$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9.cer File: 5dbcd19a-2b5c-428a-819d-73d9a69760f9.cer (raw, json) Hash identifier: FFazmYjkvK2Qgb/ONMcdRa63+rSgsWC7lrykAyZhpNY= Subject key identifier: 61:C8:6F:D9:9D:BE:41:61:E1:7E:28:58:5C:D9:42:B2:20:81:9C:36 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BA6DC9B9B727C5A60E73EC9A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/5dbcd19a-2b5c-428a-819d-73d9a69760f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Oct 2025 16:56:23 +0000 Certificate not after: Sat 29 Jan 2028 17:56:23 +0000 Subordinate resources: IP: 23.144.116.0/24 IP: 2602:f58d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:dc:9b:9b:72:7c:5a:60:e7:3e:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 26 16:56:23 2025 GMT Not After : Jan 29 17:56:23 2028 GMT Subject: CN=5dbcd19a-2b5c-428a-819d-73d9a69760f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ef:fe:34:ca:20:d6:33:8d:80:23:1d:ef:2f: e3:0c:f2:9d:2e:61:1f:ce:99:40:6b:93:4b:9d:35: ab:64:d2:14:91:fd:2b:f3:0d:13:12:7c:20:ea:14: 77:ed:b8:c0:5f:13:ed:4c:e0:86:9e:67:10:8b:a4: 61:9a:83:3d:c8:18:10:7f:69:5b:72:b6:11:8c:6b: 1b:37:04:4f:a3:75:44:6e:bf:29:3a:72:6c:74:1b: a5:69:5a:a8:41:c3:fd:10:d3:ba:0c:ef:63:32:96: 38:51:ab:55:2c:f1:55:9b:cf:80:28:ab:86:96:7c: 27:8d:c1:4d:84:b8:0b:2a:aa:a6:8a:66:f3:86:4f: 50:ee:43:e3:cc:65:a2:f1:c1:76:ea:7d:e7:5e:98: 35:51:15:63:c3:3e:5e:75:9d:ba:ef:8a:72:a5:4c: a6:c1:fa:83:4c:0f:57:fc:7b:c6:3f:77:19:ba:1b: cf:a4:82:42:85:c6:85:17:37:e0:f7:01:c7:8e:42: 17:97:c3:0e:b7:3e:2f:01:f5:a7:c0:83:b5:6d:c7: 3b:34:27:82:f6:76:94:04:4d:3e:3e:4a:e0:ee:a9: 8c:ea:9c:f8:7b:51:fe:45:bc:3a:45:33:ca:67:06: ab:40:dd:b7:47:61:18:22:cb:91:ae:21:6a:fb:4f: 83:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C8:6F:D9:9D:BE:41:61:E1:7E:28:58:5C:D9:42:B2:20:81:9C:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dbcd19a-2b5c-428a-819d-73d9a69760f9/5dbcd19a-2b5c-428a-819d-73d9a69760f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.144.116.0/24 IPv6: 2602:f58d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:10:12:f5:63:37:89:0b:37:36:02:bd:97:4d:be:72:05:a0: 59:b8:30:05:b4:13:2e:c2:c5:05:a7:b4:95:de:9c:b5:3f:8d: 6c:76:5f:0c:2b:0d:a5:a4:3b:95:34:33:42:e0:d7:bc:29:70: d5:90:3d:cc:17:11:b6:45:4b:df:ca:a2:cd:b5:7b:ea:53:40: ae:ec:66:36:7f:96:cc:90:a7:36:69:9a:50:13:9d:16:82:fc: 95:fd:ff:c4:1f:37:bd:59:ea:e8:3d:83:62:1e:8e:ae:03:fd: fc:d4:a5:f7:10:fa:c6:f1:9a:58:38:40:60:5b:69:f6:7d:65: 4c:a4:10:b0:d6:38:07:82:51:56:2f:34:85:3c:77:67:a8:f5: 25:31:96:4c:75:7f:b7:79:58:a0:47:b9:9a:b3:73:9d:9e:01: ad:7f:66:a5:31:7b:35:b6:b0:52:67:0e:3e:cf:a4:6b:cb:05: 8d:bc:6f:2d:1b:9a:6f:a3:bd:78:1a:47:4a:8e:43:c3:ac:9f: 3c:24:90:f6:7b:c8:b1:02:5d:b6:1b:a0:4b:41:1c:9d:4e:e3: c2:48:ad:3d:e2:6f:0e:87:7c:b8:c2:3d:d7:b4:48:2f:92:81: 84:e1:b0:5d:13:b9:b5:f4:a0:47:1b:a0:4c:63:2a:23:fc:32: 90:56:0c:d7 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEum3JubcnxaYOc+yaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyNjE2NTYyM1oXDTI4MDEyOTE3NTYyM1owLzEtMCsGA1UEAxMk NWRiY2QxOWEtMmI1Yy00MjhhLTgxOWQtNzNkOWE2OTc2MGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO/+NMog1jONgCMd7y/jDPKdLmEfzplAa5NL nTWrZNIUkf0r8w0TEnwg6hR37bjAXxPtTOCGnmcQi6RhmoM9yBgQf2lbcrYRjGsb NwRPo3VEbr8pOnJsdBulaVqoQcP9ENO6DO9jMpY4UatVLPFVm8+AKKuGlnwnjcFN hLgLKqqmimbzhk9Q7kPjzGWi8cF26n3nXpg1URVjwz5edZ2674pypUymwfqDTA9X /HvGP3cZuhvPpIJChcaFFzfg9wHHjkIXl8MOtz4vAfWnwIO1bcc7NCeC9naUBE0+ Pkrg7qmM6pz4e1H+Rbw6RTPKZwarQN23R2EYIsuRriFq+0+DZwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFGHIb9mdvkFh4X4oWFzZQrIggZw2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 ZGJjZDE5YS0yYjVjLTQyOGEtODE5ZC03M2Q5YTY5NzYwZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzVkYmNkMTlhLTJiNWMtNDI4YS04 MTlkLTczZDlhNjk3NjBmOS81ZGJjZDE5YS0yYjVjLTQyOGEtODE5ZC03M2Q5YTY5 NzYwZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkHQwDgQCAAIwCAMGACYC9Y0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADYQEvVjN4kLNzYCvZdNvnIFoFm4MAW0Ey7CxQWntJXenLU/jWx2XwwrDaWkO5U0 M0Lg17wpcNWQPcwXEbZFS9/Kos21e+pTQK7sZjZ/lsyQpzZpmlATnRaC/JX9/8Qf N71Z6ug9g2Iejq4D/fzUpfcQ+sbxmlg4QGBbafZ9ZUykELDWOAeCUVYvNIU8d2eo 9SUxlkx1f7d5WKBHuZqzc52eAa1/ZqUxezW2sFJnDj7PpGvLBY28by0bmm+jvXga R0qOQ8OsnzwkkPZ7yLECXbYboEtBHJ1O48JIrT3ibw6HfLjCPde0SC+SgYThsF0T ubX0oEcboExjKiP8MpBWDNc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:12:00 2025 by rpki-client