$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer File: a89dfa66-11db-4652-8710-2a69de76abaa.cer (raw, json) Hash identifier: ZUGKClnsB6UqsQ1D75vdSuTrfm1GZaQEB3eQESPHve4= Subject key identifier: 45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584F67A50EE7A29A1C0557EFCF60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 20:36:17 +0000 Certificate not after: Tue 15 Feb 2028 13:22:46 +0000 Subordinate resources: AS: 401947 IP: 199.88.165.0/24 IP: 2602:f447::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:a5:0e:e7:a2:9a:1c:05:57:ef:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 5 20:36:17 2026 GMT Not After : Feb 15 13:22:46 2028 GMT Subject: CN=a89dfa66-11db-4652-8710-2a69de76abaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:d2:df:be:d2:d2:17:4b:57:fe:b9:82:c9: 69:75:53:b6:06:22:80:47:f7:d9:74:6f:f1:a5:de: 2e:15:51:75:57:53:ab:e3:bb:2d:81:c1:f3:27:85: 3b:f4:65:10:fd:30:19:3a:03:2f:c7:a7:cd:e1:dd: 7b:67:af:89:c1:9e:96:4b:a4:0c:aa:fb:06:ef:15: 9f:31:2c:5c:6b:8e:c0:c7:c4:cb:fb:50:54:5f:ea: 63:b3:1e:b2:de:27:07:40:07:aa:07:d2:1b:17:ac: b5:f3:67:ff:2e:94:f7:83:2d:5c:ab:ec:67:cc:eb: 26:20:65:2e:fe:1d:2c:4d:60:9a:b7:52:89:7f:2a: 78:58:14:a9:a2:bf:67:ec:ee:58:96:0b:8e:c8:c8: b8:28:be:0c:13:0f:de:dd:c9:90:ed:ee:d3:19:5b: 2c:c1:1a:12:23:ca:72:9f:eb:a1:28:38:57:43:ea: 74:e8:63:86:c0:00:02:50:6d:1e:65:77:a6:2d:1d: 7c:37:d0:5a:72:bb:49:3f:37:fe:4b:4e:af:31:d7: bf:5f:59:43:14:38:f1:07:d9:0e:c3:d1:6d:74:a7: fd:10:e3:9e:92:96:79:4e:a8:ea:2a:00:67:bb:fc: af:6b:30:3a:5e:b4:40:70:57:21:9f:2b:a6:50:f5: ee:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 199.88.165.0/24 IPv6: 2602:f447::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401947 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:4f:de:8e:be:22:19:70:b1:d9:c7:1a:e2:ec:98:13:65:e3: 9e:2c:40:6c:83:b2:fc:59:db:de:16:8a:32:e3:48:fc:aa:28: 7c:ab:7a:91:6b:e8:91:04:8b:1a:31:b8:5e:8f:b8:68:b9:a3: f0:82:48:45:2d:b4:37:65:65:f7:8a:a0:df:52:3f:de:75:0a: 2d:dc:fb:5c:71:8f:94:96:d5:d1:09:9c:a6:6b:1a:0c:10:7d: 70:ba:9d:44:9f:6d:60:27:d6:26:41:58:99:36:ed:aa:60:1e: 45:ec:23:7b:29:d7:0b:b6:eb:cc:1f:48:5e:a8:98:f1:b1:0d: a0:a5:cf:25:7e:63:42:7b:42:ed:15:8c:05:b1:6a:fe:69:e3: 25:ec:c0:de:f5:4a:3e:fd:e0:f0:1b:b8:33:25:6c:86:5d:4e: f5:cd:d1:8e:cb:c7:46:6e:ca:fe:aa:f0:cf:37:45:d7:89:0b: 8d:16:70:ae:f6:b6:f2:a7:5a:4c:6f:28:8b:29:f6:79:0e:93: f0:06:dc:01:e3:a5:20:89:08:5a:10:37:1f:48:e7:22:59:0f: 05:35:70:2f:7d:7c:0e:1f:15:2a:3f:f4:f1:77:09:a2:76:7f: 4a:90:26:f0:53:43:73:1a:89:b3:20:8f:7b:90:54:f3:00:c3: 3f:22:61:0f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9npQ7nopocBVfvz2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MTAwNTIwMzYxN1oXDTI4MDIxNTEzMjI0NlowLzEtMCsGA1UEAxMk YTg5ZGZhNjYtMTFkYi00NjUyLTg3MTAtMmE2OWRlNzZhYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9jS377S0hdLV/65gslpdVO2BiKAR/fZdG/x pd4uFVF1V1Or47stgcHzJ4U79GUQ/TAZOgMvx6fN4d17Z6+JwZ6WS6QMqvsG7xWf MSxca47Ax8TL+1BUX+pjsx6y3icHQAeqB9IbF6y182f/LpT3gy1cq+xnzOsmIGUu /h0sTWCat1KJfyp4WBSpor9n7O5YlguOyMi4KL4MEw/e3cmQ7e7TGVsswRoSI8py n+uhKDhXQ+p06GOGwAACUG0eZXemLR18N9BacrtJPzf+S06vMde/X1lDFDjxB9kO w9FtdKf9EOOekpZ5TqjqKgBnu/yvazA6XrRAcFchnyumUPXuXwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEU3oMKCEfwiyJVrzvDBN+hL0hi2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h ODlkZmE2Ni0xMWRiLTQ2NTItODcxMC0yYTY5ZGU3NmFiYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2E4OWRmYTY2LTExZGItNDY1Mi04 NzEwLTJhNjlkZTc2YWJhYS9hODlkZmE2Ni0xMWRiLTQ2NTItODcxMC0yYTY5ZGU3 NmFiYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADHWKUwDgQCAAIwCAMGACYC9EcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiGzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkT96OviIZcLHZxxri7JgTZeOe LEBsg7L8WdveFooy40j8qih8q3qRa+iRBIsaMbhej7houaPwgkhFLbQ3ZWX3iqDf Uj/edQot3PtccY+UltXRCZymaxoMEH1wup1En21gJ9YmQViZNu2qYB5F7CN7KdcL tuvMH0heqJjxsQ2gpc8lfmNCe0LtFYwFsWr+aeMl7MDe9Uo+/eDwG7gzJWyGXU71 zdGOy8dGbsr+qvDPN0XXiQuNFnCu9rbyp1pMbyiLKfZ5DpPwBtwB46UgiQhaEDcf SOciWQ8FNXAvfXwOHxUqP/Txdwmidn9KkCbwU0NzGomzII97kFTzAMM/ImEP -----END CERTIFICATE-----Generated at Mon Oct 12 00:49:47 2026 by rpki-client