$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer File: dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer (raw, json) Hash identifier: Mzv4d1MZ5kehGQzyYowstBHGyC3ZE+C9kFEMeoeONZY= Subject key identifier: 32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BAD20523EAB3FC1140CB1E300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Oct 2025 22:47:40 +0000 Certificate not after: Mon 31 Jan 2028 23:47:40 +0000 Subordinate resources: IP: 131.143.208.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:20:52:3e:ab:3f:c1:14:0c:b1:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 28 22:47:40 2025 GMT Not After : Jan 31 23:47:40 2028 GMT Subject: CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:2e:96:37:91:f0:17:2f:be:ed:5d:f4:8a: a2:86:28:a4:0e:7a:7c:59:fc:bb:74:f9:0b:a9:f3: e0:6c:23:b9:cd:51:7d:15:44:4b:d0:b0:10:85:09: 13:a2:d4:61:2d:4e:aa:d2:4d:e7:33:fa:ba:21:c0: 15:67:dd:93:d4:b4:b5:6e:89:ca:17:90:87:e1:c4: c4:25:91:70:36:87:18:3c:b6:9f:a5:2c:83:84:81: 1e:f5:5b:6b:57:3e:43:21:c5:d9:29:bb:73:59:6d: a1:ad:14:a2:c0:b4:9d:79:52:6f:a3:b1:11:c2:86: 39:37:6c:67:38:5d:cd:14:f8:b3:be:4b:84:7d:47: 09:a1:b2:b4:54:32:89:09:2d:54:64:9e:bc:e9:56: d8:3b:25:bc:f8:88:ff:31:54:02:65:f5:5c:79:49: de:d8:8c:e2:2c:0f:b3:a3:23:c1:1d:fb:c8:2b:a1: 84:7a:36:ec:d9:26:9d:c8:96:c2:ab:78:9e:8e:42: e9:47:53:09:5c:4a:2e:7e:b9:09:9c:4b:3e:c2:4a: c1:e1:f6:5e:61:d8:b0:51:a9:f9:5b:e4:6f:8f:69: a3:5f:95:1e:5c:98:80:f1:c1:3c:1e:53:a4:a2:bd: b4:78:0f:b2:45:24:a4:d0:6f:e3:e5:92:43:18:c8: 19:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 131.143.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:10:ed:cd:62:44:96:85:2b:a6:3d:ee:59:4d:4f:b3:ae:93: a0:6c:cb:97:c7:90:dc:75:b3:a5:d6:88:40:70:44:80:9d:bc: b6:50:df:81:58:79:f5:5b:0f:3a:b1:e7:1d:7d:3b:f1:71:d8: ce:c9:fa:f2:97:3e:c3:ee:25:77:72:85:1a:b9:85:8c:04:ce: 43:3c:d9:5e:4e:5f:57:04:f4:3e:76:3d:72:28:dc:59:7e:f5: 53:e5:cf:a3:11:90:9d:d0:70:ef:8c:02:00:da:50:67:0d:d5: b0:d4:d1:1e:20:10:75:47:66:e3:9b:ce:d7:2d:37:8b:7e:1f: 46:01:40:54:df:20:43:f8:cd:42:c9:00:86:8e:c7:6c:89:2a: 65:50:0a:bb:73:3c:83:a3:f3:49:05:ca:49:a0:56:89:cd:8b: 10:1c:a1:8f:62:6b:26:c3:3b:6a:35:07:2d:46:ae:6c:71:73: 42:e7:9b:d2:b4:f0:7d:85:b4:ed:96:8e:45:dc:21:53:58:8d: 99:e1:6a:7b:2f:2c:fd:3e:8c:f5:b5:94:45:af:c8:34:b2:00: b6:17:5e:57:76:d5:a0:8e:e7:2f:ec:41:6c:d6:6c:4d:b6:60: 01:af:c4:42:42:0e:83:fb:cb:20:30:79:fb:15:28:6d:d4:58: 32:97:da:7b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEutIFI+qz/BFAyx4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyODIyNDc0MFoXDTI4MDEzMTIzNDc0MFowLzEtMCsGA1UEAxMk ZGQ3N2ZmOWQtNTgzMi00NDI4LWEwMWMtYjNlMmZhYWMwOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkakuljeR8Bcvvu1d9IqihiikDnp8Wfy7dPkL qfPgbCO5zVF9FURL0LAQhQkTotRhLU6q0k3nM/q6IcAVZ92T1LS1bonKF5CH4cTE JZFwNocYPLafpSyDhIEe9VtrVz5DIcXZKbtzWW2hrRSiwLSdeVJvo7ERwoY5N2xn OF3NFPizvkuEfUcJobK0VDKJCS1UZJ686VbYOyW8+Ij/MVQCZfVceUne2IziLA+z oyPBHfvIK6GEejbs2SadyJbCq3iejkLpR1MJXEoufrkJnEs+wkrB4fZeYdiwUan5 W+Rvj2mjX5UeXJiA8cE8HlOkor20eA+yRSSk0G/j5ZJDGMgZuwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDK2081nqekhJZ22ynsPfFAEmqtVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9k ZDc3ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2UyZmFhYzA4ZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2RkNzdmZjlkLTU4MzItNDQyOC1h MDFjLWIzZTJmYWFjMDhmMy9kZDc3ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2UyZmFh YzA4ZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKDj9AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHBDtzWJEloUrpj3uWU1P s66ToGzLl8eQ3HWzpdaIQHBEgJ28tlDfgVh59VsPOrHnHX078XHYzsn68pc+w+4l d3KFGrmFjATOQzzZXk5fVwT0PnY9cijcWX71U+XPoxGQndBw74wCANpQZw3VsNTR HiAQdUdm45vO1y03i34fRgFAVN8gQ/jNQskAho7HbIkqZVAKu3M8g6PzSQXKSaBW ic2LEByhj2JrJsM7ajUHLUaubHFzQueb0rTwfYW07ZaORdwhU1iNmeFqey8s/T6M 9bWURa/INLIAthdeV3bVoI7nL+xBbNZsTbZgAa/EQkIOg/vLIDB5+xUobdRYMpfa ew== -----END CERTIFICATE-----Generated at Wed Nov 5 06:40:32 2025 by rpki-client