$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/01f9e442-d27b-4932-b99a-25bcfd81a9f9.cer File: 01f9e442-d27b-4932-b99a-25bcfd81a9f9.cer (raw, json) Hash identifier: giMEaH9SGYLCoeF6T2wAoe0ZA7u4X/AoTjpPK/4jLn4= Subject key identifier: 39:95:42:E5:7E:D5:82:49:65:74:1B:93:AC:7F:62:E5:2B:DD:B4:E4 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E5ABC98CB8DBEA32EC5639500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/01f9e442-d27b-4932-b99a-25bcfd81a9f9/01f9e442-d27b-4932-b99a-25bcfd81a9f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/01f9e442-d27b-4932-b99a-25bcfd81a9f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 12:51:16 +0000 Certificate not after: Wed 22 Mar 2028 13:39:54 +0000 Subordinate resources: AS: 401757 IP: 66.85.61.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:bc:98:cb:8d:be:a3:2e:c5:63:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jul 1 12:51:16 2026 GMT Not After : Mar 22 13:39:54 2028 GMT Subject: CN=01f9e442-d27b-4932-b99a-25bcfd81a9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:01:2d:9f:48:98:92:ff:61:02:8f:27:f6: af:ea:bd:48:a4:88:db:e6:c5:1c:e6:8e:1d:be:7a: 3a:90:31:58:c6:e2:49:cc:56:33:cf:fe:e4:7e:03: 16:ab:e7:f5:dd:d5:af:ad:dd:8d:67:d8:4c:ec:55: 6c:99:ab:bf:63:aa:96:4d:e1:0e:fe:40:13:80:70: 78:2a:b5:c5:88:26:33:5f:bb:0f:65:df:9c:7f:b9: 34:4b:3a:fc:6a:13:72:fc:c8:35:8e:48:a0:0a:77: 14:81:22:0c:d3:40:3e:aa:34:85:45:83:8f:fa:df: 9f:e7:ca:c4:19:17:5d:26:ed:16:dc:18:a9:0c:a7: f4:5b:59:98:50:b0:1c:2d:50:6f:65:d0:45:e8:d8: ed:9c:6a:88:08:53:85:d3:60:9e:22:af:11:1c:02: e9:83:be:86:d5:50:bf:26:2f:e6:3c:a2:cd:8b:97: 3f:bb:0c:64:69:0e:91:e4:05:33:6a:8d:ae:20:45: 54:9c:64:36:e1:f9:fc:db:13:0e:66:62:12:7c:4b: 72:5b:78:7b:6c:ce:12:8f:8e:02:04:c0:ad:42:2a: ca:c3:38:31:6f:a9:1a:cc:ca:66:77:26:31:54:3e: a3:ff:b8:5d:b3:04:b5:08:c6:ca:bf:1c:88:31:56: 17:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:95:42:E5:7E:D5:82:49:65:74:1B:93:AC:7F:62:E5:2B:DD:B4:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/01f9e442-d27b-4932-b99a-25bcfd81a9f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/01f9e442-d27b-4932-b99a-25bcfd81a9f9/01f9e442-d27b-4932-b99a-25bcfd81a9f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 66.85.61.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401757 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:36:0c:50:b8:98:bf:2d:8f:fa:ec:d5:66:99:a7:26:81:dd: e7:bc:b1:cf:af:1b:8c:e0:8f:4d:2c:7b:a2:31:14:45:54:26: 46:ee:6a:34:5c:bc:2b:86:72:c4:29:53:98:9e:fe:d3:6a:61: 99:0c:23:b0:5b:79:f2:18:d1:3b:90:cd:74:14:66:38:67:05: b7:9c:10:e8:ac:e3:94:90:be:98:34:80:65:4a:5f:09:49:1e: b5:d1:e9:7a:6c:cb:ce:09:78:25:33:3a:62:e6:2d:95:7c:0d: 95:85:68:30:db:1d:d5:75:ae:32:f3:4e:c9:e3:b0:83:f2:81: 02:d6:eb:81:fe:fc:6e:89:86:a9:f8:01:08:de:22:89:43:e4: 0c:3d:ef:ee:66:60:22:8d:e0:76:bd:47:95:5c:62:d8:20:a5: a3:08:79:ed:6d:19:ba:ac:dd:9d:0e:1d:c6:c4:f3:72:72:4d: 1f:93:22:61:cd:f7:1b:e4:d9:02:67:32:85:94:24:35:df:72: 19:b3:c1:12:1e:79:d3:fe:44:b3:f9:75:e0:22:80:43:df:37: b0:ac:01:02:25:a2:eb:6f:83:71:f6:e7:cb:e3:e4:8b:7f:09: 66:8f:7b:fc:77:1c:47:a0:86:45:13:7e:f4:9a:00:b4:b7:1f: 2f:a3:cc:d4 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5avJjLjb6jLsVjlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDcwMTEyNTExNloXDTI4MDMyMjEzMzk1NFowLzEtMCsGA1UEAxMk MDFmOWU0NDItZDI3Yi00OTMyLWI5OWEtMjViY2ZkODFhOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn8BLZ9ImJL/YQKPJ/av6r1IpIjb5sUc5o4d vno6kDFYxuJJzFYzz/7kfgMWq+f13dWvrd2NZ9hM7FVsmau/Y6qWTeEO/kATgHB4 KrXFiCYzX7sPZd+cf7k0Szr8ahNy/Mg1jkigCncUgSIM00A+qjSFRYOP+t+f58rE GRddJu0W3BipDKf0W1mYULAcLVBvZdBF6NjtnGqICFOF02CeIq8RHALpg76G1VC/ Ji/mPKLNi5c/uwxkaQ6R5AUzao2uIEVUnGQ24fn82xMOZmISfEtyW3h7bM4Sj44C BMCtQirKwzgxb6kazMpmdyYxVD6j/7hdswS1CMbKvxyIMVYXtQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDmVQuV+1YJJZXQbk6x/YuUr3bTkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8w MWY5ZTQ0Mi1kMjdiLTQ5MzItYjk5YS0yNWJjZmQ4MWE5ZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzAxZjllNDQyLWQyN2ItNDkzMi1i OTlhLTI1YmNmZDgxYTlmOS8wMWY5ZTQ0Mi1kMjdiLTQ5MzItYjk5YS0yNWJjZmQ4 MWE5ZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABCVT0wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiFdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADs2DFC4mL8tj/rs1WaZpyaB3ee8sc+vG4zgj00se6IxFEVU JkbuajRcvCuGcsQpU5ie/tNqYZkMI7BbefIY0TuQzXQUZjhnBbecEOis45SQvpg0 gGVKXwlJHrXR6Xpsy84JeCUzOmLmLZV8DZWFaDDbHdV1rjLzTsnjsIPygQLW64H+ /G6Jhqn4AQjeIolD5Aw97+5mYCKN4Ha9R5VcYtggpaMIee1tGbqs3Z0OHcbE83Jy TR+TImHN9xvk2QJnMoWUJDXfchmzwRIeedP+RLP5deAigEPfN7CsAQIloutvg3H2 58vj5It/CWaPe/x3HEeghkUTfvSaALS3Hy+jzNQ= -----END CERTIFICATE-----Generated at Sun Jul 12 21:29:30 2026 by rpki-client