$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer File: c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer (raw, json) Hash identifier: MCFKOk9cvsNDRQFJFg//1L5E8FR+PNVnRO2VizooI7Y= Subject key identifier: 4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584D1F2313495CCCEE2B4C1A9CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 11:42:18 +0000 Certificate not after: Mon 17 Jan 2028 22:38:34 +0000 Subordinate resources: AS: 401319 IP: 64.46.120.0/22 IP: 66.51.100.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:23:13:49:5c:cc:ee:2b:4c:1a:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Mar 10 11:42:18 2026 GMT Not After : Jan 17 22:38:34 2028 GMT Subject: CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:be:8f:f4:0d:e6:10:d9:0f:68:81:ef:60: 5e:3e:cc:9a:dd:63:4d:c7:b5:49:86:db:1e:a5:2d: c4:78:c1:26:d9:88:54:63:d8:6e:54:39:07:12:61: f1:c9:df:59:d5:df:b5:5f:5c:5d:1b:45:98:fc:b8: 33:db:ad:08:23:ab:5d:e3:bf:c9:1a:d2:76:16:6b: c1:fb:51:c2:16:7c:f4:51:e5:38:d3:6c:2f:f2:58: 7d:bc:cc:15:4e:88:d0:78:92:3b:ce:40:7f:32:16: 5f:c0:24:5f:f7:97:f2:f6:a4:83:b2:69:cb:d5:0d: 1a:31:ad:9b:00:0a:97:e3:6a:84:67:d1:8b:f5:b9: 6c:d2:eb:22:69:94:70:75:7d:21:d9:ff:5b:2f:b9: 4a:15:f5:18:3e:77:c5:46:87:e6:68:d1:7d:51:25: c6:8d:c1:80:cd:dd:5e:53:8f:67:94:26:0f:c6:52: 16:03:40:20:71:0d:3a:d3:0a:9c:e3:c2:3b:29:58: f2:54:30:65:c0:f5:28:12:a8:de:cc:ec:49:7c:ab: f9:d4:e1:0f:93:71:51:54:74:f2:0a:77:e8:b6:e4: ed:a6:b4:cc:79:50:59:5e:18:a1:aa:71:c8:c9:e4: b4:8e:ee:1e:d0:96:73:26:22:66:ef:2e:a4:b9:9c: c6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 64.46.120.0/22 66.51.100.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401319 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:77:e6:e9:78:c8:b5:de:17:41:5c:5f:79:88:2a:1c:dc:c7: fd:ec:56:0e:02:81:10:97:7a:e7:a1:74:e6:3d:36:0f:81:6d: 17:64:2d:27:22:76:33:12:85:57:3a:59:94:ea:74:8e:15:a0: f1:5b:03:42:3a:7d:67:ae:5c:34:4d:35:bd:20:f2:a5:a6:89: 94:bf:13:3d:07:31:49:50:35:bb:ad:5a:f9:00:70:fb:8a:a3: 2a:1f:3d:65:98:6a:96:88:d7:7d:17:dd:c8:68:17:fc:3b:fc: 89:8e:ce:96:68:f0:fa:8d:2b:93:9a:3b:55:b8:5e:bf:6b:b2: 8a:2a:2b:d4:65:93:2c:ce:7f:4a:f4:a6:5a:1a:21:fc:d2:6d: 5a:93:7a:04:1d:73:73:d4:cd:cb:11:d0:d2:62:cb:23:09:ca: 3d:39:29:33:78:f6:9e:79:81:be:c5:eb:3d:0b:b5:32:3d:82: 8f:84:d9:2f:25:71:bf:cf:fd:cc:09:dc:61:46:a6:a7:27:4a: 44:ed:c5:3c:9f:99:31:3d:29:21:95:ea:1b:0e:6d:2f:b9:fb: ee:f3:27:c7:38:24:78:10:cb:10:e8:a1:d6:ca:18:6f:59:f7: 4f:34:47:71:af:3b:f9:e8:08:79:68:fe:c5:34:f0:31:60:04: 0b:13:ef:a0 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE0fIxNJXMzuK0wanMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDMxMDExNDIxOFoXDTI4MDExNzIyMzgzNFowLzEtMCsGA1UEAxMk YzZkMTZhMzktNDcyYy00OGNjLWFjNGMtN2UzODU5NTBhMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBO+j/QN5hDZD2iB72BePsya3WNNx7VJhtse pS3EeMEm2YhUY9huVDkHEmHxyd9Z1d+1X1xdG0WY/Lgz260II6td47/JGtJ2FmvB +1HCFnz0UeU402wv8lh9vMwVTojQeJI7zkB/MhZfwCRf95fy9qSDsmnL1Q0aMa2b AAqX42qEZ9GL9bls0usiaZRwdX0h2f9bL7lKFfUYPnfFRofmaNF9USXGjcGAzd1e U49nlCYPxlIWA0AgcQ060wqc48I7KVjyVDBlwPUoEqjezOxJfKv51OEPk3FRVHTy CnfotuTtprTMeVBZXhihqnHIyeS0ju4e0JZzJiJm7y6kuZzGKQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFE6eeUGtVdSdnddd7pB9904wqpA9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j NmQxNmEzOS00NzJjLTQ4Y2MtYWM0Yy03ZTM4NTk1MGEwZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2M2ZDE2YTM5LTQ3MmMtNDhjYy1h YzRjLTdlMzg1OTUwYTBlMi9jNmQxNmEzOS00NzJjLTQ4Y2MtYWM0Yy03ZTM4NTk1 MGEwZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJALngDBAJCM2QwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBh+nMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADR35ul4yLXeF0FcX3mIKhzcx/3sVg4CgRCXeueh dOY9Ng+BbRdkLScidjMShVc6WZTqdI4VoPFbA0I6fWeuXDRNNb0g8qWmiZS/Ez0H MUlQNbutWvkAcPuKoyofPWWYapaI130X3choF/w7/ImOzpZo8PqNK5OaO1W4Xr9r sooqK9RlkyzOf0r0ploaIfzSbVqTegQdc3PUzcsR0NJiyyMJyj05KTN49p55gb7F 6z0LtTI9go+E2S8lcb/P/cwJ3GFGpqcnSkTtxTyfmTE9KSGV6hsObS+5++7zJ8c4 JHgQyxDoodbKGG9Z9080R3GvO/noCHlo/sU08DFgBAsT76A= -----END CERTIFICATE-----Generated at Wed Mar 25 23:11:19 2026 by rpki-client