$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer File: c1195660-b269-4bf9-a104-54a76ebf3546.cer (raw, json) Hash identifier: qd1L984Bc9Dp5sZbryaC8Gkh+sbCON8zoUuoKoOBul4= Subject key identifier: 50:2D:B7:50:06:C8:ED:DC:6D:F6:1D:94:C8:76:CC:2F:F4:A9:64:B7 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E46FDAFB0A93E9F7544645900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Jun 2026 11:06:15 +0000 Certificate not after: Sun 13 Feb 2028 21:15:58 +0000 Subordinate resources: IP: 66.71.220.0/24 IP: 198.212.42.0/24 IP: 208.122.8.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:46:fd:af:b0:a9:3e:9f:75:44:64:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jun 24 11:06:15 2026 GMT Not After : Feb 13 21:15:58 2028 GMT Subject: CN=c1195660-b269-4bf9-a104-54a76ebf3546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5b:c5:9d:8a:be:81:6f:ee:34:0d:67:1d:2c: 88:2d:ea:01:f9:2a:70:e7:18:b2:b2:6a:fe:26:99: 78:42:14:84:80:88:3f:4f:cc:c2:96:64:ae:35:66: 37:8b:6f:20:29:66:5f:46:78:a1:e7:76:9c:06:01: b3:15:ab:51:73:17:45:ed:a2:ea:5e:27:85:59:11: 33:ef:d5:8d:36:93:d9:9d:4b:be:70:5a:b6:9c:f0: ee:f6:7e:cd:67:fe:a8:d9:70:be:28:1c:82:1f:29: 5a:19:32:f5:18:d5:ce:43:de:e9:be:cd:da:6f:a0: 4f:84:be:e9:e8:e6:60:39:ff:45:9d:07:24:0e:8c: 3f:ea:18:f0:5c:03:76:b0:37:22:7c:07:86:bd:5c: 7a:d7:64:52:50:98:da:63:4b:e2:46:a5:02:b0:05: 97:90:8f:b2:2c:be:5b:c2:67:1c:da:49:d1:8c:30: 4b:39:ee:53:35:19:44:40:3e:ea:3c:1b:fc:45:c3: 74:7c:bc:d4:b2:9b:7d:06:93:47:37:27:d0:f9:d5: 17:cd:3a:75:8d:9a:58:f5:92:8d:fb:c6:f3:94:65: d8:2f:3a:e0:8e:32:d6:e9:a5:d7:6e:8c:20:a3:7e: f2:03:44:96:2f:63:32:4a:e5:f9:93:ea:23:0a:56: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2D:B7:50:06:C8:ED:DC:6D:F6:1D:94:C8:76:CC:2F:F4:A9:64:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 66.71.220.0/24 198.212.42.0/24 208.122.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e8:56:80:d7:e5:d4:e7:7f:6f:fb:89:17:05:59:53:3a:90: ba:7b:e9:56:f6:e9:f9:ea:b1:25:ce:6e:ae:ed:ec:c4:2d:80: 14:91:39:30:51:4d:c8:25:8b:0f:6d:33:47:4b:32:9c:63:18: 7b:08:6a:96:a7:9c:0c:50:71:20:38:52:32:0a:73:60:7c:01: 40:ab:d6:75:d8:91:8e:e3:65:fb:37:ab:22:6e:4d:c7:86:39: 2b:69:12:1d:88:8b:c3:a0:42:e7:2b:64:9e:ad:34:60:44:f2: 63:c2:cd:88:fb:19:8f:70:b3:5f:42:57:f5:95:ca:e1:02:03: 20:5a:50:10:a1:62:02:ea:6c:11:a0:f3:62:9e:aa:24:6c:ca: 51:6b:e0:10:be:db:73:f4:20:d1:de:fd:d8:2c:c6:4e:05:a2: b5:7d:c1:84:db:33:e1:24:82:6b:21:86:b6:90:9b:8e:e5:ca: 0d:dd:d5:c6:2c:b6:0a:5f:6f:3c:e2:ef:ab:19:04:91:17:51: e9:48:c0:15:78:86:fc:b2:ee:14:75:1d:ae:69:4d:c7:46:c6: 5b:83:f4:65:87:96:e9:73:6f:b9:2e:cf:89:39:a6:f7:35:dc: 8a:1d:c0:15:53:7f:45:05:40:69:ec:fd:2a:28:c1:d8:dc:30: 27:49:91:1c -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWE5G/a+wqT6fdURkWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDYyNDExMDYxNVoXDTI4MDIxMzIxMTU1OFowLzEtMCsGA1UEAxMk YzExOTU2NjAtYjI2OS00YmY5LWExMDQtNTRhNzZlYmYzNTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1vFnYq+gW/uNA1nHSyILeoB+Spw5xiysmr+ Jpl4QhSEgIg/T8zClmSuNWY3i28gKWZfRnih53acBgGzFatRcxdF7aLqXieFWREz 79WNNpPZnUu+cFq2nPDu9n7NZ/6o2XC+KByCHylaGTL1GNXOQ97pvs3ab6BPhL7p 6OZgOf9FnQckDow/6hjwXAN2sDcifAeGvVx612RSUJjaY0viRqUCsAWXkI+yLL5b wmcc2knRjDBLOe5TNRlEQD7qPBv8RcN0fLzUspt9BpNHNyfQ+dUXzTp1jZpY9ZKN +8bzlGXYLzrgjjLW6aXXbowgo37yA0SWL2MySuX5k+ojClZm8QIDAQABo4IECzCC BAcwHQYDVR0OBBYEFFAtt1AGyO3cbfYdlMh2zC/0qWS3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j MTE5NTY2MC1iMjY5LTRiZjktYTEwNC01NGE3NmViZjM1NDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2MxMTk1NjYwLWIyNjktNGJmOS1h MTA0LTU0YTc2ZWJmMzU0Ni9jMTE5NTY2MC1iMjY5LTRiZjktYTEwNC01NGE3NmVi ZjM1NDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBABCR9wDBADG1CoDBADQeggwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASOhW gNfl1Od/b/uJFwVZUzqQunvpVvbp+eqxJc5uru3sxC2AFJE5MFFNyCWLD20zR0sy nGMYewhqlqecDFBxIDhSMgpzYHwBQKvWddiRjuNl+zerIm5Nx4Y5K2kSHYiLw6BC 5ytknq00YETyY8LNiPsZj3CzX0JX9ZXK4QIDIFpQEKFiAupsEaDzYp6qJGzKUWvg EL7bc/Qg0d792CzGTgWitX3BhNsz4SSCayGGtpCbjuXKDd3Vxiy2Cl9vPOLvqxkE kRdR6UjAFXiG/LLuFHUdrmlNx0bGW4P0ZYeW6XNvuS7PiTmm9zXcih3AFVN/RQVA aez9KijB2NwwJ0mRHA== -----END CERTIFICATE-----Generated at Sun Jul 12 21:30:38 2026 by rpki-client