$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61a4cb0e-ca80-4991-b6a0-28106cba1cb9.cer File: 61a4cb0e-ca80-4991-b6a0-28106cba1cb9.cer (raw, json) Hash identifier: 2okAqJcFq5lFRdt7T6vryOovCLkXqAVdHUp9Ff1S8Wo= Subject key identifier: BF:CF:4B:9E:9D:88:1D:51:C5:C8:5A:B5:40:DD:45:40:2C:8F:62:1B Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E5B7CA62030E4CF8F72C117C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61a4cb0e-ca80-4991-b6a0-28106cba1cb9/61a4cb0e-ca80-4991-b6a0-28106cba1cb9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61a4cb0e-ca80-4991-b6a0-28106cba1cb9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 19:18:13 +0000 Certificate not after: Sun 16 Apr 2028 18:32:31 +0000 Subordinate resources: AS: 398872 IP: 169.128.172.0/22 IP: 169.197.132.0/24 IP: 206.168.128.0/22 IP: 216.238.60.0/22 IP: 2602:fcc4::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:7c:a6:20:30:e4:cf:8f:72:c1:17:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jul 1 19:18:13 2026 GMT Not After : Apr 16 18:32:31 2028 GMT Subject: CN=61a4cb0e-ca80-4991-b6a0-28106cba1cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:c2:09:c1:34:2b:37:28:f5:bf:44:8c:ef: 17:ff:c3:24:59:ba:38:e4:88:64:0b:7d:5d:35:ec: 0c:f1:90:4c:85:c5:fa:35:8d:5a:6e:39:ea:fb:70: 84:b4:4a:bf:5d:7f:51:ae:bc:9c:85:34:d9:1e:0f: 30:bb:7a:7c:ef:92:20:92:60:f1:fb:89:0f:92:c0: 3a:52:fc:46:5f:36:45:f4:54:cb:12:ed:81:92:5c: 1d:3e:bc:04:17:25:30:f6:ce:fe:07:68:c6:40:75: 13:8f:82:60:5c:03:d1:bf:0a:8c:fd:d9:93:fe:39: 0a:d4:42:d7:86:06:49:4f:a8:d3:22:86:6a:89:2e: e8:2d:5e:80:1e:7c:d4:b9:91:54:6b:ce:07:ab:6d: a5:a5:9c:5b:55:53:99:6c:83:32:92:1f:8f:a0:d4: 31:30:11:da:dc:4c:c5:76:61:5e:f4:fd:81:70:8a: db:e3:5b:a6:64:be:45:46:18:93:de:c7:a1:4b:15: dd:b2:dc:10:a5:a9:1c:58:32:14:82:c9:63:0b:51: a9:95:76:3c:20:0a:4a:0c:af:64:ed:a5:dd:14:d6: a4:2d:24:43:dc:f8:66:c1:32:b0:46:3f:e9:d3:71: 6e:f7:7e:3f:a1:12:57:c2:ad:46:e7:27:0e:b4:50: 59:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CF:4B:9E:9D:88:1D:51:C5:C8:5A:B5:40:DD:45:40:2C:8F:62:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61a4cb0e-ca80-4991-b6a0-28106cba1cb9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61a4cb0e-ca80-4991-b6a0-28106cba1cb9/61a4cb0e-ca80-4991-b6a0-28106cba1cb9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 169.128.172.0/22 169.197.132.0/24 206.168.128.0/22 216.238.60.0/22 IPv6: 2602:fcc4::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398872 