$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer File: c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer (raw, json) Hash identifier: v9z1jvUPKlRy9Qqgms0l10FCxD3jc2nIgNMsE04avzs= Subject key identifier: EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BB4F94A08DCF3B1897BCCAE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Oct 2025 18:15:29 +0000 Certificate not after: Thu 03 Feb 2028 19:15:29 +0000 Subordinate resources: AS: 11866 AS: 30403 AS: 54404 AS: 54624 AS: 393284 IP: 149.24.0.0/16 IP: 2620:113:4000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:f9:4a:08:dc:f3:b1:89:7b:cc:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 31 18:15:29 2025 GMT Not After : Feb 3 19:15:29 2028 GMT Subject: CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:83:05:af:7a:07:25:b3:0b:41:66:57:93: 84:bd:5c:1b:bb:ac:f6:bf:ed:1d:62:de:47:60:90: 13:57:47:8e:c2:01:a5:a5:c5:54:8c:37:24:85:f3: 06:68:57:44:dc:cc:ef:46:a0:41:44:a7:ae:b1:67: a5:d5:80:a6:44:dd:ba:95:99:c0:58:b6:19:90:ea: 6e:bb:c1:79:fb:96:1f:de:fd:a4:0f:9e:c1:6f:f4: 0d:0c:39:fe:ac:40:38:2c:2f:a1:b8:2c:06:1f:40: 51:37:25:90:76:7c:ce:b8:d4:50:df:81:04:c1:3e: 13:8c:f9:e2:19:ec:fc:39:df:f4:e4:e8:a1:96:74: 6c:81:d7:d6:f7:b6:68:88:e7:66:1d:46:a0:a8:3e: c1:15:6d:36:31:41:32:6e:dd:22:14:f0:f1:95:25: e3:eb:e9:9d:cf:74:f5:b7:65:38:a9:9c:3b:07:00: 60:89:79:96:04:e8:d4:8d:1c:97:15:7f:8b:72:ff: 1c:68:f2:e9:ae:22:61:97:c8:1a:e8:1c:76:e3:95: cb:af:18:a9:32:0f:aa:80:58:47:33:2a:ca:81:ab: b2:9c:77:20:0a:7c:af:8c:d1:c3:49:5a:ef:29:fa: e0:2a:ac:f2:0f:4b:9b:54:fb:9c:6d:fe:49:16:1e: a8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 149.24.0.0/16 IPv6: 2620:113:4000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11866 30403 54404 54624 393284 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4d:24:5d:6b:54:91:18:94:ff:16:da:f0:34:8e:bb:dd:99: cd:7d:d3:7f:42:b4:04:f0:a0:83:5a:be:77:8d:dd:d9:b7:d1: 82:16:55:e8:e6:ea:e0:fc:38:24:7d:44:ce:d5:91:ac:70:34: 33:4b:c3:7f:e2:65:d0:81:f1:34:b8:12:37:10:ae:6a:a7:c8: 36:fa:b5:4e:c1:33:5c:e8:3d:81:da:39:b8:8a:f5:9c:0c:31: 45:8a:4f:94:01:c5:31:08:65:7d:38:9d:71:70:c1:a1:e6:da: 50:72:43:de:43:e8:ea:f9:be:9e:a9:b7:ef:a3:56:a5:66:99: a8:f7:37:37:b7:2f:70:90:e5:74:b6:4f:9e:07:33:31:92:b1: 9d:61:0d:d8:21:55:64:4a:cf:a7:ce:a9:09:cd:77:7f:c9:71: 33:50:fc:85:90:73:15:10:a1:62:af:93:33:85:a4:3b:92:f4: 5c:6b:c6:3e:e4:15:f1:a1:43:2c:49:7a:07:d5:e0:9e:3a:67: aa:9d:c3:5f:d1:37:e5:68:02:75:06:60:80:2c:fd:21:a5:15: fd:c8:db:9c:bf:de:0e:41:2b:42:f5:e2:84:23:b8:8c:da:ea: 52:de:87:d8:c3:fa:8e:04:68:ef:5b:bd:28:98:3b:51:14:83: 3c:15:db:ec -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWEu0+UoI3POxiXvMrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAzMTE4MTUyOVoXDTI4MDIwMzE5MTUyOVowLzEtMCsGA1UEAxMk Yzc2OGYyYzEtZjU1Yi00YWU4LWE0NGMtYjliNjA2MmQzNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoyDBa96ByWzC0FmV5OEvVwbu6z2v+0dYt5H YJATV0eOwgGlpcVUjDckhfMGaFdE3MzvRqBBRKeusWel1YCmRN26lZnAWLYZkOpu u8F5+5Yf3v2kD57Bb/QNDDn+rEA4LC+huCwGH0BRNyWQdnzOuNRQ34EEwT4TjPni Gez8Od/05OihlnRsgdfW97ZoiOdmHUagqD7BFW02MUEybt0iFPDxlSXj6+mdz3T1 t2U4qZw7BwBgiXmWBOjUjRyXFX+Lcv8caPLpriJhl8ga6Bx245XLrxipMg+qgFhH MyrKgauynHcgCnyvjNHDSVrvKfrgKqzyD0ubVPucbf5JFh6o9wIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFO5PRaO1EbLDt4M2EUFeupX2y22dMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j NzY4ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2MDYyZDM3NDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2M3NjhmMmMxLWY1NWItNGFlOC1h NDRjLWI5YjYwNjJkMzc0NC9jNzY4ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2MDYy ZDM3NDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAsEAgABMAUDAwCVGDAPBAIAAjAJAwcEJiABE0AAMCwGCCsGAQUF BwEIAQH/BB0wG6AZMBcCAi5aAgJ2wwIDANSEAgMA1WACAwYARDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBH TSRda1SRGJT/FtrwNI673ZnNfdN/QrQE8KCDWr53jd3Zt9GCFlXo5urg/DgkfUTO 1ZGscDQzS8N/4mXQgfE0uBI3EK5qp8g2+rVOwTNc6D2B2jm4ivWcDDFFik+UAcUx CGV9OJ1xcMGh5tpQckPeQ+jq+b6eqbfvo1alZpmo9zc3ty9wkOV0tk+eBzMxkrGd YQ3YIVVkSs+nzqkJzXd/yXEzUPyFkHMVEKFir5MzhaQ7kvRca8Y+5BXxoUMsSXoH 1eCeOmeqncNf0TflaAJ1BmCALP0hpRX9yNucv94OQStC9eKEI7iM2upS3ofYw/qO BGjvW70omDtRFIM8Fdvs -----END CERTIFICATE-----Generated at Wed Nov 5 17:25:54 2025 by rpki-client