$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer File: f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer (raw, json) Hash identifier: 0VgjcLvO0sZ52FUgPpmspAiTDv2nVqQmTTCGs/BmGms= Subject key identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584D4416381480616C3C219D9C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 17:21:19 +0000 Certificate not after: Mon 07 Feb 2028 17:59:37 +0000 Subordinate resources: IP: 76.76.19.0/24 IP: 167.254.176.0/21 IP: 198.202.26.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:16:38:14:80:61:6c:3c:21:9d:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Mar 23 17:21:19 2026 GMT Not After : Feb 7 17:59:37 2028 GMT Subject: CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:55:65:f1:d2:16:45:14:db:dd:ba:9f:48: d1:96:3b:40:45:37:16:9c:f1:99:8b:e0:47:e7:b9: 54:cd:8e:65:a4:55:74:00:2e:37:8f:ef:54:d2:96: b6:ba:92:2c:4c:36:34:a0:65:03:71:09:d4:2f:b4: 97:23:49:72:25:45:8a:70:20:ca:0c:74:87:33:9c: dd:e3:4c:ad:ea:ba:20:af:2d:82:69:a4:cc:d5:90: 45:72:d9:ac:51:67:2c:a9:aa:02:b0:92:d6:6e:3b: 24:0f:ab:0a:52:49:a0:fe:26:73:60:c1:76:7f:4e: 21:ce:90:5d:30:f0:01:26:09:54:f6:61:0b:5f:5d: 9d:ba:69:39:4a:dd:08:71:59:de:08:f1:39:96:85: 29:1a:c5:b7:52:83:8b:b8:b4:80:2c:6e:e2:3d:8d: 60:2e:ef:ae:fe:69:7e:46:62:b1:e8:8a:26:49:56: f7:29:83:4e:cc:1c:a0:87:1d:e0:48:26:74:96:fe: ce:ab:df:74:ee:b2:6e:08:fe:82:fa:7d:d2:a2:4f: 31:ee:54:ba:f1:3a:aa:ce:e9:25:e6:d8:dc:ed:87: 09:f1:76:a8:8e:1f:0d:5d:67:93:0c:38:15:05:4a: 0a:55:e1:2e:ec:2c:58:90:8f:9e:1d:ec:9a:24:c6: ac:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 76.76.19.0/24 167.254.176.0/21 198.202.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:9f:90:69:a6:c4:80:1a:97:f6:a6:ae:2d:da:4e:dc:e0:a0: 85:62:5a:5c:95:92:a4:fd:fd:28:6b:f8:9e:12:8f:b9:b9:ce: 06:ae:ba:5a:19:8b:12:3e:d0:1f:94:1f:4e:f0:29:47:94:ec: 3c:ce:bc:b6:dd:b5:26:c8:95:8e:61:b5:55:c1:f4:22:d8:26: 9b:bf:41:7d:53:7d:38:42:af:8e:bb:ee:05:b3:f5:e9:77:2e: f5:10:29:76:9e:b2:d5:7e:f7:d4:25:9d:e7:f9:1e:2f:54:07: a0:da:9d:8c:8c:5d:df:9f:82:b6:15:b7:85:b5:52:68:aa:de: bb:90:6e:41:f2:c3:84:10:a4:0d:63:20:12:91:bc:62:57:f0: b2:3b:bd:fa:df:bb:1f:44:9b:e7:8d:7b:80:81:40:4c:67:b3: 4d:7f:b8:31:64:dc:8e:a2:fe:44:64:84:f5:b4:09:5e:8a:c2: 2f:63:11:4d:55:a1:e3:10:bc:ed:28:ad:e1:14:c1:e4:95:a3: ca:b8:06:20:22:3c:2e:e2:5e:ae:63:4f:33:c8:9e:e6:cf:e9: d2:bc:b6:ec:76:5f:a8:65:ed:87:16:47:a6:55:80:77:6b:24: 87:40:f2:6f:03:9e:ed:f2:56:86:34:eb:ff:c7:09:de:84:ca: df:02:12:96 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWE1EFjgUgGFsPCGdnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDMyMzE3MjExOVoXDTI4MDIwNzE3NTkzN1owLzEtMCsGA1UEAxMk ZjAyM2NlNWQtN2FmOC00MzQ1LWEyZDktZDIyZTc3ZWZhNjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG9VZfHSFkUU2926n0jRljtARTcWnPGZi+BH 57lUzY5lpFV0AC43j+9U0pa2upIsTDY0oGUDcQnUL7SXI0lyJUWKcCDKDHSHM5zd 40yt6rogry2CaaTM1ZBFctmsUWcsqaoCsJLWbjskD6sKUkmg/iZzYMF2f04hzpBd MPABJglU9mELX12dumk5St0IcVneCPE5loUpGsW3UoOLuLSALG7iPY1gLu+u/ml+ RmKx6IomSVb3KYNOzByghx3gSCZ0lv7Oq9907rJuCP6C+n3Sok8x7lS68Tqqzukl 5tjc7YcJ8Xaojh8NXWeTDDgVBUoKVeEu7CxYkI+eHeyaJMaskwIDAQABo4IECzCC BAcwHQYDVR0OBBYEFE+C7uJB9Ji2GVMPvrIAe9Gd5uWEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m MDIzY2U1ZC03YWY4LTQzNDUtYTJkOS1kMjJlNzdlZmE2OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2YwMjNjZTVkLTdhZjgtNDM0NS1h MmQ5LWQyMmU3N2VmYTY4ZC9mMDIzY2U1ZC03YWY4LTQzNDUtYTJkOS1kMjJlNzdl ZmE2OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBABMTBMDBAOn/rADBADGyhowVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQZ+Q aabEgBqX9qauLdpO3OCghWJaXJWSpP39KGv4nhKPubnOBq66WhmLEj7QH5QfTvAp R5TsPM68tt21JsiVjmG1VcH0Itgmm79BfVN9OEKvjrvuBbP16Xcu9RApdp6y1X73 1CWd5/keL1QHoNqdjIxd35+CthW3hbVSaKreu5BuQfLDhBCkDWMgEpG8Ylfwsju9 +t+7H0Sb5417gIFATGezTX+4MWTcjqL+RGSE9bQJXorCL2MRTVWh4xC87Sit4RTB 5JWjyrgGICI8LuJermNPM8ie5s/p0ry27HZfqGXthxZHplWAd2skh0DybwOe7fJW hjTr/8cJ3oTK3wISlg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:09:53 2026 by rpki-client