$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer File: 5a154205-b480-44eb-8ce6-252aa97d28bd.cer (raw, json) Hash identifier: UitzG0UKZNf5rP2ZuFWmzDiNyzsSaxCkCQZqk17BTfg= Subject key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584F8ED86A7F27C32C0AAF011C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 Oct 2026 21:36:17 +0000 Certificate not after: Sun 30 Jan 2028 14:18:32 +0000 Subordinate resources: AS: 958 AS: 401739 IP: 23.226.48.0/20 IP: 23.235.160.0/19 IP: 23.248.192.0/18 IP: 43.225.124.0/22 IP: 43.229.112.0/22 IP: 43.240.236.0/22 IP: 43.243.188.0/22 IP: 43.249.172.0/22 IP: 45.114.104.0/22 IP: 103.37.0.0/22 IP: 103.39.16.0/22 IP: 103.41.4.0/22 IP: 103.44.88.0/22 IP: 103.48.132.0/22 IP: 103.54.60.0/22 IP: 103.199.100.0/22 IP: 137.59.16.0/22 IP: 2604:1420::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8e:d8:6a:7f:27:c3:2c:0a:af:01:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 19 21:36:17 2026 GMT Not After : Jan 30 14:18:32 2028 GMT Subject: CN=5a154205-b480-44eb-8ce6-252aa97d28bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:4a:b5:f0:78:53:e5:b7:88:d8:04:38:93: 68:5d:de:a8:e4:9d:39:1d:1f:00:9c:1e:c4:3b:23: b7:6a:80:2e:2a:23:bd:20:4f:10:79:ec:8e:98:1c: 22:14:bd:89:96:ff:d3:51:0f:09:73:e8:ca:39:a0: ca:c7:c1:ed:9c:10:95:d7:92:44:37:45:81:d1:99: e4:5f:32:3a:79:1b:1b:02:92:f2:db:37:1f:b9:8d: ff:00:c0:8b:85:17:cd:38:62:c9:b1:7b:a0:94:3f: 1d:dd:fd:0f:9d:56:5d:69:4d:4f:92:0d:2f:62:11: df:79:91:14:14:7c:02:ce:35:be:ce:80:c1:c7:7e: a3:26:8d:b7:0c:66:ec:ba:6a:7b:d1:98:a6:39:73: 4e:49:22:74:04:8a:f0:98:33:e1:64:05:20:32:34: 38:82:8e:99:d7:a3:80:aa:36:d1:03:3c:d1:b5:c3: a9:81:22:40:6f:8b:f6:cd:c1:0d:7c:47:0a:41:b7: 25:28:da:cf:a4:1c:bc:4d:91:fb:cf:83:3d:d4:56: a7:1f:f9:c7:91:65:48:22:4a:36:90:57:de:63:ae: 66:82:71:33:8e:b8:ab:2b:37:2e:8a:3e:fa:d9:d8: 18:1e:35:55:e9:86:f1:3c:ff:83:10:81:75:4b:0d: d5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.226.48.0/20 23.235.160.0/19 23.248.192.0/18 43.225.124.0/22 43.229.112.0/22 43.240.236.0/22 43.243.188.0/22 43.249.172.0/22 45.114.104.0/22 103.37.0.0/22 103.39.16.0/22 103.41.4.0/22 103.44.88.0/22 103.48.132.0/22 103.54.60.0/22 103.199.100.0/22 137.59.16.0/22 IPv6: 2604:1420::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 958 401739 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:14:74:a6:0e:3b:e5:54:9a:b6:9f:22:fc:20:e6:b1:58:45: 94:0b:e9:c3:5a:6b:5b:ea:71:c2:c9:4e:2f:d8:48:4c:04:95: