$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b813b4f3-ab09-4882-be9c-e68768f5a1a2.cer File: b813b4f3-ab09-4882-be9c-e68768f5a1a2.cer (raw, json) Hash identifier: Irg82I+c0Jdw8SXAG2ewKYO/mc3WOipcmADt0tqQK2s= Subject key identifier: 33:53:F0:72:DA:F8:22:C4:7C:CC:AE:BE:A7:46:36:72:F2:EB:8B:7E Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E5DE5123892B05F6C89889E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b813b4f3-ab09-4882-be9c-e68768f5a1a2/b813b4f3-ab09-4882-be9c-e68768f5a1a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b813b4f3-ab09-4882-be9c-e68768f5a1a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 16:00:14 +0000 Certificate not after: Sun 09 Apr 2028 15:37:13 +0000 Subordinate resources: AS: 402094 IP: 198.200.168.0/24 IP: 2602:f490::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:e5:12:38:92:b0:5f:6c:89:88:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jul 2 16:00:14 2026 GMT Not After : Apr 9 15:37:13 2028 GMT Subject: CN=b813b4f3-ab09-4882-be9c-e68768f5a1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e7:d8:66:bc:c7:81:05:74:57:2f:fb:b7:d9: cd:89:c4:cd:9d:7a:b0:c3:3f:c5:31:9e:57:3e:af: 27:c4:27:3d:92:9e:8e:7c:d5:4a:b7:f5:d2:69:0f: 57:fd:77:99:05:f0:8b:5a:dd:29:30:11:61:bc:f2: 26:65:eb:0e:57:92:69:50:19:60:f5:27:38:49:2e: ab:14:86:15:00:e6:14:b9:ff:f2:ec:fc:cf:93:40: ef:38:98:9d:bb:91:68:52:21:a8:cc:65:92:a2:e2: ef:1f:1c:58:ee:94:ae:8b:8e:c7:ca:0e:54:cd:52: 14:23:4f:15:36:c8:49:83:0a:0c:f2:f4:04:5a:a8: 0c:ac:d7:28:98:73:01:f0:b4:43:23:d3:f7:15:1f: 44:52:cf:13:5b:01:30:70:1b:bb:f4:8a:34:fa:44: 5b:6a:bc:71:85:ff:75:2f:e7:94:b6:e0:70:f9:7e: 11:fe:12:9b:ae:f5:44:8c:7a:19:43:ac:5c:06:02: 7e:27:57:c6:c5:1f:16:c7:ff:7d:9c:94:d1:f0:7d: 99:d3:12:99:95:32:28:58:df:20:3c:1e:38:08:50: 1f:73:64:17:1b:cc:b3:9c:c9:b6:1d:f3:28:d9:22: 9b:86:1a:c6:b7:e2:35:a4:47:41:d5:9b:c4:5c:69: 38:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:53:F0:72:DA:F8:22:C4:7C:CC:AE:BE:A7:46:36:72:F2:EB:8B:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b813b4f3-ab09-4882-be9c-e68768f5a1a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b813b4f3-ab09-4882-be9c-e68768f5a1a2/b813b4f3-ab09-4882-be9c-e68768f5a1a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 198.200.168.0/24 IPv6: 2602:f490::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402094 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ef:e4:46:2e:79:c1:db:ce:2d:21:c5:8f:06:ce:34:12:d3: 2a:c7:36:ba:be:ea:b2:1b:3d:15:ee:ce:ad:14:1a:af:43:ad: 08:40:7f:7c:ad:0c:c8:ae:fe:de:fe:aa:44:d8:4e:15:fd:36: c9:d4:98:ea:e6:64:c4:5d:ab:94:83:bb:7d:1f:b9:43:55:76: 96:33:97:e4:f0:14:a6:1b:1f:f6:c0:67:8b:a6:54:cf:df:63: b4:28:a4:15:50:98:61:c8:c5:f0:36:9c:5e:05:f5:45:81:35: a9:ea:08:89:a2:85:69:04:a8:9e:89:41:ce:2f:fb:1c:66:50: 74:f0:5d:fb:0b:22:98:26:d8:e8:e4:e9:14:69:13:20:ab:3a: 7e:f5:22:06:56:47:45:57:cd:96:ec:38:30:26:b4:1a:51:f8: d3:12:07:4c:22:b3:5a:34:71:c1:e7:ba:97:17:3f:4a:a9:bf: f8:43:5b:83:77:ae:a1:09:fd:9b:89:1c:bf:1f:fd:44:4c:ab: 57:53:36:ef:b0:63:bc:56:72:42:58:34:e5:42:4c:23:eb:b7: ca:c4:13:55:3e:2a:3e:54:be:ed:00:43:9a:49:82:c7:22:75: 2e:5d:ca:b8:94:d2:03:14:9d:f1:f9:eb:4c:d1:c7:01:20:64: af:1d:86:5d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5d5RI4krBfbImInoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDcwMjE2MDAxNFoXDTI4MDQwOTE1MzcxM1owLzEtMCsGA1UEAxMk YjgxM2I0ZjMtYWIwOS00ODgyLWJlOWMtZTY4NzY4ZjVhMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlefYZrzHgQV0Vy/7t9nNicTNnXqwwz/FMZ5X Pq8nxCc9kp6OfNVKt/XSaQ9X/XeZBfCLWt0pMBFhvPImZesOV5JpUBlg9Sc4SS6r FIYVAOYUuf/y7PzPk0DvOJidu5FoUiGozGWSouLvHxxY7pSui47Hyg5UzVIUI08V NshJgwoM8vQEWqgMrNcomHMB8LRDI9P3FR9EUs8TWwEwcBu79Io0+kRbarxxhf91 L+eUtuBw+X4R/hKbrvVEjHoZQ6xcBgJ+J1fGxR8Wx/99nJTR8H2Z0xKZlTIoWN8g PB44CFAfc2QXG8yznMm2HfMo2SKbhhrGt+I1pEdB1ZvEXGk4JQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDNT8HLa+CLEfMyuvqdGNnLy64t+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i ODEzYjRmMy1hYjA5LTQ4ODItYmU5Yy1lNjg3NjhmNWExYTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2I4MTNiNGYzLWFiMDktNDg4Mi1i ZTljLWU2ODc2OGY1YTFhMi9iODEzYjRmMy1hYjA5LTQ4ODItYmU5Yy1lNjg3Njhm NWExYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGyKgwDgQCAAIwCAMGACYC9JAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYirjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBw7+RGLnnB284tIcWPBs40EtMq xza6vuqyGz0V7s6tFBqvQ60IQH98rQzIrv7e/qpE2E4V/TbJ1Jjq5mTEXauUg7t9 H7lDVXaWM5fk8BSmGx/2wGeLplTP32O0KKQVUJhhyMXwNpxeBfVFgTWp6giJooVp BKieiUHOL/scZlB08F37CyKYJtjo5OkUaRMgqzp+9SIGVkdFV82W7DgwJrQaUfjT EgdMIrNaNHHB57qXFz9Kqb/4Q1uDd66hCf2biRy/H/1ETKtXUzbvsGO8VnJCWDTl Qkwj67fKxBNVPio+VL7tAEOaSYLHInUuXcq4lNIDFJ3x+etM0ccBIGSvHYZd -----END CERTIFICATE-----Generated at Sun Jul 12 21:27:41 2026 by rpki-client