$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0.cer File: 99dcdccb-926b-4c77-aab5-f4b177f65fe0.cer (raw, json) Hash identifier: Cfx+WXjGgJA5eCJk1qQztagx4KjHPq8bg7H1jSWah44= Subject key identifier: E8:C4:6F:57:93:A5:94:56:2B:5C:EB:31:F5:FA:45:B8:CF:69:2B:75 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E748086CACD0F6FF3C2B68E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/99dcdccb-926b-4c77-aab5-f4b177f65fe0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Jul 2026 18:21:15 +0000 Certificate not after: Thu 20 Jan 2028 03:39:24 +0000 Subordinate resources: AS: 397130 IP: 66.179.150.0/24 IP: 66.228.80.0/22 IP: 148.59.91.0/24 IP: 148.227.174.0/24 IP: 156.67.60.0/24 IP: 162.33.183.0/24 IP: 162.33.191.0/24 IP: 162.223.123.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:80:86:ca:cd:0f:6f:f3:c2:b6:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jul 10 18:21:15 2026 GMT Not After : Jan 20 03:39:24 2028 GMT Subject: CN=99dcdccb-926b-4c77-aab5-f4b177f65fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5a:2f:e4:53:6a:b6:50:a0:fc:08:a2:5f:fe: be:d9:24:d9:d6:d8:e7:eb:fd:fa:02:22:81:d9:cd: e9:58:b5:99:b6:b5:3a:0a:e0:a7:c0:f2:9b:1f:14: 77:c1:2e:ca:18:82:38:de:b0:3d:8a:b1:7b:9e:b9: 79:f5:2f:04:e7:48:60:55:27:d6:84:0a:71:95:fd: b3:33:8f:91:f1:c2:16:d5:f7:16:00:a4:04:43:dd: d6:70:15:67:17:bf:5d:6f:df:d6:8b:62:da:f6:4d: d1:07:85:cb:0f:f4:a0:18:e5:45:5c:e2:0c:f2:2f: ea:42:90:c8:49:70:4a:73:8e:90:14:fb:10:de:42: 9f:a7:a3:57:13:25:89:c9:88:5f:90:6e:39:d2:cf: 5f:26:1f:da:d5:5a:c9:34:b2:1e:9f:43:1a:ee:b1: bf:17:3a:73:84:f7:10:83:87:4d:92:39:1b:7d:a3: 29:c9:18:35:aa:30:04:99:66:61:30:06:f8:0c:93: 1c:2c:ab:d7:f7:5b:c0:43:ea:4d:66:30:1e:b1:9f: 7a:d3:f5:22:38:70:7c:d3:96:cc:b8:68:c1:2a:f2: 1b:a4:a3:6b:48:05:80:9e:1b:e0:c3:d8:55:18:33: 58:51:44:f2:dc:d4:50:77:99:f2:90:22:d4:57:d6: 6e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C4:6F:57:93:A5:94:56:2B:5C:EB:31:F5:FA:45:B8:CF:69:2B:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/99dcdccb-926b-4c77-aab5-f4b177f65fe0/99dcdccb-926b-4c77-aab5-f4b177f65fe0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 66.179.150.0/24 66.228.80.0/22 148.59.91.0/24 148.227.174.0/24 156.67.60.0/24 162.33.183.0/24 162.33.191.0/24 162.223.123.