$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f.cer File: 13387421-5611-48dd-8b16-4f308be22a1f.cer (raw, json) Hash identifier: vs1tdoVkjWBi4uGYZOi/S32SQGEVC5lzROeq9VBMJlU= Subject key identifier: E7:A1:A0:1D:AA:E5:45:80:F1:81:B2:90:A0:EC:CA:1C:51:26:69:33 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584F5C109605CB7E96E31E070000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/13387421-5611-48dd-8b16-4f308be22a1f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 17:03:14 +0000 Certificate not after: Tue 04 Apr 2028 21:58:58 +0000 Subordinate resources: AS: 402101 IP: 206.220.44.0/22 IP: 2602:f485::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:10:96:05:cb:7e:96:e3:1e:07:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 1 17:03:14 2026 GMT Not After : Apr 4 21:58:58 2028 GMT Subject: CN=13387421-5611-48dd-8b16-4f308be22a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4c:13:12:c2:85:c6:ad:3b:30:ae:50:ac:24: 49:c5:c1:62:bd:5b:57:e1:30:7c:52:96:40:b3:68: cd:55:64:c6:2b:f0:81:93:86:3b:c8:b1:e8:81:33: 14:53:fb:34:9e:56:63:00:5e:87:3f:e0:8c:47:d3: e8:c9:22:9c:be:89:df:32:41:07:96:ab:89:87:ce: 3d:25:74:ae:a6:0a:3b:5b:15:76:fc:78:b2:ae:f3: 96:74:41:8c:1c:3e:dd:79:dd:64:53:6e:82:cc:54: c9:cf:16:1d:88:10:6c:67:5c:9d:51:cb:2d:da:be: 15:b4:0d:16:72:a9:82:3e:bc:8f:19:c1:48:20:c7: b6:3c:44:21:ad:16:c1:38:2f:80:86:43:04:91:4e: c2:9e:dc:93:e8:df:c2:82:1d:82:7a:a0:38:c3:dc: fe:a2:ef:7a:11:33:8e:9b:b3:d4:9a:9a:76:e8:95: 5c:44:a0:30:53:4b:a9:7f:9a:92:6d:f1:4a:e4:e9: f8:e6:71:20:99:91:14:f1:9d:a8:9d:f3:df:59:78: 2f:59:56:92:47:96:57:fa:c2:6f:10:da:e0:9c:f0: b9:d7:b4:76:11:9e:fe:9b:51:f3:a0:56:d1:9b:86: fb:59:61:e5:af:24:b0:10:92:10:ea:1c:50:f0:7b: df:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A1:A0:1D:AA:E5:45:80:F1:81:B2:90:A0:EC:CA:1C:51:26:69:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/13387421-5611-48dd-8b16-4f308be22a1f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 206.220.44.0/22 IPv6: 2602:f485::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402101 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:eb:c9:33:fd:7f:e6:8a:7a:53:8c:60:9d:6e:57:ac:b9:81: 89:62:5a:d7:aa:2e:59:6f:7a:21:95:6d:d6:95:9c:7e:ab:cf: 26:bf:23:21:5a:b9:c7:82:ea:d5:66:48:a6:73:50:7d:d9:b8: 18:59:86:59:ce:f6:95:c7:da:c3:62:1f:bd:3a:5b:fe:29:18: ef:1c:c2:75:98:42:76:b0:24:30:0e:5c:e9:23:8e:63:7f:44: 36:59:38:3c:c2:36:e1:db:26:b1:c7:ae:ac:0f:c9:d0:58:33: af:8b:f7:a7:bd:45:2e:3d:a1:4c:d2:25:77:61:ca:f6:43:4e: 89:ea:ad:d4:b6:a6:12:87:ab:2d:90:11:8f:20:f8:34:b3:fb: 02:1c:40:dd:87:12:c3:8e:36:aa:b0:e9:5c:f9:ed:c1:55:a0: dc:6b:b3:f7:d2:88:b9:85:ff:d5:25:75:99:c9:d6:db:aa:56: bb:3e:29:d3:ea:66:c2:35:06:82:67:99:ef:5f:42:e2:a2:06: 69:c8:14:22:a7:97:6d:c7:6f:6d:b9:78:4b:68:b9:fe:17:34: 41:b7:38:be:8a:bf:02:7f:83:03:9a:9c:81:fc:91:4f:8d:22: d9:14:d5:b8:9f:d3:b6:04:73:89:17:63:de:71:30:b5:1a:77: ef:b3:33:22 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9cEJYFy36W4x4HAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MTAwMTE3MDMxNFoXDTI4MDQwNDIxNTg1OFowLzEtMCsGA1UEAxMk MTMzODc0MjEtNTYxMS00OGRkLThiMTYtNGYzMDhiZTIyYTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUwTEsKFxq07MK5QrCRJxcFivVtX4TB8UpZA s2jNVWTGK/CBk4Y7yLHogTMUU/s0nlZjAF6HP+CMR9PoySKcvonfMkEHlquJh849 JXSupgo7WxV2/HiyrvOWdEGMHD7ded1kU26CzFTJzxYdiBBsZ1ydUcst2r4VtA0W cqmCPryPGcFIIMe2PEQhrRbBOC+AhkMEkU7CntyT6N/Cgh2CeqA4w9z+ou96ETOO m7PUmpp26JVcRKAwU0upf5qSbfFK5On45nEgmZEU8Z2onfPfWXgvWVaSR5ZX+sJv ENrgnPC517R2EZ7+m1HzoFbRm4b7WWHlrySwEJIQ6hxQ8HvfPQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOehoB2q5UWA8YGykKDsyhxRJmkzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8x MzM4NzQyMS01NjExLTQ4ZGQtOGIxNi00ZjMwOGJlMjJhMWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzEzMzg3NDIxLTU2MTEtNDhkZC04 YjE2LTRmMzA4YmUyMmExZi8xMzM4NzQyMS01NjExLTQ4ZGQtOGIxNi00ZjMwOGJl MjJhMWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALO3CwwDgQCAAIwCAMGBCYC9IUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYitTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBj68kz/X/minpTjGCdblesuYGJ YlrXqi5Zb3ohlW3WlZx+q88mvyMhWrnHgurVZkimc1B92bgYWYZZzvaVx9rDYh+9 Olv+KRjvHMJ1mEJ2sCQwDlzpI45jf0Q2WTg8wjbh2yaxx66sD8nQWDOvi/envUUu PaFM0iV3Ycr2Q06J6q3UtqYSh6stkBGPIPg0s/sCHEDdhxLDjjaqsOlc+e3BVaDc a7P30oi5hf/VJXWZydbbqla7PinT6mbCNQaCZ5nvX0LiogZpyBQip5dtx29tuXhL aLn+FzRBtzi+ir8Cf4MDmpyB/JFPjSLZFNW4n9O2BHOJF2PecTC1GnfvszMi -----END CERTIFICATE-----Generated at Sun Oct 11 13:35:48 2026 by rpki-client