$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.cer File: a2cdb319-ae5d-4d45-8754-29f4bc31c46d.cer (raw, json) Hash identifier: OOhUWU712V8BWBUjD6f+XNf82OuC2cbJYdDIpfYJptw= Subject key identifier: 3C:69:1D:55:9F:55:1E:8C:6B:12:ED:6C:AC:EF:64:F8:58:EC:CA:CB Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E5DB6EB81C97F3F35F7FF4F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 14:27:15 +0000 Certificate not after: Fri 04 Feb 2028 21:44:17 +0000 Subordinate resources: AS: 32042 IP: 192.189.89.0/24 IP: 2602:f4e3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:b6:eb:81:c9:7f:3f:35:f7:ff:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jul 2 14:27:15 2026 GMT Not After : Feb 4 21:44:17 2028 GMT Subject: CN=a2cdb319-ae5d-4d45-8754-29f4bc31c46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:23:22:69:50:fa:e5:e7:01:9b:8e:41:1b:8e: 21:d4:54:ef:1a:a9:d5:3c:ad:67:c2:fe:5d:16:3b: 70:b6:14:3d:2e:48:fd:69:ed:84:46:40:17:04:7f: 2d:a1:d5:28:01:98:7e:9e:9a:b1:42:91:89:08:70: 05:10:35:d5:a6:2a:9d:ef:be:19:70:a8:8d:70:66: 5d:19:c5:09:3e:5a:1e:ba:3a:6f:e6:d3:f6:a7:d2: 64:af:22:8e:f2:f1:66:2e:79:55:25:ad:70:f5:3a: 03:66:26:53:cc:82:8b:b0:6f:4d:26:7e:b9:81:f1: db:db:49:d8:4e:8a:a1:9c:6f:f8:fd:e7:a0:ec:70: cf:ed:75:aa:41:e1:56:95:c2:35:a1:c8:28:72:58: e5:b0:0e:b1:b0:82:cc:be:4d:73:6f:4e:54:d9:a1: 32:c3:e6:f7:f7:01:eb:8b:d8:2e:58:51:94:3d:9d: 19:5a:4b:48:b2:f8:fd:ba:25:43:f3:4c:c6:9b:61: 40:e0:08:b9:e4:9d:fa:40:59:42:ba:e2:fe:89:58: 38:b1:de:a9:4b:af:bf:83:94:02:f5:01:0c:03:d0: cb:c9:f0:ff:0f:37:ca:b5:37:1a:dd:f1:e3:53:db: a0:b6:bf:12:59:61:a3:6d:80:87:23:d6:0c:c1:04: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:69:1D:55:9F:55:1E:8C:6B:12:ED:6C:AC:EF:64:F8:58:EC:CA:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 192.189.89.0/24 IPv6: 2602:f4e3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32042 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:be:e9:87:b5:6d:93:38:4c:78:b6:1c:a1:76:95:ef:76:9e: a4:46:9a:12:d1:9e:6e:34:6e:f1:33:19:9a:b7:0d:dd:32:cb: 2e:92:bc:22:4e:06:dd:e0:93:2f:96:00:52:17:58:9c:7d:fc: 75:d4:da:ee:36:d2:f2:f4:9c:22:cc:61:b0:8b:ae:a3:bb:97: 0f:d1:20:9a:c0:c6:1b:e0:33:0a:5e:be:4a:48:e3:2c:a3:e3: ee:51:c8:83:10:2c:90:f4:7b:11:84:4b:bb:6e:99:87:7d:38: e5:62:a9:ce:0b:a3:03:9b:aa:05:62:28:db:54:35:b4:15:c9: 40:e9:04:b3:3d:bb:bd:e6:b7:23:2d:c8:9a:59:a9:9a:61:da: ff:2d:f7:ee:40:6d:94:20:a5:02:58:f9:15:6e:0c:9c:d0:12: 5d:bb:f1:10:b8:29:03:88:c6:56:96:c5:7a:92:fe:bb:15:01: 00:0c:cf:8a:d8:11:f7:b1:6a:c1:47:04:19:ff:46:10:7b:fe: 53:39:35:f5:ee:14:87:7a:19:d0:c6:67:58:6b:61:72:27:8d: b4:ab:8f:ef:e4:57:a9:06:a0:d8:11:23:d9:f7:43:1e:70:6e: cc:0d:cf:7f:c3:5b:82:41:63:0b:f5:69:bf:23:f9:39:d0:88: 72:f9:bc:82 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE5dtuuByX8/Nff/T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDcwMjE0MjcxNVoXDTI4MDIwNDIxNDQxN1owLzEtMCsGA1UEAxMk YTJjZGIzMTktYWU1ZC00ZDQ1LTg3NTQtMjlmNGJjMzFjNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCMiaVD65ecBm45BG44h1FTvGqnVPK1nwv5d FjtwthQ9Lkj9ae2ERkAXBH8todUoAZh+npqxQpGJCHAFEDXVpiqd774ZcKiNcGZd GcUJPloeujpv5tP2p9JkryKO8vFmLnlVJa1w9ToDZiZTzIKLsG9NJn65gfHb20nY ToqhnG/4/eeg7HDP7XWqQeFWlcI1ocgocljlsA6xsILMvk1zb05U2aEyw+b39wHr i9guWFGUPZ0ZWktIsvj9uiVD80zGm2FA4Ai55J36QFlCuuL+iVg4sd6pS6+/g5QC 9QEMA9DLyfD/DzfKtTca3fHjU9ugtr8SWWGjbYCHI9YMwQTTUwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFDxpHVWfVR6MaxLtbKzvZPhY7MrLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h MmNkYjMxOS1hZTVkLTRkNDUtODc1NC0yOWY0YmMzMWM0NmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2EyY2RiMzE5LWFlNWQtNGQ0NS04 NzU0LTI5ZjRiYzMxYzQ2ZC9hMmNkYjMxOS1hZTVkLTRkNDUtODc1NC0yOWY0YmMz MWM0NmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADAvVkwDgQCAAIwCAMGBCYC9OMAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAn0qMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFC+6Ye1bZM4THi2HKF2le92nqRG mhLRnm40bvEzGZq3Dd0yyy6SvCJOBt3gky+WAFIXWJx9/HXU2u420vL0nCLMYbCL rqO7lw/RIJrAxhvgMwpevkpI4yyj4+5RyIMQLJD0exGES7tumYd9OOViqc4LowOb qgViKNtUNbQVyUDpBLM9u73mtyMtyJpZqZph2v8t9+5AbZQgpQJY+RVuDJzQEl27 8RC4KQOIxlaWxXqS/rsVAQAMz4rYEfexasFHBBn/RhB7/lM5NfXuFId6GdDGZ1hr YXInjbSrj+/kV6kGoNgRI9n3Qx5wbswNz3/DW4JBYwv1ab8j+TnQiHL5vII= -----END CERTIFICATE-----Generated at Sun Jul 12 21:28:07 2026 by rpki-client