$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98e4fc8c-c5e8-4b13-8c98-6bc8cb384064.cer File: 98e4fc8c-c5e8-4b13-8c98-6bc8cb384064.cer (raw, json) Hash identifier: BzswiGJEhqevHZT8XZVtr3yeTsEN7ZBFDwaZsxBTcnY= Subject key identifier: 07:BD:94:97:B0:78:05:B2:78:4D:27:56:F6:55:A4:6F:0F:0D:CB:D3 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584F5BC6258B991C1D386547BF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98e4fc8c-c5e8-4b13-8c98-6bc8cb384064/98e4fc8c-c5e8-4b13-8c98-6bc8cb384064.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98e4fc8c-c5e8-4b13-8c98-6bc8cb384064/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 14:33:15 +0000 Certificate not after: Fri 18 Feb 2028 00:29:49 +0000 Subordinate resources: AS: 394317 IP: 206.220.112.0/22 IP: 2602:f4c5::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:c6:25:8b:99:1c:1d:38:65:47:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 1 14:33:15 2026 GMT Not After : Feb 18 00:29:49 2028 GMT Subject: CN=98e4fc8c-c5e8-4b13-8c98-6bc8cb384064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4d:ee:8b:54:b8:93:45:58:91:9f:12:b5:ab: ee:0b:e0:9a:c5:5c:6b:fb:e6:83:9d:59:77:f4:be: 57:23:3a:46:e2:3c:32:48:43:2c:fa:df:25:53:eb: 8b:01:3c:12:37:b9:11:f3:a8:de:dc:88:db:2a:0a: 16:8c:ef:2f:75:52:06:e4:94:09:d1:c1:2d:3d:3c: 26:40:af:58:a1:a6:bb:8a:52:2e:c5:36:b8:95:3f: c9:94:a3:7b:a1:f4:61:63:fc:5b:51:04:eb:1f:45: 09:63:78:2f:15:f9:77:a8:f9:d4:35:a0:8e:88:ab: f2:95:61:f8:3e:51:9f:3b:de:19:08:12:54:33:03: eb:d6:0e:c5:78:f0:f5:be:19:00:fb:71:0e:76:e9: 79:45:6c:46:e9:59:14:ae:df:f3:89:de:26:8c:b6: 2c:25:94:d1:52:66:2f:2c:67:e0:bc:d1:e5:ef:b4: 01:e2:a5:e1:30:84:e0:fa:48:43:ca:b9:4f:9a:79: f7:ef:8c:95:b5:2a:33:f2:ff:47:7c:03:6b:f4:c3: dd:f7:cf:0c:34:8b:61:1b:ef:08:bc:1c:ff:de:5a: 81:bb:1b:7c:fa:4a:af:0e:cd:fd:65:6d:f4:80:be: 8b:eb:77:f8:d4:a8:02:b6:81:2e:2a:8a:3c:f8:ca: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BD:94:97:B0:78:05:B2:78:4D:27:56:F6:55:A4:6F:0F:0D:CB:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98e4fc8c-c5e8-4b13-8c98-6bc8cb384064/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98e4fc8c-c5e8-4b13-8c98-6bc8cb384064/98e4fc8c-c5e8-4b13-8c98-6bc8cb384064.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 206.220.112.0/22 IPv6: 2602:f4c5::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394317 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:59:11:02:7a:2d:4d:34:93:f4:1a:a3:ed:24:6f:1a:19:82: f8:ac:84:5a:8a:9c:89:9b:a1:e6:c0:01:13:ea:2b:ab:06:bd: 0c:2a:49:49:f5:1d:25:8d:32:71:66:26:ca:a7:76:28:7c:b9: ce:9e:6f:25:bc:5e:f8:34:f7:c4:6d:69:30:0e:1d:5c:c0:5c: 42:b9:d6:0a:f6:e7:cc:14:a8:49:53:f5:65:6f:a2:07:2e:4e: 87:f4:cd:4b:2c:06:a3:04:33:7a:7c:1d:22:10:0d:ad:c9:fe: ec:1e:d3:c5:9a:1e:ff:2b:0e:c3:58:fb:91:f5:77:6a:20:4c: ef:66:b5:82:03:a7:5e:87:ae:9b:dd:e2:22:83:d3:ab:e8:b1: 94:f3:57:9f:4e:bd:09:f4:e7:80:6e:dd:fd:8f:ea:f8:1b:70: de:3a:3d:79:34:19:1b:22:22:af:f6:a0:e7:32:fa:43:1b:7f: 83:26:6b:7e:20:3e:c9:f4:cb:64:f8:41:81:61:e8:4a:66:ad: 35:e9:a5:5d:f1:b4:c2:2d:20:da:81:c5:6c:f3:44:4b:ff:b9: c0:62:99:fb:c1:8f:fb:c8:10:e3:be:45:4f:03:e7:b8:df:d2: 0f:a6:00:4e:e0:b9:b2:7c:f2:34:ad:8b:35:3b:cd:2e:85:5d: 5d:7b:9b:c4 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9bxiWLmRwdOGVHv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MTAwMTE0MzMxNVoXDTI4MDIxODAwMjk0OVowLzEtMCsGA1UEAxMk OThlNGZjOGMtYzVlOC00YjEzLThjOTgtNmJjOGNiMzg0MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U3ui1S4k0VYkZ8StavuC+CaxVxr++aDnVl3 9L5XIzpG4jwySEMs+t8lU+uLATwSN7kR86je3IjbKgoWjO8vdVIG5JQJ0cEtPTwm QK9Yoaa7ilIuxTa4lT/JlKN7ofRhY/xbUQTrH0UJY3gvFfl3qPnUNaCOiKvylWH4 PlGfO94ZCBJUMwPr1g7FePD1vhkA+3EOdul5RWxG6VkUrt/zid4mjLYsJZTRUmYv LGfgvNHl77QB4qXhMITg+khDyrlPmnn374yVtSoz8v9HfANr9MPd988MNIthG+8I vBz/3lqBuxt8+kqvDs39ZW30gL6L63f41KgCtoEuKoo8+MpmPQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAe9lJeweAWyeE0nVvZVpG8PDcvTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85 OGU0ZmM4Yy1jNWU4LTRiMTMtOGM5OC02YmM4Y2IzODQwNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzk4ZTRmYzhjLWM1ZTgtNGIxMy04 Yzk4LTZiYzhjYjM4NDA2NC85OGU0ZmM4Yy1jNWU4LTRiMTMtOGM5OC02YmM4Y2Iz ODQwNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALO3HAwDgQCAAIwCAMGBCYC9MUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYETTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyWRECei1NNJP0GqPtJG8aGYL4 rIRaipyJm6HmwAET6iurBr0MKklJ9R0ljTJxZibKp3YofLnOnm8lvF74NPfEbWkw Dh1cwFxCudYK9ufMFKhJU/Vlb6IHLk6H9M1LLAajBDN6fB0iEA2tyf7sHtPFmh7/ Kw7DWPuR9XdqIEzvZrWCA6deh66b3eIig9Or6LGU81efTr0J9OeAbt39j+r4G3De Oj15NBkbIiKv9qDnMvpDG3+DJmt+ID7J9Mtk+EGBYehKZq016aVd8bTCLSDagcVs 80RL/7nAYpn7wY/7yBDjvkVPA+e439IPpgBO4LmyfPI0rYs1O80uhV1de5vE -----END CERTIFICATE-----Generated at Mon Oct 12 00:51:10 2026 by rpki-client