$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/39880afc-879c-4325-b3d6-8f95d74a4ee2.cer File: 39880afc-879c-4325-b3d6-8f95d74a4ee2.cer (raw, json) Hash identifier: nNmf1++y6k/gOf6raVkrNgpxXgOvX0FhtIspiXHhfYE= Subject key identifier: D0:37:70:F0:19:B1:8E:3D:B6:5A:9A:96:40:1F:C5:00:C3:F5:40:9C Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E5DEB0480933456CA6222B9E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/39880afc-879c-4325-b3d6-8f95d74a4ee2/39880afc-879c-4325-b3d6-8f95d74a4ee2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/39880afc-879c-4325-b3d6-8f95d74a4ee2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 16:12:13 +0000 Certificate not after: Sun 02 Apr 2028 18:17:44 +0000 Subordinate resources: AS: 402106 IP: 198.206.204.0/24 IP: 2602:f480::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:eb:04:80:93:34:56:ca:62:22:b9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jul 2 16:12:13 2026 GMT Not After : Apr 2 18:17:44 2028 GMT Subject: CN=39880afc-879c-4325-b3d6-8f95d74a4ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:50:32:49:47:25:e2:cb:b9:bf:d1:cb:4b:02: 36:99:e7:ae:7a:c2:89:2e:b6:91:39:e2:99:ed:bf: 39:e4:6c:11:b1:c2:0e:40:d5:77:7b:d4:8d:8b:31: 9d:c1:00:d4:30:7a:bd:7a:a8:e3:34:a0:47:88:d5: af:4e:21:78:f0:bd:cc:fc:1a:1d:f8:a1:e2:f7:c7: 1d:a7:f0:28:e5:b8:aa:b8:62:ed:d4:5a:99:61:ce: d1:be:5e:71:a0:b8:ca:ce:ed:ea:83:39:14:0e:74: 3d:c9:00:5e:41:37:06:9e:d3:5c:ba:da:78:08:b1: 4d:11:57:a3:3c:ad:8a:b6:ec:0f:7b:a7:47:e0:37: 36:81:77:50:03:55:e1:7d:5b:a4:c7:ef:33:6d:50: 27:62:fb:a5:16:57:57:f6:77:30:0b:3c:90:ac:64: b2:32:70:5f:85:52:df:11:b7:66:c6:f4:bb:b4:3e: e5:d4:a8:cf:d9:d0:84:f6:65:8e:94:4f:32:c3:d6: 37:9e:37:49:e7:e8:f3:bd:04:51:64:49:c3:ad:4e: 48:ee:d5:11:8b:74:17:e2:38:16:cb:e7:e1:55:f9: f1:1e:00:9c:2e:a4:bd:e8:dc:62:aa:28:47:b8:6f: 64:4b:5a:2a:4b:33:d7:65:2b:33:9f:ec:2a:0e:ba: ff:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:37:70:F0:19:B1:8E:3D:B6:5A:9A:96:40:1F:C5:00:C3:F5:40:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/39880afc-879c-4325-b3d6-8f95d74a4ee2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/39880afc-879c-4325-b3d6-8f95d74a4ee2/39880afc-879c-4325-b3d6-8f95d74a4ee2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 198.206.204.0/24 IPv6: 2602:f480::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402106 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:3f:54:bd:67:35:95:35:bb:2b:d0:18:a4:59:bd:08:88:d8: 99:54:57:67:d1:ce:01:65:74:6b:ee:64:79:7e:4d:8d:fd:82: 30:47:a2:a8:f7:49:38:93:05:8f:a7:7c:0b:8f:5f:7e:72:28: d0:66:ad:db:de:85:09:af:76:37:56:9a:20:a0:fc:05:68:28: 7a:c9:95:28:c5:03:fb:52:f4:7d:ef:c7:6c:c2:e7:eb:c3:fd: f4:21:f4:00:c2:f4:ad:65:9b:95:be:f0:79:04:66:67:24:80: 03:4a:4e:e5:52:14:d8:9c:dd:24:98:56:1c:31:b6:cf:db:57: 94:a3:13:e6:17:01:47:1f:3c:d2:a3:83:71:f7:98:bc:a3:80: d8:9d:a2:99:86:85:a2:79:8f:a7:f4:42:6d:88:94:28:98:f2: 45:4b:73:35:62:14:4f:bc:3b:d8:f0:40:b4:d0:d4:d0:a6:25: 02:53:c4:06:b7:eb:88:52:5a:fa:c8:9f:11:0e:83:bf:0f:5d: bb:5e:06:95:c9:d6:da:05:aa:2d:28:a0:21:1a:42:55:8b:cd: d6:d7:07:52:eb:16:5e:7c:e5:df:1f:c3:86:09:32:71:b3:6a: 43:16:7f:cc:7a:b8:89:19:59:22:60:60:2d:57:ed:53:bd:ec: aa:e0:0a:d9 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5d6wSAkzRWymIiueAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDcwMjE2MTIxM1oXDTI4MDQwMjE4MTc0NFowLzEtMCsGA1UEAxMk Mzk4ODBhZmMtODc5Yy00MzI1LWIzZDYtOGY5NWQ3NGE0ZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVAySUcl4su5v9HLSwI2meeuesKJLraROeKZ 7b855GwRscIOQNV3e9SNizGdwQDUMHq9eqjjNKBHiNWvTiF48L3M/Bod+KHi98cd p/Ao5biquGLt1FqZYc7Rvl5xoLjKzu3qgzkUDnQ9yQBeQTcGntNcutp4CLFNEVej PK2KtuwPe6dH4Dc2gXdQA1XhfVukx+8zbVAnYvulFldX9ncwCzyQrGSyMnBfhVLf EbdmxvS7tD7l1KjP2dCE9mWOlE8yw9Y3njdJ5+jzvQRRZEnDrU5I7tURi3QX4jgW y+fhVfnxHgCcLqS96NxiqihHuG9kS1oqSzPXZSszn+wqDrr/7QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNA3cPAZsY49tlqalkAfxQDD9UCcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8z OTg4MGFmYy04NzljLTQzMjUtYjNkNi04Zjk1ZDc0YTRlZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzM5ODgwYWZjLTg3OWMtNDMyNS1i M2Q2LThmOTVkNzRhNGVlMi8zOTg4MGFmYy04NzljLTQzMjUtYjNkNi04Zjk1ZDc0 YTRlZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGzswwDgQCAAIwCAMGACYC9IAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiujBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYP1S9ZzWVNbsr0BikWb0IiNiZ VFdn0c4BZXRr7mR5fk2N/YIwR6Ko90k4kwWPp3wLj19+cijQZq3b3oUJr3Y3Vpog oPwFaCh6yZUoxQP7UvR978dswufrw/30IfQAwvStZZuVvvB5BGZnJIADSk7lUhTY nN0kmFYcMbbP21eUoxPmFwFHHzzSo4Nx95i8o4DYnaKZhoWieY+n9EJtiJQomPJF S3M1YhRPvDvY8EC00NTQpiUCU8QGt+uIUlr6yJ8RDoO/D127XgaVydbaBaotKKAh GkJVi83W1wdS6xZefOXfH8OGCTJxs2pDFn/MeriJGVkiYGAtV+1Tveyq4ArZ -----END CERTIFICATE-----Generated at Sun Jul 12 21:29:23 2026 by rpki-client