$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883.cer File: 4051554a-224d-4a2b-8646-85ee8bbdb883.cer (raw, json) Hash identifier: Pn5Ie9FmOYddt6pMOJ68bTQcqZ0kzCEfoNVjJKFO1vw= Subject key identifier: 7A:38:55:4F:E5:FB:8F:6B:9C:E5:55:3D:E7:A2:F8:E2:3F:1B:38:B6 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BBC57C4750209396F17040FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4051554a-224d-4a2b-8646-85ee8bbdb883.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 09:36:31 +0000 Certificate not after: Sun 06 Feb 2028 09:36:31 +0000 Subordinate resources: AS: 17213 IP: 204.128.56.0/21 IP: 2605:f200::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:57:c4:75:02:09:39:6f:17:04:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 3 09:36:31 2025 GMT Not After : Feb 6 09:36:31 2028 GMT Subject: CN=4051554a-224d-4a2b-8646-85ee8bbdb883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:de:f1:30:4b:ff:4b:5c:3c:ae:bd:2a:ac:64: 49:cc:bc:27:d5:af:68:48:95:9f:51:3a:0d:25:ca: cd:fb:29:05:b4:6a:c2:8a:4c:ec:5d:e1:a1:58:9b: e1:fd:7f:b8:f6:10:05:ee:09:13:ac:05:93:8a:93: ff:90:10:73:a4:76:7b:78:80:c5:59:fb:cf:85:9b: 63:95:0a:a7:f5:87:c5:a9:31:b3:5d:14:16:7d:d2: 68:4e:6f:a4:84:be:12:d9:37:f6:5c:18:e2:2b:9a: 93:fd:57:61:2d:41:8b:a8:63:7c:2a:ed:f3:15:b4: 72:9e:6c:c2:20:3c:3e:f8:89:f0:a9:45:c9:1d:b3: 8d:94:69:71:bb:33:c8:10:f0:f6:f0:aa:25:8b:65: d1:e5:42:03:f3:47:fa:bd:d5:ff:de:57:f8:25:30: 06:29:4e:b1:ab:12:3b:8b:ff:98:ac:0d:88:94:5b: a2:bc:f1:27:aa:d9:47:1c:e5:3d:02:1c:9f:21:e6: 1d:47:16:8c:0d:d9:63:20:0d:95:50:4a:05:99:23: 21:6b:b9:30:a4:49:a4:1d:7d:17:bf:13:29:2d:8c: 07:ea:93:45:c7:3c:65:85:25:59:89:cd:93:9b:db: a7:64:76:08:d7:00:04:aa:86:e2:f0:ca:1d:9c:e8: cb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:38:55:4F:E5:FB:8F:6B:9C:E5:55:3D:E7:A2:F8:E2:3F:1B:38:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4051554a-224d-4a2b-8646-85ee8bbdb883.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 204.128.56.0/21 IPv6: 2605:f200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17213 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ff:2b:65:08:f1:20:05:d5:5b:9f:03:92:e1:13:a8:7b:44: 00:55:af:40:8f:8e:b8:e1:31:9d:6e:e8:1f:86:40:f8:72:f7: f4:72:fd:63:7f:4a:15:79:59:01:43:fa:35:13:eb:4f:df:46: 77:5d:15:57:4f:5a:02:f2:c4:64:95:fe:b8:da:79:20:b6:6f: 64:06:91:bc:fe:71:45:7f:80:e6:cc:2f:79:20:0a:e8:d1:a3: 99:4a:7a:b8:18:2c:2f:31:c6:a0:36:d6:c7:21:eb:46:2e:96: 0c:cf:fa:78:41:96:a1:3f:5f:a6:43:35:d9:f0:b5:0d:ba:1b: 07:d2:6e:e6:ff:f1:50:94:00:03:e2:a5:f2:39:19:73:8d:89: 3c:cb:2b:09:3e:85:a1:be:6f:94:44:24:18:72:7a:9c:95:ad: 8e:60:de:e2:39:1d:8b:6c:bd:0f:36:bf:11:78:95:52:6f:07: de:67:e5:f0:e1:ad:0b:60:14:a8:be:dc:05:b6:1d:99:b0:8e: 5e:b1:af:56:75:21:75:90:91:a4:aa:a2:59:50:c7:73:a0:ea: 7d:5e:4e:7b:e2:82:2f:3a:61:b6:7c:bc:8a:35:93:bc:d1:7e: 21:b1:8c:18:a0:11:60:b0:17:a1:8e:9e:e9:bd:77:55:13:cc: f9:b8:f8:ec -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEu8V8R1Agk5bxcED8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwMzA5MzYzMVoXDTI4MDIwNjA5MzYzMVowLzEtMCsGA1UEAxMk NDA1MTU1NGEtMjI0ZC00YTJiLTg2NDYtODVlZThiYmRiODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh97xMEv/S1w8rr0qrGRJzLwn1a9oSJWfUToN JcrN+ykFtGrCikzsXeGhWJvh/X+49hAF7gkTrAWTipP/kBBzpHZ7eIDFWfvPhZtj lQqn9YfFqTGzXRQWfdJoTm+khL4S2Tf2XBjiK5qT/VdhLUGLqGN8Ku3zFbRynmzC IDw++InwqUXJHbONlGlxuzPIEPD28Koli2XR5UID80f6vdX/3lf4JTAGKU6xqxI7 i/+YrA2IlFuivPEnqtlHHOU9AhyfIeYdRxaMDdljIA2VUEoFmSMha7kwpEmkHX0X vxMpLYwH6pNFxzxlhSVZic2Tm9unZHYI1wAEqobi8ModnOjL3QIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFHo4VU/l+49rnOVVPeei+OI/Gzi2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 MDUxNTU0YS0yMjRkLTRhMmItODY0Ni04NWVlOGJiZGI4ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzQwNTE1NTRhLTIyNGQtNGEyYi04 NjQ2LTg1ZWU4YmJkYjg4My80MDUxNTU0YS0yMjRkLTRhMmItODY0Ni04NWVlOGJi ZGI4ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPMgDgwDQQCAAIwBwMFACYF8gAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICQz0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAD/8rZQjxIAXVW58DkuETqHtEAFWv QI+OuOExnW7oH4ZA+HL39HL9Y39KFXlZAUP6NRPrT99Gd10VV09aAvLEZJX+uNp5 ILZvZAaRvP5xRX+A5swveSAK6NGjmUp6uBgsLzHGoDbWxyHrRi6WDM/6eEGWoT9f pkM12fC1DbobB9Ju5v/xUJQAA+Kl8jkZc42JPMsrCT6Fob5vlEQkGHJ6nJWtjmDe 4jkdi2y9Dza/EXiVUm8H3mfl8OGtC2AUqL7cBbYdmbCOXrGvVnUhdZCRpKqiWVDH c6DqfV5Oe+KCLzphtny8ijWTvNF+IbGMGKARYLAXoY6e6b13VRPM+bj47A== -----END CERTIFICATE-----Generated at Wed Nov 5 14:01:47 2025 by rpki-client