$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18.cer File: c4825bb4-0295-4646-b747-1abe4ad33f18.cer (raw, json) Hash identifier: 3Mprdaf2886RF9+syXl8XGSNUsUlEqUcVfi589YGNVs= Subject key identifier: A0:B8:1F:8E:EB:DD:8F:BB:88:E7:F8:AB:55:93:38:50:4F:49:67:1F Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584DCF012889DD78FAA8EDAF8340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/c4825bb4-0295-4646-b747-1abe4ad33f18.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 May 2026 11:36:14 +0000 Certificate not after: Mon 17 Jan 2028 20:40:02 +0000 Subordinate resources: AS: 402091 IP: 131.143.174.0/24 IP: 2602:f3c6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:01:28:89:dd:78:fa:a8:ed:af:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: May 12 11:36:14 2026 GMT Not After : Jan 17 20:40:02 2028 GMT Subject: CN=c4825bb4-0295-4646-b747-1abe4ad33f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:28:a9:d5:ea:7b:78:4f:0c:7f:44:da:a8:8a: a4:4a:7f:e9:1a:7a:06:27:62:50:4c:4b:3c:14:55: b0:fc:c3:02:47:e9:f4:b5:47:b8:c3:2a:9c:d9:ec: fd:37:3b:b8:94:65:d8:2b:1c:0f:2b:63:b7:35:b3: 3b:b4:b8:f5:b7:ab:6c:dd:be:81:f4:ba:04:ea:1e: 3a:ec:3d:e1:7b:b3:f7:87:2a:1e:58:e8:57:f5:54: 3a:eb:97:78:27:51:4a:d4:0e:ef:fd:76:71:24:2d: 2f:34:b8:8b:05:9e:5e:a0:79:67:e8:bf:32:98:55: b0:fc:ad:d1:49:ca:d7:66:f9:fc:e3:db:3a:b6:0a: e1:8d:70:f4:f9:13:27:aa:a4:07:89:88:36:2f:6e: 01:28:fe:3f:6f:e4:7a:15:f8:33:a5:a8:ec:88:f9: 46:a3:88:08:12:1d:69:16:a8:0f:66:d9:5d:00:28: 14:64:74:bb:11:90:49:cd:b3:8a:84:ca:75:d8:67: 8b:b9:c6:f7:de:85:b3:42:28:39:9b:6d:34:98:d4: 46:64:54:e1:af:e3:c2:83:19:ac:88:8e:a6:a7:42: 84:38:19:a5:9d:22:56:9a:d2:c5:fc:18:81:98:44: 48:96:0f:c1:69:0e:30:a9:6e:03:21:3f:59:02:70: 5b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B8:1F:8E:EB:DD:8F:BB:88:E7:F8:AB:55:93:38:50:4F:49:67:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4825bb4-0295-4646-b747-1abe4ad33f18/c4825bb4-0295-4646-b747-1abe4ad33f18.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 131.143.174.0/24 IPv6: 2602:f3c6::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402091 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:86:5f:47:97:c9:26:3b:1c:65:dd:43:71:06:bc:64:9f:ef: 50:b8:08:b0:6b:57:19:bd:33:4e:4d:3f:a6:be:9d:ce:08:3d: f5:b8:a1:36:7a:79:a8:29:a6:ee:c1:70:f0:13:67:66:20:dc: f6:1c:18:83:9a:ce:bf:eb:34:e0:62:50:88:6b:14:4c:ff:e3: c6:1a:48:8f:d0:a5:40:b7:86:d4:b2:dc:45:2a:4a:2d:fd:1e: 11:1a:11:30:f6:52:7f:31:0f:bd:b2:d3:dc:06:1f:f2:59:7a: f6:0e:fe:cf:23:b0:2e:0a:d4:aa:42:64:96:47:f9:5b:a1:0f: cf:f4:69:44:41:e1:aa:18:96:81:c3:ac:3b:29:91:cc:2e:3f: 02:57:86:30:ab:eb:07:34:2b:7e:64:fe:48:f4:8d:b7:39:00: 50:d6:e8:d7:50:07:e6:d4:83:c8:87:2e:0d:76:72:fe:dd:42: eb:4e:b8:53:21:9c:9c:dd:b8:ab:b2:a4:b0:8f:d5:c2:45:ba: a1:b7:d0:d2:c4:0c:3b:2f:27:74:1f:36:ff:33:c9:ca:9d:44: e1:b9:13:2f:05:10:a7:c0:f1:81:8b:3d:bc:4e:82:32:fd:73: 87:57:14:65:4e:95:76:f6:24:06:84:55:46:f0:2b:54:fc:ff: 38:d5:54:5a -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3PASiJ3Xj6qO2vg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDUxMjExMzYxNFoXDTI4MDExNzIwNDAwMlowLzEtMCsGA1UEAxMk YzQ4MjViYjQtMDI5NS00NjQ2LWI3NDctMWFiZTRhZDMzZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSip1ep7eE8Mf0TaqIqkSn/pGnoGJ2JQTEs8 FFWw/MMCR+n0tUe4wyqc2ez9Nzu4lGXYKxwPK2O3NbM7tLj1t6ts3b6B9LoE6h46 7D3he7P3hyoeWOhX9VQ665d4J1FK1A7v/XZxJC0vNLiLBZ5eoHln6L8ymFWw/K3R ScrXZvn849s6tgrhjXD0+RMnqqQHiYg2L24BKP4/b+R6FfgzpajsiPlGo4gIEh1p FqgPZtldACgUZHS7EZBJzbOKhMp12GeLucb33oWzQig5m200mNRGZFThr+PCgxms iI6mp0KEOBmlnSJWmtLF/BiBmERIlg/BaQ4wqW4DIT9ZAnBbywIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKC4H47r3Y+7iOf4q1WTOFBPSWcfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j NDgyNWJiNC0wMjk1LTQ2NDYtYjc0Ny0xYWJlNGFkMzNmMTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2M0ODI1YmI0LTAyOTUtNDY0Ni1i NzQ3LTFhYmU0YWQzM2YxOC9jNDgyNWJiNC0wMjk1LTQ2NDYtYjc0Ny0xYWJlNGFk MzNmMTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACDj64wDgQCAAIwCAMGACYC88YAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiqzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlhl9Hl8kmOxxl3UNxBrxkn+9Q uAiwa1cZvTNOTT+mvp3OCD31uKE2enmoKabuwXDwE2dmINz2HBiDms6/6zTgYlCI axRM/+PGGkiP0KVAt4bUstxFKkot/R4RGhEw9lJ/MQ+9stPcBh/yWXr2Dv7PI7Au CtSqQmSWR/lboQ/P9GlEQeGqGJaBw6w7KZHMLj8CV4Ywq+sHNCt+ZP5I9I23OQBQ 1ujXUAfm1IPIhy4NdnL+3ULrTrhTIZyc3birsqSwj9XCRbqht9DSxAw7Lyd0Hzb/ M8nKnUThuRMvBRCnwPGBiz28ToIy/XOHVxRlTpV29iQGhFVG8CtU/P841VRa -----END CERTIFICATE-----Generated at Wed May 13 01:13:39 2026 by rpki-client