$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4.cer File: 8286db41-7cc3-4224-8e5c-10a5534a00a4.cer (raw, json) Hash identifier: XCtW+xbIzJvxw3cDvqBHhvomxR/pwJkOWozty0QNKq8= Subject key identifier: 0C:EF:A1:3F:44:74:5C:DE:42:34:3C:5E:1B:16:C2:56:28:0B:95:BC Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E5DE3966C10EA20DD50A03500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4/8286db41-7cc3-4224-8e5c-10a5534a00a4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 15:57:15 +0000 Certificate not after: Tue 21 Mar 2028 17:25:17 +0000 Subordinate resources: AS: 63260 IP: 23.151.124.0/24 IP: 198.177.137.0/24 IP: 2602:f48d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:e3:96:6c:10:ea:20:dd:50:a0:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jul 2 15:57:15 2026 GMT Not After : Mar 21 17:25:17 2028 GMT Subject: CN=8286db41-7cc3-4224-8e5c-10a5534a00a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:d5:8d:65:7d:9c:64:3c:5d:61:6e:1f:91: 2b:53:8c:ec:52:73:67:19:89:b1:d2:27:5e:67:48: ff:bd:63:8e:f4:97:92:8b:19:a4:6a:6e:31:10:0c: db:10:34:1d:85:b8:79:63:e9:e2:dd:04:92:d6:ab: 0c:6d:e4:63:13:69:27:07:45:d6:77:35:4a:f0:9b: 62:e7:c1:c7:ad:63:8a:b4:57:61:8c:0a:e6:c9:04: db:57:13:be:c4:b6:99:40:ca:9d:8f:59:65:01:76: de:5d:30:f1:e7:fa:1b:f7:65:b1:31:81:48:0f:f1: 1b:8f:b7:46:11:79:85:44:1c:71:47:ed:95:e2:90: c5:98:2e:ea:b1:f2:de:2f:b5:7d:76:cf:59:08:0a: 26:37:d0:25:2c:1e:9a:60:c5:8b:b5:f8:3b:80:a1: 12:3a:b4:70:b6:e9:c4:66:9c:39:d0:89:95:90:b9: 08:62:ae:27:69:46:26:5f:c3:e4:f2:96:35:ec:54: c5:86:7b:77:fc:d1:19:7f:2b:01:60:ec:5f:38:eb: 40:79:d6:12:4e:c9:0d:14:63:f1:85:87:13:66:4b: 7f:59:68:33:75:9a:93:13:f2:f1:5d:e5:61:87:6b: a8:cc:58:e2:49:be:89:ef:fd:0e:16:2e:88:b0:05: dc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EF:A1:3F:44:74:5C:DE:42:34:3C:5E:1B:16:C2:56:28:0B:95:BC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4/8286db41-7cc3-4224-8e5c-10a5534a00a4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.151.124.0/24 198.177.137.0/24 IPv6: 2602:f48d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63260 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:53:11:76:82:b0:2b:61:1c:6c:5f:03:e1:ec:4c:23:50:5d: eb:ea:e8:c0:fb:86:e6:23:b0:87:1f:c8:9b:41:d7:38:bd:4d: 14:64:b4:6a:a8:3d:ae:46:d9:c7:5f:b4:51:50:5e:bd:4c:00: ab:c9:0f:9f:4d:64:34:71:72:73:4b:17:2c:0c:5a:d9:1c:e8: 7f:d9:ac:82:6d:a8:b3:b8:fd:58:7e:23:6e:cf:a8:bd:c5:37: 39:b2:a6:db:b6:6f:80:0c:52:c7:b7:cb:42:3a:61:fd:74:fd: fe:ae:51:59:f7:7b:73:3d:d5:35:42:48:9b:19:8e:aa:00:d8: 4a:98:0a:7f:d4:0e:a7:08:6a:2b:3e:38:bb:78:fd:b3:9a:2a: f5:ce:f8:ff:96:2c:e0:5a:03:ed:34:6c:63:5b:21:8a:2d:3c: c5:3f:74:17:b2:56:6c:07:8a:37:23:7b:ba:97:8f:1b:d7:c0: c6:2e:90:29:9e:98:ae:d0:36:ad:e0:11:99:4e:55:72:be:99: 40:e2:1c:a4:92:f4:2b:e3:9a:69:3e:a0:38:19:c5:9f:b8:d7: 83:7a:3c:46:72:e4:21:1b:ed:b9:31:66:dc:8c:32:11:f4:fd: c0:75:e0:e8:b4:a8:f1:ab:ca:d5:e4:ca:cd:23:50:1d:b6:54: 5d:b3:a6:16 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE5d45ZsEOog3VCgNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDcwMjE1NTcxNVoXDTI4MDMyMTE3MjUxN1owLzEtMCsGA1UEAxMk ODI4NmRiNDEtN2NjMy00MjI0LThlNWMtMTBhNTUzNGEwMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte7VjWV9nGQ8XWFuH5ErU4zsUnNnGYmx0ide Z0j/vWOO9JeSixmkam4xEAzbEDQdhbh5Y+ni3QSS1qsMbeRjE2knB0XWdzVK8Jti 58HHrWOKtFdhjArmyQTbVxO+xLaZQMqdj1llAXbeXTDx5/ob92WxMYFID/Ebj7dG EXmFRBxxR+2V4pDFmC7qsfLeL7V9ds9ZCAomN9AlLB6aYMWLtfg7gKESOrRwtunE Zpw50ImVkLkIYq4naUYmX8Pk8pY17FTFhnt3/NEZfysBYOxfOOtAedYSTskNFGPx hYcTZkt/WWgzdZqTE/LxXeVhh2uozFjiSb6J7/0OFi6IsAXcTwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFAzvoT9EdFzeQjQ8XhsWwlYoC5W8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84 Mjg2ZGI0MS03Y2MzLTQyMjQtOGU1Yy0xMGE1NTM0YTAwYTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzgyODZkYjQxLTdjYzMtNDIyNC04 ZTVjLTEwYTU1MzRhMDBhNC84Mjg2ZGI0MS03Y2MzLTQyMjQtOGU1Yy0xMGE1NTM0 YTAwYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXl3wDBADGsYkwDgQCAAIwCAMGBCYC9I0AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD3HDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABUxF2grArYRxsXwPh 7EwjUF3r6ujA+4bmI7CHH8ibQdc4vU0UZLRqqD2uRtnHX7RRUF69TACryQ+fTWQ0 cXJzSxcsDFrZHOh/2ayCbaizuP1YfiNuz6i9xTc5sqbbtm+ADFLHt8tCOmH9dP3+ rlFZ93tzPdU1QkibGY6qANhKmAp/1A6nCGorPji7eP2zmir1zvj/lizgWgPtNGxj WyGKLTzFP3QXslZsB4o3I3u6l48b18DGLpApnpiu0Dat4BGZTlVyvplA4hykkvQr 45ppPqA4GcWfuNeDejxGcuQhG+25MWbcjDIR9P3AdeDotKjxq8rV5MrNI1AdtlRd s6YW -----END CERTIFICATE-----Generated at Sun Jul 12 21:27:23 2026 by rpki-client