$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer File: f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer (raw, json) Hash identifier: SFZvbZCXWxTII5DMxWpVg1pDybfekL00NFGDgOtDY2U= Subject key identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E2E7CD80A2D820605DCBC4A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Jun 2026 16:27:14 +0000 Certificate not after: Mon 07 Feb 2028 17:59:37 +0000 Subordinate resources: IP: 76.76.19.0/24 IP: 167.254.176.0/21 IP: 198.202.26.0/24 IP: 2607:9180::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2e:7c:d8:0a:2d:82:06:05:dc:bc:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jun 15 16:27:14 2026 GMT Not After : Feb 7 17:59:37 2028 GMT Subject: CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:55:65:f1:d2:16:45:14:db:dd:ba:9f:48: d1:96:3b:40:45:37:16:9c:f1:99:8b:e0:47:e7:b9: 54:cd:8e:65:a4:55:74:00:2e:37:8f:ef:54:d2:96: b6:ba:92:2c:4c:36:34:a0:65:03:71:09:d4:2f:b4: 97:23:49:72:25:45:8a:70:20:ca:0c:74:87:33:9c: dd:e3:4c:ad:ea:ba:20:af:2d:82:69:a4:cc:d5:90: 45:72:d9:ac:51:67:2c:a9:aa:02:b0:92:d6:6e:3b: 24:0f:ab:0a:52:49:a0:fe:26:73:60:c1:76:7f:4e: 21:ce:90:5d:30:f0:01:26:09:54:f6:61:0b:5f:5d: 9d:ba:69:39:4a:dd:08:71:59:de:08:f1:39:96:85: 29:1a:c5:b7:52:83:8b:b8:b4:80:2c:6e:e2:3d:8d: 60:2e:ef:ae:fe:69:7e:46:62:b1:e8:8a:26:49:56: f7:29:83:4e:cc:1c:a0:87:1d:e0:48:26:74:96:fe: ce:ab:df:74:ee:b2:6e:08:fe:82:fa:7d:d2:a2:4f: 31:ee:54:ba:f1:3a:aa:ce:e9:25:e6:d8:dc:ed:87: 09:f1:76:a8:8e:1f:0d:5d:67:93:0c:38:15:05:4a: 0a:55:e1:2e:ec:2c:58:90:8f:9e:1d:ec:9a:24:c6: ac:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 76.76.19.0/24 167.254.176.0/21 198.202.26.0/24 IPv6: 2607:9180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:78:b4:56:2d:6c:d8:38:57:cf:5c:8e:c5:91:2b:e0:06:78: fa:e8:6a:fb:ac:4d:ea:de:09:e4:87:29:b2:e4:bc:cb:ed:08: 82:b8:30:0e:36:e0:04:00:a8:b4:49:09:a4:50:28:ae:a7:75: 7a:74:b8:f8:ee:61:bd:62:09:3c:6a:63:43:3c:73:1c:67:3f: e9:82:24:6f:84:6b:47:8c:fc:1a:84:ba:04:e2:2f:85:6e:92: d7:a5:8a:7f:17:e7:c4:5b:e5:75:9a:a1:eb:83:ad:fb:eb:66: ee:d9:61:08:1c:30:94:d2:ab:67:95:04:95:da:21:a8:19:da: 45:23:7f:3b:ca:d1:cd:34:fa:6d:fa:9b:d5:82:4f:1d:a2:02: 32:9b:42:3a:c9:9a:a0:f9:70:71:05:92:e1:83:a2:b3:5c:44: f5:be:63:e8:53:3b:38:f1:92:7e:7f:e0:76:ab:4a:8b:9b:1f: 55:ac:f2:9a:7f:c6:a3:61:9d:77:d4:14:e7:be:9f:0f:47:69: 00:a4:ba:5d:88:a8:b0:fb:96:b5:a9:37:86:ee:0f:27:63:48: d8:75:1a:ee:1a:f3:36:33:be:0f:0d:73:cd:f9:7f:39:7a:57: e6:25:4f:02:0f:40:e6:1b:86:8e:71:8f:e1:c8:8d:a0:ee:c6: 25:f6:c2:3b -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE4ufNgKLYIGBdy8SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDYxNTE2MjcxNFoXDTI4MDIwNzE3NTkzN1owLzEtMCsGA1UEAxMk ZjAyM2NlNWQtN2FmOC00MzQ1LWEyZDktZDIyZTc3ZWZhNjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG9VZfHSFkUU2926n0jRljtARTcWnPGZi+BH 57lUzY5lpFV0AC43j+9U0pa2upIsTDY0oGUDcQnUL7SXI0lyJUWKcCDKDHSHM5zd 40yt6rogry2CaaTM1ZBFctmsUWcsqaoCsJLWbjskD6sKUkmg/iZzYMF2f04hzpBd MPABJglU9mELX12dumk5St0IcVneCPE5loUpGsW3UoOLuLSALG7iPY1gLu+u/ml+ RmKx6IomSVb3KYNOzByghx3gSCZ0lv7Oq9907rJuCP6C+n3Sok8x7lS68Tqqzukl 5tjc7YcJ8Xaojh8NXWeTDDgVBUoKVeEu7CxYkI+eHeyaJMaskwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFE+C7uJB9Ji2GVMPvrIAe9Gd5uWEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m MDIzY2U1ZC03YWY4LTQzNDUtYTJkOS1kMjJlNzdlZmE2OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2YwMjNjZTVkLTdhZjgtNDM0NS1h MmQ5LWQyMmU3N2VmYTY4ZC9mMDIzY2U1ZC03YWY4LTQzNDUtYTJkOS1kMjJlNzdl ZmE2OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBABMTBMDBAOn/rADBADGyhowDQQCAAIwBwMFACYH kYAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAJ3i0Vi1s2DhXz1yOxZEr4AZ4+uhq+6xN6t4J5IcpsuS8y+0I grgwDjbgBACotEkJpFAorqd1enS4+O5hvWIJPGpjQzxzHGc/6YIkb4RrR4z8GoS6 BOIvhW6S16WKfxfnxFvldZqh64Ot++tm7tlhCBwwlNKrZ5UEldohqBnaRSN/O8rR zTT6bfqb1YJPHaICMptCOsmaoPlwcQWS4YOis1xE9b5j6FM7OPGSfn/gdqtKi5sf Vazymn/Go2Gdd9QU576fD0dpAKS6XYiosPuWtak3hu4PJ2NI2HUa7hrzNjO+Dw1z zfl/OXpX5iVPAg9A5huGjnGP4ciNoO7GJfbCOw== -----END CERTIFICATE-----Generated at Wed Jun 17 09:04:32 2026 by rpki-client