$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer File: 85ab0b8f-e87f-4660-83cc-46c357202ed9.cer (raw, json) Hash identifier: sBzNDwX0WfCkxLRRYZU/tuzTe+RKm4chvJ+GdLd4rSY= Subject key identifier: 9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D116AB9DE86BA0096F988D960 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Mar 2026 13:45:21 +0000 Certificate not after: Wed 07 Jun 2028 12:45:21 +0000 Subordinate resources: AS: 15324 IP: 64.235.144.0/20 IP: 198.35.20.0/22 IP: 209.222.80.0/21 IP: 2620:0:22c0::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:6a:b9:de:86:ba:00:96:f9:88:d9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 5 13:45:21 2026 GMT Not After : Jun 7 12:45:21 2028 GMT Subject: CN=85ab0b8f-e87f-4660-83cc-46c357202ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:1f:fb:eb:25:c7:00:d7:78:c6:10:27:dc: 21:0e:26:f3:b9:ef:3d:83:93:14:2b:1c:f7:97:ea: 12:48:07:9e:96:41:c2:41:b3:61:d9:ae:ca:09:2f: b4:e7:56:6b:01:cc:cb:97:1a:ef:11:f4:86:5d:79: 77:27:2b:b5:30:ef:f7:60:b7:47:c8:6c:7d:f8:6a: e4:93:e4:cc:d4:51:2d:a8:1e:b6:9a:18:88:28:71: 7f:7c:96:87:1d:d7:54:40:fb:84:b6:e4:bd:3f:1f: c7:fe:e8:4c:f6:fc:99:8b:75:45:31:36:95:77:6e: 71:7d:59:d2:79:8b:8e:8e:1b:83:ee:b2:d6:53:24: 28:bd:bd:94:44:bf:6a:f2:13:95:ee:b1:02:e0:89: b8:35:e7:d6:d0:70:b5:20:8d:5a:9d:82:5a:74:8a: 1d:d0:b6:8a:35:db:e1:7d:86:33:75:ce:18:7f:7c: 65:46:78:c4:e7:39:fc:f9:96:76:55:15:c4:e0:46: 42:1b:16:82:5b:0f:f2:f7:37:db:4c:b9:2a:b7:3f: a1:17:0f:da:9d:78:0c:50:ae:e6:4b:dd:1c:58:3a: db:6b:79:81:cf:6e:03:fc:86:00:25:8b:f7:b0:d5: 5c:b7:9b:9d:8a:57:39:5e:2f:af:c6:88:79:f4:f7: 9b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.235.144.0/20 198.35.20.0/22 209.222.80.0/21 IPv6: 2620:0:22c0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15324 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b0:12:46:e5:f2:08:dc:4b:82:fc:20:4e:19:27:cb:8c:cc: 23:be:86:d3:0f:55:92:29:05:34:0a:56:f3:14:10:cf:30:f2: b7:85:d9:bd:e5:81:52:c2:6a:36:e5:b7:70:ee:d1:02:26:57: b5:22:b0:e1:16:e7:f2:92:ad:59:22:91:3f:c3:b2:8e:10:6e: 11:5b:3e:a1:0f:f2:00:19:ac:25:2c:f3:54:31:01:73:ed:82: 98:1f:ff:16:b8:42:81:26:2a:2e:83:41:34:ec:29:9f:cc:93: f6:54:80:89:47:e3:b8:68:00:b9:8d:6b:d4:af:b6:2c:7c:6e: 93:6c:c3:f9:57:fb:da:15:bc:43:13:a2:f2:49:52:be:0c:9d: b4:b7:62:18:66:2e:78:10:58:7b:e8:53:f2:bf:85:e0:3b:6c: 8f:e9:40:35:12:f7:d5:44:ea:9b:ca:21:b3:66:8e:80:31:86: d3:3c:44:62:d1:ae:55:c5:4c:b6:df:67:47:0e:86:f9:2f:4f: 62:14:71:9b:43:26:da:51:b7:66:6f:b0:fe:ff:2e:b5:0d:66: 78:4e:35:6e:21:15:d2:85:68:bd:92:8e:9d:70:96:26:58:d2: 9c:48:99:db:b9:67:21:8d:87:95:08:86:34:38:01:92:2b:63: 1f:1b:65:5f -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWE0RarnehroAlvmI2WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDMwNTEzNDUyMVoXDTI4MDYwNzEyNDUyMVowLzEtMCsGA1UEAxMk ODVhYjBiOGYtZTg3Zi00NjYwLTgzY2MtNDZjMzU3MjAyZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfEf++slxwDXeMYQJ9whDibzue89g5MUKxz3 l+oSSAeelkHCQbNh2a7KCS+051ZrAczLlxrvEfSGXXl3Jyu1MO/3YLdHyGx9+Grk k+TM1FEtqB62mhiIKHF/fJaHHddUQPuEtuS9Px/H/uhM9vyZi3VFMTaVd25xfVnS eYuOjhuD7rLWUyQovb2URL9q8hOV7rEC4Im4NefW0HC1II1anYJadIod0LaKNdvh fYYzdc4Yf3xlRnjE5zn8+ZZ2VRXE4EZCGxaCWw/y9zfbTLkqtz+hFw/anXgMUK7m S90cWDrba3mBz24D/IYAJYv3sNVct5udilc5Xi+vxoh59PebuQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFJ3l0xZrGJekTlX4vntxMCWvd5voMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 NWFiMGI4Zi1lODdmLTQ2NjAtODNjYy00NmMzNTcyMDJlZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1YWIwYjhmLWU4N2YtNDY2MC04 M2NjLTQ2YzM1NzIwMmVkOS84NWFiMGI4Zi1lODdmLTQ2NjAtODNjYy00NmMzNTcy MDJlZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBARA65ADBALGIxQDBAPR3lAwDwQCAAIwCQMHACYg AAAiwDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI73DBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzsBJG5fII 3EuC/CBOGSfLjMwjvobTD1WSKQU0ClbzFBDPMPK3hdm95YFSwmo25bdw7tECJle1 IrDhFufykq1ZIpE/w7KOEG4RWz6hD/IAGawlLPNUMQFz7YKYH/8WuEKBJioug0E0 7CmfzJP2VICJR+O4aAC5jWvUr7YsfG6TbMP5V/vaFbxDE6LySVK+DJ20t2IYZi54 EFh76FPyv4XgO2yP6UA1EvfVROqbyiGzZo6AMYbTPERi0a5VxUy232dHDob5L09i FHGbQybaUbdmb7D+/y61DWZ4TjVuIRXShWi9ko6dcJYmWNKcSJnbuWchjYeVCIY0 OAGSK2MfG2Vf -----END CERTIFICATE-----Generated at Wed Mar 25 23:19:35 2026 by rpki-client