2:c9:d9:1c:cd:12:1b:9a:1e:ad:33:5d:89:cc: 82:e9:80:89:20:2b:6c:45:5c:41:e3:c3:2c:ad:e7:a6:ad:68: 38:c3:ba:55:a9:1f:ea:96:dc:bf:49:87:83:70:28:8f:80:8b: 8c:94:f0:84:e6:11:4e:bc:02:25:c3:ef:f1:2e:75:77:26:24: bc:6b:73:f7:f0:ca:61:74:e8:18:0a:14:93:da:f5:ba:c5:8f: 04:11:99:06:85:b2:3b:65:b1:09:17:16:67:b7:29:a6:b2:ad: 83:ec:c9:c7:7e:ff:ec:78:68:32:97:77:ad:12:d4:1b:d9:17: 8d:d3:d0:83 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE5/iSCQTl4EGs16igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDcxNDE3MTIyOFoXDTI4MTAxNjE3MTIyOFowLzEtMCsGA1UEAxMk MWEwYTdiYzgtMWEzMC00MWE1LTg1ZjAtYTAzMzcxOThhNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqUj4TEvhB3zD2G48gF1LZQaSVeAXkA2Zs93 J+RDLxDq2MZ6noruGmUGPRg02LC1J3yZwLHaAYWQfpW2Jgvpx4dsgt1ZjF5GH/vC WOBnTxaRRJ1NPJpavx5gWLDVArOCXjNs6k8vAGZBHLCZcYqVJChOLPTFLSJesABW uBmuSUTWrTKlAZgbnoOcIsDqHpLf4ytLQvqK7YoURoF6fBrMvw6njEGTrKMoQQan 8bxdCujzgfYP2Fhv4FTucoTPFXRzY/ZLqCEaPeceCbQU5FEJscjpRoDqfO0E7u3+ CCmV5nJobPaydqehKC18Ud90MmlB2bkU011t4sjZ1e9/dI/QTwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFCqTLh8H+qf5iPN4efXLK9QfFBpwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8x YTBhN2JjOC0xYTMwLTQxYTUtODVmMC1hMDMzNzE5OGE1MjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzFhMGE3YmM4LTFhMzAtNDFhNS04 NWYwLWEwMzM3MTk4YTUyNC8xYTBhN2JjOC0xYTMwLTQxYTUtODVmMC1hMDMzNzE5 OGE1MjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADG9C8wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC aZUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAm99H7d/xQILmzcbzYf+T9Fqbsl3AS0PhviqA9BoUM5G4vaLz cY5BdLvG1mPe9ZDqoPT/QRAINf0PmbHjow1CGxLy/0/d8RUohyJq0mk495+KoLvA R/wNcpPkXHM56EYNyPeSUJqKHOTj/2QrlrwVKIMPahD0CEzAwIVx0aNgliaek7LJ 2RzNEhuaHq0zXYnMgumAiSArbEVcQePDLK3npq1oOMO6Vakf6pbcv0mHg3Aoj4CL jJTwhOYRTrwCJcPv8S51dyYkvGtz9/DKYXToGAoUk9r1usWPBBGZBoWyO2WxCRcW Z7cpprKtg+zJx37/7HhoMpd3rRLUG9kXjdPQgw== -----END CERTIFICATE-----Generated at Thu Jul 23 19:00:36 2026 by rpki-client