d5:12:a6:71:fa:da:dc:1d:98:e2:60:36:8b:8d:a1:f3:c9:0e: 36:5e:30:14:f9:ca:67:18:23:4c:d4:7d:0a:5a:54:67:25:ac: a2:18:e0:d8:d3:19:8f:e5:57:e0:8a:bb:27:47:12:37:e4:f6: 84:ce:a0:fb:94:71:3e:1e:e5:8e:fe:85:67:d3:4d:43:16:57: b7:8b:59:8e:7c:5c:3b:25:b7:db:b3:f9:1d:06:e7:33:f0:9f: 7c:3b:e5:22:79:11:f2:ac:1c:87:41:44:9a:fd:d3:12:c1:ed: 21:b9:3f:14:07:4c:23:b9:a5:59:d8:7e:75:0e:8d:91:37:90: 98:c7:0e:78:53:fe:1c:e7:e7:b5:02:5e:3b:56:72:2a:ee:f8: 96:5e:85:4f:7d:e8:1f:9e:c9:f9:86:ef:34:b4:04:8f:a4:5f: 9b:a6:9d:1c:52:9c:52:64:e2:e4:45:fd:66:23:d2:93:23:cd: 70:36:30:7c:fd:cc:81:fb:8e:61:c9:da:9c:34:5a:ee:bd:37: fe:5a:aa:46:47:e0:01:ba:32:12:dc:8f:f7:c0:3a:25:c5:a4: a0:40:4b:bb -----BEGIN CERTIFICATE----- MIIHfTCCBmWgAwIBAgIUAQ0Mn0MoWE+O2Gp/J8MsCq8BHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MTAxOTIxMzYxN1oXDTI4MDEzMDE0MTgzMlowLzEtMCsGA1UEAxMk NWExNTQyMDUtYjQ4MC00NGViLThjZTYtMjUyYWE5N2QyOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDJKtfB4U+W3iNgEOJNoXd6o5J05HR8AnB7E OyO3aoAuKiO9IE8QeeyOmBwiFL2Jlv/TUQ8Jc+jKOaDKx8HtnBCV15JEN0WB0Znk XzI6eRsbApLy2zcfuY3/AMCLhRfNOGLJsXuglD8d3f0PnVZdaU1Pkg0vYhHfeZEU FHwCzjW+zoDBx36jJo23DGbsump70ZimOXNOSSJ0BIrwmDPhZAUgMjQ4go6Z16OA qjbRAzzRtcOpgSJAb4v2zcENfEcKQbclKNrPpBy8TZH7z4M91FanH/nHkWVIIko2 kFfeY65mgnEzjrirKzcuij762dgYHjVV6YbxPP+DEIF1Sw3VXwIDAQABo4IEjzCC BIswHQYDVR0OBBYEFGdIx8IoDiXE/+m8+yUrG7qNL1PFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 YTE1NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJhYTk3ZDI4YmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzVhMTU0MjA1LWI0ODAtNDRlYi04 Y2U2LTI1MmFhOTdkMjhiZC81YTE1NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJhYTk3 ZDI4YmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwgY4GCCsGAQUF BwEHAQH/BH8wfTBsBAIAATBmAwQEF+IwAwQFF+ugAwQGF/jAAwQCK+F8AwQCK+Vw AwQCK/DsAwQCK/O8AwQCK/msAwQCLXJoAwQCZyUAAwQCZycQAwQCZykEAwQCZyxY AwQCZzCEAwQCZzY8AwQCZ8dkAwQCiTsQMA0EAgACMAcDBQAmBBQgMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAgO+AgMGIUswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAARR0pg475VSatp8i/CDm sVhFlAvpw1prW+pxwslOL9hITASV1RKmcfra3B2Y4mA2i42h88kONl4wFPnKZxgj TNR9ClpUZyWsohjg2NMZj+VX4Iq7J0cSN+T2hM6g+5RxPh7ljv6FZ9NNQxZXt4tZ jnxcOyW327P5HQbnM/CffDvlInkR8qwch0FEmv3TEsHtIbk/FAdMI7mlWdh+dQ6N kTeQmMcOeFP+HOfntQJeO1ZyKu74ll6FT33oH57J+YbvNLQEj6Rfm6adHFKcUmTi 5EX9ZiPSkyPNcDYwfP3MgfuOYcnanDRa7r03/lqqRkfgAboyEtyP98A6JcWkoEBL uw== -----END CERTIFICATE-----Generated at Mon Nov 9 23:48:06 2026 by rpki-client