$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer File: 85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer (raw, json) Hash identifier: YKNYFUI7xwR6fIndpypC/1I8zyVss8Ull4ZX45H4nFQ= Subject key identifier: 0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F0C00060C45C482ADBB4B6D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Sep 2026 00:45:12 +0000 Certificate not after: Wed 06 Dec 2028 01:45:12 +0000 Subordinate resources: AS: 40346 IP: 199.48.248.0/22 IP: 2602:816:8000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:00:06:0c:45:c4:82:ad:bb:4b:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 3 00:45:12 2026 GMT Not After : Dec 6 01:45:12 2028 GMT Subject: CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a4:08:e6:ce:39:5e:89:7e:6e:07:ac:cb:ae: d0:b0:01:c4:85:78:c3:f8:6e:31:2f:25:1f:09:de: 35:40:06:73:ee:94:96:c6:c1:0c:5b:33:a7:3b:70: 36:2a:8d:39:1e:a8:c1:fe:f6:0e:9f:c6:4c:5f:25: 23:43:ab:e8:4e:77:f9:35:1e:43:75:c4:f0:5e:51: 44:2a:f4:41:83:40:2b:99:20:57:8b:4f:24:c5:66: 60:56:06:13:c5:ef:cf:87:3c:20:0c:66:c6:e8:b7: c4:93:3e:56:f5:e3:9f:d5:5e:a1:d9:22:c9:d7:4d: f6:27:d4:f7:7e:45:ed:f8:93:65:52:62:9c:7b:17: 6d:bc:05:df:23:96:01:20:da:32:7c:9d:1c:ea:ae: 49:02:34:d9:3a:01:2f:02:d8:15:0f:b1:cf:42:03: cb:cb:7e:66:45:f1:42:ae:20:68:f7:8c:7a:8b:e4: c6:7a:f7:84:c2:e0:ce:55:6f:46:92:18:a4:89:70: 44:36:30:91:70:a8:d9:e8:64:8c:11:1c:6b:82:cf: 2f:0e:d8:df:95:51:f3:c8:1c:27:e7:99:d0:05:e1: 54:b4:76:78:2e:e5:21:d8:ba:60:a2:2e:1c:c2:57: 9f:ea:1b:bc:22:5a:ea:89:60:20:6a:63:86:42:77: 7f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.48.248.0/22 IPv6: 2602:816:8000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40346 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:33:e5:06:fa:b9:85:de:e9:cc:34:89:c3:f7:37:ab:0f:a0: 97:bb:4e:19:dc:a4:23:fa:86:4a:51:38:5a:5d:78:8b:98:33: 53:4e:e2:07:4e:fa:4c:6a:9b:c0:b4:93:75:53:ea:12:00:68: 15:91:bf:d5:22:0f:2f:02:c0:37:74:e1:46:fb:28:87:22:f7: c9:44:c4:12:87:8c:c7:eb:0a:36:35:09:f0:67:77:0a:7d:0e: c9:6e:46:fc:dd:44:2b:bb:00:fd:2a:83:eb:5f:cf:88:5f:8d: f4:75:b7:64:90:f8:12:17:f9:c1:91:09:5a:e0:9a:8d:67:b5: 80:96:79:8d:1f:c0:0e:b0:56:f2:65:27:c2:e0:ad:7c:71:b8: 98:22:20:24:fc:e8:5b:e2:f7:7b:ea:b8:5c:71:f5:d1:2e:3d: 66:9c:bd:1a:47:d5:ac:91:14:df:5b:52:e4:31:20:df:b4:d1: fd:f0:7f:cd:e0:e6:4a:08:b5:c0:5e:0a:ef:7b:23:db:ed:94: c7:bb:c4:67:4c:9c:49:fb:0b:d0:ea:f5:22:ce:64:91:b8:7f: 8b:36:7a:69:95:be:58:93:2c:05:74:cb:ad:bb:e7:05:6b:11: 11:f3:a6:5c:26:f7:e3:8c:67:03:6f:68:14:73:17:05:a0:53: 99:27:71:1d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE8MAAYMRcSCrbtLbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwMzAwNDUxMloXDTI4MTIwNjAxNDUxMlowLzEtMCsGA1UEAxMk ODViMmRlNzMtMWQ0Mi00NTk1LThjYjEtOWU4MmQ4NzNlZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqQI5s45Xol+bgesy67QsAHEhXjD+G4xLyUf Cd41QAZz7pSWxsEMWzOnO3A2Ko05HqjB/vYOn8ZMXyUjQ6voTnf5NR5DdcTwXlFE KvRBg0ArmSBXi08kxWZgVgYTxe/PhzwgDGbG6LfEkz5W9eOf1V6h2SLJ1032J9T3 fkXt+JNlUmKcexdtvAXfI5YBINoyfJ0c6q5JAjTZOgEvAtgVD7HPQgPLy35mRfFC riBo94x6i+TGeveEwuDOVW9GkhikiXBENjCRcKjZ6GSMERxrgs8vDtjflVHzyBwn 55nQBeFUtHZ4LuUh2Lpgoi4cwlef6hu8IlrqiWAgamOGQnd/rwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFA2WbuY11AzQEHD49XhRwkf09gwvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84 NWIyZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgyZDg3M2VlMWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzg1YjJkZTczLTFkNDItNDU5NS04 Y2IxLTllODJkODczZWUxYy84NWIyZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgyZDg3 M2VlMWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALHMPgwDgQCAAIwCAMGACYCCBaAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCdmjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNM+UG+rmF3unMNInD9zerD6CX u04Z3KQj+oZKUThaXXiLmDNTTuIHTvpMapvAtJN1U+oSAGgVkb/VIg8vAsA3dOFG +yiHIvfJRMQSh4zH6wo2NQnwZ3cKfQ7Jbkb83UQruwD9KoPrX8+IX430dbdkkPgS F/nBkQla4JqNZ7WAlnmNH8AOsFbyZSfC4K18cbiYIiAk/Ohb4vd76rhccfXRLj1m nL0aR9WskRTfW1LkMSDftNH98H/N4OZKCLXAXgrveyPb7ZTHu8RnTJxJ+wvQ6vUi zmSRuH+LNnpplb5YkywFdMutu+cFaxER86ZcJvfjjGcDb2gUcxcFoFOZJ3Ed -----END CERTIFICATE-----Generated at Sun Sep 20 15:57:21 2026 by rpki-client