$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb.cer File: 3fc35fc7-60a6-4d0e-a432-384335f12ecb.cer (raw, json) Hash identifier: P9NNlXz8NGl7rMc1ktbjxlbaZv/J0wsECrRJ6ht+Dr0= Subject key identifier: AC:A5:5E:A4:E0:25:37:B9:B1:F4:EB:74:50:DE:93:FC:E3:16:35:75 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E5AFE1ADFD2BF8FA0C47BE780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/3fc35fc7-60a6-4d0e-a432-384335f12ecb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 15:03:15 +0000 Certificate not after: Sat 26 Feb 2028 21:04:51 +0000 Subordinate resources: AS: 400848 IP: 140.235.236.0/23 IP: 169.128.156.0/23 IP: 2602:f7e3::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:fe:1a:df:d2:bf:8f:a0:c4:7b:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jul 1 15:03:15 2026 GMT Not After : Feb 26 21:04:51 2028 GMT Subject: CN=3fc35fc7-60a6-4d0e-a432-384335f12ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9c:8c:9e:5e:45:0b:7c:2d:fc:7b:89:18:73: ce:f7:ca:51:3d:d1:2a:18:03:35:85:f0:10:5b:a6: 24:82:94:42:a9:00:08:c8:fd:67:93:fa:c0:e7:56: dc:0f:fc:21:a7:62:00:51:91:5c:30:56:85:1b:4d: ed:5b:f6:37:4c:a0:7a:68:1a:3d:47:5c:f8:5a:d5: 99:48:ba:2d:c2:3f:d6:59:05:a3:2f:a2:83:32:86: 9d:88:3c:f8:86:7e:20:f8:05:f8:4b:d4:5c:56:90: ca:6b:bf:c0:f1:f2:76:e7:2a:4d:5a:fd:55:0d:02: 61:f0:8a:60:b3:e1:3e:dd:e1:be:0b:c1:31:ba:ac: 34:62:f2:06:31:f5:7d:f0:46:19:5d:f0:5f:05:0c: 53:3a:d9:ee:ed:19:0b:f2:a0:76:63:d1:c3:db:d7: b5:9d:1a:fe:56:1b:b8:cc:e1:d3:c9:da:9a:7f:8d: 28:88:b3:01:76:66:88:62:aa:a0:51:16:44:50:7f: 80:61:67:a4:56:16:dd:4b:d0:fb:8c:b1:9e:0f:95: fe:4b:53:cd:6a:4a:47:6c:a4:1b:cb:3f:59:5c:8f: b2:93:11:07:b3:d9:ee:64:25:fa:00:5f:a5:f4:e1: 5b:06:cf:25:25:6a:24:45:37:1c:1a:13:86:db:ea: 84:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A5:5E:A4:E0:25:37:B9:B1:F4:EB:74:50:DE:93:FC:E3:16:35:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/3fc35fc7-60a6-4d0e-a432-384335f12ecb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 140.235.236.0/23 169.128.156.0/23 IPv6: 2602:f7e3::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400848 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e2:68:57:38:c0:bd:21:c3:30:4c:3c:f4:e7:3f:f1:f3:af: c6:1c:aa:fa:91:64:91:8a:ab:f4:80:31:a7:a6:05:d6:3b:b1: 3e:64:6d:d8:54:24:ca:d6:ed:f2:96:5d:d1:45:c1:8d:06:fc: f3:5e:03:c2:15:20:9a:bb:71:13:d2:9e:f6:b2:5e:fd:74:67: 13:c5:eb:2d:1a:d1:14:cb:9a:73:d4:fc:4b:1a:64:e2:17:0f: 7e:e6:c0:88:ab:b2:6d:be:3c:d8:d0:42:71:85:54:25:ac:f9: bf:54:28:50:f8:57:47:b0:34:5f:a0:6c:34:2c:1a:65:52:bf: 69:87:11:34:61:86:7e:2b:2e:f7:82:3c:e4:97:4d:8c:65:25: 10:56:d2:4c:e1:aa:74:e3:53:de:92:16:72:f7:66:6b:60:ff: 58:34:90:0e:19:92:ac:21:b6:7f:7a:82:eb:36:d0:81:b5:ed: c0:21:37:2e:3c:e9:2e:22:31:f6:ca:40:05:e9:e0:68:5b:25: ba:8a:a1:e2:cc:30:67:eb:cd:4c:62:86:b3:db:1d:43:27:18: 05:14:01:0a:0f:29:b4:e6:62:6a:2c:b9:f6:e8:60:93:f3:63: 5a:4a:7d:dc:e8:2a:72:8f:4f:c6:1b:16:6f:a5:7f:2e:c5:57: c2:60:1f:49 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE5a/hrf0r+PoMR754AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDcwMTE1MDMxNVoXDTI4MDIyNjIxMDQ1MVowLzEtMCsGA1UEAxMk M2ZjMzVmYzctNjBhNi00ZDBlLWE0MzItMzg0MzM1ZjEyZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZyMnl5FC3wt/HuJGHPO98pRPdEqGAM1hfAQ W6YkgpRCqQAIyP1nk/rA51bcD/whp2IAUZFcMFaFG03tW/Y3TKB6aBo9R1z4WtWZ SLotwj/WWQWjL6KDMoadiDz4hn4g+AX4S9RcVpDKa7/A8fJ25ypNWv1VDQJh8Ipg s+E+3eG+C8Exuqw0YvIGMfV98EYZXfBfBQxTOtnu7RkL8qB2Y9HD29e1nRr+Vhu4 zOHTydqaf40oiLMBdmaIYqqgURZEUH+AYWekVhbdS9D7jLGeD5X+S1PNakpHbKQb yz9ZXI+ykxEHs9nuZCX6AF+l9OFbBs8lJWokRTccGhOG2+qExQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFKylXqTgJTe5sfTrdFDek/zjFjV1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8z ZmMzNWZjNy02MGE2LTRkMGUtYTQzMi0zODQzMzVmMTJlY2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzNmYzM1ZmM3LTYwYTYtNGQwZS1h NDMyLTM4NDMzNWYxMmVjYi8zZmMzNWZjNy02MGE2LTRkMGUtYTQzMi0zODQzMzVm MTJlY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAGM6+wDBAGpgJwwDgQCAAIwCAMGACYC9+MAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYd0DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBK4mhXOMC9IcMwTDz0 5z/x86/GHKr6kWSRiqv0gDGnpgXWO7E+ZG3YVCTK1u3yll3RRcGNBvzzXgPCFSCa u3ET0p72sl79dGcTxestGtEUy5pz1PxLGmTiFw9+5sCIq7JtvjzY0EJxhVQlrPm/ VChQ+FdHsDRfoGw0LBplUr9phxE0YYZ+Ky73gjzkl02MZSUQVtJM4ap041PekhZy 92ZrYP9YNJAOGZKsIbZ/eoLrNtCBte3AITcuPOkuIjH2ykAF6eBoWyW6iqHizDBn 681MYoaz2x1DJxgFFAEKDym05mJqLLn26GCT82NaSn3c6Cpyj0/GGxZvpX8uxVfC YB9J -----END CERTIFICATE-----Generated at Sun Jul 12 21:28:12 2026 by rpki-client