$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c.cer File: f9ceb08b-7a95-415d-a4e1-32f176c5047c.cer (raw, json) Hash identifier: aDGyNXrFDW+VAWpwl/AVqtI0eTuek5hmkBZ2x1M8K3c= Subject key identifier: 4A:F5:07:AD:08:81:A2:F0:04:96:B1:0A:39:73:61:8B:E7:CD:E4:D8 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584F5ED9CDB00870A85CDFA6D800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/f9ceb08b-7a95-415d-a4e1-32f176c5047c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 17:00:17 +0000 Certificate not after: Tue 18 Apr 2028 14:16:17 +0000 Subordinate resources: AS: 214346 AS: 401608 IP: 143.203.76.0/22 IP: 198.182.171.0/24 IP: 2602:f8ec::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:d9:cd:b0:08:70:a8:5c:df:a6:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 2 17:00:17 2026 GMT Not After : Apr 18 14:16:17 2028 GMT Subject: CN=f9ceb08b-7a95-415d-a4e1-32f176c5047c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:96:68:38:94:cc:31:66:71:d8:cc:a2:15: 6d:a2:22:0b:36:01:51:32:cf:ce:6b:ae:d6:b6:3f: 1c:d6:d1:17:87:cb:3f:e7:a0:a0:37:f0:89:d6:ec: 1a:04:62:4f:61:6d:e0:31:5c:6d:45:14:1f:f0:88: d3:73:93:af:32:c5:68:10:b8:76:07:19:24:b4:7d: f1:d3:95:4d:4b:49:47:6b:0f:b4:9b:b8:3e:71:e7: 99:69:e5:0a:4e:31:5d:52:a6:9d:9a:b7:52:ac:b3: 23:3b:13:eb:65:1e:24:b1:f0:24:a8:e1:e1:15:e1: f3:89:87:7e:e4:69:9d:ba:4f:c8:79:e4:0a:61:e6: 85:92:2e:64:22:76:f6:c3:3e:5e:fe:b0:30:52:a6: a1:07:f5:6f:26:7e:79:05:f8:25:1d:1a:75:5c:be: 20:fa:7b:96:8a:a7:2c:62:70:ce:05:d5:a4:55:21: 67:fa:55:e6:24:e1:7e:ff:f2:0c:fe:f0:3e:3a:95: ce:c6:21:86:53:fb:e8:7b:7c:b2:ee:21:93:24:56: 39:5b:06:f6:ef:4d:93:f4:fd:c9:c6:50:95:c9:29: 5c:29:aa:4b:3e:ba:93:fb:48:2e:bd:0c:3d:e8:c4: 3d:db:47:9a:7a:c8:ac:5a:9d:c4:9d:34:17:78:94: 1d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F5:07:AD:08:81:A2:F0:04:96:B1:0A:39:73:61:8B:E7:CD:E4:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/f9ceb08b-7a95-415d-a4e1-32f176c5047c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 143.203.76.0/22 198.182.171.0/24 IPv6: 2602:f8ec::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214346 401608 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b1:03:a8:8f:21:e5:d5:60:c8:8d:6b:ce:bf:68:bd:3d:c0: 2a:75:45:3f:60:25:8c:16:d6:4b:09:5f:8c:fc:6e:72:8e:aa: 74:ef:ec:85:ca:30:d3:23:12:ed:18:ed:f9:3f:47:4a:17:7a: 10:02:97:42:d5:e0:e1:dc:fa:6b:91:ea:51:e3:cc:c6:a8:23: 41:00:33:24:56:30:67:5e:18:71:6b:e3:8e:fa:f3:7e:4b:5a: 32:d5:50:d1:dc:2a:f3:1a:c8:bc:ae:30:43:2c:8f:00:4b:b5: 78:df:83:e8:87:f5:93:73:e8:44:15:66:54:d6:2b:8d:26:ec: bb:50:a0:38:82:68:0c:b1:57:1d:6b:1c:ec:9b:37:61:ca:35: a7:dd:c9:7c:36:88:7a:76:72:51:85:e8:07:9f:ef:c7:94:89: 64:0f:d1:77:06:a8:07:b6:ff:5f:ed:ec:90:e3:66:72:46:5a: 51:93:de:d9:a3:28:38:f7:f2:28:79:e1:0d:80:83:06:9c:42: 9f:21:83:57:ed:ea:56:f9:7e:d1:f5:9c:b5:4b:d8:42:41:b6: 06:4d:78:8d:f3:b8:72:59:d3:dc:37:85:58:97:dc:66:a6:43: 62:d8:ae:f2:af:17:33:86:0c:b1:15:74:30:5d:5d:9b:57:11: d0:5c:da:de -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE9e2c2wCHCoXN+m2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MTAwMjE3MDAxN1oXDTI4MDQxODE0MTYxN1owLzEtMCsGA1UEAxMk ZjljZWIwOGItN2E5NS00MTVkLWE0ZTEtMzJmMTc2YzUwNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ6WaDiUzDFmcdjMohVtoiILNgFRMs/Oa67W tj8c1tEXh8s/56CgN/CJ1uwaBGJPYW3gMVxtRRQf8IjTc5OvMsVoELh2BxkktH3x 05VNS0lHaw+0m7g+ceeZaeUKTjFdUqadmrdSrLMjOxPrZR4ksfAkqOHhFeHziYd+ 5Gmduk/IeeQKYeaFki5kInb2wz5e/rAwUqahB/VvJn55BfglHRp1XL4g+nuWiqcs YnDOBdWkVSFn+lXmJOF+//IM/vA+OpXOxiGGU/voe3yy7iGTJFY5Wwb2702T9P3J xlCVySlcKapLPrqT+0guvQw96MQ920eaesisWp3EnTQXeJQd3wIDAQABo4IENjCC BDIwHQYDVR0OBBYEFEr1B60IgaLwBJaxCjlzYYvnzeTYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m OWNlYjA4Yi03YTk1LTQxNWQtYTRlMS0zMmYxNzZjNTA0N2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Y5Y2ViMDhiLTdhOTUtNDE1ZC1h NGUxLTMyZjE3NmM1MDQ3Yy9mOWNlYjA4Yi03YTk1LTQxNWQtYTRlMS0zMmYxNzZj NTA0N2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAKPy0wDBADGtqswDgQCAAIwCAMGACYC+OwAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwNFSgIDBiDIMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHmxA6iPIeXV YMiNa86/aL09wCp1RT9gJYwW1ksJX4z8bnKOqnTv7IXKMNMjEu0Y7fk/R0oXehAC l0LV4OHc+muR6lHjzMaoI0EAMyRWMGdeGHFr4476835LWjLVUNHcKvMayLyuMEMs jwBLtXjfg+iH9ZNz6EQVZlTWK40m7LtQoDiCaAyxVx1rHOybN2HKNafdyXw2iHp2 clGF6Aef78eUiWQP0XcGqAe2/1/t7JDjZnJGWlGT3tmjKDj38ih54Q2AgwacQp8h g1ft6lb5ftH1nLVL2EJBtgZNeI3zuHJZ09w3hViX3GamQ2LYrvKvFzOGDLEVdDBd XZtXEdBc2t4= -----END CERTIFICATE-----Generated at Mon Oct 12 06:50:47 2026 by rpki-client