$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361.cer File: 4ef7c372-e70a-4b95-81eb-c17911a45361.cer (raw, json) Hash identifier: UvpaMIhkCueja3SfCx76afRKvb13miosgDV3S90oQJw= Subject key identifier: BD:6A:9B:E1:93:FC:46:BA:E9:7F:47:79:A4:3F:B0:F2:1A:C3:2C:7C Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BABFE76FA605B61CFC6B4D380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Oct 2025 13:03:39 +0000 Certificate not after: Mon 31 Jan 2028 14:03:39 +0000 Subordinate resources: AS: 36417 IP: 206.166.193.0/24 IP: 216.183.72.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fe:76:fa:60:5b:61:cf:c6:b4:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 28 13:03:39 2025 GMT Not After : Jan 31 14:03:39 2028 GMT Subject: CN=4ef7c372-e70a-4b95-81eb-c17911a45361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:e9:18:71:95:26:8c:8b:dd:57:1e:2e:d6: 97:b2:7b:c0:ab:63:b4:e1:54:da:a0:e9:dd:6a:9a: 2e:26:d8:2c:37:7b:f9:73:19:c6:62:8a:67:99:71: 7e:ec:7c:04:c6:e3:56:97:ec:4d:e0:4c:81:51:42: ea:3f:32:64:5f:57:4d:e7:e9:35:e7:b9:d1:c4:6e: f0:dc:e6:a2:93:fb:cb:67:ce:ae:9f:31:85:41:0b: 32:06:30:b0:76:cd:e5:c2:6b:81:6b:e2:9e:fe:33: cd:5a:4f:d5:8a:1c:fd:31:1a:40:cf:ef:51:8f:82: 9e:08:a2:18:cd:ab:be:1d:b0:f1:cf:81:2c:0d:6d: 6a:96:1e:14:9e:32:a1:e0:54:e0:7f:29:8e:f0:ab: cb:34:9e:5a:6e:3d:6f:7f:5d:35:07:64:7c:44:11: 13:8b:4e:9a:bf:14:bd:e1:ef:ca:3c:99:58:21:84: 59:1e:53:63:e5:1f:d6:ca:b7:b0:7d:4f:f3:51:e6: 14:8e:81:29:e9:5d:1d:43:ce:87:16:35:c0:43:4b: 48:f9:ff:8c:b1:be:4a:a9:3d:7a:4b:cb:18:b6:0d: a7:a0:be:1a:58:0b:33:fb:da:e7:35:14:b2:c9:3d: 9d:09:19:fa:24:bb:2a:8d:fe:46:bb:6b:d2:db:2b: 07:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6A:9B:E1:93:FC:46:BA:E9:7F:47:79:A4:3F:B0:F2:1A:C3:2C:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 206.166.193.0/24 216.183.72.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36417 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:11:07:da:5b:f4:5e:8f:84:4e:75:c4:5f:18:af:46:a9:aa: c3:f1:a5:ef:c7:af:4d:ea:ed:4b:a2:43:0b:49:b2:32:0a:9c: 6c:1a:bc:9e:3a:a8:f3:1f:4b:de:46:c9:1e:e7:71:93:31:8e: 5c:2b:88:45:57:dc:9a:93:fc:d4:5b:15:18:cc:ff:fb:fd:f1: 67:34:40:8b:21:48:4e:f7:f1:8e:80:ed:d8:54:c1:a7:24:a9: bd:2b:60:16:4e:50:59:a5:9f:25:b9:14:69:f0:81:32:04:e5: 12:f2:f8:b4:51:11:43:ea:ee:35:4c:bd:36:81:9c:e3:fa:98: 0f:7b:5c:f2:29:38:ba:ea:d1:53:56:10:ed:82:5a:7f:70:23: 87:7e:69:fb:c4:de:29:f1:e2:d1:80:4f:ee:13:b1:ff:e5:ce: 49:0a:55:78:7e:c9:7d:ae:10:4b:36:5a:15:90:bb:ee:ec:90: f1:fe:cc:97:53:bd:8a:a7:ce:a2:3b:a0:a2:cf:f5:c4:c2:14: 76:05:f1:a9:2c:ea:b4:5f:cc:ab:fd:88:6e:09:03:4a:1e:db: ea:09:69:32:a1:df:46:af:c2:c0:fc:3a:fd:fa:76:e7:c8:1d: 03:71:75:46:95:b1:02:61:fd:98:e9:bf:51:ba:27:ac:72:13: 22:de:d6:f6 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEur/nb6YFthz8a004AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyODEzMDMzOVoXDTI4MDEzMTE0MDMzOVowLzEtMCsGA1UEAxMk NGVmN2MzNzItZTcwYS00Yjk1LTgxZWItYzE3OTExYTQ1MzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiHpGHGVJoyL3VceLtaXsnvAq2O04VTaoOnd apouJtgsN3v5cxnGYopnmXF+7HwExuNWl+xN4EyBUULqPzJkX1dN5+k157nRxG7w 3Oaik/vLZ86unzGFQQsyBjCwds3lwmuBa+Ke/jPNWk/Vihz9MRpAz+9Rj4KeCKIY zau+HbDxz4EsDW1qlh4UnjKh4FTgfymO8KvLNJ5abj1vf101B2R8RBETi06avxS9 4e/KPJlYIYRZHlNj5R/WyrewfU/zUeYUjoEp6V0dQ86HFjXAQ0tI+f+Msb5KqT16 S8sYtg2noL4aWAsz+9rnNRSyyT2dCRn6JLsqjf5Gu2vS2ysHVQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFL1qm+GT/Ea66X9HeaQ/sPIawyx8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 ZWY3YzM3Mi1lNzBhLTRiOTUtODFlYi1jMTc5MTFhNDUzNjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzRlZjdjMzcyLWU3MGEtNGI5NS04 MWViLWMxNzkxMWE0NTM2MS80ZWY3YzM3Mi1lNzBhLTRiOTUtODFlYi1jMTc5MTFh NDUzNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADOpsEDBAPYt0gwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAI5BMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABERB9pb9F6PhE51xF8Yr0apqsPxpe/Hr03q7Uui QwtJsjIKnGwavJ46qPMfS95GyR7ncZMxjlwriEVX3JqT/NRbFRjM//v98Wc0QIsh SE738Y6A7dhUwackqb0rYBZOUFmlnyW5FGnwgTIE5RLy+LRREUPq7jVMvTaBnOP6 mA97XPIpOLrq0VNWEO2CWn9wI4d+afvE3inx4tGAT+4Tsf/lzkkKVXh+yX2uEEs2 WhWQu+7skPH+zJdTvYqnzqI7oKLP9cTCFHYF8aks6rRfzKv9iG4JA0oe2+oJaTKh 30avwsD8Ov36dufIHQNxdUaVsQJh/Zjpv1G6J6xyEyLe1vY= -----END CERTIFICATE-----Generated at Wed Nov 5 12:59:16 2025 by rpki-client