$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer File: dda1859b-9b6c-47e8-8de0-488bb1a65637.cer (raw, json) Hash identifier: h+rWoOUMPgzltHu4H1cZTF5xSGWUFNaj3GKQWvaQMP0= Subject key identifier: D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584D200562A9C3085A65D2DA0800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 19:18:18 +0000 Certificate not after: Fri 07 Apr 2028 04:25:14 +0000 Subordinate resources: AS: 402279 IP: 23.151.220.0/24 IP: 2602:f486::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:05:62:a9:c3:08:5a:65:d2:da:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Mar 10 19:18:18 2026 GMT Not After : Apr 7 04:25:14 2028 GMT Subject: CN=dda1859b-9b6c-47e8-8de0-488bb1a65637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:86:00:c4:38:05:5d:41:82:f1:91:29:8b: 6d:d4:db:e9:d4:2d:6d:b5:53:6e:62:83:aa:88:c5: 84:6d:e7:4f:22:f6:01:72:9f:09:31:04:2c:0a:40: 94:1e:09:87:b6:b4:71:07:b4:e1:43:07:54:aa:b3: 79:41:17:bc:61:c2:b1:28:31:1d:0b:f1:1b:23:55: da:6a:04:46:03:e3:a3:8b:a8:a5:dc:58:05:94:4c: 67:4d:4d:a7:e5:c4:62:e2:3f:42:c9:c8:f3:a6:da: 74:50:6f:2b:1d:ef:99:50:61:dd:59:df:b7:45:2b: 25:83:8a:c7:40:16:48:e1:a9:58:6e:2d:b3:cf:0f: 8d:fa:64:04:84:2f:67:9b:d9:b5:a8:80:c5:9a:53: 17:7a:96:8d:43:3c:77:bf:84:15:c1:b2:be:b3:07: 0a:82:8e:5c:a9:85:9e:ed:0f:99:7f:76:7c:00:44: a7:ad:98:33:6b:87:3a:43:e8:e9:14:ce:f1:e5:78: b3:74:0b:ef:46:4e:04:84:0d:b7:cb:6d:a4:39:6d: 13:ac:8a:a1:d6:1a:bc:be:24:72:8b:8a:ff:e1:b9: 7a:54:92:68:86:e4:27:ac:bf:e4:77:64:49:b8:c1: d6:27:ff:5b:9f:be:16:08:82:f9:b4:26:a0:30:02: 5d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.151.220.0/24 IPv6: 2602:f486::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402279 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e9:2a:99:8c:35:d8:c7:9d:a5:f9:b6:16:50:bf:4b:7d:94: 86:cf:38:1d:a9:e4:e5:8d:2b:af:81:35:0b:9f:48:44:ce:2a: 82:12:89:01:7b:54:33:d6:2a:0d:ea:69:11:a7:87:c3:96:b5: 66:c5:5c:ed:b0:82:23:17:25:ec:38:7d:85:60:39:6c:60:7c: d8:2b:e0:a7:8c:7d:0c:84:88:08:22:b0:55:e5:07:00:da:6e: be:36:d2:a7:a4:20:e4:46:cf:8f:25:10:0b:9d:d8:de:b2:37: e9:0e:ed:bd:29:cb:27:53:7b:54:47:4f:80:00:27:0d:92:28: f7:ba:4a:2c:ba:51:12:0b:49:c5:01:06:a3:ee:51:35:4c:a6: b8:6d:e5:91:65:71:3d:e9:16:9f:c2:2a:3f:3b:72:15:cc:64: a5:9b:77:57:fd:2d:30:f6:86:4b:c7:4b:cb:f5:ec:24:3a:fa: 2e:b0:8b:39:58:f2:8d:65:9a:e4:94:18:2b:81:d2:ea:d1:26: 8c:d5:01:ee:12:a2:0e:20:66:0f:b0:1f:78:3c:73:24:27:c8: 6d:a0:cc:5b:70:15:40:c2:01:8e:d7:23:67:9f:40:96:65:eb: bf:c7:3e:d2:a9:20:db:88:0c:67:b0:d4:08:91:05:8c:09:3d: 0e:9e:32:6c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0gBWKpwwhaZdLaCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDMxMDE5MTgxOFoXDTI4MDQwNzA0MjUxNFowLzEtMCsGA1UEAxMk ZGRhMTg1OWItOWI2Yy00N2U4LThkZTAtNDg4YmIxYTY1NjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8+GAMQ4BV1BgvGRKYtt1Nvp1C1ttVNuYoOq iMWEbedPIvYBcp8JMQQsCkCUHgmHtrRxB7ThQwdUqrN5QRe8YcKxKDEdC/EbI1Xa agRGA+Oji6il3FgFlExnTU2n5cRi4j9Cycjzptp0UG8rHe+ZUGHdWd+3RSslg4rH QBZI4alYbi2zzw+N+mQEhC9nm9m1qIDFmlMXepaNQzx3v4QVwbK+swcKgo5cqYWe 7Q+Zf3Z8AESnrZgza4c6Q+jpFM7x5XizdAvvRk4EhA23y22kOW0TrIqh1hq8viRy i4r/4bl6VJJohuQnrL/kd2RJuMHWJ/9bn74WCIL5tCagMAJdtQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNK0UuGrRPSo0Non+hE6V9ujlcxzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9k ZGExODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhiYjFhNjU2MzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2RkYTE4NTliLTliNmMtNDdlOC04 ZGUwLTQ4OGJiMWE2NTYzNy9kZGExODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhiYjFh NjU2MzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXl9wwDgQCAAIwCAMGACYC9IYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjZzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA86SqZjDXYx52l+bYWUL9LfZSG zzgdqeTljSuvgTULn0hEziqCEokBe1Qz1ioN6mkRp4fDlrVmxVztsIIjFyXsOH2F YDlsYHzYK+CnjH0MhIgIIrBV5QcA2m6+NtKnpCDkRs+PJRALndjesjfpDu29Kcsn U3tUR0+AACcNkij3ukosulESC0nFAQaj7lE1TKa4beWRZXE96Rafwio/O3IVzGSl m3dX/S0w9oZLx0vL9ewkOvousIs5WPKNZZrklBgrgdLq0SaM1QHuEqIOIGYPsB94 PHMkJ8htoMxbcBVAwgGO1yNnn0CWZeu/xz7SqSDbiAxnsNQIkQWMCT0OnjJs -----END CERTIFICATE-----Generated at Wed Mar 25 23:06:47 2026 by rpki-client