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:4c:0d:a2:3c:76:03:8c:65:86:aa:7f:9e:41:c8:22:0f:4c: 3e:81:e7:dc:82:bd:67:ec:af:03:5a:23:67:41:69:ca:21:69: 25:d3:5f:cd:e5:c1:f7:cb:83:1d:aa:d0:41:d3:e0:01:b7:20: 81:f3:35:69:0c:3e:42:b3:aa:d4:d9:ff:bc:2d:ff:9f:22:c2: 14:96:5b:16:a4:17:a0:75:31:79:a2:75:b6:44:3d:72:a8:9d: 43:67:66:af:9d:4c:ef:c9:b9:3c:28:a6:ba:37:b5:1a:ec:22: a1:86:b4:ae:62:f9:ab:e4:00:c0:e7:a9:77:38:bf:22:1d:8e: ff:e6:04:40:2e:1a:2e:6b:aa:d8:01:de:e5:5b:d8:4f:05:26: 9b:a2:58:b4:b5:59:b7:84:a9:e7:3f:56:35:8a:9d:65:f0:ff: 4b:c8:ca:46:e4:67:99:99:a7:9c:d8:df:ca:c9:b8:18:e8:7c: 11:ff:b8:eb:f7:2d:3a:1f:5c:b3:7a:12:3f:bf:06:57:61:15: cd:06:92:6d:2f:61:25:f2:34:4a:42:a5:8a:81:a3:db:41:21: 39:4e:9a:a0:45:15:13:4d:df:56:a3:12:48:2e:ae:0f:b0:30: ee:ef:31:c9:bd:2a:0e:25:5a:a5:c4:1e:73:72:d9:85:9e:27: 18:87:49:a4 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWE5bfKYgMOTPj3LBF8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDcwMTE5MTgxM1oXDTI4MDQxNjE4MzIzMVowLzEtMCsGA1UEAxMk NjFhNGNiMGUtY2E4MC00OTkxLWI2YTAtMjgxMDZjYmExY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIbCCcE0Kzco9b9EjO8X/8MkWbo45IhkC31d NewM8ZBMhcX6NY1abjnq+3CEtEq/XX9RrrychTTZHg8wu3p875IgkmDx+4kPksA6 UvxGXzZF9FTLEu2BklwdPrwEFyUw9s7+B2jGQHUTj4JgXAPRvwqM/dmT/jkK1ELX hgZJT6jTIoZqiS7oLV6AHnzUuZFUa84Hq22lpZxbVVOZbIMykh+PoNQxMBHa3EzF dmFe9P2BcIrb41umZL5FRhiT3sehSxXdstwQpakcWDIUgsljC1GplXY8IApKDK9k 7aXdFNakLSRD3PhmwTKwRj/p03Fu934/oRJXwq1G5ycOtFBZKQIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFL/PS56diB1RxchatUDdRUAsj2IbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82 MWE0Y2IwZS1jYTgwLTQ5OTEtYjZhMC0yODEwNmNiYTFjYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzYxYTRjYjBlLWNhODAtNDk5MS1i NmEwLTI4MTA2Y2JhMWNiOS82MWE0Y2IwZS1jYTgwLTQ5OTEtYjZhMC0yODEwNmNi YTFjYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBAKpgKwDBACpxYQDBALOqIADBALY7jwwDgQCAAIw CAMGBCYC/MQAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYWGDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAG TA2iPHYDjGWGqn+eQcgiD0w+gefcgr1n7K8DWiNnQWnKIWkl01/N5cH3y4MdqtBB 0+ABtyCB8zVpDD5Cs6rU2f+8Lf+fIsIUllsWpBegdTF5onW2RD1yqJ1DZ2avnUzv ybk8KKa6N7Ua7CKhhrSuYvmr5ADA56l3OL8iHY7/5gRALhoua6rYAd7lW9hPBSab oli0tVm3hKnnP1Y1ip1l8P9LyMpG5GeZmaec2N/KybgY6HwR/7jr9y06H1yzehI/ vwZXYRXNBpJtL2El8jRKQqWKgaPbQSE5TpqgRRUTTd9WoxJILq4PsDDu7zHJvSoO JVqlxB5zctmFnicYh0mk -----END CERTIFICATE-----Generated at Sun Jul 12 21:29:29 2026 by rpki-client