$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c.cer File: f9ceb08b-7a95-415d-a4e1-32f176c5047c.cer (raw, json) Hash identifier: etWclfJNwy1vhOnwuct1Iz4WwBr+MSHwOrLWUCblfdk= Subject key identifier: 4A:F5:07:AD:08:81:A2:F0:04:96:B1:0A:39:73:61:8B:E7:CD:E4:D8 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584CD6E0A9C1D50E1325602DDE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/f9ceb08b-7a95-415d-a4e1-32f176c5047c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Feb 2026 14:30:18 +0000 Certificate not after: Tue 18 Apr 2028 14:16:17 +0000 Subordinate resources: AS: 214346 AS: 401608 IP: 198.182.171.0/24 IP: 2602:f8ec::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:e0:a9:c1:d5:0e:13:25:60:2d:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Feb 12 14:30:18 2026 GMT Not After : Apr 18 14:16:17 2028 GMT Subject: CN=f9ceb08b-7a95-415d-a4e1-32f176c5047c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:96:68:38:94:cc:31:66:71:d8:cc:a2:15: 6d:a2:22:0b:36:01:51:32:cf:ce:6b:ae:d6:b6:3f: 1c:d6:d1:17:87:cb:3f:e7:a0:a0:37:f0:89:d6:ec: 1a:04:62:4f:61:6d:e0:31:5c:6d:45:14:1f:f0:88: d3:73:93:af:32:c5:68:10:b8:76:07:19:24:b4:7d: f1:d3:95:4d:4b:49:47:6b:0f:b4:9b:b8:3e:71:e7: 99:69:e5:0a:4e:31:5d:52:a6:9d:9a:b7:52:ac:b3: 23:3b:13:eb:65:1e:24:b1:f0:24:a8:e1:e1:15:e1: f3:89:87:7e:e4:69:9d:ba:4f:c8:79:e4:0a:61:e6: 85:92:2e:64:22:76:f6:c3:3e:5e:fe:b0:30:52:a6: a1:07:f5:6f:26:7e:79:05:f8:25:1d:1a:75:5c:be: 20:fa:7b:96:8a:a7:2c:62:70:ce:05:d5:a4:55:21: 67:fa:55:e6:24:e1:7e:ff:f2:0c:fe:f0:3e:3a:95: ce:c6:21:86:53:fb:e8:7b:7c:b2:ee:21:93:24:56: 39:5b:06:f6:ef:4d:93:f4:fd:c9:c6:50:95:c9:29: 5c:29:aa:4b:3e:ba:93:fb:48:2e:bd:0c:3d:e8:c4: 3d:db:47:9a:7a:c8:ac:5a:9d:c4:9d:34:17:78:94: 1d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F5:07:AD:08:81:A2:F0:04:96:B1:0A:39:73:61:8B:E7:CD:E4:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9ceb08b-7a95-415d-a4e1-32f176c5047c/f9ceb08b-7a95-415d-a4e1-32f176c5047c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 198.182.171.0/24 IPv6: 2602:f8ec::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214346 401608 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ec:25:56:c4:05:93:0e:db:d6:02:11:89:e6:f1:23:11:2c: 42:1b:2d:57:4c:75:f3:e2:bb:8c:7a:b1:6e:5d:25:a0:50:8f: 62:bf:31:ab:19:ec:75:c9:da:81:bf:d8:23:5a:60:0f:81:05: ab:59:bd:ff:a5:6f:80:14:20:ba:11:9f:34:ad:4b:4f:cd:fc: 78:f6:d7:4a:76:6b:91:da:fb:21:92:5b:dd:45:6c:91:10:41: 1f:63:2c:22:4c:ce:8d:f3:8d:c9:68:84:4a:a1:32:b0:b5:04: 44:15:47:1a:6a:77:25:cd:66:11:e0:d2:2f:d1:12:21:8a:dc: 27:24:2b:ef:87:fa:f2:2d:d4:28:fd:8e:94:04:e5:b8:e8:dd: c5:23:97:e2:64:c5:b9:51:f9:37:32:a9:27:8a:49:d8:95:41: 7f:4e:60:ce:f1:ea:3a:24:d1:32:ac:0d:78:be:9f:35:fc:c3: 3e:b9:07:a0:0b:1f:f3:2c:99:18:e6:f4:a9:cf:4c:fd:56:a6: 86:4d:38:a3:c2:ae:d1:cc:12:b9:96:fa:5b:61:fd:3b:8b:f0: 5a:1c:cc:25:0a:ab:b2:72:01:aa:a3:75:37:43:ef:af:8b:cb: 6f:3e:64:93:70:63:91:f0:f3:6e:f1:28:a9:59:17:13:4e:f8: 95:91:b0:28 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEzW4KnB1Q4TJWAt3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDIxMjE0MzAxOFoXDTI4MDQxODE0MTYxN1owLzEtMCsGA1UEAxMk ZjljZWIwOGItN2E5NS00MTVkLWE0ZTEtMzJmMTc2YzUwNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ6WaDiUzDFmcdjMohVtoiILNgFRMs/Oa67W tj8c1tEXh8s/56CgN/CJ1uwaBGJPYW3gMVxtRRQf8IjTc5OvMsVoELh2BxkktH3x 05VNS0lHaw+0m7g+ceeZaeUKTjFdUqadmrdSrLMjOxPrZR4ksfAkqOHhFeHziYd+ 5Gmduk/IeeQKYeaFki5kInb2wz5e/rAwUqahB/VvJn55BfglHRp1XL4g+nuWiqcs YnDOBdWkVSFn+lXmJOF+//IM/vA+OpXOxiGGU/voe3yy7iGTJFY5Wwb2702T9P3J xlCVySlcKapLPrqT+0guvQw96MQ920eaesisWp3EnTQXeJQd3wIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFEr1B60IgaLwBJaxCjlzYYvnzeTYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m OWNlYjA4Yi03YTk1LTQxNWQtYTRlMS0zMmYxNzZjNTA0N2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Y5Y2ViMDhiLTdhOTUtNDE1ZC1h NGUxLTMyZjE3NmM1MDQ3Yy9mOWNlYjA4Yi03YTk1LTQxNWQtYTRlMS0zMmYxNzZj NTA0N2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGtqswDgQCAAIwCAMGACYC+OwAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwNFSgIDBiDIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHDsJVbEBZMO29YCEYnm 8SMRLEIbLVdMdfPiu4x6sW5dJaBQj2K/MasZ7HXJ2oG/2CNaYA+BBatZvf+lb4AU ILoRnzStS0/N/Hj210p2a5Ha+yGSW91FbJEQQR9jLCJMzo3zjclohEqhMrC1BEQV RxpqdyXNZhHg0i/REiGK3CckK++H+vIt1Cj9jpQE5bjo3cUjl+JkxblR+TcyqSeK SdiVQX9OYM7x6jok0TKsDXi+nzX8wz65B6ALH/MsmRjm9KnPTP1WpoZNOKPCrtHM ErmW+lth/TuL8FoczCUKq7JyAaqjdTdD76+Ly28+ZJNwY5Hw827xKKlZFxNO+JWR sCg= -----END CERTIFICATE-----Generated at Thu Feb 26 19:57:13 2026 by rpki-client