$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer File: 09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer (raw, json) Hash identifier: goD0I+g6KUEB1ivJDsSyGc3dZ+2AYlJxiPNgkIZFjL8= Subject key identifier: F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584CAD8AE045DE815AA91FE77F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Jan 2026 19:09:18 +0000 Certificate not after: Thu 13 Apr 2028 20:59:44 +0000 Subordinate resources: AS: 394935 IP: 23.136.220.0/24 IP: 2602:f764::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ad:8a:e0:45:de:81:5a:a9:1f:e7:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Jan 28 19:09:18 2026 GMT Not After : Apr 13 20:59:44 2028 GMT Subject: CN=09a828ed-c9e2-481b-8715-41b4d5f5fa54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f9:fa:8b:bf:8f:da:86:f5:c2:1f:c8:79:a5: ad:a9:08:70:30:2e:20:62:e5:69:31:c3:9a:80:1d: df:64:d3:4a:88:6a:13:64:34:17:0c:72:99:1a:eb: 65:43:c3:3e:4b:dc:6a:be:9f:a3:47:ce:7b:1a:4c: 82:1b:f8:1e:67:95:1f:f2:26:f8:53:81:96:cd:5d: 57:d3:74:3a:75:03:5d:a7:39:ae:5b:8b:ce:a0:ac: 88:70:a3:f2:cb:83:39:23:e2:2d:79:d2:d3:99:46: 86:86:aa:73:10:d5:ec:7e:a6:ce:11:57:9a:cb:c5: be:5d:90:cb:24:14:61:d8:77:1c:3e:a9:bd:09:1e: 6f:82:6a:b8:d0:d1:c9:92:7d:a7:71:8f:9c:3c:fd: b3:d9:cc:89:59:92:b5:30:6a:0a:b7:2b:91:2b:a2: bf:a1:be:fc:79:b3:8f:5d:fe:2b:19:00:94:26:14: 5e:95:e8:b8:46:05:27:5e:41:9d:a9:c9:5c:b2:26: e3:2e:fb:8c:20:9f:0e:cd:aa:32:f8:75:0a:dd:41: 92:fd:83:62:32:5c:d5:a1:bb:d8:82:41:5b:58:f6: e1:5f:6d:bc:a8:c5:fc:c3:97:9f:69:ab:90:81:b5: ab:94:d8:c9:cf:c8:31:3e:af:a5:eb:b0:9f:60:e2: a5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.136.220.0/24 IPv6: 2602:f764::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394935 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:98:be:00:56:cc:f0:13:02:19:42:db:c2:d9:03:fd:90:07: 87:47:3d:52:f6:7d:f9:9d:4b:0c:d6:dc:8f:37:dd:b8:73:ed: 57:6f:68:ae:a7:d0:85:e0:1e:6e:2a:4c:7d:fa:0f:67:62:03: 1d:41:bf:a0:cd:7a:52:e3:c8:cf:05:b1:45:c6:85:e4:2f:b3: 37:7e:55:0a:0b:9b:78:ed:e8:dc:88:31:7d:80:4b:ee:2f:49: 49:96:46:ad:09:cf:f7:ce:20:43:83:61:3d:c6:76:d8:4a:de: 24:ea:0c:96:fc:ff:cb:74:73:e8:59:93:16:5e:73:1a:8f:22: 1c:44:04:b1:96:e9:95:9a:8b:a2:8b:55:ad:62:52:d0:28:7d: 25:fb:be:1a:9b:83:22:ed:84:46:98:18:b7:c1:bc:b3:01:9f: b9:dc:60:af:2a:7a:b8:5f:e7:69:c1:9e:92:59:75:bf:4e:fd: eb:d0:86:76:b2:03:73:86:b5:90:0e:57:5b:31:77:3b:9f:99: cf:dd:b9:ec:40:db:69:96:a1:76:4c:fc:20:1b:47:20:fb:f3: 16:78:d9:1d:ea:be:1d:08:ef:90:7d:f8:70:62:69:89:0a:b1: f6:20:89:71:95:f6:75:bd:97:d8:09:d2:aa:19:e1:29:80:55: a7:41:1f:97 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEytiuBF3oFaqR/nfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDEyODE5MDkxOFoXDTI4MDQxMzIwNTk0NFowLzEtMCsGA1UEAxMk MDlhODI4ZWQtYzllMi00ODFiLTg3MTUtNDFiNGQ1ZjVmYTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfn6i7+P2ob1wh/IeaWtqQhwMC4gYuVpMcOa gB3fZNNKiGoTZDQXDHKZGutlQ8M+S9xqvp+jR857GkyCG/geZ5Uf8ib4U4GWzV1X 03Q6dQNdpzmuW4vOoKyIcKPyy4M5I+ItedLTmUaGhqpzENXsfqbOEVeay8W+XZDL JBRh2HccPqm9CR5vgmq40NHJkn2ncY+cPP2z2cyJWZK1MGoKtyuRK6K/ob78ebOP Xf4rGQCUJhRelei4RgUnXkGdqclcsibjLvuMIJ8Ozaoy+HUK3UGS/YNiMlzVobvY gkFbWPbhX228qMX8w5efaauQgbWrlNjJz8gxPq+l67CfYOKlEQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPQ3tsMqgTJ/fu0z9nl82mx1cRM5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8w OWE4MjhlZC1jOWUyLTQ4MWItODcxNS00MWI0ZDVmNWZhNTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzA5YTgyOGVkLWM5ZTItNDgxYi04 NzE1LTQxYjRkNWY1ZmE1NC8wOWE4MjhlZC1jOWUyLTQ4MWItODcxNS00MWI0ZDVm NWZhNTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiNwwDgQCAAIwCAMGACYC92QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYGtzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0mL4AVszwEwIZQtvC2QP9kAeH Rz1S9n35nUsM1tyPN924c+1Xb2iup9CF4B5uKkx9+g9nYgMdQb+gzXpS48jPBbFF xoXkL7M3flUKC5t47ejciDF9gEvuL0lJlkatCc/3ziBDg2E9xnbYSt4k6gyW/P/L dHPoWZMWXnMajyIcRASxlumVmouii1WtYlLQKH0l+74am4Mi7YRGmBi3wbyzAZ+5 3GCvKnq4X+dpwZ6SWXW/Tv3r0IZ2sgNzhrWQDldbMXc7n5nP3bnsQNtplqF2TPwg G0cg+/MWeNkd6r4dCO+QffhwYmmJCrH2IIlxlfZ1vZfYCdKqGeEpgFWnQR+X -----END CERTIFICATE-----Generated at Thu Feb 26 19:58:16 2026 by rpki-client