$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer File: a773147e-548c-4c30-a3fe-91c723e2cad9.cer (raw, json) Hash identifier: 3hQhqUPNJz1fDtebQFywdYog3KoWAZOaZr4nJEywuKI= Subject key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584F66D90E28B0CCE1F3EA561200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 13:45:14 +0000 Certificate not after: Mon 17 Jan 2028 06:05:10 +0000 Subordinate resources: AS: 55256 IP: 24.206.64.0/19 IP: 24.206.97.0 -- 24.206.101.255 IP: 24.206.103.0 -- 24.206.116.255 IP: 24.206.118.0/24 IP: 24.206.120.0/21 IP: 24.239.128.0 -- 24.239.184.255 IP: 24.239.186.0 -- 24.239.191.255 IP: 80.43.128.0/17 IP: 158.95.0.0 -- 158.95.81.255 IP: 158.95.84.0 -- 158.95.89.255 IP: 158.95.92.0 -- 158.95.107.255 IP: 158.95.110.0 -- 158.95.143.255 IP: 158.95.146.0 -- 158.95.255.255 IP: 162.10.0.0 -- 162.10.209.255 IP: 162.10.211.0 -- 162.10.225.255 IP: 162.10.227.0 -- 162.10.255.255 IP: 199.127.72.0/21 IP: 2620:127:8000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:d9:0e:28:b0:cc:e1:f3:ea:56:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 5 13:45:14 2026 GMT Not After : Jan 17 06:05:10 2028 GMT Subject: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:21:69:04:c6:cb:a5:c3:bf:80:11:3b:b0:e2: eb:ad:f4:83:38:11:16:1f:70:a5:db:64:73:7c:bf: d1:74:be:ab:2a:73:96:ee:46:cd:64:58:f1:05:f7: dd:e0:90:d0:c3:3b:dc:d1:db:3c:2b:65:9a:26:69: 97:9d:75:07:20:9b:7c:26:d7:7d:6a:62:56:f0:0d: 6c:12:fe:89:56:2b:f6:4d:7c:51:aa:ed:13:4e:84: 81:be:08:90:4d:ef:3e:f8:4a:94:8f:dd:a7:93:cf: 7b:7a:82:1e:45:1c:b3:a3:7b:18:7e:67:f1:6f:c8: 6f:4b:a6:9b:7d:79:13:a4:17:a0:8f:4d:d1:96:fa: 24:51:7b:53:9d:db:1c:94:f3:f0:a5:23:f5:bc:c4: 8c:b2:4e:5f:c6:7a:e1:8e:af:4a:b6:a6:d8:38:2f: 4f:97:56:22:7e:9a:ce:a3:54:0f:71:1d:ec:3e:3a: 66:95:70:4a:eb:e6:12:3c:03:5a:ee:d5:86:d4:0d: 28:c5:7b:59:b3:fe:b7:73:04:a4:25:5d:00:e4:19: 1f:11:78:bf:0a:9a:eb:37:76:4f:e0:9b:31:e4:63: f6:a1:47:bd:1e:e5:06:87:7b:08:42:d8:90:6d:95: ff:5c:42:1d:1c:4d:b5:78:48:a1:ba:09:4b:b8:bc: a7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 24.206.64.0/19 24.206.97.0-24.206.101.255 24.206.103.0-24.206.116.255 24.206.118.0/24 24.206.120.0/21 24.239.128.0-24.239.184.255 24.239.186.0-24.239.191.255 80.43.128.0/17 158.95.0.0-158.95.81.255 158.95.84.0-158.95.89.255 158.95.92.0-158.95.107.255 158.95.110.0-158.95.143.255 158.95.146.0-158.95.255.255 162.10.0.0-162.10.209.255 162.10.211.0-162.10.225.255 162.10.227.0-162.10.255.255 199.127.72.0/21 IPv6: 2620:127:8000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55256 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8c:28:f8:ff:23:85:f2:bf:9c:f3:98:30:23:bb:4c:ec:7e: 