$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer File: ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer (raw, json) Hash identifier: efzdPuhHmqP0dGW4Lz1sDCflYA0XMZrKMohLh+PyMaY= Subject key identifier: 2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BC2BCFEE8D6E26A9FA88D3300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Nov 2025 16:35:19 +0000 Certificate not after: Tue 08 Feb 2028 16:35:19 +0000 Subordinate resources: IP: 134.67.0.0/16 IP: 161.80.0.0/16 IP: 192.58.247.0/24 IP: 204.46.0.0/15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:bc:fe:e8:d6:e2:6a:9f:a8:8d:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 5 16:35:19 2025 GMT Not After : Feb 8 16:35:19 2028 GMT Subject: CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a8:95:f1:be:5a:d4:8b:96:21:2c:a6:b5:17: 1a:e8:37:36:16:0c:0d:a1:d4:31:a4:32:e4:7b:f7: 48:b7:2c:0a:03:d0:e0:f1:11:81:d3:9b:53:a1:f2: bc:98:17:06:a0:e2:f9:cf:49:8e:f9:a3:eb:ed:a1: 88:6d:c6:6a:d6:af:a5:a3:33:a8:d9:06:90:ec:65: 25:b1:8d:6e:8c:72:e8:b6:ab:b5:c5:02:07:cb:cd: e8:8d:0f:6e:98:da:ef:71:57:6b:d1:74:b7:72:d9: 9d:c7:41:b3:a2:9d:66:e3:2a:7b:3c:62:79:c7:f2: 3d:f2:42:24:45:5a:b6:d5:ea:11:2d:a0:91:e4:cc: 1d:c9:8f:70:bb:e1:6e:aa:fb:96:4e:b0:38:65:c3: 8b:d3:f3:63:fd:b5:65:e9:a4:0e:bc:d8:69:60:1c: 65:76:3f:da:7b:91:51:6e:39:51:a2:3b:af:cc:d6: b9:79:1d:c5:df:a0:76:f0:dd:56:17:a3:9c:01:d4: f3:0a:a5:46:6d:dd:39:3f:58:45:01:9a:cb:a7:6e: 75:bd:e1:a3:ed:09:2e:a3:48:cc:3e:b5:9b:39:03: a1:67:b9:a4:29:32:cc:3e:f5:ca:89:b5:d2:3f:14: 4c:03:f9:09:71:d2:e6:ad:86:b8:2a:30:c1:1c:2b: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 134.67.0.0/16 161.80.0.0/16 192.58.247.0/24 204.46.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ad:ba:66:ca:63:2f:a3:33:d4:07:70:93:75:96:29:81:a2: 55:88:14:35:eb:32:ac:d5:08:c7:3f:94:b8:3d:16:69:3f:85: ff:3a:8b:45:8e:87:9c:32:ad:17:a2:30:2d:df:4a:eb:ab:92: a7:67:d6:7a:72:8d:2f:58:6b:18:23:f6:79:32:f8:cd:f7:3f: e5:18:2c:40:f7:e5:87:fc:28:6c:17:86:fb:9b:9b:f4:ae:7e: ea:69:dd:fc:66:37:65:5b:c4:f8:7b:49:f0:10:d3:75:9e:61: 14:80:66:5e:d0:b1:62:4c:e7:d9:8d:ec:7e:63:8d:84:8a:c8: 19:3a:00:b7:02:7c:86:ce:6f:5f:87:7d:c5:bf:11:81:9f:83: cb:2e:fa:69:d1:bc:9c:b9:a2:c9:40:39:db:ef:63:8c:92:81: f7:26:4b:b8:71:64:a0:b9:30:78:cf:a0:1d:10:1c:2c:b6:92: 04:09:e1:09:57:96:d1:bc:ce:c1:37:fb:f9:64:8d:0a:ed:ba: c0:55:d0:1a:73:c8:8d:e6:a0:95:13:17:ae:9b:fc:67:2c:55: 07:7c:1c:b8:d2:3f:75:ae:0d:4a:08:a1:3f:c6:fe:4f:2e:f7: 46:1f:40:dd:1e:65:f5:07:c5:f6:ed:5f:c0:8b:6e:e7:e0:d6: d9:90:f5:e4 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEvCvP7o1uJqn6iNMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwNTE2MzUxOVoXDTI4MDIwODE2MzUxOVowLzEtMCsGA1UEAxMk YWUyMWI2MmItN2JmYy00YTBkLTgxYmMtNzdmOTk4ZGYyY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKiV8b5a1IuWISymtRca6Dc2FgwNodQxpDLk e/dItywKA9Dg8RGB05tTofK8mBcGoOL5z0mO+aPr7aGIbcZq1q+lozOo2QaQ7GUl sY1ujHLotqu1xQIHy83ojQ9umNrvcVdr0XS3ctmdx0Gzop1m4yp7PGJ5x/I98kIk RVq21eoRLaCR5MwdyY9wu+FuqvuWTrA4ZcOL0/Nj/bVl6aQOvNhpYBxldj/ae5FR bjlRojuvzNa5eR3F36B28N1WF6OcAdTzCqVGbd05P1hFAZrLp251veGj7Qkuo0jM PrWbOQOhZ7mkKTLMPvXKibXSPxRMA/kJcdLmrYa4KjDBHCtONQIDAQABo4IEDjCC BAowHQYDVR0OBBYEFCyA6aORWqKaJ8RBp4VVl5PWbbxQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h ZTIxYjYyYi03YmZjLTRhMGQtODFiYy03N2Y5OThkZjJjYmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2FlMjFiNjJiLTdiZmMtNGEwZC04 MWJjLTc3Zjk5OGRmMmNiZS9hZTIxYjYyYi03YmZjLTRhMGQtODFiYy03N2Y5OThk ZjJjYmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMBsEAgABMBUDAwCGQwMDAKFQAwQAwDr3AwMBzC4wVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA S626ZspjL6Mz1Adwk3WWKYGiVYgUNesyrNUIxz+UuD0WaT+F/zqLRY6HnDKtF6Iw Ld9K66uSp2fWenKNL1hrGCP2eTL4zfc/5RgsQPflh/wobBeG+5ub9K5+6mnd/GY3 ZVvE+HtJ8BDTdZ5hFIBmXtCxYkzn2Y3sfmONhIrIGToAtwJ8hs5vX4d9xb8RgZ+D yy76adG8nLmiyUA52+9jjJKB9yZLuHFkoLkweM+gHRAcLLaSBAnhCVeW0bzOwTf7 +WSNCu26wFXQGnPIjeaglRMXrpv8ZyxVB3wcuNI/da4NSgihP8b+Ty73Rh9A3R5l 9QfF9u1fwItu5+DW2ZD15A== -----END CERTIFICATE-----Generated at Thu Nov 6 07:45:40 2025 by rpki-client