$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7.cer File: f9694678-237c-4d99-9589-b106509825b7.cer (raw, json) Hash identifier: 9ua/KOSNksd4tBlU1tGX5EjkRu7xUydOPNjfD0s+c6Y= Subject key identifier: 8B:CF:88:DA:27:11:AD:8D:37:6D:86:0D:0B:C4:6F:2C:8B:93:74:84 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584D97F2FE6ECB785698EEA799F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 18:18:14 +0000 Certificate not after: Mon 17 Jan 2028 14:55:34 +0000 Subordinate resources: AS: 398735 IP: 23.142.228.0/24 IP: 64.255.8.0/23 IP: 64.255.12.0/23 IP: 143.223.132.0/23 IP: 143.223.138.0/23 IP: 148.59.74.0/24 IP: 167.254.200.0/21 IP: 170.62.252.0/24 IP: 170.62.255.0/24 IP: 192.64.165.0/24 IP: 205.220.229.0/24 IP: 206.168.142.0/24 IP: 209.195.240.0/22 IP: 216.120.189.0/24 IP: 2602:f692::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:f2:fe:6e:cb:78:56:98:ee:a7:99:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Apr 22 18:18:14 2026 GMT Not After : Jan 17 14:55:34 2028 GMT Subject: CN=f9694678-237c-4d99-9589-b106509825b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:78:53:e5:07:4c:6d:10:43:c1:c7:71:66:ef: 1a:08:24:23:61:37:58:ca:60:f1:32:31:d8:7c:0c: 27:a6:b9:7e:66:e4:18:14:5c:41:f2:e3:ff:25:64: 9c:58:1c:31:ea:f8:41:8a:63:22:a8:bb:ee:96:3c: 25:97:90:66:80:a9:89:87:ee:58:af:fc:ea:00:80: 64:1f:46:b8:6a:13:cd:fd:f9:22:60:86:6d:08:e8: 94:89:40:06:2e:c4:0a:a4:d9:65:33:69:79:c3:0b: 76:d1:9a:7f:4d:e4:38:b5:5c:e3:7a:39:ea:38:fe: ad:26:3c:ab:fb:34:91:3c:b8:c2:2c:a5:ae:f2:b3: b4:8b:ed:72:11:3a:51:03:c6:45:75:d3:ab:84:40: 02:4d:0d:76:1a:35:b0:50:66:95:01:96:7d:7b:b6: 6c:8c:42:c3:bb:1f:3c:9f:c4:38:9a:73:2e:3b:23: ca:ef:46:9d:68:19:51:1f:50:6c:d0:2e:46:1b:58: 47:83:19:fe:8d:42:64:9f:2f:a0:d6:b7:89:5f:fb: 09:df:2a:51:bc:59:66:82:a8:1c:7a:a4:3d:fa:a5: 77:7c:ee:49:9c:d7:05:c6:3d:4d:24:bd:ee:d5:40: f3:22:85:5a:1f:f8:78:e0:4a:15:3a:95:2c:e1:3b: a6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CF:88:DA:27:11:AD:8D:37:6D:86:0D:0B:C4:6F:2C:8B:93:74:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f9694678-237c-4d99-9589-b106509825b7/f9694678-237c-4d99-9589-b106509825b7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.142.228.0/24 64.255.8.0/23 64.255.12.0/23 143.223.132.0/23 143.223.138.0/23 148.59.74.0/24 167.254.200.0/21 170.62.252.0/24 170.62.255.0/24 192.64.165.0/24 205.220.229.0/24 206.168.142.0/24 209.195.240.0/22 216.120.189.0/24 IPv6: 2602:f692::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398735 