$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c.cer File: b6998fd9-7b69-498c-8135-f33f59d7256c.cer (raw, json) Hash identifier: p9VftRprkpEV/ausELXvYrjEfUCRV/+dCbsfE4g1ShE= Subject key identifier: 33:E5:33:4D:D8:9D:58:C6:36:03:CE:66:77:8F:66:71:0F:49:C2:0A Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584F5E53C994DE3F6DDE0B996E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/b6998fd9-7b69-498c-8135-f33f59d7256c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 12:30:15 +0000 Certificate not after: Sun 23 Jan 2028 22:22:19 +0000 Subordinate resources: IP: 130.12.190.0/24 IP: 198.48.32.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:53:c9:94:de:3f:6d:de:0b:99:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 2 12:30:15 2026 GMT Not After : Jan 23 22:22:19 2028 GMT Subject: CN=b6998fd9-7b69-498c-8135-f33f59d7256c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:86:6d:96:e3:92:60:d6:02:81:f2:ee:30: 5e:27:bc:b3:37:2d:e2:75:ca:57:60:61:e5:e1:cf: 6b:3b:82:65:51:85:6a:09:47:1b:4c:76:c8:09:ea: b8:33:8d:72:d1:7a:96:a0:07:a3:8a:7f:69:69:50: 6c:fe:6e:8c:22:49:02:48:0e:2a:c4:b0:16:86:ea: 20:08:68:9d:a9:93:90:a8:00:be:8e:5d:f1:5e:9b: 62:0a:64:5d:86:8d:5a:1b:fc:45:fc:52:3c:99:e8: 0e:f2:f9:43:54:a8:92:0f:72:7f:0d:3b:16:cc:65: dc:48:16:16:1e:77:e8:80:65:a1:e0:79:d0:3b:5e: 26:70:5d:49:d7:4d:06:bb:83:cb:7c:16:c3:f6:c7: ef:9c:ce:e0:d7:bc:80:aa:3c:be:1e:1e:a9:1f:a4: a5:a9:5c:f3:3b:53:2c:76:3a:c6:7e:4c:f6:d9:d4: cc:2c:a5:a4:38:ec:28:c7:a3:5d:12:f9:42:10:c3: b5:60:80:54:25:96:3b:5a:41:8e:fc:a6:09:80:8c: 25:02:59:48:36:79:91:01:2c:e8:69:b0:fa:63:a1: fa:f4:be:e9:9d:3c:00:52:99:08:15:14:dc:2a:82: 23:12:e4:14:2e:2b:8c:9d:37:b8:14:71:09:61:7f: 91:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E5:33:4D:D8:9D:58:C6:36:03:CE:66:77:8F:66:71:0F:49:C2:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/b6998fd9-7b69-498c-8135-f33f59d7256c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 130.12.190.0/24 198.48.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:05:78:8c:62:47:75:e4:6a:9b:ef:78:fb:dd:43:0d:a7:f0: 55:de:be:7d:32:e4:4e:8a:26:38:ca:48:1e:a7:1b:74:95:e7: 9a:00:03:45:fe:ee:c4:e0:b7:8f:7e:48:04:54:d4:81:40:92: 97:c0:e8:dd:e1:b2:8e:26:35:f7:6d:ee:e0:63:91:7d:f2:c1: a4:ff:8a:e6:e7:72:67:22:eb:45:c8:5e:53:69:a8:75:ba:3d: 6f:f0:9e:90:87:75:25:b3:b0:13:9e:12:4a:23:4f:8d:0e:53: 3f:a7:95:0f:0e:5a:bf:77:7e:20:09:ee:9e:91:ca:d4:69:f8: 6a:e5:0a:c0:39:21:cb:8b:32:e6:2d:c8:b4:73:f5:ab:a4:8f: 70:bc:ea:2c:a5:80:0c:a7:d0:d6:31:df:c4:f4:24:86:71:42: 20:ad:cb:66:98:e9:11:06:b3:16:bc:ac:9b:4b:cb:33:c5:ed: d2:08:bb:c9:f9:f7:c7:f2:63:9b:63:e1:a7:de:5e:a2:db:54: b0:2f:4b:66:cf:25:a0:f7:5b:dc:b8:23:70:07:c9:da:5d:6a: ca:b3:b3:47:ac:8d:a7:ba:4e:3d:78:ea:0e:f8:38:6d:30:49: 71:09:4a:6c:8c:31:97:db:d2:d7:09:6f:d4:fd:ed:6e:83:32: 44:ac:3d:9a -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE9eU8mU3j9t3guZbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MTAwMjEyMzAxNVoXDTI4MDEyMzIyMjIxOVowLzEtMCsGA1UEAxMk YjY5OThmZDktN2I2OS00OThjLTgxMzUtZjMzZjU5ZDcyNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxyGbZbjkmDWAoHy7jBeJ7yzNy3idcpXYGHl 4c9rO4JlUYVqCUcbTHbICeq4M41y0XqWoAejin9paVBs/m6MIkkCSA4qxLAWhuog CGidqZOQqAC+jl3xXptiCmRdho1aG/xF/FI8megO8vlDVKiSD3J/DTsWzGXcSBYW HnfogGWh4HnQO14mcF1J100Gu4PLfBbD9sfvnM7g17yAqjy+Hh6pH6SlqVzzO1Ms djrGfkz22dTMLKWkOOwox6NdEvlCEMO1YIBUJZY7WkGO/KYJgIwlAllINnmRASzo abD6Y6H69L7pnTwAUpkIFRTcKoIjEuQULiuMnTe4FHEJYX+R9wIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFDPlM03YnVjGNgPOZnePZnEPScIKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i Njk5OGZkOS03YjY5LTQ5OGMtODEzNS1mMzNmNTlkNzI1NmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2I2OTk4ZmQ5LTdiNjktNDk4Yy04 MTM1LWYzM2Y1OWQ3MjU2Yy9iNjk5OGZkOS03YjY5LTQ5OGMtODEzNS1mMzNmNTlk NzI1NmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACCDL4DBALGMCAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIwV4jGJHdeRq m+94+91DDafwVd6+fTLkToomOMpIHqcbdJXnmgADRf7uxOC3j35IBFTUgUCSl8Do 3eGyjiY1923u4GORffLBpP+K5udyZyLrRcheU2modbo9b/CekId1JbOwE54SSiNP jQ5TP6eVDw5av3d+IAnunpHK1Gn4auUKwDkhy4sy5i3ItHP1q6SPcLzqLKWADKfQ 1jHfxPQkhnFCIK3LZpjpEQazFrysm0vLM8Xt0gi7yfn3x/Jjm2Php95eottUsC9L Zs8loPdb3LgjcAfJ2l1qyrOzR6yNp7pOPXjqDvg4bTBJcQlKbIwxl9vS1wlv1P3t boMyRKw9mg== -----END CERTIFICATE-----Generated at Wed Oct 28 16:31:38 2026 by rpki-client