$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c.cer File: 6851dce3-9572-4e18-8d38-8815a366e21c.cer (raw, json) Hash identifier: wESaolfH8TkH+1pC2cfy3g+VRI+FY82CnQ+aAw+Kd7o= Subject key identifier: 4F:65:B1:22:EF:40:E6:20:AE:2C:78:A1:25:2E:7E:3F:46:D6:81:ED Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BC07BF881F132B9D196C8F280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/6851dce3-9572-4e18-8d38-8815a366e21c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Nov 2025 21:12:41 +0000 Certificate not after: Mon 07 Feb 2028 21:12:41 +0000 Subordinate resources: IP: 131.143.216.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:7b:f8:81:f1:32:b9:d1:96:c8:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 4 21:12:41 2025 GMT Not After : Feb 7 21:12:41 2028 GMT Subject: CN=6851dce3-9572-4e18-8d38-8815a366e21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c7:24:72:e1:82:e0:10:1e:b5:56:13:05:74: 71:a6:8c:4d:b5:cd:1a:b4:39:9e:1e:e7:54:fb:c2: 3e:df:8e:5e:1b:ca:96:76:f8:53:ca:0c:62:29:7f: 9f:32:2e:3e:84:6a:ed:28:3d:7b:99:8f:3d:28:27: c1:38:47:26:c7:6d:fb:f4:3d:80:dc:37:b2:07:45: 9d:ff:f2:b5:95:bc:bf:3c:2d:2d:c9:dd:31:84:ba: a0:57:a6:35:6e:e1:21:7a:a3:d0:d2:3f:89:c2:b7: 61:7c:0a:6a:a2:f3:a4:75:dd:fc:bb:d4:ee:6f:84: f1:94:c6:da:11:c7:0a:dd:48:37:b9:62:b8:54:82: 33:12:3a:1d:dd:bc:36:fe:01:30:4c:12:6a:da:f2: fc:3a:c7:2b:38:e4:d2:59:72:36:28:80:48:a1:89: fb:23:6c:b9:51:b5:f8:4b:04:32:57:c0:c1:cd:87: d3:04:9a:88:f6:44:08:58:ae:a5:4e:90:a0:c9:a8: 33:cd:9b:7e:64:d9:27:74:f2:66:83:21:cc:08:c6: 1c:af:7b:52:22:0d:ca:f5:c8:fe:e4:2f:67:6b:86: 17:79:4c:f1:5e:a3:96:c4:f4:19:65:75:7d:59:e2: ab:7e:b1:d2:ca:93:23:a5:5a:0f:dd:2f:b3:a5:16: 24:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:65:B1:22:EF:40:E6:20:AE:2C:78:A1:25:2E:7E:3F:46:D6:81:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/6851dce3-9572-4e18-8d38-8815a366e21c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 131.143.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:58:c7:1b:39:0b:2d:bb:7f:da:c0:7e:81:33:07:54:4a:32: 2b:1b:0d:1a:8b:06:9e:83:e4:8f:d7:f4:44:bf:76:a7:2a:7f: 28:e9:77:3c:52:0d:b1:d1:dd:d4:c2:18:2d:e3:9c:87:1c:19: 62:fa:8f:6e:96:ff:02:9d:69:a5:42:15:09:e3:7a:9f:66:f8: bf:18:67:44:fd:d0:c8:5f:29:27:36:03:da:56:50:8c:c2:12: 82:6c:4c:da:46:ec:7b:d9:40:56:31:23:4a:5b:03:5f:9e:bc: ee:ff:0d:8c:00:d5:da:05:fe:4a:70:3c:49:15:8b:74:58:9a: c5:78:d7:e5:4b:34:47:be:c9:1f:f0:2a:05:df:90:c9:59:72: ba:ad:8a:be:28:77:99:8f:e0:0c:aa:3e:d4:e3:03:21:08:2b: 9c:3f:70:2a:f4:66:c0:41:fd:69:50:61:6d:cc:26:bf:94:29: b1:53:0c:f0:fe:0f:e7:30:f4:62:b2:ec:32:1d:45:1b:4c:b8: a4:5c:01:24:3e:0a:5b:6c:47:ca:4c:d2:1b:e8:a8:97:00:c8: 88:0a:73:5d:18:b9:59:37:9b:16:d3:dc:04:c2:4c:99:ea:3b: 39:15:fb:61:b8:e8:a3:0c:31:f1:92:40:09:42:c0:87:4e:e5: ea:ce:ca:5a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEvAe/iB8TK50ZbI8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwNDIxMTI0MVoXDTI4MDIwNzIxMTI0MVowLzEtMCsGA1UEAxMk Njg1MWRjZTMtOTU3Mi00ZTE4LThkMzgtODgxNWEzNjZlMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sckcuGC4BAetVYTBXRxpoxNtc0atDmeHudU +8I+345eG8qWdvhTygxiKX+fMi4+hGrtKD17mY89KCfBOEcmx2379D2A3DeyB0Wd //K1lby/PC0tyd0xhLqgV6Y1buEheqPQ0j+JwrdhfApqovOkdd38u9Tub4TxlMba EccK3Ug3uWK4VIIzEjod3bw2/gEwTBJq2vL8OscrOOTSWXI2KIBIoYn7I2y5UbX4 SwQyV8DBzYfTBJqI9kQIWK6lTpCgyagzzZt+ZNkndPJmgyHMCMYcr3tSIg3K9cj+ 5C9na4YXeUzxXqOWxPQZZXV9WeKrfrHSypMjpVoP3S+zpRYk4QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFE9lsSLvQOYgrix4oSUufj9G1oHtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82 ODUxZGNlMy05NTcyLTRlMTgtOGQzOC04ODE1YTM2NmUyMWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzY4NTFkY2UzLTk1NzItNGUxOC04 ZDM4LTg4MTVhMzY2ZTIxYy82ODUxZGNlMy05NTcyLTRlMTgtOGQzOC04ODE1YTM2 NmUyMWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKDj9gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANFjHGzkLLbt/2sB+gTMH VEoyKxsNGosGnoPkj9f0RL92pyp/KOl3PFINsdHd1MIYLeOchxwZYvqPbpb/Ap1p pUIVCeN6n2b4vxhnRP3QyF8pJzYD2lZQjMISgmxM2kbse9lAVjEjSlsDX5687v8N jADV2gX+SnA8SRWLdFiaxXjX5Us0R77JH/AqBd+QyVlyuq2Kvih3mY/gDKo+1OMD IQgrnD9wKvRmwEH9aVBhbcwmv5QpsVMM8P4P5zD0YrLsMh1FG0y4pFwBJD4KW2xH ykzSG+iolwDIiApzXRi5WTebFtPcBMJMmeo7ORX7Ybjoowwx8ZJACULAh07l6s7K Wg== -----END CERTIFICATE-----Generated at Wed Nov 5 13:40:52 2025 by rpki-client