$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer File: f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer (raw, json) Hash identifier: OWU6fWAdUOz/dg3ulXkbDWcIArSBxSgBo5v7voqDUVk= Subject key identifier: 0E:A8:54:9E:2A:E8:58:8A:5C:54:9E:0B:BE:FF:1B:A6:D6:C3:8C:F0 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E5DE5157FBCF196F33A1F5C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 16:00:16 +0000 Certificate not after: Wed 22 Mar 2028 23:14:19 +0000 Subordinate resources: IP: 23.151.132.0/24 IP: 198.202.195.0/24 IP: 2602:f48b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:e5:15:7f:bc:f1:96:f3:3a:1f:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jul 2 16:00:16 2026 GMT Not After : Mar 22 23:14:19 2028 GMT Subject: CN=f0e3e332-2e13-47b7-be3c-bd2f40db6864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f9:ad:7c:85:20:80:ca:65:a2:62:40:7e:b0: 7b:a1:bf:d9:e9:03:96:4d:d1:20:ff:5f:75:e0:b4: 9b:38:65:4e:48:aa:64:52:1e:19:cf:6b:43:aa:37: 21:ed:cb:55:a9:23:b8:11:e7:f4:e5:e8:2b:97:42: 7d:89:01:2a:10:79:ab:26:f5:fe:ad:f6:d4:59:73: a9:3e:9c:ed:88:8a:e1:66:0e:c5:21:ef:df:90:ff: 64:5d:72:92:b0:7b:03:76:89:13:3b:02:34:be:81: 1f:d0:44:28:44:96:9c:92:be:b6:90:86:18:47:da: 69:b7:43:06:8d:4d:7f:71:a0:fe:6c:1a:e2:3a:cb: d9:28:84:0a:5d:90:84:46:2a:d8:60:eb:63:82:40: 4d:89:77:18:cf:4d:43:6b:b3:ae:6c:7e:64:08:52: 61:76:5b:2e:eb:c1:61:30:42:bb:82:34:74:91:40: 02:20:09:91:5c:0b:e3:ea:94:9a:55:78:5d:e0:2d: 3f:6e:6f:4d:af:54:19:53:f4:fb:bb:2c:a4:f4:b1: be:48:df:33:31:13:93:f3:c2:d2:85:f3:22:a3:59: e4:fa:f5:18:d4:ec:06:8a:04:34:42:61:34:7e:21: 71:6f:6e:a9:c4:3c:6d:c3:30:65:f0:d2:8f:db:e5: 1b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A8:54:9E:2A:E8:58:8A:5C:54:9E:0B:BE:FF:1B:A6:D6:C3:8C:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.151.132.0/24 198.202.195.0/24 IPv6: 2602:f48b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b3:f2:b8:c8:09:18:2a:44:b4:1e:e0:83:47:fe:2d:25:37: a5:06:17:26:c2:50:0e:2b:19:8d:2b:d6:a5:66:90:cb:15:e5: c7:e2:c3:74:ed:8d:54:6d:04:02:90:ec:c0:2d:df:64:28:66: e5:b6:10:d1:87:27:ba:48:ed:eb:10:36:66:42:87:b2:e1:07: 09:c8:75:cf:82:f3:1d:6c:dc:f7:ae:06:52:46:f7:36:5a:f4: 0c:7c:7c:3c:0e:53:63:8a:0c:4a:d3:76:8a:db:22:09:31:ef: a8:01:35:97:5e:bb:9d:ba:64:2a:ea:dc:b6:9f:60:a9:61:b4: 8e:0f:44:c2:03:f8:d6:c3:da:02:c3:35:e4:c8:cf:7f:f8:e3: 95:3c:46:eb:b6:86:23:3f:5f:e5:dd:c7:b4:51:ae:2c:bd:5c: 0b:f4:c0:97:53:8e:25:6f:ff:ac:c2:b6:d0:4f:26:22:e7:d8: 6a:df:80:41:f3:35:e5:c3:3a:bd:a3:8f:1e:03:b6:4f:1a:aa: 22:be:5f:a7:ca:26:0d:49:70:8d:0a:a3:54:4c:2a:09:f9:ab: a4:c0:a9:ac:c3:0b:76:fc:df:52:b0:5c:54:b3:b7:f3:64:ce: 46:03:ff:da:49:61:55:b0:aa:ef:4c:4c:ec:66:73:fa:66:c2: ee:c1:e0:d1 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWE5d5RV/vPGW8zofXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDcwMjE2MDAxNloXDTI4MDMyMjIzMTQxOVowLzEtMCsGA1UEAxMk ZjBlM2UzMzItMmUxMy00N2I3LWJlM2MtYmQyZjQwZGI2ODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPmtfIUggMplomJAfrB7ob/Z6QOWTdEg/191 4LSbOGVOSKpkUh4Zz2tDqjch7ctVqSO4Eef05egrl0J9iQEqEHmrJvX+rfbUWXOp PpztiIrhZg7FIe/fkP9kXXKSsHsDdokTOwI0voEf0EQoRJackr62kIYYR9ppt0MG jU1/caD+bBriOsvZKIQKXZCERirYYOtjgkBNiXcYz01Da7OubH5kCFJhdlsu68Fh MEK7gjR0kUACIAmRXAvj6pSaVXhd4C0/bm9Nr1QZU/T7uyyk9LG+SN8zMROT88LS hfMio1nk+vUY1OwGigQ0QmE0fiFxb26pxDxtwzBl8NKP2+UbfQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFA6oVJ4q6FiKXFSeC77/G6bWw4zwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m MGUzZTMzMi0yZTEzLTQ3YjctYmUzYy1iZDJmNDBkYjY4NjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2YwZTNlMzMyLTJlMTMtNDdiNy1i ZTNjLWJkMmY0MGRiNjg2NC9mMGUzZTMzMi0yZTEzLTQ3YjctYmUzYy1iZDJmNDBk YjY4NjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXl4QDBADGysMwDgQCAAIwCAMGBCYC9IsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+z8rjICRgqRLQe4INH/i0lN6UGFybCUA4rGY0r1qVmkMsV5cfiw3Tt jVRtBAKQ7MAt32QoZuW2ENGHJ7pI7esQNmZCh7LhBwnIdc+C8x1s3PeuBlJG9zZa 9Ax8fDwOU2OKDErTdorbIgkx76gBNZdeu526ZCrq3LafYKlhtI4PRMID+NbD2gLD NeTIz3/445U8Ruu2hiM/X+Xdx7RRriy9XAv0wJdTjiVv/6zCttBPJiLn2GrfgEHz NeXDOr2jjx4Dtk8aqiK+X6fKJg1JcI0Ko1RMKgn5q6TAqazDC3b831KwXFSzt/Nk zkYD/9pJYVWwqu9MTOxmc/pmwu7B4NE= -----END CERTIFICATE-----Generated at Sun Jul 12 21:27:39 2026 by rpki-client