$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer File: a89dfa66-11db-4652-8710-2a69de76abaa.cer (raw, json) Hash identifier: k7YtH+jgNujbTZTCNK0BFGffVEc1NtkOLlFm04Hdu5w= Subject key identifier: 45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584CF81AE7B82635A85D2B7AFDA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Feb 2026 12:09:19 +0000 Certificate not after: Tue 15 Feb 2028 13:22:46 +0000 Subordinate resources: AS: 401947 IP: 2602:f447::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:1a:e7:b8:26:35:a8:5d:2b:7a:fd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Feb 24 12:09:19 2026 GMT Not After : Feb 15 13:22:46 2028 GMT Subject: CN=a89dfa66-11db-4652-8710-2a69de76abaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:d2:df:be:d2:d2:17:4b:57:fe:b9:82:c9: 69:75:53:b6:06:22:80:47:f7:d9:74:6f:f1:a5:de: 2e:15:51:75:57:53:ab:e3:bb:2d:81:c1:f3:27:85: 3b:f4:65:10:fd:30:19:3a:03:2f:c7:a7:cd:e1:dd: 7b:67:af:89:c1:9e:96:4b:a4:0c:aa:fb:06:ef:15: 9f:31:2c:5c:6b:8e:c0:c7:c4:cb:fb:50:54:5f:ea: 63:b3:1e:b2:de:27:07:40:07:aa:07:d2:1b:17:ac: b5:f3:67:ff:2e:94:f7:83:2d:5c:ab:ec:67:cc:eb: 26:20:65:2e:fe:1d:2c:4d:60:9a:b7:52:89:7f:2a: 78:58:14:a9:a2:bf:67:ec:ee:58:96:0b:8e:c8:c8: b8:28:be:0c:13:0f:de:dd:c9:90:ed:ee:d3:19:5b: 2c:c1:1a:12:23:ca:72:9f:eb:a1:28:38:57:43:ea: 74:e8:63:86:c0:00:02:50:6d:1e:65:77:a6:2d:1d: 7c:37:d0:5a:72:bb:49:3f:37:fe:4b:4e:af:31:d7: bf:5f:59:43:14:38:f1:07:d9:0e:c3:d1:6d:74:a7: fd:10:e3:9e:92:96:79:4e:a8:ea:2a:00:67:bb:fc: af:6b:30:3a:5e:b4:40:70:57:21:9f:2b:a6:50:f5: ee:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv6: 2602:f447::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401947 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:84:5a:ea:6f:80:44:d7:4f:06:71:c6:ea:e2:67:1c:43:4a: 15:d3:02:fe:50:92:42:c7:14:eb:21:31:03:e3:95:ff:6d:51: 5b:c2:59:e7:7e:94:28:a9:73:dc:40:51:d4:f5:e6:96:5e:2f: 96:0d:1f:41:d1:4a:c0:12:ae:97:39:a2:9c:e8:33:ae:45:eb: 28:d6:64:da:a7:24:8e:de:d4:2f:29:93:0c:da:c7:30:18:6b: 1f:83:39:ed:3a:d6:94:ea:fb:87:73:65:3c:14:ec:6a:6c:55: 04:88:7d:e7:a7:0c:9d:fc:2d:f8:ac:d2:66:2c:2c:6f:5f:0b: e2:41:8e:f2:a2:11:13:2b:d4:bd:08:2b:f7:d1:d0:2e:85:83: ad:22:6a:4d:2b:f6:38:e4:b8:4f:25:0e:d0:59:02:d3:2a:dd: 9d:2c:cf:a2:fc:44:c0:3b:bf:b3:a6:0a:5d:0e:0d:c4:6b:17: de:ce:06:21:e9:ad:f4:7d:0c:15:b2:ae:42:0c:b9:31:98:ea: a2:46:50:e5:05:f3:88:38:df:cc:9c:12:eb:14:2f:33:67:9f: 8e:54:82:1b:ae:db:79:9e:db:4d:65:ab:af:38:2e:9a:d0:9a: fc:a1:38:94:78:ec:4f:fa:b1:63:8f:61:e6:96:02:63:58:ef: b8:84:4e:0f -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEz4Gue4JjWoXSt6/aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDIyNDEyMDkxOVoXDTI4MDIxNTEzMjI0NlowLzEtMCsGA1UEAxMk YTg5ZGZhNjYtMTFkYi00NjUyLTg3MTAtMmE2OWRlNzZhYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9jS377S0hdLV/65gslpdVO2BiKAR/fZdG/x pd4uFVF1V1Or47stgcHzJ4U79GUQ/TAZOgMvx6fN4d17Z6+JwZ6WS6QMqvsG7xWf MSxca47Ax8TL+1BUX+pjsx6y3icHQAeqB9IbF6y182f/LpT3gy1cq+xnzOsmIGUu /h0sTWCat1KJfyp4WBSpor9n7O5YlguOyMi4KL4MEw/e3cmQ7e7TGVsswRoSI8py n+uhKDhXQ+p06GOGwAACUG0eZXemLR18N9BacrtJPzf+S06vMde/X1lDFDjxB9kO w9FtdKf9EOOekpZ5TqjqKgBnu/yvazA6XrRAcFchnyumUPXuXwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFEU3oMKCEfwiyJVrzvDBN+hL0hi2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h ODlkZmE2Ni0xMWRiLTQ2NTItODcxMC0yYTY5ZGU3NmFiYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2E4OWRmYTY2LTExZGItNDY1Mi04 NzEwLTJhNjlkZTc2YWJhYS9hODlkZmE2Ni0xMWRiLTQ2NTItODcxMC0yYTY5ZGU3 NmFiYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvRHADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGIhswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEABoRa6m+ARNdPBnHG6uJnHENKFdMC/lCSQscU6yExA+OV /21RW8JZ536UKKlz3EBR1PXmll4vlg0fQdFKwBKulzminOgzrkXrKNZk2qckjt7U LymTDNrHMBhrH4M57TrWlOr7h3NlPBTsamxVBIh956cMnfwt+KzSZiwsb18L4kGO 8qIREyvUvQgr99HQLoWDrSJqTSv2OOS4TyUO0FkC0yrdnSzPovxEwDu/s6YKXQ4N xGsX3s4GIemt9H0MFbKuQgy5MZjqokZQ5QXziDjfzJwS6xQvM2efjlSCG67beZ7b TWWrrzgumtCa/KE4lHjsT/qxY49h5pYCY1jvuIRODw== -----END CERTIFICATE-----Generated at Thu Feb 26 20:01:00 2026 by rpki-client