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:59:27:90:fa:01:10:f8:aa:ae:db:02:1a:8d:df:1b:d3:11: 09:d0:cd:87:69:fb:c8:0e:17:2f:48:b2:77:a1:68:f7:25:4a: dc:6f:60:6e:99:d6:f4:85:69:00:20:ef:b6:36:c6:0a:da:f6: d9:20:44:ed:0b:57:89:1e:be:58:6d:d2:de:30:96:4c:2d:bb: d7:b5:77:ec:88:20:c2:6a:38:a7:f3:b2:aa:b7:05:86:4e:c8: fe:d7:13:4a:54:a0:d8:9d:0a:66:03:d8:ab:7d:55:e9:15:4e: e3:e5:c1:29:d4:38:9a:f5:c2:8e:44:2a:ea:08:35:ac:e6:c7: 22:86:6a:80:22:c0:33:08:26:19:66:07:d0:c1:ce:c5:fa:47: 5d:1e:41:04:dd:32:cb:7e:af:89:0e:c4:71:9c:94:c3:fe:8a: 6c:2f:58:40:d0:f9:d2:97:c4:07:4d:56:14:13:f7:ec:aa:d6: c1:d0:09:12:12:53:cc:af:2e:51:fb:a9:5d:9c:0f:1e:12:d2: 09:fb:05:e0:cb:83:04:70:ef:d9:26:d9:54:cb:3a:07:fe:a6: a1:cc:48:2f:f3:6d:37:2d:da:d1:2b:39:9e:99:54:ec:5b:d7: 83:af:44:af:2f:6e:ca:32:ee:4a:2f:29:78:c2:ee:17:04:c9: c5:4f:86:0e -----BEGIN CERTIFICATE----- MIIHZzCCBk+gAwIBAgIUAQ0Mn0MoWE2X8v5uy3hWmO6nmfcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MDQyMjE4MTgxNFoXDTI4MDExNzE0NTUzNFowLzEtMCsGA1UEAxMk Zjk2OTQ2NzgtMjM3Yy00ZDk5LTk1ODktYjEwNjUwOTgyNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nhT5QdMbRBDwcdxZu8aCCQjYTdYymDxMjHY fAwnprl+ZuQYFFxB8uP/JWScWBwx6vhBimMiqLvuljwll5BmgKmJh+5Yr/zqAIBk H0a4ahPN/fkiYIZtCOiUiUAGLsQKpNllM2l5wwt20Zp/TeQ4tVzjejnqOP6tJjyr +zSRPLjCLKWu8rO0i+1yETpRA8ZFddOrhEACTQ12GjWwUGaVAZZ9e7ZsjELDux88 n8Q4mnMuOyPK70adaBlRH1Bs0C5GG1hHgxn+jUJkny+g1reJX/sJ3ypRvFlmgqgc eqQ9+qV3fO5JnNcFxj1NJL3u1UDzIoVaH/h44EoVOpUs4TumTQIDAQABo4IEeTCC BHUwHQYDVR0OBBYEFIvPiNonEa2NN22GDQvEbyyLk3SEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m OTY5NDY3OC0yMzdjLTRkOTktOTU4OS1iMTA2NTA5ODI1YjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Y5Njk0Njc4LTIzN2MtNGQ5OS05 NTg5LWIxMDY1MDk4MjViNy9mOTY5NDY3OC0yMzdjLTRkOTktOTU4OS1iMTA2NTA5 ODI1YjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwfQYIKwYBBQUH AQcBAf8EbjBsMFoEAgABMFQDBAAXjuQDBAFA/wgDBAFA/wwDBAGP34QDBAGP34oD BACUO0oDBAOn/sgDBACqPvwDBACqPv8DBADAQKUDBADN3OUDBADOqI4DBALRw/AD BADYeL0wDgQCAAIwCAMGBCYC9pIAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYV jzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQB4WSeQ+gEQ+Kqu2wIajd8b0xEJ0M2HafvIDhcvSLJ3oWj3JUrc b2Bumdb0hWkAIO+2NsYK2vbZIETtC1eJHr5YbdLeMJZMLbvXtXfsiCDCajin87Kq twWGTsj+1xNKVKDYnQpmA9irfVXpFU7j5cEp1Dia9cKORCrqCDWs5scihmqAIsAz CCYZZgfQwc7F+kddHkEE3TLLfq+JDsRxnJTD/opsL1hA0PnSl8QHTVYUE/fsqtbB 0AkSElPMry5R+6ldnA8eEtIJ+wXgy4MEcO/ZJtlUyzoH/qahzEgv8203LdrRKzme mVTsW9eDr0SvL27KMu5KLyl4wu4XBMnFT4YO -----END CERTIFICATE-----Generated at Wed May 13 02:25:07 2026 by rpki-client