$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a58bdb83-b149-460f-a9d9-dc607c7f8279.cer File: a58bdb83-b149-460f-a9d9-dc607c7f8279.cer (raw, json) Hash identifier: WG9Kr94HdWqEELjo7/SvUOJb725hcfViP6hQqCF9t8o= Subject key identifier: DD:14:B8:9A:5F:8A:04:72:16:EE:4A:45:00:68:A9:DA:D1:6B:88:FE Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584DBC58B0AE1A68EA9C34735300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a58bdb83-b149-460f-a9d9-dc607c7f8279/a58bdb83-b149-460f-a9d9-dc607c7f8279.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a58bdb83-b149-460f-a9d9-dc607c7f8279/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 May 2026 19:12:15 +0000 Certificate not after: Mon 17 Jan 2028 19:03:32 +0000 Subordinate resources: IP: 66.118.16.0/22 IP: 66.205.236.0/22 IP: 134.195.176.0/22 IP: 161.129.178.0/23 IP: 172.99.196.0/22 IP: 2606:3780::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bc:58:b0:ae:1a:68:ea:9c:34:73:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: May 5 19:12:15 2026 GMT Not After : Jan 17 19:03:32 2028 GMT Subject: CN=a58bdb83-b149-460f-a9d9-dc607c7f8279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:df:cf:50:58:5c:51:a5:e6:5b:f4:13:d8: 37:95:df:55:11:6a:ae:9e:e3:ff:56:6c:b0:a6:3c: 9c:32:43:6b:bc:ff:60:9f:8c:62:c8:b7:0a:96:80: 35:20:c2:a7:36:23:85:03:73:8d:26:e3:83:01:d5: e1:68:ee:d9:0f:e8:46:af:fa:a7:72:50:6b:9b:af: e5:e4:9f:eb:51:00:aa:bd:76:fd:a3:9e:be:ec:92: 39:a2:f4:07:a4:4c:01:92:fb:ab:a8:9c:89:28:ea: 36:12:bb:cf:1c:f0:77:ac:d2:e8:61:e2:d5:62:9b: 64:8e:05:fd:7f:88:81:56:f4:0c:bf:82:a0:f8:94: 77:31:82:e1:8f:62:89:43:13:8f:e3:d5:10:59:c6: 68:72:f8:37:2c:21:a0:49:12:d0:5e:f4:30:27:85: 08:46:c8:0b:86:97:f4:ac:65:f5:a5:c6:70:6d:31: 36:b5:e7:11:0f:f3:9d:43:1f:89:c4:a9:56:3d:fb: db:4a:f4:8f:36:85:2c:83:78:bc:d4:8d:e7:59:09: a9:7c:99:44:ca:dc:f4:41:29:67:77:c9:ae:bc:56: fa:ca:60:d1:38:ec:2b:09:2d:a4:c3:b0:ba:74:f0: c1:a1:80:d3:3b:d0:8a:0c:a9:9a:23:bb:4d:fe:3b: 0b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:14:B8:9A:5F:8A:04:72:16:EE:4A:45:00:68:A9:DA:D1:6B:88:FE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a58bdb83-b149-460f-a9d9-dc607c7f8279/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a58bdb83-b149-460f-a9d9-dc607c7f8279/a58bdb83-b149-460f-a9d9-dc607c7f8279.