$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer File: c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer (raw, json) Hash identifier: BmqXidwkZvAwaO0rW6U0Kj3fnEx12DgL8dwRb2JnX4Y= Subject key identifier: 6D:45:0D:D0:2C:FC:62:22:9E:DE:FC:F8:3B:4B:51:B6:0B:35:C7:02 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BBFDDF907401DF7D3B73C05E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Nov 2025 15:54:21 +0000 Certificate not after: Mon 07 Feb 2028 15:54:21 +0000 Subordinate resources: IP: 131.143.148.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:dd:f9:07:40:1d:f7:d3:b7:3c:05:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 4 15:54:21 2025 GMT Not After : Feb 7 15:54:21 2028 GMT Subject: CN=c0e74f0a-989b-4956-b947-f56b9aee9d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:2b:b7:a4:b8:11:85:ea:4e:20:d7:10:54: de:ff:be:4b:7f:49:39:75:f7:38:b0:fd:c3:70:75: eb:e0:b8:b3:f6:f4:95:fc:4d:5a:8e:2c:72:3a:f1: 23:32:71:ce:a0:a2:96:16:5a:92:07:00:88:25:0e: 82:7e:1e:f9:58:90:15:96:35:3e:39:76:19:17:2d: 2c:d3:58:04:f8:45:1a:2c:a3:fe:19:7e:55:e8:73: 2f:be:a3:16:80:cb:40:e1:fc:8c:f1:72:9e:c3:65: c4:8a:e9:b8:24:4f:df:ce:2b:de:ce:5c:4a:ca:c6: fc:b0:37:59:8f:69:44:b1:ff:2f:7e:00:1a:35:27: 28:36:79:47:60:e5:4e:8c:ce:ce:55:3f:04:dc:56: b7:f1:c4:bd:ad:06:66:30:de:5f:38:29:b5:f2:30: dd:40:93:2b:54:69:8c:9a:a7:36:ab:f4:a2:b6:bb: 66:ac:15:db:68:0a:74:8b:0e:16:84:fb:d9:28:5f: d6:ff:86:26:0e:e2:b0:a7:18:d9:15:5f:ec:30:7b: 2b:3b:dd:6c:ea:c9:25:a7:8d:5e:85:0f:fd:e3:06: e2:6b:83:c3:82:0e:20:ef:b3:80:7e:db:9a:b4:95: 3e:e9:d3:31:c8:e0:04:2a:ac:4d:32:7d:93:1c:9d: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:45:0D:D0:2C:FC:62:22:9E:DE:FC:F8:3B:4B:51:B6:0B:35:C7:02 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 131.143.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d0:be:87:32:05:fa:ce:24:90:c8:c5:4d:a4:d4:02:dc:98: 9b:23:27:44:1e:9d:e0:d6:2c:89:87:1b:b2:f2:14:09:44:46: 87:5b:13:e7:5a:8a:c5:68:de:59:5d:a0:54:86:40:11:12:37: 32:8d:8b:a5:50:21:5b:83:16:17:d6:ee:a8:02:32:6a:48:f7: a8:a0:14:fb:63:3e:c2:a1:28:3b:28:27:d6:76:3a:2f:a9:38: 5d:ef:8b:fe:04:4f:12:9f:09:ff:6c:e9:cd:3e:3a:8c:f9:3f: 17:d4:99:e6:f2:e0:c5:3f:56:35:10:a7:15:df:bf:47:3f:5a: d9:4b:ed:9e:e3:37:4c:9d:e1:e6:04:ce:4b:6e:de:fa:03:02: bd:c8:ec:d6:3e:71:3f:12:ac:51:c5:be:82:35:3c:53:71:3c: 53:2e:1f:ad:e0:54:9a:aa:74:3f:53:de:ae:42:77:29:52:86: a9:73:a1:8d:69:43:32:69:46:12:2f:8f:6f:04:e9:f1:e6:36: 70:9a:a0:c2:f9:b0:31:98:e2:ff:d6:7b:34:e4:97:77:9f:6e: 14:40:31:db:32:0c:4a:1a:98:8f:c8:ee:82:51:6b:5b:4e:7d: a4:21:05:ba:eb:06:0b:80:b7:9a:53:c2:7f:23:8c:cb:91:34: 3b:fd:c8:eb -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEu/3fkHQB3307c8BeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwNDE1NTQyMVoXDTI4MDIwNzE1NTQyMVowLzEtMCsGA1UEAxMk YzBlNzRmMGEtOTg5Yi00OTU2LWI5NDctZjU2YjlhZWU5ZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqwrt6S4EYXqTiDXEFTe/75Lf0k5dfc4sP3D cHXr4Liz9vSV/E1ajixyOvEjMnHOoKKWFlqSBwCIJQ6Cfh75WJAVljU+OXYZFy0s 01gE+EUaLKP+GX5V6HMvvqMWgMtA4fyM8XKew2XEium4JE/fzivezlxKysb8sDdZ j2lEsf8vfgAaNScoNnlHYOVOjM7OVT8E3Fa38cS9rQZmMN5fOCm18jDdQJMrVGmM mqc2q/SitrtmrBXbaAp0iw4WhPvZKF/W/4YmDuKwpxjZFV/sMHsrO91s6sklp41e hQ/94wbia4PDgg4g77OAftuatJU+6dMxyOAEKqxNMn2THJ35pwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFG1FDdAs/GIint78+DtLUbYLNccCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j MGU3NGYwYS05ODliLTQ5NTYtYjk0Ny1mNTZiOWFlZTlkM2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2MwZTc0ZjBhLTk4OWItNDk1Ni1i OTQ3LWY1NmI5YWVlOWQzYy9jMGU3NGYwYS05ODliLTQ5NTYtYjk0Ny1mNTZiOWFl ZTlkM2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKDj5QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAO9C+hzIF+s4kkMjFTaTU AtyYmyMnRB6d4NYsiYcbsvIUCURGh1sT51qKxWjeWV2gVIZAERI3Mo2LpVAhW4MW F9buqAIyakj3qKAU+2M+wqEoOygn1nY6L6k4Xe+L/gRPEp8J/2zpzT46jPk/F9SZ 5vLgxT9WNRCnFd+/Rz9a2UvtnuM3TJ3h5gTOS27e+gMCvcjs1j5xPxKsUcW+gjU8 U3E8Uy4freBUmqp0P1PerkJ3KVKGqXOhjWlDMmlGEi+PbwTp8eY2cJqgwvmwMZji /9Z7NOSXd59uFEAx2zIMShqYj8juglFrW059pCEFuusGC4C3mlPCfyOMy5E0O/3I 6w== -----END CERTIFICATE-----Generated at Wed Nov 5 13:41:22 2025 by rpki-client