$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer File: f9694678-237c-4d99-9589-b106509825b7.cer (raw, json) Hash identifier: ZydcsIgqB3eGWy84/M4XoAARnv5uhaVK7aFz90MzoHA= Subject key identifier: 8B:CF:88:DA:27:11:AD:8D:37:6D:86:0D:0B:C4:6F:2C:8B:93:74:84 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584D463134198592664D56343E60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Mar 2026 11:27:18 +0000 Certificate not after: Mon 17 Jan 2028 14:55:34 +0000 Subordinate resources: AS: 398735 IP: 23.142.228.0/24 IP: 64.255.8.0/23 IP: 64.255.12.0/23 IP: 143.223.132.0/23 IP: 143.223.138.0/23 IP: 148.59.74.0/24 IP: 167.254.200.0/21 IP: 170.62.252.0/24 IP: 170.62.255.0/24 IP: 192.64.165.0/24 IP: 205.220.229.0/24 IP: 206.168.142.0/24 IP: 216.120.189.0/24 IP: 2602:f692::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:31:34:19:85:92:66:4d:56:34:3e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Mar 24 11:27:18 2026 GMT Not After : Jan 17 14:55:34 2028 GMT Subject: CN=f9694678-237c-4d99-9589-b106509825b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:78:53:e5:07:4c:6d:10:43:c1:c7:71:66:ef: 1a:08:24:23:61:37:58:ca:60:f1:32:31:d8:7c:0c: 27:a6:b9:7e:66:e4:18:14:5c:41:f2:e3:ff:25:64: 9c:58:1c:31:ea:f8:41:8a:63:22:a8:bb:ee:96:3c: 25:97:90:66:80:a9:89:87:ee:58:af:fc:ea:00:80: 64:1f:46:b8:6a:13:cd:fd:f9:22:60:86:6d:08:e8: 94:89:40:06:2e:c4:0a:a4:d9:65:33:69:79:c3:0b: 76:d1:9a:7f:4d:e4:38:b5:5c:e3:7a:39:ea:38:fe: ad:26:3c:ab:fb:34:91:3c:b8:c2:2c:a5:ae:f2:b3: b4:8b:ed:72:11:3a:51:03:c6:45:75:d3:ab:84:40: 02:4d:0d:76:1a:35:b0:50:66:95:01:96:7d:7b:b6: 6c:8c:42:c3:bb:1f:3c:9f:c4:38:9a:73:2e:3b:23: ca:ef:46:9d:68:19:51:1f:50:6c:d0:2e:46:1b:58: 47:83:19:fe:8d:42:64:9f:2f:a0:d6:b7:89:5f:fb: 09:df:2a:51:bc:59:66:82:a8:1c:7a:a4:3d:fa:a5: 77:7c:ee:49:9c:d7:05:c6:3d:4d:24:bd:ee:d5:40: f3:22:85:5a:1f:f8:78:e0:4a:15:3a:95:2c:e1:3b: a6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CF:88:DA:27:11:AD:8D:37:6D:86:0D:0B:C4:6F:2C:8B:93:74:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.142.228.0/24 64.255.8.0/23 64.255.12.0/23 143.223.132.0/23 143.223.138.0/23 148.59.74.0/24 167.254.200.0/21 170.62.252.0/24 170.62.255.0/24 192.64.165.0/24 205.220.229.0/24 206.168.142.0/24 216.120.189.0/24 IPv6: 2602:f692::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398735 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d1:6a:9f:a3:05:bb:61:d9:e8:58:d3:21:c5:53:60:e4:b6: 