$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22ac6a01-46f6-45e7-b5e7-c3b0e4e7f5b7.cer File: 22ac6a01-46f6-45e7-b5e7-c3b0e4e7f5b7.cer (raw, json) Hash identifier: 5Komu/DRINtScq4wttvabrMhmN/M1xsseuImTUqjDg0= Subject key identifier: 8F:C8:18:E0:52:4F:26:6D:0A:A3:75:FA:5A:B5:64:07:20:F3:4C:A6 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584E84817E9C88C93E0DE604A500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22ac6a01-46f6-45e7-b5e7-c3b0e4e7f5b7/22ac6a01-46f6-45e7-b5e7-c3b0e4e7f5b7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22ac6a01-46f6-45e7-b5e7-c3b0e4e7f5b7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Jul 2026 11:56:08 +0000 Certificate not after: Wed 18 Oct 2028 11:56:08 +0000 Subordinate resources: AS: 13700 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:81:7e:9c:88:c9:3e:0d:e6:04:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Jul 16 11:56:08 2026 GMT Not After : Oct 18 11:56:08 2028 GMT Subject: CN=22ac6a01-46f6-45e7-b5e7-c3b0e4e7f5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:d1:d2:4f:ea:90:56:8e:83:a7:43:7e:b3: f2:07:bf:48:14:8f:14:56:4c:0e:0b:cd:9a:84:8f: ae:dd:7b:3b:27:70:79:d2:be:8f:69:30:3f:fa:14: 23:0f:63:ed:79:02:38:30:91:39:fe:af:57:c8:ad: 56:a5:7f:ee:8c:bb:0c:36:9c:53:c5:b9:56:0e:e5: 5f:8a:e2:d3:b7:a6:95:fc:ad:3a:3c:4e:da:c6:c3: f3:e5:98:0d:ca:69:58:0a:57:c0:46:c1:c0:91:f1: a5:ee:99:57:c4:89:44:c5:7c:18:6c:ec:c5:c7:6c: 0d:30:9d:a8:af:61:d0:3a:c1:24:d7:3e:95:da:1e: 8c:a8:e2:e7:c5:ca:30:f8:d8:c8:f1:28:b0:05:87: 34:22:91:d5:69:2f:15:ad:75:35:8b:ff:0d:bd:57: 2e:e0:44:29:32:97:ea:da:51:ae:ea:d7:66:45:c9: e5:cf:24:fd:bf:ce:f2:5c:5b:32:fb:f2:57:a4:81: b6:56:bb:42:03:c0:0a:1e:27:a8:cf:a2:ed:05:11: db:e5:64:c2:dc:9e:38:f3:c9:b1:0f:f1:8c:4c:c9: a4:73:4e:d3:21:3e:0e:b3:e4:4e:5e:93:1f:08:b8: 19:b0:79:34:7d:8a:aa:53:87:03:b3:60:78:d2:09: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C8:18:E0:52:4F:26:6D:0A:A3:75:FA:5A:B5:64:07:20:F3:4C:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22ac6a01-46f6-45e7-b5e7-c3b0e4e7f5b7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22ac6a01-46f6-45e7-b5e7-c3b0e4e7f5b7/22ac6a01-46f6-45e7-b5e7-c3b0e4e7f5b7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 13700 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:07:a4:60:c4:77:77:80:75:3d:6a:e1:14:8e:75:38:f2:a7: 94:0b:d8:b4:8a:93:f9:57:e3:17:8d:ea:3f:b2:f6:d7:d2:37: f0:fa:1d:77:76:6c:67:05:57:b9:24:e7:26:f0:6d:03:73:a7: 1f:55:b6:0f:0f:4a:eb:0a:18:65:0e:62:04:f8:4f:9e:a5:31: 5b:4d:87:78:d3:bb:be:2e:57:57:a0:ef:38:e7:9f:b3:fe:b0: d9:3d:c8:b3:9b:a2:74:a8:0c:f8:c5:57:f0:73:5d:0b:29:1b: a1:62:85:2f:c3:4b:ab:1c:7d:29:0e:75:ed:a1:b8:bc:12:e6: a1:3d:f7:d8:e0:5a:cf:d0:8d:dd:50:27:37:f0:09:94:f5:d6: 44:59:23:7c:27:22:51:39:47:a7:b6:9c:4f:22:6a:3d:61:52: b3:eb:97:75:b0:06:18:45:6d:21:35:75:af:f9:17:30:9f:db: 14:83:04:41:3d:88:57:15:2f:9e:7c:da:09:ee:e9:a2:c7:00: a1:cc:54:ac:40:fb:ca:35:62:77:ce:87:7d:d7:b4:54:38:68: 18:d9:48:2f:0f:e6:e0:a7:65:1a:cc:f4:3a:c9:56:de:a8:97: 45:e0:12:e9:43:46:ac:08:e1:f3:10:2b:48:bf:38:fe:9b:67: f2:33:4e:68 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE6EgX6ciMk+DeYEpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDcxNjExNTYwOFoXDTI4MTAxODExNTYwOFowLzEtMCsGA1UEAxMk MjJhYzZhMDEtNDZmNi00NWU3LWI1ZTctYzNiMGU0ZTdmNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb3R0k/qkFaOg6dDfrPyB79IFI8UVkwOC82a hI+u3Xs7J3B50r6PaTA/+hQjD2PteQI4MJE5/q9XyK1WpX/ujLsMNpxTxblWDuVf iuLTt6aV/K06PE7axsPz5ZgNymlYClfARsHAkfGl7plXxIlExXwYbOzFx2wNMJ2o r2HQOsEk1z6V2h6MqOLnxcow+NjI8SiwBYc0IpHVaS8VrXU1i/8NvVcu4EQpMpfq 2lGu6tdmRcnlzyT9v87yXFsy+/JXpIG2VrtCA8AKHieoz6LtBRHb5WTC3J4488mx D/GMTMmkc07TIT4Os+ROXpMfCLgZsHk0fYqqU4cDs2B40gn/4wIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFI/IGOBSTyZtCqN1+lq1ZAcg80ymMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8y MmFjNmEwMS00NmY2LTQ1ZTctYjVlNy1jM2IwZTRlN2Y1YjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyLzIyYWM2YTAxLTQ2ZjYtNDVlNy1i NWU3LWMzYjBlNGU3ZjViNy8yMmFjNmEwMS00NmY2LTQ1ZTctYjVlNy1jM2IwZTRl N2Y1YjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICNYQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADQekYMR3d4B1PWrhFI51OPKnlAvY tIqT+VfjF43qP7L219I38Podd3ZsZwVXuSTnJvBtA3OnH1W2Dw9K6woYZQ5iBPhP nqUxW02HeNO7vi5XV6DvOOefs/6w2T3Is5uidKgM+MVX8HNdCykboWKFL8NLqxx9 KQ517aG4vBLmoT332OBaz9CN3VAnN/AJlPXWRFkjfCciUTlHp7acTyJqPWFSs+uX dbAGGEVtITV1r/kXMJ/bFIMEQT2IVxUvnnzaCe7poscAocxUrED7yjVid86Hfde0 VDhoGNlILw/m4KdlGsz0OslW3qiXReAS6UNGrAjh8xArSL84/ptn8jNOaA== -----END CERTIFICATE-----Generated at Thu Jul 23 20:04:30 2026 by rpki-client