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397130 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e4:38:7d:2c:1d:92:88:76:98:77:1a:53:0c:ee:05:3c:a7: 49:ae:c0:cc:7b:be:4e:3c:52:f8:f1:fa:95:1b:56:3e:68:c7: ca:47:05:3e:52:c3:43:ab:6f:ed:81:ab:82:97:5a:35:89:8c: 87:af:d5:4f:77:52:59:a5:46:bf:76:9d:78:ad:3a:36:e4:b2: 40:ee:55:d3:f2:ec:cd:af:b0:c9:72:e2:82:cb:aa:00:94:b0: 27:01:97:e1:7e:4d:88:0b:94:f3:d2:1d:d9:cc:ee:1c:39:99: aa:78:d8:2a:0d:08:56:f0:eb:7b:cd:7b:ac:9a:5f:8d:e9:0b: 98:1e:1c:8c:bc:d8:05:16:a2:80:88:1d:6a:87:2a:34:63:99: 80:43:60:a2:66:ac:2d:7d:93:ec:17:88:48:37:e6:ee:6e:63: 60:b7:82:58:31:e9:56:5e:8d:41:2d:7d:c2:96:67:b2:81:dc: d2:41:8d:90:b9:21:5b:60:b3:83:db:c5:5f:34:3c:94:5f:cb: 3d:2d:33:92:8b:75:a7:bc:3d:2f:59:e1:d1:5a:e9:de:e6:bf: 15:3d:f1:fc:cc:32:31:a8:33:8c:bd:53:aa:b9:01:b0:68:78: 97:d3:54:e5:56:f4:32:1e:9b:e3:54:40:8d:41:90:10:a6:6e: 92:e9:b7:ba -----BEGIN CERTIFICATE----- MIIHMzCCBhugAwIBAgIUAQ0Mn0MoWE50gIbKzQ9v88K2jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDcxMDE4MjExNVoXDTI4MDEyMDAzMzkyNFowLzEtMCsGA1UEAxMk OTlkY2RjY2ItOTI2Yi00Yzc3LWFhYjUtZjRiMTc3ZjY1ZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1ov5FNqtlCg/AiiX/6+2STZ1tjn6/36AiKB 2c3pWLWZtrU6CuCnwPKbHxR3wS7KGII43rA9irF7nrl59S8E50hgVSfWhApxlf2z M4+R8cIW1fcWAKQEQ93WcBVnF79db9/Wi2La9k3RB4XLD/SgGOVFXOIM8i/qQpDI SXBKc46QFPsQ3kKfp6NXEyWJyYhfkG450s9fJh/a1VrJNLIen0Ma7rG/FzpzhPcQ g4dNkjkbfaMpyRg1qjAEmWZhMAb4DJMcLKvX91vAQ+pNZjAesZ960/UiOHB805bM uGjBKvIbpKNrSAWAnhvgw9hVGDNYUUTy3NRQd5nykCLUV9ZudwIDAQABo4IERTCC BEEwHQYDVR0OBBYEFOjEb1eTpZRWK1zrMfX6RbjPaSt1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85 OWRjZGNjYi05MjZiLTRjNzctYWFiNS1mNGIxNzdmNjVmZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzk5ZGNkY2NiLTkyNmItNGM3Ny1h YWI1LWY0YjE3N2Y2NWZlMC85OWRjZGNjYi05MjZiLTRjNzctYWFiNS1mNGIxNzdm NjVmZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwSQYIKwYBBQUH AQcBAf8EOjA4MDYEAgABMDADBABCs5YDBAJC5FADBACUO1sDBACU464DBACcQzwD BACiIbcDBACiIb8DBACi33swGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBg9KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfkOH0sHZKIdph3GlMM7gU8p0muwMx7vk48Uvjx+pUbVj5ox8pHBT5S w0Orb+2Bq4KXWjWJjIev1U93UlmlRr92nXitOjbkskDuVdPy7M2vsMly4oLLqgCU sCcBl+F+TYgLlPPSHdnM7hw5map42CoNCFbw63vNe6yaX43pC5geHIy82AUWooCI HWqHKjRjmYBDYKJmrC19k+wXiEg35u5uY2C3glgx6VZejUEtfcKWZ7KB3NJBjZC5 IVtgs4PbxV80PJRfyz0tM5KLdae8PS9Z4dFa6d7mvxU98fzMMjGoM4y9U6q5AbBo eJfTVOVW9DIem+NUQI1BkBCmbpLpt7o= -----END CERTIFICATE-----Generated at Sun Jul 12 21:29:50 2026 by rpki-client