$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.cer File: 16081d83-2c3e-4a40-bac7-fc5f584ca8fb.cer (raw, json) Hash identifier: K5/UZYJZ5yIgMWdLTSz26uqaBspX6rn8LexeOhObItQ= Subject key identifier: 7B:A2:BE:7A:6C:C3:99:22:05:F5:4F:FF:BB:72:24:BD:25:70:9B:FD Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8E13D79CBCEA7B09E5783140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 19:52:28 +0000 Certificate not after: Thu 20 Jan 2028 20:52:28 +0000 Subordinate resources: AS: 401558 IP: 142.248.63.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:13:d7:9c:bc:ea:7b:09:e5:78:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 17 19:52:28 2025 GMT Not After : Jan 20 20:52:28 2028 GMT Subject: CN=16081d83-2c3e-4a40-bac7-fc5f584ca8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:dc:67:d3:c1:cc:79:b6:e9:fb:2b:6b:20: ec:f0:e3:00:7f:5f:c6:07:a0:2f:16:d8:28:7f:95: 62:55:88:d0:5a:f3:c6:35:ae:9e:5d:3f:73:83:6f: de:cf:60:6c:e7:99:c4:aa:00:e6:c7:77:e9:8d:3f: fb:d9:e7:7f:c1:17:88:c1:b1:1a:04:3c:00:c7:8c: e2:da:f8:1c:7f:f0:0e:1d:06:36:49:7f:56:3b:0c: 5d:c1:3b:5a:5b:2b:23:40:ed:6a:7d:61:20:96:5f: e5:02:10:3f:03:96:5b:48:eb:b3:25:4d:d0:5e:83: 08:e3:45:36:30:eb:c0:ba:79:3d:6c:b8:b2:c1:91: 8c:ee:2a:83:17:82:33:27:61:b1:0b:28:6b:4c:87: bd:50:7a:ed:45:fc:e7:fd:cc:4f:45:e4:2a:5c:75: f8:7f:e4:39:70:42:4d:f9:35:44:8f:2d:d2:d1:3d: c0:b9:d3:a1:81:cf:87:67:d9:12:2d:16:35:48:0c: a2:9a:65:60:07:b7:36:91:d2:59:a0:58:9e:7c:fb: b6:f4:fe:e5:cb:1f:9f:81:ec:00:97:01:ba:e8:a5: 55:50:b1:68:d6:85:2a:2f:4d:22:3a:06:a4:e6:7a: 0f:83:9f:4e:f0:a7:9d:54:57:d8:83:f3:8c:4a:07: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A2:BE:7A:6C:C3:99:22:05:F5:4F:FF:BB:72:24:BD:25:70:9B:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16081d83-2c3e-4a40-bac7-fc5f584ca8fb/16081d83-2c3e-4a40-bac7-fc5f584ca8fb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 142.248.63.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401558 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b4:6a:aa:9e:d6:14:5d:00:00:1e:dd:b6:5e:8d:d0:c9:e7: 57:51:33:2a:85:2c:a6:86:c8:19:a9:9e:83:ab:c8:8e:33:0e: 0e:01:c4:30:d2:9f:54:cf:a9:63:0c:33:f6:98:1f:82:79:9d: ea:50:cf:7e:c0:e1:6d:b4:c6:5d:c5:05:f1:81:ac:87:44:d5: 93:ca:1b:0a:47:17:08:c9:c6:f4:29:fb:09:e5:36:73:ce:19: f3:43:57:5f:9f:ef:81:9d:50:0e:cd:b9:bc:0c:a0:31:5a:21: 22:7f:1e:d2:7a:1e:4f:b3:ab:fe:f6:37:66:e9:8c:fc:cb:4e: 30:af:a2:88:ab:16:8d:45:26:91:53:c8:44:6a:76:62:6d:7a: 92:8a:3a:ba:62:b0:46:de:73:c1:f9:ce:47:2f:aa:2a:dd:c1: bc:63:c9:40:cc:94:24:7c:81:d6:82:c0:5d:1d:76:60:cc:b0: e5:d5:f2:86:41:9c:fe:ed:32:8a:8b:ec:48:a0:a0:2a:32:a6: c7:44:f4:63:be:14:bb:74:95:58:3b:fe:82:25:15:dd:3d:da: bc:6a:c4:b6:c8:9f:c0:eb:f1:35:2c:47:f4:6f:2d:0f:5f:a3: ad:7b:77:44:89:86:23:69:62:c7:fd:1d:f1:e5:32:52:e2:45: 53:0a:42:88 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEuOE9ecvOp7CeV4MUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNzE5NTIyOFoXDTI4MDEyMDIwNTIyOFowLzEtMCsGA1UEAxMk MTYwODFkODMtMmMzZS00YTQwLWJhYzctZmM1ZjU4NGNhOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ/cZ9PBzHm26fsrayDs8OMAf1/GB6AvFtgo f5ViVYjQWvPGNa6eXT9zg2/ez2Bs55nEqgDmx3fpjT/72ed/wReIwbEaBDwAx4zi 2vgcf/AOHQY2SX9WOwxdwTtaWysjQO1qfWEgll/lAhA/A5ZbSOuzJU3QXoMI40U2 MOvAunk9bLiywZGM7iqDF4IzJ2GxCyhrTIe9UHrtRfzn/cxPReQqXHX4f+Q5cEJN +TVEjy3S0T3AudOhgc+HZ9kSLRY1SAyimmVgB7c2kdJZoFiefPu29P7lyx+fgewA lwG66KVVULFo1oUqL00iOgak5noPg59O8KedVFfYg/OMSgeMPwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFHuivnpsw5kiBfVP/7tyJL0lcJv9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8x NjA4MWQ4My0yYzNlLTRhNDAtYmFjNy1mYzVmNTg0Y2E4ZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzE2MDgxZDgzLTJjM2UtNGE0MC1i YWM3LWZjNWY1ODRjYThmYi8xNjA4MWQ4My0yYzNlLTRhNDAtYmFjNy1mYzVmNTg0 Y2E4ZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACO+D8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiCWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABG0aqqe1hRdAAAe3bZejdDJ51dRMyqFLKaGyBmpnoOryI4z Dg4BxDDSn1TPqWMMM/aYH4J5nepQz37A4W20xl3FBfGBrIdE1ZPKGwpHFwjJxvQp +wnlNnPOGfNDV1+f74GdUA7NubwMoDFaISJ/HtJ6Hk+zq/72N2bpjPzLTjCvooir Fo1FJpFTyERqdmJtepKKOrpisEbec8H5zkcvqirdwbxjyUDMlCR8gdaCwF0ddmDM sOXV8oZBnP7tMoqL7EigoCoypsdE9GO+FLt0lVg7/oIlFd092rxqxLbIn8Dr8TUs R/RvLQ9fo617d0SJhiNpYsf9HfHlMlLiRVMKQog= -----END CERTIFICATE-----Generated at Wed Nov 5 18:14:34 2025 by rpki-client