$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317.cer File: 6f078c90-33bb-4ecc-a4d2-ceab1b8f3317.cer (raw, json) Hash identifier: mo/5AHlF/DEyIFB+dfoZ/lsvbbs6xqVlmmNdMj1bl7c= Subject key identifier: AC:AA:4E:DB:2C:62:4A:3D:4F:AB:F0:43:51:33:61:9E:2B:8B:F6:52 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584D4730979F00B45429941F7380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Mar 2026 20:01:53 +0000 Certificate not after: Mon 26 Jun 2028 20:01:53 +0000 Subordinate resources: AS: 25676 IP: 209.50.96.0/19 IP: 2602:f53a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:30:97:9f:00:b4:54:29:94:1f:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Mar 24 20:01:53 2026 GMT Not After : Jun 26 20:01:53 2028 GMT Subject: CN=6f078c90-33bb-4ecc-a4d2-ceab1b8f3317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:05:e3:44:a6:ad:90:bd:3b:ce:76:db:a6:0c: 75:be:85:12:eb:62:14:f9:ff:c6:fb:fd:02:c3:92: c3:3e:74:f7:89:3f:29:2c:10:65:e2:40:a7:46:6e: f7:33:00:2d:0f:88:60:9d:35:02:0c:e1:be:58:85: ce:8a:c6:03:f0:35:6b:d2:d4:84:17:35:22:a7:d7: 86:2d:39:a6:3b:c2:51:e7:85:5d:14:3a:3d:01:87: 58:24:3d:26:9f:e1:1e:08:59:b7:c2:d7:dd:3b:a8: e1:14:24:59:f6:a2:36:fe:3c:e5:12:fd:84:eb:4d: 5a:65:5f:28:6e:4b:18:9d:e8:fa:3e:43:49:78:67: 37:a7:66:8e:09:58:0b:58:f3:5d:40:ee:bb:3c:c2: b0:3f:e9:8e:2d:4f:74:cb:f3:c8:fb:4e:3f:b4:2b: ef:f2:ed:42:a3:99:c6:0a:27:97:9a:b6:da:b6:58: 7a:bd:c2:ba:13:de:08:d6:be:a8:89:81:ee:80:8c: 5d:8b:8d:6a:d4:67:33:ee:1d:28:df:ec:a4:a7:63: 30:bc:e6:67:74:1b:3a:4f:e0:17:77:90:b5:c9:93: b2:9f:0c:32:62:bc:3c:a7:aa:f6:94:92:e9:cc:03: 8c:bd:89:fb:88:05:62:5a:92:c5:7b:6a:21:f5:b5: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AA:4E:DB:2C:62:4A:3D:4F:AB:F0:43:51:33:61:9E:2B:8B:F6:52 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 209.50.96.0/19 IPv6: 2602:f53a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25676 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:8f:91:2c:78:12:1b:73:bc:30:29:aa:f7:93:71:70:ac:73: 6f:e2:20:ea:87:c3:6d:17:2e:37:a8:71:5f:62:6c:6b:d7:bb: 62:39:45:21:fe:95:b6:59:2c:2e:61:d7:be:4c:c1:ab:57:e7: b9:4a:a5:bb:b2:7e:01:37:52:b4:53:79:67:70:51:1f:75:d9: 92:05:91:70:16:de:54:b8:8b:25:48:8d:56:5c:a8:b1:3c:60: a9:c7:6c:ae:85:7e:d7:9e:8f:36:5f:29:2f:73:94:05:9e:ce: ee:92:44:0d:aa:93:c2:76:e4:6a:67:77:b7:1d:ef:da:84:42: 85:5b:51:c3:51:17:9d:aa:94:db:15:3e:7b:24:8b:0c:fc:e6: 93:f3:07:0f:8e:8e:70:d2:6c:fa:23:2a:63:ba:ee:9d:87:53: dc:0e:a0:04:c0:48:a3:a5:9d:04:04:0b:d8:5f:9e:44:4e:4b: 7b:c6:a5:cd:b7:6b:89:ff:1d:e0:7c:2f:74:51:4a:02:f3:dd: 27:e4:95:e2:25:6b:e2:86:59:f7:c7:c9:8d:e6:b8:35:ac:c4: e0:b6:7c:d6:c9:6d:3d:61:58:9e:bf:fb:30:ad:60:18:70:01: 7e:c9:2f:63:a5:58:14:b5:d0:04:39:ee:16:99:48:15:32:30: 32:55:6f:42 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE1HMJefALRUKZQfc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDMyNDIwMDE1M1oXDTI4MDYyNjIwMDE1M1owLzEtMCsGA1UEAxMk NmYwNzhjOTAtMzNiYi00ZWNjLWE0ZDItY2VhYjFiOGYzMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQXjRKatkL07znbbpgx1voUS62IU+f/G+/0C w5LDPnT3iT8pLBBl4kCnRm73MwAtD4hgnTUCDOG+WIXOisYD8DVr0tSEFzUip9eG LTmmO8JR54VdFDo9AYdYJD0mn+EeCFm3wtfdO6jhFCRZ9qI2/jzlEv2E601aZV8o bksYnej6PkNJeGc3p2aOCVgLWPNdQO67PMKwP+mOLU90y/PI+04/tCvv8u1Co5nG CieXmrbatlh6vcK6E94I1r6oiYHugIxdi41q1Gcz7h0o3+ykp2MwvOZndBs6T+AX d5C1yZOynwwyYrw8p6r2lJLpzAOMvYn7iAViWpLFe2oh9bW18QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKyqTtssYko9T6vwQ1EzYZ4ri/ZSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82 ZjA3OGM5MC0zM2JiLTRlY2MtYTRkMi1jZWFiMWI4ZjMzMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzZmMDc4YzkwLTMzYmItNGVjYy1h NGQyLWNlYWIxYjhmMzMxNy82ZjA3OGM5MC0zM2JiLTRlY2MtYTRkMi1jZWFiMWI4 ZjMzMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAXRMmAwDgQCAAIwCAMGBCYC9ToAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmRMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADqPkSx4EhtzvDApqveTcXCsc2/i IOqHw20XLjeocV9ibGvXu2I5RSH+lbZZLC5h175MwatX57lKpbuyfgE3UrRTeWdw UR912ZIFkXAW3lS4iyVIjVZcqLE8YKnHbK6FfteejzZfKS9zlAWezu6SRA2qk8J2 5Gpnd7cd79qEQoVbUcNRF52qlNsVPnskiwz85pPzBw+OjnDSbPojKmO67p2HU9wO oATASKOlnQQEC9hfnkROS3vGpc23a4n/HeB8L3RRSgLz3SfkleIla+KGWffHyY3m uDWsxOC2fNbJbT1hWJ6/+zCtYBhwAX7JL2OlWBS10AQ57haZSBUyMDJVb0I= -----END CERTIFICATE-----Generated at Wed Mar 25 22:54:22 2026 by rpki-client