$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.cer File: ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.cer (raw, json) Hash identifier: KESx+FFrfxrkVpT28obLpJCKY5tBNizwBA1P9meY09A= Subject key identifier: 2E:7B:FC:DB:33:BB:51:D0:4E:F6:CA:E5:E0:67:53:DD:08:AA:24:6F Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E5AE1D1C6192B96BDC780F6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 14:06:16 +0000 Certificate not after: Wed 16 Feb 2028 08:54:08 +0000 Subordinate resources: AS: 46559 IP: 23.151.196.0/24 IP: 169.128.12.0/22 IP: 2602:f52f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:e1:d1:c6:19:2b:96:bd:c7:80:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jul 1 14:06:16 2026 GMT Not After : Feb 16 08:54:08 2028 GMT Subject: CN=ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:00:c5:a9:1e:be:63:84:69:77:c3:bb:a1: c4:dd:03:86:ca:7a:06:d2:2d:77:28:02:f6:2e:49: 7a:f4:a7:da:0f:3d:20:4a:90:75:d3:e8:4d:61:11: 92:09:bc:c2:f0:ad:3a:ca:b8:af:d0:21:b3:96:1b: 74:1f:a7:9c:6e:36:55:9c:a0:d5:d8:15:26:f8:52: 71:ce:46:98:7f:f0:46:20:e1:22:03:9b:97:8d:e1: b7:ce:cf:58:d5:5a:ae:38:95:b8:a1:1c:6e:d0:98: c8:06:9d:fc:4a:42:33:aa:2f:8f:88:6c:36:d2:3d: 92:3e:49:bd:52:85:05:c3:2b:48:81:69:18:1f:c7: 7c:13:4b:03:1f:fc:86:9d:1e:d4:36:c8:f4:c2:fb: 1d:05:5f:41:c0:f8:00:96:fa:f1:c9:46:0a:95:ec: 89:de:08:33:0b:a1:6b:35:11:77:75:5f:cf:29:1f: 63:61:fc:b4:f5:d3:33:cf:f7:6c:51:d6:ea:28:29: 37:09:21:ca:9a:1c:35:98:61:1a:94:fb:26:82:95: 69:aa:57:37:87:a2:ca:75:05:62:b7:e8:37:5d:1a: 7a:93:3a:28:b9:a6:da:1c:ef:f0:16:10:b8:f2:b3: a5:88:54:00:25:03:7e:b7:2b:e5:6e:4f:0e:60:d9: 85:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7B:FC:DB:33:BB:51:D0:4E:F6:CA:E5:E0:67:53:DD:08:AA:24:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.151.196.0/24 169.128.12.0/22 IPv6: 2602:f52f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46559 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:45:51:fc:90:63:5e:42:0b:1f:4c:9f:43:27:0e:82:a2:75: 01:ca:47:a1:2b:da:a9:a2:91:ca:93:37:70:4f:7b:17:0c:ae: be:69:cc:9c:23:1e:67:c7:0c:e6:5f:6e:cb:04:81:51:e0:b5: 6d:06:7d:34:73:e2:01:5e:78:bf:a9:3e:b1:44:05:5c:ea:a6: f4:6a:c4:71:1d:70:4d:e9:52:a4:ce:69:42:86:04:a6:87:e5: 14:c0:e9:c1:a2:41:93:fa:ae:9b:ea:24:cd:09:2c:2e:a8:cd: fa:96:82:9d:89:76:b5:1c:e6:16:a4:67:a3:39:f4:db:d4:3d: f6:09:ee:ad:f7:b6:e8:b5:cd:69:9e:bc:f1:13:85:d3:f7:5f: 3c:b3:21:b6:04:b0:39:79:38:d9:54:db:fd:6d:c8:c0:c9:86: 33:42:fb:fd:97:71:bc:c7:f3:51:7f:dc:3d:68:92:cb:f1:78: ea:85:48:69:d8:0e:5b:ca:2a:65:db:e8:61:51:3b:f6:8c:40: 9e:ed:54:d4:4d:be:a5:c1:46:22:57:55:af:a1:39:51:ba:46: f8:13:f4:e1:e0:71:f0:d9:cc:b4:27:4c:2d:63:a8:a3:ab:7f: 59:ae:42:ce:6f:69:62:c3:8e:21:cd:ce:9f:cc:02:d4:8b:6a: b2:82:9a:c6 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE5a4dHGGSuWvceA9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDcwMTE0MDYxNloXDTI4MDIxNjA4NTQwOFowLzEtMCsGA1UEAxMk ZWUzZjMxNzQtYTFiZC00ZjVjLTg1OWMtYWQzY2ZjMGUwNWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1UAxakevmOEaXfDu6HE3QOGynoG0i13KAL2 Lkl69KfaDz0gSpB10+hNYRGSCbzC8K06yriv0CGzlht0H6ecbjZVnKDV2BUm+FJx zkaYf/BGIOEiA5uXjeG3zs9Y1VquOJW4oRxu0JjIBp38SkIzqi+PiGw20j2SPkm9 UoUFwytIgWkYH8d8E0sDH/yGnR7UNsj0wvsdBV9BwPgAlvrxyUYKleyJ3ggzC6Fr NRF3dV/PKR9jYfy09dMzz/dsUdbqKCk3CSHKmhw1mGEalPsmgpVpqlc3h6LKdQVi t+g3XRp6kzoouabaHO/wFhC48rOliFQAJQN+tyvlbk8OYNmF8QIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFC57/Nszu1HQTvbK5eBnU90IqiRvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9l ZTNmMzE3NC1hMWJkLTRmNWMtODU5Yy1hZDNjZmMwZTA1YzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2VlM2YzMTc0LWExYmQtNGY1Yy04 NTljLWFkM2NmYzBlMDVjMC9lZTNmMzE3NC1hMWJkLTRmNWMtODU5Yy1hZDNjZmMw ZTA1YzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXl8QDBAKpgAwwDgQCAAIwCAMGACYC9S8AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC13zBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuRVH8kGNeQgsfTJ9D Jw6ConUBykehK9qpopHKkzdwT3sXDK6+acycIx5nxwzmX27LBIFR4LVtBn00c+IB Xni/qT6xRAVc6qb0asRxHXBN6VKkzmlChgSmh+UUwOnBokGT+q6b6iTNCSwuqM36 loKdiXa1HOYWpGejOfTb1D32Ce6t97botc1pnrzxE4XT9188syG2BLA5eTjZVNv9 bcjAyYYzQvv9l3G8x/NRf9w9aJLL8XjqhUhp2A5byipl2+hhUTv2jECe7VTUTb6l wUYiV1WvoTlRukb4E/Th4HHw2cy0J0wtY6ijq39ZrkLOb2liw44hzc6fzALUi2qy gprG -----END CERTIFICATE-----Generated at Sun Jul 12 21:28:35 2026 by rpki-client