$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b.cer File: 6e15809f-b3e5-4fe0-8b06-34bb98746e6b.cer (raw, json) Hash identifier: NonlQ02MDaL1K3pSi8xWuuKjlPgFD5k6WG+0E7ul8MQ= Subject key identifier: AE:37:B0:7D:8E:42:6A:A2:D2:32:E9:BD:D0:A4:1F:00:7A:C9:3E:00 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584CEDCC87ABB10E08CF47533C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b/6e15809f-b3e5-4fe0-8b06-34bb98746e6b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Feb 2026 19:33:19 +0000 Certificate not after: Mon 13 Mar 2028 05:25:48 +0000 Subordinate resources: AS: 401522 IP: 142.248.238.0/24 IP: 2602:f44c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:cc:87:ab:b1:0e:08:cf:47:53:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Feb 20 19:33:19 2026 GMT Not After : Mar 13 05:25:48 2028 GMT Subject: CN=6e15809f-b3e5-4fe0-8b06-34bb98746e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d2:ab:de:16:c3:d0:71:f4:1e:32:fa:0e:d9: b8:b1:0b:ba:9e:c2:bc:84:16:d3:8b:c5:bb:8b:d8: ae:e8:07:f9:09:85:d6:3d:0d:95:84:7b:dd:ae:dc: 64:62:28:61:34:8e:d5:71:76:27:ce:b5:b5:61:d4: dc:68:d5:b1:f2:47:29:4e:94:88:19:68:c3:bd:b2: 79:21:59:e7:91:11:1f:f9:b8:9c:98:39:3a:63:ca: b5:88:36:e9:ac:ea:c7:f1:65:87:08:99:5c:1c:a6: ab:84:64:fc:70:4c:f0:11:2d:97:d6:d7:f0:12:73: 36:f6:94:bc:6c:29:5f:fd:92:a8:62:17:e5:da:96: 85:80:9c:8b:d8:ec:53:a9:79:6e:76:58:1b:a3:be: 9e:e5:49:4e:07:67:67:5c:c2:03:cb:d2:b2:e9:1b: 3e:c6:ea:92:07:4c:07:35:8b:66:f5:76:8c:a1:5c: 6d:cf:f2:53:34:98:4a:70:22:11:ce:8f:b2:61:ea: 3d:61:d0:4e:97:58:78:ab:93:e4:72:60:07:c0:88: d7:b6:44:7f:88:27:b5:28:0a:52:52:bf:65:de:62: df:a1:d4:12:c5:a4:03:3f:99:2e:aa:0a:e3:3a:6b: d7:87:5b:c3:00:7f:1a:c3:12:d7:a2:cf:72:24:45: 84:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:37:B0:7D:8E:42:6A:A2:D2:32:E9:BD:D0:A4:1F:00:7A:C9:3E:00 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6e15809f-b3e5-4fe0-8b06-34bb98746e6b/6e15809f-b3e5-4fe0-8b06-34bb98746e6b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 142.248.238.0/24 IPv6: 2602:f44c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401522 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:61:e0:34:7f:e9:02:72:b2:a5:12:b7:75:ee:d3:73:64:56: 38:dc:44:8a:f0:a1:69:50:e0:a6:2a:5f:12:d0:b6:11:96:a7: a4:39:ed:cc:a9:1f:9d:ea:88:c8:10:b9:ea:3e:2d:71:e4:08: e0:f0:21:70:86:a8:be:fd:85:32:36:f4:e8:fa:cb:30:3a:d6: c1:00:fb:e1:36:ed:97:4c:56:4d:20:7d:9c:ed:90:4f:dc:d4: 9d:aa:ee:00:38:a0:1b:c1:09:2f:ec:2d:99:a2:66:5e:90:19: f2:70:1c:ab:7d:7c:d4:dd:5e:96:ea:20:b4:62:57:8b:52:8f: 83:c8:b0:9e:14:0c:c7:bb:74:84:a7:cd:45:c9:30:c0:47:19: 9e:c5:24:0a:f7:ad:ba:00:5c:e4:f9:ad:d5:b9:43:c1:ef:93: 21:3a:02:ec:6b:40:2c:aa:2e:03:03:e1:25:44:60:ba:87:85: 6a:2e:98:cc:b3:9c:c7:6c:34:40:ac:b9:d2:f8:3a:e7:ab:68: a0:86:eb:60:ee:30:e1:c6:4a:4d:28:e5:1c:04:11:c5:de:c9: 68:a9:e6:de:5f:b0:ff:6f:ca:2d:02:92:30:44:df:4d:e4:27: 35:61:0a:a5:32:45:31:d5:d9:ae:48:72:70:c5:65:8c:5f:db: c6:b9:65:ff -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEztzIersQ4Iz0dTPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDIyMDE5MzMxOVoXDTI4MDMxMzA1MjU0OFowLzEtMCsGA1UEAxMk NmUxNTgwOWYtYjNlNS00ZmUwLThiMDYtMzRiYjk4NzQ2ZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9Kr3hbD0HH0HjL6Dtm4sQu6nsK8hBbTi8W7 i9iu6Af5CYXWPQ2VhHvdrtxkYihhNI7VcXYnzrW1YdTcaNWx8kcpTpSIGWjDvbJ5 IVnnkREf+bicmDk6Y8q1iDbprOrH8WWHCJlcHKarhGT8cEzwES2X1tfwEnM29pS8 bClf/ZKoYhfl2paFgJyL2OxTqXludlgbo76e5UlOB2dnXMIDy9Ky6Rs+xuqSB0wH NYtm9XaMoVxtz/JTNJhKcCIRzo+yYeo9YdBOl1h4q5PkcmAHwIjXtkR/iCe1KApS Ur9l3mLfodQSxaQDP5kuqgrjOmvXh1vDAH8awxLXos9yJEWENwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFK43sH2OQmqi0jLpvdCkHwB6yT4AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82 ZTE1ODA5Zi1iM2U1LTRmZTAtOGIwNi0zNGJiOTg3NDZlNmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzZlMTU4MDlmLWIzZTUtNGZlMC04 YjA2LTM0YmI5ODc0NmU2Yi82ZTE1ODA5Zi1iM2U1LTRmZTAtOGIwNi0zNGJiOTg3 NDZlNmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACO+O4wDgQCAAIwCAMGACYC9EwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgcjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdYeA0f+kCcrKlErd17tNzZFY4 3ESK8KFpUOCmKl8S0LYRlqekOe3MqR+d6ojIELnqPi1x5Ajg8CFwhqi+/YUyNvTo +sswOtbBAPvhNu2XTFZNIH2c7ZBP3NSdqu4AOKAbwQkv7C2ZomZekBnycByrfXzU 3V6W6iC0YleLUo+DyLCeFAzHu3SEp81FyTDARxmexSQK9626AFzk+a3VuUPB75Mh OgLsa0Asqi4DA+ElRGC6h4VqLpjMs5zHbDRArLnS+Drnq2ighutg7jDhxkpNKOUc BBHF3sloqebeX7D/b8otApIwRN9N5Cc1YQqlMkUx1dmuSHJwxWWMX9vGuWX/ -----END CERTIFICATE-----Generated at Thu Feb 26 20:00:59 2026 by rpki-client