$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5176588-5e0f-4ea9-881f-3c260495726e.cer File: f5176588-5e0f-4ea9-881f-3c260495726e.cer (raw, json) Hash identifier: fpqMFLsSrKfZqlrpxa+LfKE8zbM1ihlk9PP1SGqzp4o= Subject key identifier: 4C:0A:DD:A1:E0:BC:7D:10:56:5D:EC:95:F7:79:3E:4A:E1:5D:67:23 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E5DFFDFE6CCA2693693C0BD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5176588-5e0f-4ea9-881f-3c260495726e/f5176588-5e0f-4ea9-881f-3c260495726e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5176588-5e0f-4ea9-881f-3c260495726e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 16:54:15 +0000 Certificate not after: Tue 11 Apr 2028 18:31:34 +0000 Subordinate resources: AS: 396116 IP: 199.175.162.0/24 IP: 199.245.148.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:ff:df:e6:cc:a2:69:36:93:c0:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jul 2 16:54:15 2026 GMT Not After : Apr 11 18:31:34 2028 GMT Subject: CN=f5176588-5e0f-4ea9-881f-3c260495726e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1b:df:e1:75:fc:83:8c:e6:7f:37:bd:33:39: 77:74:0d:b3:5f:2f:3b:f9:d5:71:f4:7b:36:9f:5c: 9c:0e:df:4d:13:c2:3d:8b:53:1a:09:90:50:fb:5d: 2a:3a:15:44:1b:a7:30:ce:f8:c7:15:2f:a1:5b:35: ec:cb:20:b6:be:bd:1f:6f:a7:e3:c5:6d:81:89:57: 65:cf:5b:3c:bb:f2:e1:7f:65:0e:69:69:6f:7c:6f: 10:c7:65:1c:95:16:33:ed:6b:c6:00:85:fa:d5:c1: aa:1b:11:d3:76:41:d7:47:73:70:ac:c4:7a:fb:b7: cc:0c:22:e2:42:e9:38:3f:e5:bc:7b:f4:0f:b0:52: bb:e2:6f:3d:1c:91:17:ea:c3:b5:e5:e3:23:65:d3: 88:2b:06:ee:c8:83:89:d2:ca:e6:42:44:e4:8a:d1: ed:c5:58:cc:eb:e6:0f:cf:06:59:78:32:28:8e:24: f2:ff:d0:d2:26:c4:1e:b0:57:ff:8e:ab:97:df:6b: e3:c6:76:90:46:10:51:be:2c:b3:85:93:c6:f7:01: 9c:5d:f2:29:47:9e:62:63:d8:57:72:24:9d:9f:3f: 12:78:88:52:17:cc:96:09:19:33:55:9f:33:6e:41: 74:67:71:dd:4d:be:e7:73:5b:1c:15:86:89:8b:fc: 21:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0A:DD:A1:E0:BC:7D:10:56:5D:EC:95:F7:79:3E:4A:E1:5D:67:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5176588-5e0f-4ea9-881f-3c260495726e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5176588-5e0f-4ea9-881f-3c260495726e/f5176588-5e0f-4ea9-881f-3c260495726e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 199.175.162.0/24 199.245.148.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396116 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:6f:5b:68:cc:80:82:bc:9d:8d:a5:5e:ee:d2:d5:14:92:6f: 64:0d:7e:67:1c:4f:eb:ca:d8:30:6a:09:e1:c8:64:47:ed:62: 26:ff:11:0a:3a:45:24:db:44:1b:34:51:57:05:e8:c0:56:2f: 8b:7f:b5:f3:76:3b:d6:90:ec:fa:62:51:e4:e3:24:65:52:de: fd:01:29:79:c2:9b:29:c7:63:c4:d4:d6:af:6b:4e:39:20:7f: 86:4a:79:19:17:c1:d3:65:c6:03:48:b7:64:51:ff:48:fa:38: b6:be:b9:c3:35:b1:d8:91:c7:30:fe:cb:c5:68:07:f1:a6:ae: 3c:b0:be:be:22:6e:c6:2d:ac:11:09:f0:9b:b1:52:70:75:9a: 23:28:fd:11:4e:fb:d8:0b:c0:08:0a:e2:f8:96:27:cf:f9:c4: 42:c8:ee:f2:83:96:09:29:ac:46:07:28:0a:81:70:0e:e6:4b: eb:11:07:1b:3e:77:3e:ca:b8:94:22:ba:07:9a:e4:7a:a5:5d: b1:6b:bb:f5:65:24:bb:e4:b4:bf:5e:70:04:e7:c9:b4:d5:b8: 42:68:95:67:eb:30:b1:18:47:5e:61:18:4a:05:f9:39:cd:c0: 30:e9:13:07:cd:0f:4b:20:b1:32:33:46:12:48:d3:24:71:d0: ca:c0:26:50 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE5d/9/mzKJpNpPAvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDcwMjE2NTQxNVoXDTI4MDQxMTE4MzEzNFowLzEtMCsGA1UEAxMk ZjUxNzY1ODgtNWUwZi00ZWE5LTg4MWYtM2MyNjA0OTU3MjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRvf4XX8g4zmfze9Mzl3dA2zXy87+dVx9Hs2 n1ycDt9NE8I9i1MaCZBQ+10qOhVEG6cwzvjHFS+hWzXsyyC2vr0fb6fjxW2BiVdl z1s8u/Lhf2UOaWlvfG8Qx2UclRYz7WvGAIX61cGqGxHTdkHXR3NwrMR6+7fMDCLi Quk4P+W8e/QPsFK74m89HJEX6sO15eMjZdOIKwbuyIOJ0srmQkTkitHtxVjM6+YP zwZZeDIojiTy/9DSJsQesFf/jquX32vjxnaQRhBRviyzhZPG9wGcXfIpR55iY9hX ciSdnz8SeIhSF8yWCRkzVZ8zbkF0Z3HdTb7nc1scFYaJi/wh2wIDAQABo4IEITCC BB0wHQYDVR0OBBYEFEwK3aHgvH0QVl3slfd5PkrhXWcjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m NTE3NjU4OC01ZTBmLTRlYTktODgxZi0zYzI2MDQ5NTcyNmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Y1MTc2NTg4LTVlMGYtNGVhOS04 ODFmLTNjMjYwNDk1NzI2ZS9mNTE3NjU4OC01ZTBmLTRlYTktODgxZi0zYzI2MDQ5 NTcyNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADHr6IDBADH9ZQwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgtUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGNvW2jMgIK8nY2lXu7S1RSSb2QNfmccT+vK2DBq CeHIZEftYib/EQo6RSTbRBs0UVcF6MBWL4t/tfN2O9aQ7PpiUeTjJGVS3v0BKXnC mynHY8TU1q9rTjkgf4ZKeRkXwdNlxgNIt2RR/0j6OLa+ucM1sdiRxzD+y8VoB/Gm rjywvr4ibsYtrBEJ8JuxUnB1miMo/RFO+9gLwAgK4viWJ8/5xELI7vKDlgkprEYH KAqBcA7mS+sRBxs+dz7KuJQiugea5HqlXbFru/VlJLvktL9ecATnybTVuEJolWfr MLEYR15hGEoF+TnNwDDpEwfND0sgsTIzRhJI0yRx0MrAJlA= -----END CERTIFICATE-----Generated at Sun Jul 12 21:31:09 2026 by rpki-client