$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.cer File: a2cdb319-ae5d-4d45-8754-29f4bc31c46d.cer (raw, json) Hash identifier: QCMinmII4bJZ1CoOp0cZvzw4r7Pc2HXVSW7tXGpJqOU= Subject key identifier: 3C:69:1D:55:9F:55:1E:8C:6B:12:ED:6C:AC:EF:64:F8:58:EC:CA:CB Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BB80DD2ED2E7AC1AE0B224900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 01 Nov 2025 20:44:17 +0000 Certificate not after: Fri 04 Feb 2028 21:44:17 +0000 Subordinate resources: AS: 32042 IP: 2602:f4e3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:0d:d2:ed:2e:7a:c1:ae:0b:22:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 1 20:44:17 2025 GMT Not After : Feb 4 21:44:17 2028 GMT Subject: CN=a2cdb319-ae5d-4d45-8754-29f4bc31c46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:23:22:69:50:fa:e5:e7:01:9b:8e:41:1b:8e: 21:d4:54:ef:1a:a9:d5:3c:ad:67:c2:fe:5d:16:3b: 70:b6:14:3d:2e:48:fd:69:ed:84:46:40:17:04:7f: 2d:a1:d5:28:01:98:7e:9e:9a:b1:42:91:89:08:70: 05:10:35:d5:a6:2a:9d:ef:be:19:70:a8:8d:70:66: 5d:19:c5:09:3e:5a:1e:ba:3a:6f:e6:d3:f6:a7:d2: 64:af:22:8e:f2:f1:66:2e:79:55:25:ad:70:f5:3a: 03:66:26:53:cc:82:8b:b0:6f:4d:26:7e:b9:81:f1: db:db:49:d8:4e:8a:a1:9c:6f:f8:fd:e7:a0:ec:70: cf:ed:75:aa:41:e1:56:95:c2:35:a1:c8:28:72:58: e5:b0:0e:b1:b0:82:cc:be:4d:73:6f:4e:54:d9:a1: 32:c3:e6:f7:f7:01:eb:8b:d8:2e:58:51:94:3d:9d: 19:5a:4b:48:b2:f8:fd:ba:25:43:f3:4c:c6:9b:61: 40:e0:08:b9:e4:9d:fa:40:59:42:ba:e2:fe:89:58: 38:b1:de:a9:4b:af:bf:83:94:02:f5:01:0c:03:d0: cb:c9:f0:ff:0f:37:ca:b5:37:1a:dd:f1:e3:53:db: a0:b6:bf:12:59:61:a3:6d:80:87:23:d6:0c:c1:04: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:69:1D:55:9F:55:1E:8C:6B:12:ED:6C:AC:EF:64:F8:58:EC:CA:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4e3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32042 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:db:26:80:63:4f:b9:76:54:3c:cb:2e:6d:94:b2:5b:3d:0d: a5:2b:f3:9b:75:c8:0d:de:73:a3:5f:b2:26:74:d3:51:f2:4f: b8:93:ee:c9:e4:b4:77:29:01:92:b8:0c:34:d6:51:e4:61:cc: 66:e4:8e:06:0b:82:9c:00:67:18:b6:6a:be:a2:8d:26:c7:f5: c6:60:6b:cd:29:c3:23:53:7d:06:d7:bf:85:14:3a:e0:59:d6: b2:49:af:dd:60:46:e5:22:e1:16:50:d9:3e:9a:75:23:bd:84: 5c:fe:dd:33:e0:3a:01:55:26:58:e5:57:cd:44:ee:63:44:a3: 6a:8f:37:3c:6e:73:f7:cf:5e:36:19:95:f4:ca:ac:1b:90:ad: 1f:4d:09:f1:ec:14:80:28:35:0c:4a:de:a8:de:3a:be:85:5e: d0:55:3c:5b:e8:f3:0d:12:aa:58:b7:b5:cb:01:29:3e:71:fc: 7f:3d:b1:a2:8f:c8:22:48:29:5a:30:33:ca:f5:38:27:c7:72: 12:27:c7:fb:9a:c1:71:d1:59:12:72:86:e5:da:b1:7b:8b:3b: 62:db:1f:20:14:36:9c:23:6f:2a:05:1a:09:53:8d:80:f0:d5: cf:3c:d7:d2:9c:5e:70:ba:3b:0b:fe:76:7d:7a:94:8c:27:e9: a9:aa:dd:d6 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEu4DdLtLnrBrgsiSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwMTIwNDQxN1oXDTI4MDIwNDIxNDQxN1owLzEtMCsGA1UEAxMk YTJjZGIzMTktYWU1ZC00ZDQ1LTg3NTQtMjlmNGJjMzFjNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCMiaVD65ecBm45BG44h1FTvGqnVPK1nwv5d FjtwthQ9Lkj9ae2ERkAXBH8todUoAZh+npqxQpGJCHAFEDXVpiqd774ZcKiNcGZd GcUJPloeujpv5tP2p9JkryKO8vFmLnlVJa1w9ToDZiZTzIKLsG9NJn65gfHb20nY ToqhnG/4/eeg7HDP7XWqQeFWlcI1ocgocljlsA6xsILMvk1zb05U2aEyw+b39wHr i9guWFGUPZ0ZWktIsvj9uiVD80zGm2FA4Ai55J36QFlCuuL+iVg4sd6pS6+/g5QC 9QEMA9DLyfD/DzfKtTca3fHjU9ugtr8SWWGjbYCHI9YMwQTTUwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFDxpHVWfVR6MaxLtbKzvZPhY7MrLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h MmNkYjMxOS1hZTVkLTRkNDUtODc1NC0yOWY0YmMzMWM0NmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2EyY2RiMzE5LWFlNWQtNGQ0NS04 NzU0LTI5ZjRiYzMxYzQ2ZC9hMmNkYjMxOS1hZTVkLTRkNDUtODc1NC0yOWY0YmMz MWM0NmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvTjADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJ9KjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB52yaAY0+5dlQ8yy5tlLJbPQ2lK/ObdcgN3nOjX7ImdNNR 8k+4k+7J5LR3KQGSuAw01lHkYcxm5I4GC4KcAGcYtmq+oo0mx/XGYGvNKcMjU30G 17+FFDrgWdaySa/dYEblIuEWUNk+mnUjvYRc/t0z4DoBVSZY5VfNRO5jRKNqjzc8 bnP3z142GZX0yqwbkK0fTQnx7BSAKDUMSt6o3jq+hV7QVTxb6PMNEqpYt7XLASk+ cfx/PbGij8giSClaMDPK9Tgnx3ISJ8f7msFx0VkScobl2rF7izti2x8gFDacI28q BRoJU42A8NXPPNfSnF5wujsL/nZ9epSMJ+mpqt3W -----END CERTIFICATE-----Generated at Wed Nov 5 20:42:05 2025 by rpki-client