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 66.118.16.0/22 66.205.236.0/22 134.195.176.0/22 161.129.178.0/23 172.99.196.0/22 IPv6: 2606:3780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:fe:00:d6:e5:19:30:49:ba:d5:cf:cd:bc:1b:2e:76:98:37: bd:3b:2d:b8:13:b3:e9:81:6a:f1:6b:d5:c5:c1:7e:41:9b:f9: f7:a9:11:e5:c8:66:a1:86:ce:59:5a:b9:7e:e4:32:44:9c:3a: 6e:0a:40:b2:70:a5:ae:48:a6:6b:c0:e0:93:b1:3d:b1:f0:40: 95:7a:25:59:b2:fe:25:1e:52:64:97:c4:9a:62:87:5f:a1:0c: 78:a4:a4:bd:3f:fc:14:a5:69:a9:a8:a4:e2:26:50:57:b4:1f: d4:f3:fc:22:cc:9b:35:75:ac:38:98:65:6c:f0:6e:4b:f2:f4: 1e:cb:70:b7:ec:cd:72:71:dd:ce:69:2a:e6:01:ed:56:73:80: 84:ec:67:0b:16:96:49:d6:85:a0:12:23:35:f4:ad:76:fb:a5: d0:88:33:8f:a8:4e:16:b0:1a:0d:d3:96:7a:fa:51:a7:d9:21: 17:1f:d9:2e:01:a5:f1:88:c8:cc:a0:ce:46:0e:22:1f:12:e9: 17:1c:1a:b5:7d:13:84:9b:f5:67:9b:ed:a2:81:6d:b2:b3:b4: 0c:64:40:d6:f7:93:27:b4:ad:fd:b0:bc:49:44:c4:43:ab:9a: 5a:ef:8a:1a:cd:7b:f1:9b:3e:f2:28:27:55:d8:14:4f:cf:ed: 12:55:10:eb -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE28WLCuGmjqnDRzUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDUwNTE5MTIxNVoXDTI4MDExNzE5MDMzMlowLzEtMCsGA1UEAxMk YTU4YmRiODMtYjE0OS00NjBmLWE5ZDktZGM2MDdjN2Y4Mjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/ffz1BYXFGl5lv0E9g3ld9VEWqunuP/Vmyw pjycMkNrvP9gn4xiyLcKloA1IMKnNiOFA3ONJuODAdXhaO7ZD+hGr/qnclBrm6/l 5J/rUQCqvXb9o56+7JI5ovQHpEwBkvurqJyJKOo2ErvPHPB3rNLoYeLVYptkjgX9 f4iBVvQMv4Kg+JR3MYLhj2KJQxOP49UQWcZocvg3LCGgSRLQXvQwJ4UIRsgLhpf0 rGX1pcZwbTE2tecRD/OdQx+JxKlWPfvbSvSPNoUsg3i81I3nWQmpfJlEytz0QSln d8muvFb6ymDROOwrCS2kw7C6dPDBoYDTO9CKDKmaI7tN/jsL2wIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFN0UuJpfigRyFu5KRQBoqdrRa4j+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h NThiZGI4My1iMTQ5LTQ2MGYtYTlkOS1kYzYwN2M3ZjgyNzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2E1OGJkYjgzLWIxNDktNDYwZi1h OWQ5LWRjNjA3YzdmODI3OS9hNThiZGI4My1iMTQ5LTQ2MGYtYTlkOS1kYzYwN2M3 ZjgyNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAJCdhADBAJCzewDBAKGw7ADBAGhgbIDBAKsY8Qw DQQCAAIwBwMFACYGN4AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARP4A1uUZMEm61c/NvBsudpg3vTstuBOz 6YFq8WvVxcF+QZv596kR5chmoYbOWVq5fuQyRJw6bgpAsnClrkima8Dgk7E9sfBA lXolWbL+JR5SZJfEmmKHX6EMeKSkvT/8FKVpqaik4iZQV7Qf1PP8IsybNXWsOJhl bPBuS/L0Hstwt+zNcnHdzmkq5gHtVnOAhOxnCxaWSdaFoBIjNfStdvul0Igzj6hO FrAaDdOWevpRp9khFx/ZLgGl8YjIzKDORg4iHxLpFxwatX0ThJv1Z5vtooFtsrO0 DGRA1veTJ7St/bC8SUTEQ6uaWu+KGs178Zs+8ignVdgUT8/tElUQ6w== -----END CERTIFICATE-----Generated at Wed May 13 01:12:41 2026 by rpki-client