$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer File: b2db0e90-cb59-4049-beac-d39b54244d28.cer (raw, json) Hash identifier: Lj523Iukryb3qnvLHnd4jYUPoHtZ/Q67qgw0ZKWjxPo= Subject key identifier: 1D:C1:26:00:16:E9:EC:19:BC:69:F5:29:93:E9:1C:47:E7:00:7E:AE Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584D4BBAAC7A8F0D8DEFA609C480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Mar 2026 11:03:20 +0000 Certificate not after: Thu 10 Feb 2028 20:18:02 +0000 Subordinate resources: AS: 11155 IP: 147.124.16.0/20 IP: 153.75.32.0/20 IP: 162.118.64.0/19 IP: 2605:f9c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:ba:ac:7a:8f:0d:8d:ef:a6:09:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Mar 26 11:03:20 2026 GMT Not After : Feb 10 20:18:02 2028 GMT Subject: CN=b2db0e90-cb59-4049-beac-d39b54244d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:20:6b:49:70:e0:07:4c:8d:95:8d:7d:c5: 97:d0:1d:3b:86:12:57:16:0d:cb:43:69:e5:9d:eb: 3d:20:13:3d:e5:eb:91:9f:45:59:47:9f:4e:59:6f: 67:c7:92:8a:81:7b:da:c1:7c:15:f3:66:fa:d2:60: 4b:6d:64:62:c0:af:48:ff:aa:ba:32:e4:3f:f9:44: 2c:60:50:d9:11:37:1f:22:d4:a6:03:e2:4c:df:df: c0:ce:7c:a8:b5:31:8b:48:9c:f4:dd:82:da:68:15: ac:8a:5d:fe:aa:72:3a:92:b2:f4:e4:da:46:58:7c: 45:57:76:74:fc:2d:92:46:a2:f3:d0:82:c7:ee:47: b2:a1:70:6d:e8:1f:5d:0f:70:69:1c:23:7b:ef:dd: dc:17:37:17:f4:62:9e:fe:90:71:c9:20:d5:54:eb: 7e:4a:67:5e:4e:31:e2:11:a5:c2:d3:20:5a:22:5a: 0a:38:de:f6:f9:64:ef:a0:e5:f1:ad:4c:ee:10:46: 37:76:c9:07:65:63:c5:b3:47:5d:b9:57:d0:fb:fa: b6:c5:cc:b4:be:6d:2e:f5:0d:32:13:de:99:4f:67: df:7b:00:ff:53:3f:a4:0b:98:59:42:ee:81:e1:ee: 69:f6:17:8b:76:2a:5e:1c:17:0f:44:a2:6a:08:6f: a4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C1:26:00:16:E9:EC:19:BC:69:F5:29:93:E9:1C:47:E7:00:7E:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 147.124.16.0/20 153.75.32.0/20 162.118.64.0/19 IPv6: 2605:f9c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11155 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0b:78:17:e0:03:f5:e1:e8:38:81:f3:9b:4c:b9:9d:8b:c4: 1e:07:04:8b:59:e9:ab:f9:77:7e:26:62:87:92:70:c3:ac:cf: f5:66:38:35:be:a0:93:03:ba:ff:36:08:d2:70:1a:7f:61:7f: f5:dd:d0:54:f7:7c:97:5d:82:d2:45:b1:25:c3:ee:d1:2b:11: 61:3c:8e:14:d2:87:47:e9:b2:47:60:77:e6:a8:91:4f:e6:6c: 69:af:5b:d4:09:5f:60:66:8e:c1:7f:33:62:bb:00:90:ba:72: ee:61:49:92:80:2b:f1:88:1d:92:52:68:7d:06:fe:92:34:d2: 40:33:47:87:9c:33:91:62:8f:96:1a:ff:7c:fb:ff:d1:0b:d0: 28:de:dc:1e:16:4b:e1:c4:39:bb:e2:c2:55:30:2a:ef:71:ea: fd:7b:13:7d:a4:4c:cb:00:1e:d4:9a:5c:53:22:4c:5e:77:6f: da:28:b6:f4:ae:b5:a8:98:84:de:dc:01:c8:de:0c:6f:01:84: e2:4f:44:33:21:b6:a3:84:40:1b:d6:35:ee:f8:e4:76:9a:46: 83:8c:27:b4:fa:5c:da:8a:96:f3:f9:2c:4d:16:b4:73:fd:2d: 3f:86:af:62:d1:55:27:6a:75:8d:54:20:a7:99:36:36:10:c9: 4e:63:c3:4f -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWE1Luqx6jw2N76YJxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDMyNjExMDMyMFoXDTI4MDIxMDIwMTgwMlowLzEtMCsGA1UEAxMk YjJkYjBlOTAtY2I1OS00MDQ5LWJlYWMtZDM5YjU0MjQ0ZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwIga0lw4AdMjZWNfcWX0B07hhJXFg3LQ2nl nes9IBM95euRn0VZR59OWW9nx5KKgXvawXwV82b60mBLbWRiwK9I/6q6MuQ/+UQs YFDZETcfItSmA+JM39/AznyotTGLSJz03YLaaBWsil3+qnI6krL05NpGWHxFV3Z0 /C2SRqLz0ILH7keyoXBt6B9dD3BpHCN7793cFzcX9GKe/pBxySDVVOt+SmdeTjHi EaXC0yBaIloKON72+WTvoOXxrUzuEEY3dskHZWPFs0dduVfQ+/q2xcy0vm0u9Q0y E96ZT2ffewD/Uz+kC5hZQu6B4e5p9heLdipeHBcPRKJqCG+k0QIDAQABo4IENTCC BDEwHQYDVR0OBBYEFB3BJgAW6ewZvGn1KZPpHEfnAH6uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i MmRiMGU5MC1jYjU5LTQwNDktYmVhYy1kMzliNTQyNDRkMjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2IyZGIwZTkwLWNiNTktNDA0OS1i ZWFjLWQzOWI1NDI0NGQyOC9iMmRiMGU5MC1jYjU5LTQwNDktYmVhYy1kMzliNTQy NDRkMjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBASTfBADBASZSyADBAWidkAwDQQCAAIwBwMFACYF +cAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICK5MwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABgt4F+AD9eHo OIHzm0y5nYvEHgcEi1npq/l3fiZih5Jww6zP9WY4Nb6gkwO6/zYI0nAaf2F/9d3Q VPd8l12C0kWxJcPu0SsRYTyOFNKHR+myR2B35qiRT+Zsaa9b1AlfYGaOwX8zYrsA kLpy7mFJkoAr8YgdklJofQb+kjTSQDNHh5wzkWKPlhr/fPv/0QvQKN7cHhZL4cQ5 u+LCVTAq73Hq/XsTfaRMywAe1JpcUyJMXndv2ii29K61qJiE3twByN4MbwGE4k9E MyG2o4RAG9Y17vjkdppGg4wntPpc2oqW8/ksTRa0c/0tP4avYtFVJ2p1jVQgp5k2 NhDJTmPDTw== -----END CERTIFICATE-----Generated at Mon Apr 13 09:11:42 2026 by rpki-client