$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer File: ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer (raw, json) Hash identifier: 2pO/KCzY3T/PkyyWguYewWod5qwF2gE02AN//6mmcyw= Subject key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584E5E1F240858F6C5690BDBEB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 17:57:15 +0000 Certificate not after: Mon 17 Jan 2028 15:05:51 +0000 Subordinate resources: AS: 18636 IP: 142.248.45.0/24 IP: 204.69.247.0/24 IP: 2602:f4f2::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:1f:24:08:58:f6:c5:69:0b:db:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jul 2 17:57:15 2026 GMT Not After : Jan 17 15:05:51 2028 GMT Subject: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:01:a4:17:53:fc:1c:14:7e:a7:21:f5:ee: 07:01:44:8b:30:0f:b9:e9:6a:26:40:0c:69:3e:0a: d2:dd:06:48:b5:69:77:02:41:4a:d7:b5:9e:2b:9b: 50:ab:01:3d:74:db:b9:18:85:83:bb:f9:16:a6:08: f5:77:71:79:75:18:bd:83:c7:32:14:fd:dd:31:2b: b4:bd:b1:55:59:0f:b9:9e:2a:b7:0e:97:ec:71:bc: 12:dd:74:2b:7b:3b:50:7c:3b:cf:e1:f7:ab:1a:72: 3a:88:e8:6c:db:8f:35:04:f7:01:9d:25:d0:f4:0c: 86:e3:ea:eb:44:f8:f1:c2:75:44:de:a2:2d:ef:a2: 77:a2:1a:9a:63:b4:7b:ab:7a:12:8f:ec:8c:b0:12: fd:bc:f1:34:47:1d:66:f0:98:e4:10:d9:51:5a:23: b6:f9:e4:ba:4c:01:fb:29:03:fd:d6:45:59:fe:ec: d1:ba:1e:6f:01:71:8b:1e:93:39:a4:bc:04:b8:f8: 1e:ca:c6:09:cf:e8:79:02:f3:e4:19:07:a3:ab:e9: 98:8a:ad:90:1e:99:82:2b:4e:2f:20:fc:42:5d:c5: 02:03:ba:2b:6a:f8:ca:08:19:db:e4:5c:03:1d:03: b6:cf:84:66:03:ab:67:de:d8:c5:e7:c1:54:0f:7c: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 142.248.45.0/24 204.69.247.0/24 IPv6: 2602:f4f2::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18636 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:5a:41:8c:20:14:3f:c3:5e:95:17:cf:e5:e3:f2:f9:74:a5: 4e:ca:7b:69:68:4e:55:b1:bd:cd:91:b9:4a:73:db:89:93:0f: 70:ad:b4:81:cc:02:d1:22:f9:83:3d:46:33:28:b0:b0:7a:43: 05:93:53:44:bf:4d:04:dd:5b:f4:3a:5b:7d:74:4c:39:c5:80: 8c:39:8d:70:53:ec:d5:02:db:fd:fb:3b:af:86:d9:21:4c:65: 9c:d9:b0:75:a0:26:7b:75:92:46:fa:c9:d8:31:18:27:0a:e6: 00:9b:e1:64:8c:16:14:ec:4e:1a:79:d0:d4:74:cd:d7:30:36: 18:50:aa:6c:c4:a6:f3:f9:d1:d8:b7:38:52:1d:5c:8c:46:55: ed:e0:ec:92:c3:38:81:f6:85:4b:12:c8:39:c5:db:56:b1:2d: e3:a5:cf:6e:f9:c6:f3:9a:b5:ed:ab:76:ee:0a:0e:ec:f5:21: 43:a8:8f:e0:87:52:76:91:d8:14:65:ec:97:39:72:d0:84:fe: d4:69:f0:69:85:2d:2b:62:3b:bf:89:96:69:95:e5:e7:5a:61: 55:f6:34:da:12:4b:52:75:a7:20:4a:8e:c4:2d:cf:5d:47:13: d2:41:10:18:20:fd:7f:cf:58:73:51:e8:81:19:ba:b3:bb:76: 62:e0:f8:4e -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE5eHyQIWPbFaQvb6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDcwMjE3NTcxNVoXDTI4MDExNzE1MDU1MVowLzEtMCsGA1UEAxMk ZWMzNjdiYjAtYTZlMC00NzY5LTllOTMtZThlOWI2YTFhY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6cBpBdT/BwUfqch9e4HAUSLMA+56WomQAxp PgrS3QZItWl3AkFK17WeK5tQqwE9dNu5GIWDu/kWpgj1d3F5dRi9g8cyFP3dMSu0 vbFVWQ+5niq3DpfscbwS3XQreztQfDvP4ferGnI6iOhs2481BPcBnSXQ9AyG4+rr RPjxwnVE3qIt76J3ohqaY7R7q3oSj+yMsBL9vPE0Rx1m8JjkENlRWiO2+eS6TAH7 KQP91kVZ/uzRuh5vAXGLHpM5pLwEuPgeysYJz+h5AvPkGQejq+mYiq2QHpmCK04v IPxCXcUCA7oravjKCBnb5FwDHQO2z4RmA6tn3tjF58FUD3yHZwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFIn7V0s4fNGmc3A2fS3n5aUrtWmWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9l YzM2N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5YjZhMWFjYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2VjMzY3YmIwLWE2ZTAtNDc2OS05 ZTkzLWU4ZTliNmExYWNiOS9lYzM2N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5YjZh MWFjYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBACO+C0DBADMRfcwDgQCAAIwCAMGACYC9PIAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAkjMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAERaQYwgFD/DXpUXz+Xj 8vl0pU7Ke2loTlWxvc2RuUpz24mTD3CttIHMAtEi+YM9RjMosLB6QwWTU0S/TQTd W/Q6W310TDnFgIw5jXBT7NUC2/37O6+G2SFMZZzZsHWgJnt1kkb6ydgxGCcK5gCb 4WSMFhTsThp50NR0zdcwNhhQqmzEpvP50di3OFIdXIxGVe3g7JLDOIH2hUsSyDnF 21axLeOlz275xvOate2rdu4KDuz1IUOoj+CHUnaR2BRl7Jc5ctCE/tRp8GmFLSti O7+JlmmV5edaYVX2NNoSS1J1pyBKjsQtz11HE9JBEBgg/X/PWHNR6IEZurO7dmLg +E4= -----END CERTIFICATE-----Generated at Fri Jul 24 01:15:07 2026 by rpki-client