91:16:49:43:58:37:7a:36:01:51:70:d0:5c:bc:e7:48:c8:a4: 65:92:51:ae:f4:83:8b:5e:5c:68:38:79:a6:33:f4:57:5f:79: c2:bd:c6:a1:af:69:65:8b:5e:ad:f7:90:75:5f:7e:c2:e6:9f: 2a:91:27:7f:89:4f:cc:e7:9f:a9:e0:77:d2:84:57:a9:de:9d: 78:04:3e:5c:cb:ff:60:08:c0:ed:dd:94:0c:b1:d8:b4:69:51: 28:5b:16:02:83:6a:5c:3b:0f:d7:58:9b:53:2b:4c:e9:3d:db: 3d:c3:9c:ef:4c:8d:6e:33:1b:fc:e9:1d:3a:0d:3e:ec:6d:3d: 59:40:b4:7e:8d:91:79:8e:cb:63:17:96:c3:96:d5:65:7e:c5: fc:0e:b0:c6:6a:a1:bc:b2:17:eb:55:63:48:fb:9e:cd:62:51: 55:34:b0:e7:46:9e:79:73:89:6b:65:af:e6:80:59:5f:aa:63: 5a:4a:aa:2b:3f:e4:eb:77:b0:8b:96:48:a8:8a:be:4b:83:17: b3:ec:77:f7:20:d4:de:f0:f7:e8:57:89:2d:2d:44:f9:d0:02: b3:ba:2f:43:61:b9:ae:9f:39:36:a9:58:24:e0:a1:40:a0:48: 19:bc:3d:68 -----BEGIN CERTIFICATE----- MIIH2jCCBsKgAwIBAgIUAQ0Mn0MoWE9m2Q4osMzh8+pWEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MTAwNTEzNDUxNFoXDTI4MDExNzA2MDUxMFowLzEtMCsGA1UEAxMk YTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJjYWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCFpBMbLpcO/gBE7sOLrrfSDOBEWH3Cl22Rz fL/RdL6rKnOW7kbNZFjxBffd4JDQwzvc0ds8K2WaJmmXnXUHIJt8Jtd9amJW8A1s Ev6JViv2TXxRqu0TToSBvgiQTe8++EqUj92nk897eoIeRRyzo3sYfmfxb8hvS6ab fXkTpBegj03RlvokUXtTndsclPPwpSP1vMSMsk5fxnrhjq9KtqbYOC9Pl1YifprO o1QPcR3sPjpmlXBK6+YSPANa7tWG1A0oxXtZs/63cwSkJV0A5BkfEXi/CprrN3ZP 4Jsx5GP2oUe9HuUGh3sIQtiQbZX/XEIdHE21eEihuglLuLyniwIDAQABo4IE7DCC BOgwHQYDVR0OBBYEFCdhlnWkvg8YRm6qhB6rnkgj4milMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h NzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2E3NzMxNDdlLTU0OGMtNGMzMC1h M2ZlLTkxYzcyM2UyY2FkOS9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNl MmNhZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwge8GCCsGAQUF BwEHAQH/BIHfMIHcMIHJBAIAATCBwgMEBRjOQDAMAwQAGM5hAwQBGM5kMAwDBAAY zmcDBAAYznQDBAAYznYDBAMYzngwDAMEBxjvgAMEABjvuDAMAwQBGO+6AwQGGO+A AwQHUCuAMAsDAwCeXwMEAZ5fUDAMAwQCnl9UAwQBnl9YMAwDBAKeX1wDBAKeX2gw DAMEAZ5fbgMEBJ5fgDALAwQBnl+SAwMFnkAwCwMDAaIKAwQBogrQMAwDBACiCtMD BAGiCuAwCwMEAKIK4wMDAKIKAwQDx39IMA4EAgACMAgDBgAmIAEngDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA19gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASIwo+P8jhfK/nPOYMCO7TOx+ kRZJQ1g3ejYBUXDQXLznSMikZZJRrvSDi15caDh5pjP0V195wr3Goa9pZYterfeQ dV9+wuafKpEnf4lPzOefqeB30oRXqd6deAQ+XMv/YAjA7d2UDLHYtGlRKFsWAoNq XDsP11ibUytM6T3bPcOc70yNbjMb/OkdOg0+7G09WUC0fo2ReY7LYxeWw5bVZX7F /A6wxmqhvLIX61VjSPuezWJRVTSw50aeeXOJa2Wv5oBZX6pjWkqqKz/k63ewi5ZI qIq+S4MXs+x39yDU3vD36FeJLS1E+dACs7ovQ2G5rp85NqlYJOChQKBIGbw9aA== -----END CERTIFICATE-----Generated at Sun Oct 11 18:04:00 2026 by rpki-client