$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d.cer File: c981048b-7713-4799-b5e0-c27f4b3bdb1d.cer (raw, json) Hash identifier: RZXAOpelM92RKsQpd2dW+QdTLFVFmUnigkAA9nByfD8= Subject key identifier: 31:F2:CF:F0:88:B5:9B:23:59:D6:D7:FB:E5:87:81:00:0A:ED:E7:61 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584E8FE3AC48A8FBB1B9540A8E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d/c981048b-7713-4799-b5e0-c27f4b3bdb1d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Jul 2026 13:47:50 +0000 Certificate not after: Sun 22 Oct 2028 13:47:50 +0000 Subordinate resources: IP: 198.52.36.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:e3:ac:48:a8:fb:b1:b9:54:0a:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Jul 20 13:47:50 2026 GMT Not After : Oct 22 13:47:50 2028 GMT Subject: CN=c981048b-7713-4799-b5e0-c27f4b3bdb1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:05:39:76:4d:72:17:52:dd:c7:68:54:c6:39: 3d:a3:f7:cc:28:24:78:c3:be:3b:2c:14:02:44:d1: ad:b2:b0:88:5e:25:99:ad:f6:54:ad:95:28:96:8a: b5:25:19:3c:53:38:97:fc:60:62:41:6b:01:ca:0e: 80:45:26:0d:ba:6c:43:fd:46:cb:84:fe:c3:c1:7e: 45:e5:f4:07:57:9c:5d:f8:e0:7b:2f:ee:b1:b3:9e: 8d:55:a4:b4:9d:9c:a1:e2:21:00:1e:e5:bb:b1:21: d0:45:67:06:f6:7e:95:65:7b:f2:eb:35:5c:35:01: 20:bf:9b:40:c3:b4:dc:5a:ff:b9:79:f6:c6:55:fe: 3c:97:80:f9:96:36:1c:cc:16:02:6a:c8:ef:3c:d5: a3:f6:96:62:f7:51:06:c8:6c:05:75:c4:2d:a7:49: 38:16:ac:0f:e9:bb:3f:63:4a:ef:16:76:52:50:f1: f6:0a:b4:29:f1:8b:09:b4:a2:59:ee:00:c1:be:df: 28:02:f9:13:a7:6c:9f:19:e0:a7:6c:3f:47:57:75: 30:29:b7:2a:45:64:fb:98:1b:83:71:3d:8c:3c:55: ac:1a:7e:b0:31:37:2c:dc:72:3b:ca:3e:d8:15:46: 33:da:a5:f3:52:e1:f3:1d:0a:1a:4a:d5:af:78:01: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F2:CF:F0:88:B5:9B:23:59:D6:D7:FB:E5:87:81:00:0A:ED:E7:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c981048b-7713-4799-b5e0-c27f4b3bdb1d/c981048b-7713-4799-b5e0-c27f4b3bdb1d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv4: 198.52.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:93:1a:90:44:f1:f4:34:76:53:01:3a:bd:6d:56:2b:60:14: 52:18:b9:18:bf:18:17:bb:04:2a:cd:53:2f:7f:7a:93:67:f4: b7:c5:d4:ab:f0:a0:f1:b0:05:c7:12:d4:de:4f:75:b4:19:b1: ed:f1:38:82:14:a0:41:17:ac:7a:34:a1:2b:34:de:59:bf:b9: d5:ba:ca:53:79:67:0e:11:3d:fd:3a:23:1c:8f:66:c4:d6:f2: 07:8d:42:c5:40:88:d1:6e:67:1b:2f:d7:a1:19:ad:5f:a4:c9: 9a:e7:d5:4a:d1:8a:aa:7c:5f:28:68:95:92:b7:b1:6c:af:49: 97:40:d1:29:a7:87:52:2d:c9:86:e7:44:1c:6e:be:49:a5:d0: f4:7a:a0:ad:ff:2a:0e:e7:d1:89:94:d2:39:62:1f:1b:8a:30: 62:65:a4:59:01:72:4a:bf:80:14:b5:63:84:59:8b:a4:66:dd: a7:14:bb:ea:91:ad:74:01:ba:82:b3:d3:bc:f1:91:82:4a:32: 80:1c:8f:ad:69:b0:fd:c1:e6:ff:3c:f5:3c:63:99:c3:66:55: f9:7e:6a:f4:23:6d:9f:7f:2b:7f:6f:c9:4b:ad:2c:cd:5b:b3: 96:ba:30:d2:da:06:aa:64:03:36:62:e3:7a:f0:e5:4d:ac:c6: 81:0b:ba:67 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE6P46xIqPuxuVQKjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDcyMDEzNDc1MFoXDTI4MTAyMjEzNDc1MFowLzEtMCsGA1UEAxMk Yzk4MTA0OGItNzcxMy00Nzk5LWI1ZTAtYzI3ZjRiM2JkYjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQU5dk1yF1Ldx2hUxjk9o/fMKCR4w747LBQC RNGtsrCIXiWZrfZUrZUoloq1JRk8UziX/GBiQWsByg6ARSYNumxD/UbLhP7DwX5F 5fQHV5xd+OB7L+6xs56NVaS0nZyh4iEAHuW7sSHQRWcG9n6VZXvy6zVcNQEgv5tA w7TcWv+5efbGVf48l4D5ljYczBYCasjvPNWj9pZi91EGyGwFdcQtp0k4FqwP6bs/ Y0rvFnZSUPH2CrQp8YsJtKJZ7gDBvt8oAvkTp2yfGeCnbD9HV3UwKbcqRWT7mBuD cT2MPFWsGn6wMTcs3HI7yj7YFUYz2qXzUuHzHQoaStWveAHoQwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDHyz/CItZsjWdbX++WHgQAK7edhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9j OTgxMDQ4Yi03NzEzLTQ3OTktYjVlMC1jMjdmNGIzYmRiMWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2M5ODEwNDhiLTc3MTMtNDc5OS1i NWUwLWMyN2Y0YjNiZGIxZC9jOTgxMDQ4Yi03NzEzLTQ3OTktYjVlMC1jMjdmNGIz YmRiMWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGNCQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAh5MakETx9DR2UwE6vW1W K2AUUhi5GL8YF7sEKs1TL396k2f0t8XUq/Cg8bAFxxLU3k91tBmx7fE4ghSgQRes ejShKzTeWb+51brKU3lnDhE9/TojHI9mxNbyB41CxUCI0W5nGy/XoRmtX6TJmufV StGKqnxfKGiVkrexbK9Jl0DRKaeHUi3JhudEHG6+SaXQ9Hqgrf8qDufRiZTSOWIf G4owYmWkWQFySr+AFLVjhFmLpGbdpxS76pGtdAG6grPTvPGRgkoygByPrWmw/cHm /zz1PGOZw2ZV+X5q9CNtn38rf2/JS60szVuzlrow0toGqmQDNmLjevDlTazGgQu6 Zw== -----END CERTIFICATE-----Generated at Thu Jul 23 20:05:28 2026 by rpki-client