$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1261d37b-8d2d-486e-a9b1-eee74c93b711.cer File: 1261d37b-8d2d-486e-a9b1-eee74c93b711.cer (raw, json) Hash identifier: 0Ze7c8d8vgcA0k54ayghdWeU39+cElMc3yn9f0fPtaA= Subject key identifier: 1D:D6:1D:BD:D4:3A:0A:5A:89:3A:20:27:D0:F9:E8:72:94:62:EB:80 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584F934E3E1189395EEF7BE259E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1261d37b-8d2d-486e-a9b1-eee74c93b711/1261d37b-8d2d-486e-a9b1-eee74c93b711.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1261d37b-8d2d-486e-a9b1-eee74c93b711/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Oct 2026 11:56:56 +0000 Certificate not after: Tue 23 Jan 2029 12:56:56 +0000 Subordinate resources: AS: 402680 IP: 198.134.210.0/24 IP: 2602:81e:4000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:93:4e:3e:11:89:39:5e:ef:7b:e2:59:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 21 11:56:56 2026 GMT Not After : Jan 23 12:56:56 2029 GMT Subject: CN=1261d37b-8d2d-486e-a9b1-eee74c93b711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:33:39:fe:dd:13:22:ff:ce:d1:83:2d:3b:56: fe:f6:78:53:95:3c:cc:30:c3:ff:ff:f3:52:04:61: 4d:67:07:5b:66:d8:4d:58:7c:7f:e9:53:0b:d6:b9: 74:1f:20:c6:db:2c:d2:48:91:95:cd:0d:5d:a7:63: af:9f:68:eb:85:de:c0:83:f9:74:c3:91:46:6b:e6: 34:34:6f:6a:10:06:47:45:d5:d0:ad:c8:3e:5f:8e: fc:86:b5:1d:0e:7c:ef:1a:a3:c8:a2:ac:8b:88:c1: b0:87:9c:5a:fb:fd:ac:7e:d2:12:4e:62:4c:b0:e3: 77:e7:d6:21:24:4c:1a:19:c0:39:47:5c:ee:6a:af: ba:51:ee:89:6a:a8:45:cb:86:b6:be:51:c7:67:fe: 7f:d1:a8:30:00:93:03:a9:61:16:fb:71:15:c7:17: 3a:c6:5d:99:63:b4:13:d7:a4:75:f0:c1:3b:a3:75: 1f:4d:78:24:9e:4c:06:dd:42:ba:29:36:4d:24:d9: 78:db:4e:10:69:54:ee:14:5d:29:5d:2f:cb:c9:c4: 02:1c:f3:95:de:a3:2d:0e:a9:f5:a3:c4:a1:04:4e: c6:7c:4e:44:ce:b7:0a:a7:bb:97:eb:e1:29:72:7c: 9c:82:a3:ab:aa:4a:a3:a4:d7:c5:6e:fe:ac:62:fe: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D6:1D:BD:D4:3A:0A:5A:89:3A:20:27:D0:F9:E8:72:94:62:EB:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1261d37b-8d2d-486e-a9b1-eee74c93b711/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1261d37b-8d2d-486e-a9b1-eee74c93b711/1261d37b-8d2d-486e-a9b1-eee74c93b711.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 198.134.210.0/24 IPv6: 2602:81e:4000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402680 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:2d:67:63:19:82:53:9e:24:5b:8d:ff:42:15:e3:68:ab:71: 4e:2a:14:64:a5:4e:bd:e4:f8:2c:29:98:5a:7e:aa:9d:15:c5: 48:cc:3f:63:79:de:b3:48:4b:e4:3c:aa:16:26:19:92:b7:54: a8:1d:a8:6b:7c:df:5c:6f:7b:1b:bd:ed:b4:f3:ab:da:d7:d9: 3f:08:2e:31:a9:cc:56:45:b6:d6:87:a5:0d:51:79:77:6c:fa: 29:c6:02:2e:ab:0d:2d:43:ee:06:f1:3e:d2:73:94:69:3e:96: d4:81:43:2c:e6:32:b8:c4:21:35:33:20:52:08:36:ac:3f:f7: e1:00:c0:57:78:d6:4c:9b:28:a5:94:af:c1:2f:16:7a:99:d1: 2c:41:02:86:b1:b7:65:e5:9b:25:7f:cc:cf:0c:ec:7c:0d:d0: f7:08:99:f0:5a:12:09:6e:08:9f:c0:03:e2:ab:55:34:a0:34: d2:e3:b7:c7:4f:49:7f:35:55:77:83:28:42:77:50:fd:d8:3d: db:75:bb:f3:28:18:30:be:31:4f:66:f2:fa:1f:57:fc:90:4f: fc:15:e2:46:d4:20:f0:16:b5:88:b5:3f:bc:9f:13:57:44:4b: b3:7f:a4:cc:ca:bc:c6:6b:e9:d7:44:cf:1f:f2:ad:92:27:8c: 79:cf:db:98 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE+TTj4RiTle73viWeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MTAyMTExNTY1NloXDTI5MDEyMzEyNTY1NlowLzEtMCsGA1UEAxMk MTI2MWQzN2ItOGQyZC00ODZlLWE5YjEtZWVlNzRjOTNiNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDM5/t0TIv/O0YMtO1b+9nhTlTzMMMP///NS BGFNZwdbZthNWHx/6VML1rl0HyDG2yzSSJGVzQ1dp2Ovn2jrhd7Ag/l0w5FGa+Y0 NG9qEAZHRdXQrcg+X478hrUdDnzvGqPIoqyLiMGwh5xa+/2sftISTmJMsON359Yh JEwaGcA5R1zuaq+6Ue6JaqhFy4a2vlHHZ/5/0agwAJMDqWEW+3EVxxc6xl2ZY7QT 16R18ME7o3UfTXgknkwG3UK6KTZNJNl4204QaVTuFF0pXS/LycQCHPOV3qMtDqn1 o8ShBE7GfE5EzrcKp7uX6+EpcnycgqOrqkqjpNfFbv6sYv58gwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFB3WHb3UOgpaiTogJ9D56HKUYuuAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8x MjYxZDM3Yi04ZDJkLTQ4NmUtYTliMS1lZWU3NGM5M2I3MTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzEyNjFkMzdiLThkMmQtNDg2ZS1h OWIxLWVlZTc0YzkzYjcxMS8xMjYxZDM3Yi04ZDJkLTQ4NmUtYTliMS1lZWU3NGM5 M2I3MTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADGhtIwDwQCAAIwCQMHBCYCCB5AADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGJPgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASS1nYxmCU54kW43/QhXjaKtx TioUZKVOveT4LCmYWn6qnRXFSMw/Y3nes0hL5DyqFiYZkrdUqB2oa3zfXG97G73t tPOr2tfZPwguManMVkW21oelDVF5d2z6KcYCLqsNLUPuBvE+0nOUaT6W1IFDLOYy uMQhNTMgUgg2rD/34QDAV3jWTJsopZSvwS8WepnRLEEChrG3ZeWbJX/MzwzsfA3Q 9wiZ8FoSCW4In8AD4qtVNKA00uO3x09JfzVVd4MoQndQ/dg923W78ygYML4xT2by +h9X/JBP/BXiRtQg8Ba1iLU/vJ8TV0RLs3+kzMq8xmvp10TPH/KtkieMec/bmA== -----END CERTIFICATE-----Generated at Thu Nov 5 19:09:06 2026 by rpki-client