$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer File: bd417297-965f-4fd0-82f0-a774a3ef359e.cer (raw, json) Hash identifier: UjuM8BRIuGhEbtKrw13sgGNNAg/2c936zmyq43eQais= Subject key identifier: 0A:80:7F:AB:80:5F:13:AD:6A:5F:43:6A:DD:D3:AB:2C:84:B0:F3:B7 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BBB5BBC70F8D584B1926A35E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 01:08:42 +0000 Certificate not after: Sun 06 Feb 2028 01:08:42 +0000 Subordinate resources: AS: 22685 IP: 199.88.242.0/24 IP: 2604:59c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:5b:bc:70:f8:d5:84:b1:92:6a:35:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 3 01:08:42 2025 GMT Not After : Feb 6 01:08:42 2028 GMT Subject: CN=bd417297-965f-4fd0-82f0-a774a3ef359e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:4d:fa:3b:5f:09:df:2c:cf:ff:6e:a3:b1: 89:66:65:c2:ac:d0:51:c0:f0:9a:47:93:a3:37:21: f0:48:51:3e:fc:2d:7b:8e:eb:b2:19:6f:25:04:11: f1:ae:c5:ed:9c:09:36:83:ec:40:74:cc:1f:52:a3: 99:85:bb:dc:0a:69:04:a7:3f:bc:5e:9e:8a:81:33: 26:06:ae:67:c3:05:85:78:3c:26:ca:b9:06:60:c5: 93:12:e5:34:34:41:8b:dd:7f:e2:55:d4:74:38:57: 4f:1d:0b:d2:a4:23:c3:fd:a2:88:21:42:bc:91:3b: 08:fe:c5:31:83:18:0e:0e:1d:40:92:d7:9e:92:b1: 04:ae:13:2c:b9:39:c2:86:55:02:69:62:c3:f1:31: f2:53:77:fc:44:97:85:50:cf:f6:76:be:74:bc:2b: af:c1:86:2d:e8:c6:2a:6e:ef:7f:e7:87:8b:cf:96: c6:31:3e:82:c0:0a:e3:3b:51:54:42:e5:f5:0c:f7: 3d:8c:32:77:3d:e4:26:47:63:8b:0e:c7:31:53:45: bc:7f:a1:2d:94:96:07:1f:be:fe:e6:c6:13:a7:6f: 27:20:ac:8c:e6:b3:f8:5b:60:42:88:92:5e:33:8a: 78:6a:0a:bb:95:85:18:d6:91:c5:50:d1:16:db:84: 96:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:80:7F:AB:80:5F:13:AD:6A:5F:43:6A:DD:D3:AB:2C:84:B0:F3:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 199.88.242.0/24 IPv6: 2604:59c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22685 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ad:c8:7d:f2:17:27:5a:28:c4:40:31:16:2f:e5:df:de:99: c3:ce:d5:00:1b:b6:31:6c:53:7f:a1:4f:1a:c6:ad:93:0c:8a: 0d:52:f7:99:7c:fc:35:4f:7d:dc:08:ec:dc:d9:d1:73:8a:f6: 81:d9:3a:c1:d0:85:3f:f2:96:ac:81:12:bb:b4:04:b1:ea:87: 14:21:a9:85:f0:f7:57:87:eb:14:f4:21:5c:b4:80:38:67:23: 1b:35:87:83:fe:1a:3a:35:14:f3:09:0e:c7:1e:74:eb:05:e9: 39:ab:3e:ff:46:9d:c6:03:90:02:1d:07:30:b0:04:19:fe:7e: c3:b8:5f:19:20:0f:00:0c:aa:b3:2d:4e:18:30:d6:50:d7:31: 79:27:36:8f:76:1b:5a:ee:0e:ae:c6:8c:47:7a:19:87:94:ff: 0f:90:95:85:55:1c:b5:f7:e3:32:76:fd:23:3a:cc:d4:4a:e8: 4c:3d:0c:0c:cd:37:2b:e0:f9:b8:2f:06:b2:9f:c8:a6:f6:2c: 6f:86:c4:05:be:11:8b:5f:2a:0e:91:c6:24:37:df:be:84:2a: 27:9c:4d:ae:cf:3a:72:c6:b6:2b:7c:36:24:d8:a8:bf:50:3a: f2:7a:aa:eb:1d:d1:99:ab:af:51:01:30:ca:30:a0:8a:02:4e: bc:2e:72:0a -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEu7W7xw+NWEsZJqNeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwMzAxMDg0MloXDTI4MDIwNjAxMDg0MlowLzEtMCsGA1UEAxMk YmQ0MTcyOTctOTY1Zi00ZmQwLTgyZjAtYTc3NGEzZWYzNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF1N+jtfCd8sz/9uo7GJZmXCrNBRwPCaR5Oj NyHwSFE+/C17juuyGW8lBBHxrsXtnAk2g+xAdMwfUqOZhbvcCmkEpz+8Xp6KgTMm Bq5nwwWFeDwmyrkGYMWTEuU0NEGL3X/iVdR0OFdPHQvSpCPD/aKIIUK8kTsI/sUx gxgODh1AkteekrEErhMsuTnChlUCaWLD8THyU3f8RJeFUM/2dr50vCuvwYYt6MYq bu9/54eLz5bGMT6CwArjO1FUQuX1DPc9jDJ3PeQmR2OLDscxU0W8f6EtlJYHH77+ 5sYTp28nIKyM5rP4W2BCiJJeM4p4agq7lYUY1pHFUNEW24SWYQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFAqAf6uAXxOtal9Dat3TqyyEsPO3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i ZDQxNzI5Ny05NjVmLTRmZDAtODJmMC1hNzc0YTNlZjM1OWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2JkNDE3Mjk3LTk2NWYtNGZkMC04 MmYwLWE3NzRhM2VmMzU5ZS9iZDQxNzI5Ny05NjVmLTRmZDAtODJmMC1hNzc0YTNl ZjM1OWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADHWPIwDQQCAAIwBwMFACYEWcAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICWJ0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAca3IffIXJ1ooxEAxFi/l396Zw87V ABu2MWxTf6FPGsatkwyKDVL3mXz8NU993Ajs3NnRc4r2gdk6wdCFP/KWrIESu7QE seqHFCGphfD3V4frFPQhXLSAOGcjGzWHg/4aOjUU8wkOxx506wXpOas+/0adxgOQ Ah0HMLAEGf5+w7hfGSAPAAyqsy1OGDDWUNcxeSc2j3YbWu4OrsaMR3oZh5T/D5CV hVUctffjMnb9IzrM1EroTD0MDM03K+D5uC8Gsp/IpvYsb4bEBb4Ri18qDpHGJDff voQqJ5xNrs86csa2K3w2JNiov1A68nqq6x3RmauvUQEwyjCgigJOvC5yCg== -----END CERTIFICATE-----Generated at Wed Nov 5 07:23:43 2025 by rpki-client