$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661.cer File: 70f62895-71e7-4cda-a53a-08cbbd20d661.cer (raw, json) Hash identifier: c/dbvzl1KNE92q4nJbVmM4jwOuR5QZZiO0euxZOGmfw= Subject key identifier: C4:7F:FB:23:C9:A7:DB:B0:4B:49:9A:0E:00:FD:31:76:FC:2F:66:9C Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584CCF2BD7F69FA22DA25CD5BB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661/70f62895-71e7-4cda-a53a-08cbbd20d661.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Feb 2026 20:15:18 +0000 Certificate not after: Wed 05 Apr 2028 14:25:05 +0000 Subordinate resources: AS: 11983 IP: 152.235.0.0/17 IP: 2602:f477::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:2b:d7:f6:9f:a2:2d:a2:5c:d5:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Feb 9 20:15:18 2026 GMT Not After : Apr 5 14:25:05 2028 GMT Subject: CN=70f62895-71e7-4cda-a53a-08cbbd20d661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2a:df:8c:f2:7e:57:d5:3c:d2:2b:f7:11:8c: 94:65:2b:8e:70:50:29:17:8c:82:22:9b:ec:5f:86: f1:9b:3a:7d:7d:53:15:5b:54:2c:9b:30:8a:85:d4: 83:83:c0:96:ad:2a:7a:89:64:d3:bc:2f:05:0c:ed: f0:19:b3:73:78:db:51:86:37:79:4d:72:46:83:1d: 0b:26:2e:14:01:df:0b:b6:66:b9:51:db:b5:b4:d5: 0e:0c:ca:4d:9d:53:35:2b:3d:b4:44:6c:ad:8d:06: 84:dc:b5:4c:08:13:cf:53:1f:fe:3c:60:94:3f:01: d1:6f:22:d0:50:f4:5d:24:65:7e:20:39:23:2e:73: a3:a2:db:a3:15:c8:2e:3d:d2:c8:63:4c:45:7f:65: 2e:ac:17:1f:4a:be:92:7a:e1:04:d9:40:ae:ba:cb: 84:12:13:26:5c:f2:99:2c:33:2f:d0:38:06:11:c5: 44:43:f4:87:67:ca:b1:04:05:d8:d0:dc:c4:c5:5f: ee:c6:63:37:a2:9f:07:12:3c:61:7b:57:be:3f:84: 1b:91:c0:88:75:7b:9d:cb:06:22:72:23:d8:43:f4: 77:a1:03:05:55:49:bf:6a:df:ce:d8:63:e1:f3:d7: 0e:83:07:dd:82:4f:b0:59:8e:98:86:df:9f:c3:79: de:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7F:FB:23:C9:A7:DB:B0:4B:49:9A:0E:00:FD:31:76:FC:2F:66:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/70f62895-71e7-4cda-a53a-08cbbd20d661/70f62895-71e7-4cda-a53a-08cbbd20d661.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 152.235.0.0/17 IPv6: 2602:f477::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11983 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:62:1e:9f:05:72:ef:4e:e5:6c:af:24:47:cf:c9:fd:05:5b: f0:f1:b7:2e:59:d0:8c:24:4d:dd:1a:37:8c:e3:ac:c6:dc:47: df:ce:43:38:44:01:c4:5f:96:51:d9:7c:3b:bd:9e:2d:4d:a3: aa:01:f0:1a:25:f1:be:98:61:f4:26:f7:d5:a7:f6:90:dd:e2: 1e:bf:3f:f4:f1:d8:9b:a9:e5:64:38:6c:68:db:4d:71:00:d7: 48:ff:d1:7e:62:84:0a:07:8b:fb:8e:7e:cc:71:6f:24:df:89: 78:7d:2a:e8:5c:a2:1f:f9:80:32:64:f5:ae:4c:af:a0:4b:72: 49:f3:aa:05:be:de:d4:61:45:42:59:98:6f:16:eb:8a:06:89: 39:fe:8c:ae:7d:47:96:aa:ef:61:32:66:74:fb:05:ff:fa:1c: ba:d0:dc:c6:73:c9:25:69:39:1f:a5:21:49:fa:26:fe:cb:79: e3:19:9d:05:23:2a:01:6e:e3:2b:6d:0f:91:c9:36:4b:63:c3: 34:87:fb:97:34:40:ba:2d:14:d8:51:0e:30:3c:17:4b:54:16: ba:b0:e3:81:6c:b1:bd:44:37:b0:88:9b:15:44:04:25:e3:5d: 02:4f:49:fb:fa:9e:0f:8e:75:54:4b:72:36:fe:d2:59:66:21: 6f:56:74:da -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEzPK9f2n6ItolzVu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDIwOTIwMTUxOFoXDTI4MDQwNTE0MjUwNVowLzEtMCsGA1UEAxMk NzBmNjI4OTUtNzFlNy00Y2RhLWE1M2EtMDhjYmJkMjBkNjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CrfjPJ+V9U80iv3EYyUZSuOcFApF4yCIpvs X4bxmzp9fVMVW1QsmzCKhdSDg8CWrSp6iWTTvC8FDO3wGbNzeNtRhjd5TXJGgx0L Ji4UAd8Ltma5Udu1tNUODMpNnVM1Kz20RGytjQaE3LVMCBPPUx/+PGCUPwHRbyLQ UPRdJGV+IDkjLnOjotujFcguPdLIY0xFf2UurBcfSr6SeuEE2UCuusuEEhMmXPKZ LDMv0DgGEcVEQ/SHZ8qxBAXY0NzExV/uxmM3op8HEjxhe1e+P4QbkcCIdXudywYi ciPYQ/R3oQMFVUm/at/O2GPh89cOgwfdgk+wWY6Yht+fw3neRwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFMR/+yPJp9uwS0maDgD9MXb8L2acMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83 MGY2Mjg5NS03MWU3LTRjZGEtYTUzYS0wOGNiYmQyMGQ2NjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzcwZjYyODk1LTcxZTctNGNkYS1h NTNhLTA4Y2JiZDIwZDY2MS83MGY2Mjg5NS03MWU3LTRjZGEtYTUzYS0wOGNiYmQy MGQ2NjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAeY6wAwDgQCAAIwCAMGACYC9HcAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAi7PMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGhiHp8Fcu9O5WyvJEfPyf0FW/Dx ty5Z0IwkTd0aN4zjrMbcR9/OQzhEAcRfllHZfDu9ni1No6oB8Bol8b6YYfQm99Wn 9pDd4h6/P/Tx2Jup5WQ4bGjbTXEA10j/0X5ihAoHi/uOfsxxbyTfiXh9Kuhcoh/5 gDJk9a5Mr6BLcknzqgW+3tRhRUJZmG8W64oGiTn+jK59R5aq72EyZnT7Bf/6HLrQ 3MZzySVpOR+lIUn6Jv7LeeMZnQUjKgFu4yttD5HJNktjwzSH+5c0QLotFNhRDjA8 F0tUFrqw44Fssb1EN7CImxVEBCXjXQJPSfv6ng+OdVRLcjb+0llmIW9WdNo= -----END CERTIFICATE-----Generated at Thu Feb 26 19:58:16 2026 by rpki-client