$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer File: 74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer (raw, json) Hash identifier: e9KejSSriOLrynMnEEs9P+LqkstTzlj7mPxdKpd+LKo= Subject key identifier: D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584D5FE1C29B4EF9F3B093C00B60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Apr 2026 16:18:15 +0000 Certificate not after: Sun 30 Jan 2028 07:40:29 +0000 Subordinate resources: AS: 23506 -- 23507 IP: 64.190.237.0/24 IP: 2602:f704::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:e1:c2:9b:4e:f9:f3:b0:93:c0:0b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Apr 2 16:18:15 2026 GMT Not After : Jan 30 07:40:29 2028 GMT Subject: CN=74c5eaa7-78bb-4cca-835a-0df812ff7d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:1d:85:47:fb:19:cb:84:89:9f:1f:bc:26: 82:ca:e5:2b:d8:d3:a4:52:19:7c:4a:70:a5:1a:86: 0b:37:4f:31:8a:ea:68:2e:1b:50:b6:df:88:43:54: dc:ae:ac:db:82:a6:09:ae:f9:bd:88:ba:e5:79:db: 65:a1:60:06:fe:9b:84:88:da:d5:40:a4:c3:b9:19: bd:b5:4c:65:32:3b:75:db:a5:ce:e9:23:a6:f8:f1: fc:9d:5f:9f:f9:d6:b1:06:13:87:e9:03:06:d3:bd: 68:2f:81:ce:3f:e3:dd:88:23:58:26:4a:d1:31:4d: e4:5a:61:d0:bc:03:7b:6e:dd:47:c8:3d:d1:05:f5: 87:38:89:bb:29:29:cd:a8:c6:5b:ba:0f:29:8b:d7: dc:2e:16:82:77:9a:ee:4f:56:de:dd:8f:88:f6:8c: 7e:e2:2f:bf:a6:58:87:e6:67:d4:ab:64:56:75:eb: da:9f:36:7c:a0:c6:e8:80:1f:d8:be:97:a2:07:8b: 78:d3:f6:cf:38:6d:cb:5e:cc:04:93:50:a3:c5:7c: be:38:9a:fc:bf:5b:34:fb:70:bf:8c:f2:f3:4a:f7: ea:33:cc:27:e8:6c:0a:3b:92:39:91:e2:17:bb:12: 8c:67:95:31:7b:eb:38:a9:55:25:36:a9:a9:1c:6c: fc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 64.190.237.0/24 IPv6: 2602:f704::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23506-23507 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5e:bb:ac:04:3a:09:43:f5:43:bb:68:dd:cc:cb:d9:ca:72: ed:c2:cb:e1:1d:0c:71:c5:da:c4:d4:db:bf:84:14:69:21:cb: b1:7a:e5:fb:ee:23:12:7f:49:bc:1e:fc:10:98:7e:42:a2:a6: eb:95:d0:86:33:6c:63:ac:d6:11:45:9d:fa:25:6a:6e:91:77: e5:c1:49:8a:67:32:7d:d4:d7:a9:48:0d:5a:ce:4e:6c:1c:5e: 68:12:7d:a7:ab:ae:9b:54:e9:96:f3:21:58:77:fb:93:39:af: 78:4e:aa:33:45:31:0b:6f:f0:47:03:4a:c0:04:51:3e:2b:4c: ba:67:b2:b0:88:a8:b9:7b:9d:b8:d9:64:75:e1:e9:b1:c0:82: e0:33:6d:86:84:8e:60:86:bf:e3:a3:ba:7c:17:4c:51:b0:42: c2:83:0b:a8:79:e3:34:c3:24:a6:0b:46:c2:d1:a1:d5:f5:f2: ee:12:62:fc:ba:25:cd:3d:aa:d8:9f:b5:fa:5f:75:a8:a6:6c: 23:a2:6f:cd:bf:44:45:3a:f1:ce:d4:57:34:45:d6:97:15:ec: 15:6b:2d:fe:46:c2:9a:5b:50:de:69:6b:c5:a8:43:8c:69:92: 67:1c:73:8e:85:4b:a8:b9:da:38:cc:37:a9:e6:c8:9a:e0:1e: a8:73:bf:40 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE1f4cKbTvnzsJPAC2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDQwMjE2MTgxNVoXDTI4MDEzMDA3NDAyOVowLzEtMCsGA1UEAxMk NzRjNWVhYTctNzhiYi00Y2NhLTgzNWEtMGRmODEyZmY3ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigsdhUf7GcuEiZ8fvCaCyuUr2NOkUhl8SnCl GoYLN08xiupoLhtQtt+IQ1TcrqzbgqYJrvm9iLrledtloWAG/puEiNrVQKTDuRm9 tUxlMjt126XO6SOm+PH8nV+f+daxBhOH6QMG071oL4HOP+PdiCNYJkrRMU3kWmHQ vAN7bt1HyD3RBfWHOIm7KSnNqMZbug8pi9fcLhaCd5ruT1be3Y+I9ox+4i+/pliH 5mfUq2RWdevanzZ8oMbogB/YvpeiB4t40/bPOG3LXswEk1CjxXy+OJr8v1s0+3C/ jPLzSvfqM8wn6GwKO5I5keIXuxKMZ5Uxe+s4qVUlNqmpHGz8GwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFNJFylSD96rDNYkQssEUnlwuYdPTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83 NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0wZGY4MTJmZjdkODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzc0YzVlYWE3LTc4YmItNGNjYS04 MzVhLTBkZjgxMmZmN2Q4Ny83NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0wZGY4MTJm ZjdkODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABAvu0wDgQCAAIwCAMGBCYC9wQAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAowCAICW9ICAlvTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB5eu6wEOglD9UO7aN3M y9nKcu3Cy+EdDHHF2sTU27+EFGkhy7F65fvuIxJ/Sbwe/BCYfkKipuuV0IYzbGOs 1hFFnfolam6Rd+XBSYpnMn3U16lIDVrOTmwcXmgSfaerrptU6ZbzIVh3+5M5r3hO qjNFMQtv8EcDSsAEUT4rTLpnsrCIqLl7nbjZZHXh6bHAguAzbYaEjmCGv+OjunwX TFGwQsKDC6h54zTDJKYLRsLRodX18u4SYvy6Jc09qtiftfpfdaimbCOib82/REU6 8c7UVzRF1pcV7BVrLf5GwppbUN5pa8WoQ4xpkmccc46FS6i52jjMN6nmyJrgHqhz v0A= -----END CERTIFICATE-----Generated at Mon Apr 13 09:10:13 2026 by rpki-client