$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer File: aafd6acf-1b90-42db-93ca-6a5c04007025.cer (raw, json) Hash identifier: 2rLnRUvn2K3ZR3YpzTDd9BcXRMLWrWx1OAUvNbdoikI= Subject key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BA0D06BFD26EE42A08C078B60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Oct 2025 12:56:59 +0000 Certificate not after: Thu 27 Jan 2028 13:56:59 +0000 Subordinate resources: IP: 24.153.0.0/19 IP: 24.156.128.0/19 IP: 64.71.240.0/20 IP: 66.185.80.0/20 IP: 67.231.208.0/20 IP: 69.58.96.0/20 IP: 69.63.240.0/20 IP: 74.210.0.0/17 IP: 162.208.80.0/22 IP: 2604:e80::/32 IP: 2604:5580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d0:6b:fd:26:ee:42:a0:8c:07:8b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 24 12:56:59 2025 GMT Not After : Jan 27 13:56:59 2028 GMT Subject: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:48:4e:91:df:0b:c0:0d:b3:f4:fc:79:22:93: d3:f3:ce:f1:6d:48:b4:a1:23:5d:48:98:44:d3:90: 8f:5e:ce:11:ac:cd:45:77:32:0c:90:59:3b:df:9c: ab:fa:d6:24:a7:9f:3d:1d:fa:6a:ab:ef:fe:0d:e2: 87:44:b8:2e:33:0d:9d:c8:b1:52:6b:02:f3:2f:f5: 24:a3:4a:40:79:61:a2:79:b6:d1:6e:86:09:27:f0: 95:f0:d4:65:2e:b6:a6:16:3b:a2:9f:54:6b:18:8e: 73:34:be:09:c8:09:2c:27:50:23:b9:72:95:4d:f2: c6:75:54:98:bb:65:d3:05:35:b5:90:f1:0b:13:27: bb:19:60:23:4a:d6:45:a3:62:c3:8d:74:20:8a:4e: d7:84:63:79:1f:82:8b:08:bd:56:40:51:f6:a3:6f: bd:ca:e5:da:2a:7a:55:89:e1:77:74:09:9e:2a:f4: c9:72:92:91:38:5e:5f:13:a6:2a:c0:c2:74:5e:0b: fc:aa:73:13:1b:a3:5c:29:e9:e2:63:dd:3d:5c:d8: db:c5:09:f3:ce:de:c6:af:90:a2:6b:e0:19:7a:c7: 49:ce:a8:72:83:1e:0e:78:18:ac:42:1e:4d:45:68: 03:0a:d5:a3:0e:34:ec:f6:da:a5:61:ca:f0:dd:f7: 7b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 24.153.0.0/19 24.156.128.0/19 64.71.240.0/20 66.185.80.0/20 67.231.208.0/20 69.58.96.0/20 69.63.240.0/20 74.210.0.0/17 162.208.80.0/22 IPv6: 2604:e80::/32 2604:5580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:5f:1b:44:d0:3d:89:a3:f3:39:ec:f4:31:4d:d5:c4:34:7f: 21:45:1a:d3:b3:c4:81:9b:8f:6a:17:ec:bd:df:e4:dc:c6:b2: d4:34:54:c5:ed:c9:b5:f4:ae:20:29:81:32:13:3e:d6:db:0c: d4:5c:e8:cd:15:d8:d2:4a:ff:1e:57:55:d6:4a:68:ba:70:b9: 83:7d:66:a2:58:7d:05:ee:96:8a:1d:29:e9:32:e4:88:77:d8: 62:19:ae:0a:44:73:d9:7c:3c:4b:4d:a7:4a:51:dc:20:39:aa: 9a:ed:af:33:7d:49:9a:92:61:7e:09:5a:8a:bb:05:fa:44:e8: 22:aa:f4:71:be:96:76:2d:07:96:c2:e8:f5:82:a7:d0:8d:e7: b2:9a:6f:58:27:77:36:c5:ab:61:56:a9:cd:4a:32:e1:1a:7b: 7c:87:29:6d:d6:45:20:b4:2b:51:83:f2:ae:97:c6:bb:b4:01: 8b:62:0c:7d:ad:51:58:2b:f6:f0:af:8c:a1:74:e7:41:9a:0a: d1:6a:f2:eb:5b:55:24:6f:93:68:8d:99:07:2a:d1:4d:cc:03: f2:36:27:7b:72:92:bd:63:10:9a:6b:20:02:11:fc:f4:16:33: 80:a1:b9:89:b0:22:8b:85:e3:97:1e:d8:9a:de:1b:9f:46:7a: f6:29:a4:dd -----BEGIN CERTIFICATE----- MIIHMzCCBhugAwIBAgIUAQ0Mn0MoWEug0Gv9Ju5CoIwHi2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyNDEyNTY1OVoXDTI4MDEyNzEzNTY1OVowLzEtMCsGA1UEAxMk YWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3MDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkhOkd8LwA2z9Px5IpPT887xbUi0oSNdSJhE 05CPXs4RrM1FdzIMkFk735yr+tYkp589Hfpqq+/+DeKHRLguMw2dyLFSawLzL/Uk o0pAeWGiebbRboYJJ/CV8NRlLramFjuin1RrGI5zNL4JyAksJ1AjuXKVTfLGdVSY u2XTBTW1kPELEye7GWAjStZFo2LDjXQgik7XhGN5H4KLCL1WQFH2o2+9yuXaKnpV ieF3dAmeKvTJcpKROF5fE6YqwMJ0Xgv8qnMTG6NcKeniY909XNjbxQnzzt7Gr5Ci a+AZesdJzqhygx4OeBisQh5NRWgDCtWjDjTs9tqlYcrw3fd7bQIDAQABo4IERTCC BEEwHQYDVR0OBBYEFDNSmIDWg8U/FHKS6qCEmU8aLbvkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h YWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2FhZmQ2YWNmLTFiOTAtNDJkYi05 M2NhLTZhNWMwNDAwNzAyNS9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQw MDcwMjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwZQYIKwYBBQUH AQcBAf8EVjBUMDwEAgABMDYDBAUYmQADBAUYnIADBARAR/ADBARCuVADBARD59AD BARFOmADBARFP/ADBAdK0gADBAKi0FAwFAQCAAIwDgMFACYEDoADBQAmBFWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVfG0TQPYmj8zns9DFN1cQ0fyFFGtOzxIGbj2oX7L3f5NzGstQ0VMXt ybX0riApgTITPtbbDNRc6M0V2NJK/x5XVdZKaLpwuYN9ZqJYfQXuloodKeky5Ih3 2GIZrgpEc9l8PEtNp0pR3CA5qprtrzN9SZqSYX4JWoq7BfpE6CKq9HG+lnYtB5bC 6PWCp9CN57Kab1gndzbFq2FWqc1KMuEae3yHKW3WRSC0K1GD8q6Xxru0AYtiDH2t UVgr9vCvjKF050GaCtFq8utbVSRvk2iNmQcq0U3MA/I2J3tykr1jEJprIAIR/PQW M4ChuYmwIouF45ce2JreG59GevYppN0= -----END CERTIFICATE-----Generated at Wed Nov 5 14:19:50 2025 by rpki-client