11:c1:87:de:8b:72:04:5f:a9:9a:c8:e2:8b:b8:1a:b2:d7:46: 94:67:64:44:c7:f0:57:6b:e3:6b:bf:fa:5d:33:c4:f6:e2:5e: cb:43:9b:61:9a:4a:7e:5e:9e:fe:ac:1b:d3:99:4b:97:63:9d: 68:d2:ad:5a:d5:11:9f:7e:ae:cd:9f:9b:55:0e:3f:b3:be:11: 35:6c:6a:b4:9b:6e:a1:01:f8:04:49:61:d8:2e:69:c8:27:01: d7:87:f8:cc:7f:b4:d7:7f:cf:9a:35:99:06:1b:e9:12:8a:3f: 9e:27:37:0f:44:42:44:19:f5:cd:34:d1:af:a6:d3:cd:5c:98: 90:9b:13:9f:fb:d1:0a:66:d4:3b:a6:54:a8:d8:06:45:fb:bb: 93:7c:e6:ce:7f:60:a3:78:40:a2:b8:ba:59:21:d1:24:ae:ed: 4d:0f:00:fe:99:9e:32:d1:cb:9c:c4:a0:11:15:36:37:5f:59: 21:59:c6:9c:7c:81:d3:d5:50:9f:4a:fd:94:ce:49:ed:95:80: 8b:41:1c:64:70:66:69:1a:df:78:2a:d0:0d:e8:e6:a0:18:d7: 3e:34:f1:7c:75:a3:27:52:c4:07:cf:63:bc:11:7e:49:4f:7d: 4c:35:f4:65 -----BEGIN CERTIFICATE----- MIIHYTCCBkmgAwIBAgIUAQ0Mn0MoWE1GMTQZhZJmTVY0PmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDMyNDExMjcxOFoXDTI4MDExNzE0NTUzNFowLzEtMCsGA1UEAxMk Zjk2OTQ2NzgtMjM3Yy00ZDk5LTk1ODktYjEwNjUwOTgyNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nhT5QdMbRBDwcdxZu8aCCQjYTdYymDxMjHY fAwnprl+ZuQYFFxB8uP/JWScWBwx6vhBimMiqLvuljwll5BmgKmJh+5Yr/zqAIBk H0a4ahPN/fkiYIZtCOiUiUAGLsQKpNllM2l5wwt20Zp/TeQ4tVzjejnqOP6tJjyr +zSRPLjCLKWu8rO0i+1yETpRA8ZFddOrhEACTQ12GjWwUGaVAZZ9e7ZsjELDux88 n8Q4mnMuOyPK70adaBlRH1Bs0C5GG1hHgxn+jUJkny+g1reJX/sJ3ypRvFlmgqgc eqQ9+qV3fO5JnNcFxj1NJL3u1UDzIoVaH/h44EoVOpUs4TumTQIDAQABo4IEczCC BG8wHQYDVR0OBBYEFIvPiNonEa2NN22GDQvEbyyLk3SEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m OTY5NDY3OC0yMzdjLTRkOTktOTU4OS1iMTA2NTA5ODI1YjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Y5Njk0Njc4LTIzN2MtNGQ5OS05 NTg5LWIxMDY1MDk4MjViNy9mOTY5NDY3OC0yMzdjLTRkOTktOTU4OS1iMTA2NTA5 ODI1YjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwdwYIKwYBBQUH AQcBAf8EaDBmMFQEAgABME4DBAAXjuQDBAFA/wgDBAFA/wwDBAGP34QDBAGP34oD BACUO0oDBAOn/sgDBACqPvwDBACqPv8DBADAQKUDBADN3OUDBADOqI4DBADYeL0w DgQCAAIwCAMGBCYC9pIAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYVjzBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBl0WqfowW7YdnoWNMhxVNg5LYRwYfei3IEX6mayOKLuBqy10aUZ2REx/BX a+Nrv/pdM8T24l7LQ5thmkp+Xp7+rBvTmUuXY51o0q1a1RGffq7Nn5tVDj+zvhE1 bGq0m26hAfgESWHYLmnIJwHXh/jMf7TXf8+aNZkGG+kSij+eJzcPREJEGfXNNNGv ptPNXJiQmxOf+9EKZtQ7plSo2AZF+7uTfObOf2CjeECiuLpZIdEkru1NDwD+mZ4y 0cucxKARFTY3X1khWcacfIHT1VCfSv2UzkntlYCLQRxkcGZpGt94KtAN6OagGNc+ NPF8daMnUsQHz2O8EX5JT31MNfRl -----END CERTIFICATE-----Generated at Wed Mar 25 23:20:36 2026 by rpki-client