$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9cc72856-611a-4eee-bb62-cb7cd4f4cf99.cer File: 9cc72856-611a-4eee-bb62-cb7cd4f4cf99.cer (raw, json) Hash identifier: o/RcHcLFtgx48b7F8eNOCUnHZh2ve0vyDq6Lj5ohOuU= Subject key identifier: A0:D5:13:C6:FA:C5:D2:E8:F6:4E:53:DF:6C:AC:DA:C9:83:A5:51:3A Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B9956C9582E39E18B244CC900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9cc72856-611a-4eee-bb62-cb7cd4f4cf99/9cc72856-611a-4eee-bb62-cb7cd4f4cf99.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9cc72856-611a-4eee-bb62-cb7cd4f4cf99/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Oct 2025 20:41:14 +0000 Certificate not after: Mon 24 Jan 2028 21:41:14 +0000 Subordinate resources: AS: 401836 IP: 134.195.150.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:56:c9:58:2e:39:e1:8b:24:4c:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 21 20:41:14 2025 GMT Not After : Jan 24 21:41:14 2028 GMT Subject: CN=9cc72856-611a-4eee-bb62-cb7cd4f4cf99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:8d:17:66:36:c2:ce:68:e8:99:35:51:9f: 5b:a7:ab:1b:9f:8a:d6:ef:98:1b:13:f8:e7:f1:89: 37:b7:db:3b:f6:fc:c4:d0:a3:22:36:9a:d3:48:1e: c1:34:fa:8f:c6:b9:f0:6c:27:5f:75:e3:45:1d:53: b2:5c:8d:5c:90:e5:de:8b:08:bb:8b:93:a9:8f:13: 5f:ca:7a:c1:fb:71:e7:dc:be:bc:59:09:67:d5:0d: 0e:6d:c4:9e:d5:6c:ae:9f:67:5d:b5:82:e6:c3:3f: 84:d6:9b:79:ab:30:c4:ec:c2:88:e1:93:6e:7e:da: ee:73:33:63:b6:bb:3a:52:d5:d4:87:14:a7:a3:38: 54:4e:3c:71:56:54:49:7f:57:55:5a:4f:75:4e:e8: 7c:a6:56:1b:44:1e:95:1e:82:00:2f:9e:80:df:45: 96:25:a1:9c:1c:c9:f4:fc:f9:6b:07:77:1b:35:d9: 3f:59:55:f6:62:02:70:cf:8c:af:53:61:69:65:b3: e5:fb:d3:b2:2d:b6:20:64:4b:aa:ca:31:2c:1d:bc: 7c:7e:c6:e8:01:e9:8b:af:ae:9d:f6:54:56:06:de: ff:51:2f:11:40:32:da:96:e3:48:eb:b6:23:09:f6: 7a:7c:b9:bb:01:81:6d:00:71:c5:a0:49:2d:58:33: 9f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D5:13:C6:FA:C5:D2:E8:F6:4E:53:DF:6C:AC:DA:C9:83:A5:51:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9cc72856-611a-4eee-bb62-cb7cd4f4cf99/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9cc72856-611a-4eee-bb62-cb7cd4f4cf99/9cc72856-611a-4eee-bb62-cb7cd4f4cf99.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 134.195.150.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401836 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:6a:ad:87:ef:07:db:c7:dd:e7:ac:ad:3e:ba:44:3f:0c:76: e5:10:28:f3:60:af:e2:4c:8e:fd:f8:0f:42:0e:86:8f:a1:b5: 86:67:f1:d9:a9:43:77:69:da:a1:fe:04:80:87:94:05:1f:88: af:d8:4f:bd:64:e6:86:7a:e1:9a:5d:ae:e4:57:d0:d0:ab:84: f5:7e:6a:c3:32:9b:01:24:f2:f7:05:86:20:28:76:8e:c7:d0: 93:4b:f9:66:b4:62:38:4d:db:b8:32:a5:8d:c7:bf:8e:4a:e4: f5:ee:63:c9:5c:f6:f1:cd:67:11:04:2f:a7:31:06:d5:ea:4c: c8:a9:40:3a:75:41:19:61:8f:91:bb:2d:3d:41:b8:ae:dc:2b: 78:df:b2:bd:44:fd:19:f3:5e:e9:2b:01:9e:e9:3a:ac:54:69: 51:75:9a:d5:d3:1c:a7:a3:8e:2b:77:14:b0:b3:e4:0c:e0:49: 6c:ae:36:d9:dc:5d:04:d8:86:dc:78:d4:4a:7c:ea:90:2f:8b: 20:a2:d8:60:3b:f2:41:20:f2:f8:7d:1c:f7:93:4d:e2:45:90: 1d:6f:0f:8f:8f:b0:14:1e:80:23:4a:58:1f:cc:09:4f:03:a0: 0c:3e:e7:68:23:f4:fd:f0:b6:13:0e:ad:02:68:e1:38:1c:22: b3:de:7e:a7 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEuZVslYLjnhiyRMyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyMTIwNDExNFoXDTI4MDEyNDIxNDExNFowLzEtMCsGA1UEAxMk OWNjNzI4NTYtNjExYS00ZWVlLWJiNjItY2I3Y2Q0ZjRjZjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmiNF2Y2ws5o6Jk1UZ9bp6sbn4rW75gbE/jn 8Yk3t9s79vzE0KMiNprTSB7BNPqPxrnwbCdfdeNFHVOyXI1ckOXeiwi7i5OpjxNf ynrB+3Hn3L68WQln1Q0ObcSe1Wyun2ddtYLmwz+E1pt5qzDE7MKI4ZNuftruczNj trs6UtXUhxSnozhUTjxxVlRJf1dVWk91Tuh8plYbRB6VHoIAL56A30WWJaGcHMn0 /PlrB3cbNdk/WVX2YgJwz4yvU2FpZbPl+9OyLbYgZEuqyjEsHbx8fsboAemLr66d 9lRWBt7/US8RQDLaluNI67YjCfZ6fLm7AYFtAHHFoEktWDOfKQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKDVE8b6xdLo9k5T32ys2smDpVE6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85 Y2M3Mjg1Ni02MTFhLTRlZWUtYmI2Mi1jYjdjZDRmNGNmOTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzljYzcyODU2LTYxMWEtNGVlZS1i YjYyLWNiN2NkNGY0Y2Y5OS85Y2M3Mjg1Ni02MTFhLTRlZWUtYmI2Mi1jYjdjZDRm NGNmOTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACGw5YwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiGsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAChqrYfvB9vH3eesrT66RD8MduUQKPNgr+JMjv34D0IOho+h tYZn8dmpQ3dp2qH+BICHlAUfiK/YT71k5oZ64ZpdruRX0NCrhPV+asMymwEk8vcF hiAodo7H0JNL+Wa0YjhN27gypY3Hv45K5PXuY8lc9vHNZxEEL6cxBtXqTMipQDp1 QRlhj5G7LT1BuK7cK3jfsr1E/RnzXukrAZ7pOqxUaVF1mtXTHKejjit3FLCz5Azg SWyuNtncXQTYhtx41Ep86pAviyCi2GA78kEg8vh9HPeTTeJFkB1vD4+PsBQegCNK WB/MCU8DoAw+52gj9P3wthMOrQJo4TgcIrPefqc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:02:39 2025 by rpki-client