$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer File: 74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer (raw, json) Hash identifier: tB5/3/EgqrDAR8lO2hVTfxpfC6GrvfVi7bCDt0EY0go= Subject key identifier: D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584FBE24563515A222EA20E6D000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Nov 2026 20:12:15 +0000 Certificate not after: Sun 30 Jan 2028 07:40:29 +0000 Subordinate resources: AS: 23506 -- 23507 IP: 64.190.237.0/24 IP: 2602:f704::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:be:24:56:35:15:a2:22:ea:20:e6:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 5 20:12:15 2026 GMT Not After : Jan 30 07:40:29 2028 GMT Subject: CN=74c5eaa7-78bb-4cca-835a-0df812ff7d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:1d:85:47:fb:19:cb:84:89:9f:1f:bc:26: 82:ca:e5:2b:d8:d3:a4:52:19:7c:4a:70:a5:1a:86: 0b:37:4f:31:8a:ea:68:2e:1b:50:b6:df:88:43:54: dc:ae:ac:db:82:a6:09:ae:f9:bd:88:ba:e5:79:db: 65:a1:60:06:fe:9b:84:88:da:d5:40:a4:c3:b9:19: bd:b5:4c:65:32:3b:75:db:a5:ce:e9:23:a6:f8:f1: fc:9d:5f:9f:f9:d6:b1:06:13:87:e9:03:06:d3:bd: 68:2f:81:ce:3f:e3:dd:88:23:58:26:4a:d1:31:4d: e4:5a:61:d0:bc:03:7b:6e:dd:47:c8:3d:d1:05:f5: 87:38:89:bb:29:29:cd:a8:c6:5b:ba:0f:29:8b:d7: dc:2e:16:82:77:9a:ee:4f:56:de:dd:8f:88:f6:8c: 7e:e2:2f:bf:a6:58:87:e6:67:d4:ab:64:56:75:eb: da:9f:36:7c:a0:c6:e8:80:1f:d8:be:97:a2:07:8b: 78:d3:f6:cf:38:6d:cb:5e:cc:04:93:50:a3:c5:7c: be:38:9a:fc:bf:5b:34:fb:70:bf:8c:f2:f3:4a:f7: ea:33:cc:27:e8:6c:0a:3b:92:39:91:e2:17:bb:12: 8c:67:95:31:7b:eb:38:a9:55:25:36:a9:a9:1c:6c: fc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 64.190.237.0/24 IPv6: 2602:f704::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23506-23507 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:41:fd:2b:45:db:3f:7b:e7:a5:55:76:d7:a5:88:b4:55:b3: bc:6c:4b:ed:8b:d3:24:06:52:2d:00:57:50:83:77:33:97:5e: 4a:5f:20:ee:35:48:57:71:24:50:c5:08:50:2b:2e:f1:89:d8: 29:e0:79:a7:9c:4f:87:5b:48:08:66:54:71:cf:b5:7d:d4:e7: 7b:4f:3e:ff:ee:85:57:91:d3:ce:5e:ef:65:71:a3:10:93:f9: 07:5c:bc:15:0b:01:d7:c3:fc:7d:ee:74:eb:e2:00:57:15:53: 5e:07:98:44:75:54:8c:e4:ae:02:6e:47:82:d9:75:38:56:a6: d9:a5:0c:a5:bc:0b:be:b0:46:5a:39:2c:3f:23:34:9d:50:81: 8f:9c:d9:87:8a:42:59:29:9c:ec:e2:79:58:b6:be:ff:55:ec: 17:70:8d:24:2a:92:36:b6:d5:9e:92:da:27:a5:71:44:54:e4: 93:c1:0b:7a:86:44:5c:1b:3d:2a:74:98:a5:6e:84:5b:53:ec: 55:d1:44:ae:10:64:cf:29:db:c7:4f:64:a5:80:be:f6:e5:12: 84:79:a2:f2:d5:c1:83:17:b8:50:91:d1:fc:f2:79:5b:9d:05: 3f:09:73:e2:99:7e:4b:07:e1:3e:a3:44:e0:ac:90:88:fa:a1: 78:38:9f:6f -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE++JFY1FaIi6iDm0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI2MTEwNTIwMTIxNVoXDTI4MDEzMDA3NDAyOVowLzEtMCsGA1UEAxMk NzRjNWVhYTctNzhiYi00Y2NhLTgzNWEtMGRmODEyZmY3ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigsdhUf7GcuEiZ8fvCaCyuUr2NOkUhl8SnCl GoYLN08xiupoLhtQtt+IQ1TcrqzbgqYJrvm9iLrledtloWAG/puEiNrVQKTDuRm9 tUxlMjt126XO6SOm+PH8nV+f+daxBhOH6QMG071oL4HOP+PdiCNYJkrRMU3kWmHQ vAN7bt1HyD3RBfWHOIm7KSnNqMZbug8pi9fcLhaCd5ruT1be3Y+I9ox+4i+/pliH 5mfUq2RWdevanzZ8oMbogB/YvpeiB4t40/bPOG3LXswEk1CjxXy+OJr8v1s0+3C/ jPLzSvfqM8wn6GwKO5I5keIXuxKMZ5Uxe+s4qVUlNqmpHGz8GwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFNJFylSD96rDNYkQssEUnlwuYdPTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83 NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0wZGY4MTJmZjdkODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzc0YzVlYWE3LTc4YmItNGNjYS04 MzVhLTBkZjgxMmZmN2Q4Ny83NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0wZGY4MTJm ZjdkODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABAvu0wDgQCAAIwCAMGACYC9wQAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAowCAICW9ICAlvTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGRB/StF2z9756VVdtel iLRVs7xsS+2L0yQGUi0AV1CDdzOXXkpfIO41SFdxJFDFCFArLvGJ2CngeaecT4db SAhmVHHPtX3U53tPPv/uhVeR085e72VxoxCT+QdcvBULAdfD/H3udOviAFcVU14H mER1VIzkrgJuR4LZdThWptmlDKW8C76wRlo5LD8jNJ1QgY+c2YeKQlkpnOzieVi2 vv9V7BdwjSQqkja21Z6S2ielcURU5JPBC3qGRFwbPSp0mKVuhFtT7FXRRK4QZM8p 28dPZKWAvvblEoR5ovLVwYMXuFCR0fzyeVudBT8Jc+KZfksH4T6jROCskIj6oXg4 n28= -----END CERTIFICATE-----Generated at Mon Nov 9 10:01:42 2026 by rpki-client