$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d.cer File: 85cb1f45-c822-4e3f-9234-71ff680b968d.cer (raw, json) Hash identifier: QC8IIWhfUK5O4WWPp8VMSik+V641V8S0DH1OwWo5VFE= Subject key identifier: 6B:0A:61:3E:EA:E0:C0:72:7A:74:54:48:34:07:44:82:56:DA:04:9C Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584D7302DB26E5B11E90B92DC580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Apr 2026 12:45:17 +0000 Certificate not after: Wed 12 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 18439 IP: 139.64.249.0/24 IP: 158.51.8.0/24 IP: 172.82.122.0/23 IP: 207.174.108.0/23 IP: 208.78.156.0/24 IP: 216.115.188.0/24 IP: 2604:69c0::/32 IP: 2607:af40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:02:db:26:e5:b1:1e:90:b9:2d:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 9 12:45:17 2026 GMT Not After : Jul 12 12:45:17 2028 GMT Subject: CN=85cb1f45-c822-4e3f-9234-71ff680b968d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:92:0e:26:c5:b9:6b:4d:d4:b5:ad:8d:ad: c3:8b:62:1a:ab:c8:30:38:7c:0a:fa:fe:2e:56:79: 2d:92:de:08:33:9d:4a:61:d0:30:75:16:41:8b:1d: 6c:7b:99:4b:7d:6e:fa:97:e9:ac:fc:9a:a3:02:16: 40:1e:4e:33:71:89:91:a3:eb:13:c9:c8:a7:ed:33: 19:50:73:6e:ec:27:f1:92:4c:02:25:f1:91:87:1f: e1:e1:dd:98:93:f2:92:48:05:09:3a:ef:bc:14:c5: 4a:76:06:98:f4:ab:59:d5:d3:62:85:ef:f2:08:50: 6e:2b:43:33:2b:c4:89:0e:0c:67:57:02:71:34:cf: fd:1c:79:99:d0:5d:88:3c:8b:c8:3c:05:5f:37:c3: 24:75:e2:1a:d8:e6:ef:a7:6a:26:3f:b3:28:13:3f: c8:53:21:01:08:26:f9:28:d7:e5:94:9e:97:e2:da: f1:bb:47:0b:5c:8e:43:09:db:e5:6d:ea:3f:a6:5c: d7:78:b2:19:1f:1b:03:b2:67:8d:41:c8:b9:5e:e0: ae:c1:d4:ed:37:45:e4:a2:a7:7b:69:ac:c5:8b:1c: f8:12:4f:06:4f:51:94:78:45:9c:ca:5c:64:e2:8d: 2b:e1:58:c4:f7:02:28:3a:d7:5d:cf:cd:2e:16:65: aa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0A:61:3E:EA:E0:C0:72:7A:74:54:48:34:07:44:82:56:DA:04:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 139.64.249.0/24 158.51.8.0/24 172.82.122.0/23 207.174.108.0/23 208.78.156.0/24 216.115.188.0/24 IPv6: 2604:69c0::/32 2607:af40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18439 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c8:d6:b5:20:0f:3f:a5:94:35:97:e7:f9:cd:24:4e:5a:b2: 27:e9:b4:3f:51:71:6a:fa:48:07:fb:87:3e:02:c2:41:79:b4: 0a:d4:1e:c8:43:9d:bf:bc:f5:1e:97:64:56:15:d6:41:30:21: c9:2f:91:aa:74:87:4d:54:bf:f0:0c:5b:8d:51:69:4f:d5:55: 4d:29:c3:82:2d:a6:63:f9:cc:e0:8c:88:ec:24:9f:e6:2e:f0: d7:44:1b:d2:67:a7:12:dc:b7:bb:45:c4:e9:2c:ff:de:32:c1: a7:83:11:8d:40:ce:03:7c:7a:cc:a9:8d:8e:e9:f7:43:f4:9a: 6d:ff:49:d5:3a:d8:98:eb:84:3a:b9:83:78:e2:80:90:57:89: 67:92:3b:39:cb:7e:80:9e:ec:7f:66:17:51:b5:9f:ba:0a:26: 01:fa:6d:2d:2f:b8:51:05:93:98:51:ad:69:2d:ab:55:3b:2f: e6:ae:12:b5:06:ec:c5:5b:6a:ad:a1:c9:48:c6:e2:75:ea:8a: 83:03:f0:f5:35:14:67:52:5f:c0:25:6b:17:9b:9c:33:3c:3e: d8:9d:9a:bc:36:2c:1d:6e:99:e6:f1:bc:b9:a9:0e:6a:34:46: a5:ba:17:b7:ed:20:35:84:b7:eb:6b:b9:58:f1:7c:8d:6a:40: 53:2c:c2:8d -----BEGIN CERTIFICATE----- MIIHPDCCBiSgAwIBAgIUAQ0Mn0MoWE1zAtsm5bEekLktxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDQwOTEyNDUxN1oXDTI4MDcxMjEyNDUxN1owLzEtMCsGA1UEAxMk ODVjYjFmNDUtYzgyMi00ZTNmLTkyMzQtNzFmZjY4MGI5NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0SSDibFuWtN1LWtja3Di2Iaq8gwOHwK+v4u Vnktkt4IM51KYdAwdRZBix1se5lLfW76l+ms/JqjAhZAHk4zcYmRo+sTycin7TMZ UHNu7CfxkkwCJfGRhx/h4d2Yk/KSSAUJOu+8FMVKdgaY9KtZ1dNihe/yCFBuK0Mz K8SJDgxnVwJxNM/9HHmZ0F2IPIvIPAVfN8MkdeIa2Obvp2omP7MoEz/IUyEBCCb5 KNfllJ6X4trxu0cLXI5DCdvlbeo/plzXeLIZHxsDsmeNQci5XuCuwdTtN0Xkoqd7 aazFixz4Ek8GT1GUeEWcylxk4o0r4VjE9wIoOtddz80uFmWqiwIDAQABo4IETjCC BEowHQYDVR0OBBYEFGsKYT7q4MByenRUSDQHRIJW2gScMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 NWNiMWY0NS1jODIyLTRlM2YtOTIzNC03MWZmNjgwYjk2OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzg1Y2IxZjQ1LWM4MjItNGUzZi05 MjM0LTcxZmY2ODBiOTY4ZC84NWNiMWY0NS1jODIyLTRlM2YtOTIzNC03MWZmNjgw Yjk2OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwUwYIKwYBBQUH AQcBAf8ERDBCMCoEAgABMCQDBACLQPkDBACeMwgDBAGsUnoDBAHPrmwDBADQTpwD BADYc7wwFAQCAAIwDgMFACYEacADBQAmB69AMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAkgHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAEnI1rUgDz+llDWX5/nNJE5asifptD9RcWr6SAf7hz4C wkF5tArUHshDnb+89R6XZFYV1kEwIckvkap0h01Uv/AMW41RaU/VVU0pw4ItpmP5 zOCMiOwkn+Yu8NdEG9JnpxLct7tFxOks/94ywaeDEY1AzgN8esypjY7p90P0mm3/ SdU62JjrhDq5g3jigJBXiWeSOznLfoCe7H9mF1G1n7oKJgH6bS0vuFEFk5hRrWkt q1U7L+auErUG7MVbaq2hyUjG4nXqioMD8PU1FGdSX8AlaxebnDM8Ptidmrw2LB1u mebxvLmpDmo0RqW6F7ftIDWEt+truVjxfI1qQFMswo0= -----END CERTIFICATE-----Generated at Fri Apr 17 08:01:14 2026 by rpki-client