$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212.cer File: 2251ce17-87bb-4c44-9203-7a49e0687212.cer (raw, json) Hash identifier: qC0AuIokmAPJ0uxJB9Vx/dAL8cj5xNjbwj5lH8todh0= Subject key identifier: 60:D7:AD:ED:DE:A3:92:0A:14:35:38:1D:B9:EF:96:42:5C:6B:17:D5 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E5DEB04F3829F8C2FDB474AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212/2251ce17-87bb-4c44-9203-7a49e0687212.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 16:12:13 +0000 Certificate not after: Wed 29 Mar 2028 03:51:18 +0000 Subordinate resources: AS: 402104 IP: 198.203.150.0/24 IP: 2602:f47a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:eb:04:f3:82:9f:8c:2f:db:47:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jul 2 16:12:13 2026 GMT Not After : Mar 29 03:51:18 2028 GMT Subject: CN=2251ce17-87bb-4c44-9203-7a49e0687212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ef:e7:aa:94:e8:38:2e:31:aa:91:f2:e4:85: 71:e2:09:be:d4:c5:24:4a:1e:22:eb:22:f1:13:1c: ca:e8:07:ef:b6:d4:67:35:19:9c:7a:6a:9b:8e:38: 29:77:cf:35:08:94:a4:b5:4a:3f:16:b6:2c:9e:a7: 26:cc:b0:0d:44:d4:22:a7:2f:8e:c4:8e:7f:db:9a: f1:dd:44:bc:90:21:06:b3:ad:b7:13:a2:87:c7:e0: 1e:2d:ab:e0:41:d4:84:dd:9a:99:fe:69:59:a1:54: 28:b8:27:51:ac:b9:3e:df:1d:5c:1d:89:3e:a2:a9: 10:ab:b2:e0:47:29:18:f7:d4:47:fc:d2:6a:28:ea: 38:da:cc:09:04:7a:83:2b:1a:29:58:fe:db:c6:8a: 6e:43:e6:e7:6f:0d:96:cf:a0:42:30:c3:12:ae:36: 79:0e:2b:fe:40:f8:eb:e6:4d:06:25:9e:bb:22:e6: dc:63:74:74:8c:10:d5:81:ea:18:79:cb:d0:2d:b7: 54:6d:99:df:b7:fc:aa:84:15:74:a8:1d:0e:e3:b1: 00:79:26:dc:c1:e6:3d:7d:a8:37:6b:4b:aa:de:74: 04:82:f7:87:b6:4f:df:2d:7d:e1:e4:07:0f:22:16: 32:2a:18:f8:8d:b5:8e:d1:07:65:b8:5b:b5:83:4d: 34:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D7:AD:ED:DE:A3:92:0A:14:35:38:1D:B9:EF:96:42:5C:6B:17:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2251ce17-87bb-4c44-9203-7a49e0687212/2251ce17-87bb-4c44-9203-7a49e0687212.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 198.203.150.0/24 IPv6: 2602:f47a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402104 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:fc:74:e8:8c:a8:aa:92:08:19:15:9b:f9:b6:e0:cd:bf:f6: 8a:e8:d1:d2:70:de:2d:ec:b0:9c:40:c1:ab:17:ee:7c:63:a3: 47:38:c0:ee:37:96:5a:db:74:a7:41:6d:ac:18:6e:b6:79:bd: be:6e:d7:b7:38:54:e2:68:67:d0:45:a9:c0:25:89:66:f0:fe: aa:68:4e:d5:34:bc:05:0b:86:d9:40:53:8b:1c:4c:bd:4d:ed: 8b:65:b1:85:d5:f5:6c:1d:28:99:88:6a:73:7c:c3:b3:c8:5b: bd:27:00:f6:d3:2b:22:b0:8e:e2:08:31:aa:0a:e7:7f:1b:88: ca:ff:4a:37:75:2b:06:9a:db:4d:b0:aa:18:20:2f:b3:a8:df: 3e:7a:87:eb:e2:12:38:d8:0c:1a:36:a2:ad:71:f0:2f:5b:40: 3e:2e:0b:10:5c:53:80:3c:b6:02:55:3f:10:a5:c1:91:4c:99: ca:5c:3a:83:54:7d:3f:e8:0a:a7:d7:83:c5:8d:ad:8f:6f:d4: 72:64:77:6e:a0:49:9d:f4:5e:6f:73:5b:01:27:cd:c5:e6:ca: f2:81:1e:d7:b6:6e:29:71:44:d4:12:f8:32:b9:d9:58:4b:dd: 4d:1b:b0:46:50:47:a7:6b:f0:6d:1d:0e:05:00:ff:72:be:b8: 78:31:6f:2f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5d6wTzgp+ML9tHSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDcwMjE2MTIxM1oXDTI4MDMyOTAzNTExOFowLzEtMCsGA1UEAxMk MjI1MWNlMTctODdiYi00YzQ0LTkyMDMtN2E0OWUwNjg3MjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu/nqpToOC4xqpHy5IVx4gm+1MUkSh4i6yLx ExzK6AfvttRnNRmcemqbjjgpd881CJSktUo/FrYsnqcmzLANRNQipy+OxI5/25rx 3US8kCEGs623E6KHx+AeLavgQdSE3ZqZ/mlZoVQouCdRrLk+3x1cHYk+oqkQq7Lg RykY99RH/NJqKOo42swJBHqDKxopWP7bxopuQ+bnbw2Wz6BCMMMSrjZ5Div+QPjr 5k0GJZ67IubcY3R0jBDVgeoYecvQLbdUbZnft/yqhBV0qB0O47EAeSbcweY9fag3 a0uq3nQEgveHtk/fLX3h5AcPIhYyKhj4jbWO0QdluFu1g0000wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGDXre3eo5IKFDU4HbnvlkJcaxfVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8y MjUxY2UxNy04N2JiLTRjNDQtOTIwMy03YTQ5ZTA2ODcyMTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzIyNTFjZTE3LTg3YmItNGM0NC05 MjAzLTdhNDllMDY4NzIxMi8yMjUxY2UxNy04N2JiLTRjNDQtOTIwMy03YTQ5ZTA2 ODcyMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGy5YwDgQCAAIwCAMGACYC9HoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiuDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBP/HTojKiqkggZFZv5tuDNv/aK 6NHScN4t7LCcQMGrF+58Y6NHOMDuN5Za23SnQW2sGG62eb2+bte3OFTiaGfQRanA JYlm8P6qaE7VNLwFC4bZQFOLHEy9Te2LZbGF1fVsHSiZiGpzfMOzyFu9JwD20ysi sI7iCDGqCud/G4jK/0o3dSsGmttNsKoYIC+zqN8+eofr4hI42AwaNqKtcfAvW0A+ LgsQXFOAPLYCVT8QpcGRTJnKXDqDVH0/6Aqn14PFja2Pb9RyZHduoEmd9F5vc1sB J83F5srygR7Xtm4pcUTUEvgyudlYS91NG7BGUEena/BtHQ4FAP9yvrh4MW8v -----END CERTIFICATE-----Generated at Sun Jul 12 21:31:13 2026 by rpki-client