$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer File: 8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer (raw, json) Hash identifier: BfjSE3DZhMEAN+2jIJatLo2W9QBMmjeq9EeIyqUPkNc= Subject key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584CA805E5EDF4E639237F2C94C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Jan 2026 19:42:19 +0000 Certificate not after: Sun 06 Feb 2028 01:45:22 +0000 Subordinate resources: AS: 4540 AS: 25827 IP: 66.187.112.0/20 IP: 69.51.192.0/18 IP: 74.50.160.0/19 IP: 74.116.112.0/21 IP: 74.126.96.0/19 IP: 74.221.16.0/20 IP: 104.151.128.0/21 IP: 135.136.192.0/18 IP: 170.89.192.0/18 IP: 204.8.0.0/22 IP: 205.233.212.0/24 IP: 205.236.148.0/24 IP: 205.236.172.0/24 IP: 2604:6c80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a8:05:e5:ed:f4:e6:39:23:7f:2c:94:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jan 26 19:42:19 2026 GMT Not After : Feb 6 01:45:22 2028 GMT Subject: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:17:ea:1e:29:05:16:fd:67:1d:cd:07:d8: 2a:e3:d1:5d:13:f4:48:97:b3:09:9a:43:ca:cd:12: cf:08:b5:e6:d5:f2:61:a6:48:51:38:40:16:e5:fd: 84:0a:7f:7b:eb:2c:fa:06:41:f1:ad:fe:a1:6f:0c: f1:67:8d:99:b7:75:6e:3a:b6:1c:0a:10:44:0e:1d: 42:68:72:ae:f1:04:67:71:e9:dd:2e:24:fe:53:1e: 82:c8:f5:32:51:30:ce:95:99:68:c0:52:91:86:51: 3e:97:5f:a3:06:40:0c:cf:cd:43:56:a5:45:59:94: 82:18:3d:38:dc:15:cf:5b:ea:a8:01:df:c2:2e:b0: 66:23:73:7f:cb:82:36:20:56:a7:75:16:5c:a6:87: 29:21:76:f1:bc:34:d9:49:33:68:75:f9:0d:01:80: 55:59:60:e1:31:b3:bc:6c:e6:0f:21:dd:72:94:ac: fc:8b:65:ed:8b:71:83:f8:1a:09:27:d4:86:2f:13: e6:b0:25:d0:60:9a:fd:77:ed:54:3d:fa:6c:4a:9d: f8:77:09:50:ee:a4:4a:8c:de:78:4c:f3:90:f9:b8: c8:7b:9d:db:de:76:c1:63:f8:8e:7d:20:ba:f7:37: 62:ca:8b:30:d4:d9:c4:61:17:2c:2d:28:1a:3e:8b: 8f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 66.187.112.0/20 69.51.192.0/18 74.50.160.0/19 74.116.112.0/21 74.126.96.0/19 74.221.16.0/20 104.151.128.0/21 135.136.192.0/18 170.89.192.0/18 204.8.0.0/22 205.233.212.0/24 205.236.148.0/24 205.236.172.0/24 IPv6: 2604:6c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4540 25827 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ef:2d:84:89:1e:3d:39:71:d2:7a:85:42:2a:65:28:41:b7: 2f:b4:81:6b:94:0f:37:fa:74:2b:78:66:e7:67:ea:ef:7d:a7: fe:76:18:00:cd:ad:fa:b0:d8:02:7d:aa:28:e9:25:e5:11:68: e0:72:b7:0e:64:38:36:b8:dc:f2:1b:e9:fb:00:cc:96:cc:aa: 6b:33:bb:9f:c9:1f:32:a8:0d:74:1f:8c:47:fb:d4:45:8d:17: 1b:23:4b:92:cf:ff:cc:57:25:a9:e3:20:01:19:78:e6:ca:b5: 5a:22:3a:7f:71:3c:44:72:0a:31:d9:93:c4:0a:d1:83:cf:9a: 0c:13:76:17:fd:8f:6b:6a:0b:b3:bc:b7:99:cf:c7:39:a3:15: bd:5c:12:19:a8:d4:4d:cf:4e:2d:7e:42:76:2c:55:b1:f0:45: ee:ba:a4:4c:33:8c:13:8b:ce:a0:fb:58:1e:09:d9:2d:a2:e8: f8:2a:70:18:d4:79:e7:78:75:ef:17:d9:b8:a5:0b:1b:64:70: 55:a2:c6:7f:48:e9:40:02:cb:89:ec:37:3c:ab:07:d6:f2:69: a1:c4:3f:b9:f9:19:3e:ca:4d:53:8d:06:0e:30:52:4c:ba:05: f2:84:71:1f:87:03:b0:d3:04:12:48:0a:71:ee:f5:d2:f2:98: b1:d4:62:fc -----BEGIN CERTIFICATE----- MIIHYzCCBkugAwIBAgIUAQ0Mn0MoWEyoBeXt9OY5I38slMYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MDEyNjE5NDIxOVoXDTI4MDIwNjAxNDUyMlowLzEtMCsGA1UEAxMk ODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3ZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4oX6h4pBRb9Zx3NB9gq49FdE/RIl7MJmkPK zRLPCLXm1fJhpkhROEAW5f2ECn976yz6BkHxrf6hbwzxZ42Zt3VuOrYcChBEDh1C aHKu8QRncendLiT+Ux6CyPUyUTDOlZlowFKRhlE+l1+jBkAMz81DVqVFWZSCGD04 3BXPW+qoAd/CLrBmI3N/y4I2IFandRZcpocpIXbxvDTZSTNodfkNAYBVWWDhMbO8 bOYPId1ylKz8i2Xti3GD+BoJJ9SGLxPmsCXQYJr9d+1UPfpsSp34dwlQ7qRKjN54 TPOQ+bjIe53b3nbBY/iOfSC69zdiyosw1NnEYRcsLSgaPouPTwIDAQABo4IEdTCC BHEwHQYDVR0OBBYEFNfz36n3QPArUdhCJ/LcwuHfYHUOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzg1MTFiOGRjLTc0YmEtNDdlNS1h ZjRhLTdjNGU2Yjc3N2Q5Mi84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3 NzdkOTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwdgYIKwYBBQUH AQcBAf8EZzBlMFQEAgABME4DBARCu3ADBAZFM8ADBAVKMqADBANKdHADBAVKfmAD BARK3RADBANol4ADBAaHiMADBAaqWcADBALMCAADBADN6dQDBADN7JQDBADN7Kww DQQCAAIwBwMFACYEbIAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICEbwCAmTjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvvLYSJHj05cdJ6hUIqZShBty+0gWuUDzf6dCt4Zudn6u99p/52GADN rfqw2AJ9qijpJeURaOBytw5kODa43PIb6fsAzJbMqmszu5/JHzKoDXQfjEf71EWN FxsjS5LP/8xXJanjIAEZeObKtVoiOn9xPERyCjHZk8QK0YPPmgwTdhf9j2tqC7O8 t5nPxzmjFb1cEhmo1E3PTi1+QnYsVbHwRe66pEwzjBOLzqD7WB4J2S2i6PgqcBjU eed4de8X2bilCxtkcFWixn9I6UACy4nsNzyrB9byaaHEP7n5GT7KTVONBg4wUky6 BfKEcR+HA7DTBBJICnHu9dLymLHUYvw= -----END CERTIFICATE-----Generated at Fri Feb 27 08:47:21 2026 by rpki-client