$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer File: dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer (raw, json) Hash identifier: AICGzECJX1yEaUtLsBVIENfZAt4ZwWUrA9AfGzkkkCQ= Subject key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BAECF444113FA1AB94E483E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Oct 2025 13:15:58 +0000 Certificate not after: Tue 01 Feb 2028 14:15:58 +0000 Subordinate resources: IP: 143.95.0.0/16 IP: 149.47.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:cf:44:41:13:fa:1a:b9:4e:48:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 29 13:15:58 2025 GMT Not After : Feb 1 14:15:58 2028 GMT Subject: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e4:5e:8e:80:58:9b:02:e2:2a:53:bf:85:d4: 91:1e:8c:57:11:9f:a0:6c:c3:84:eb:4a:55:bd:e4: 06:ea:90:eb:83:63:19:0b:20:e5:ef:34:5d:c1:20: 05:40:fa:9f:48:95:c1:b9:5a:25:ff:b0:c0:93:94: d5:6e:71:d6:9c:8e:96:4d:f8:79:4e:8a:c7:5a:4c: 05:0a:66:2d:b7:2a:4f:c2:c6:9e:b5:b5:04:0d:61: d6:41:8a:f8:43:6d:f2:97:d0:42:86:ea:dc:4f:cb: ab:e6:09:c1:4d:09:ec:57:f9:53:ae:5a:8a:e6:77: ae:0c:ed:ac:29:45:76:c4:ca:ce:ce:c0:08:28:13: d1:06:f2:8f:95:71:9a:10:db:95:68:e2:b5:82:1f: 33:ca:ac:c4:d1:95:7b:25:02:cc:b9:e6:5f:22:dd: ff:ca:a0:9d:24:db:42:12:de:d0:27:c4:94:2f:53: 9f:a5:33:75:53:12:d2:c1:93:ab:00:c8:2f:86:f8: 95:b1:4e:1c:7f:4c:6c:2d:1c:14:b0:a8:52:1d:eb: bc:6d:77:72:27:a2:e9:0a:7c:e3:ae:1b:e4:71:d0: e2:06:ea:06:98:13:09:81:f6:9a:7e:b1:af:cc:46: d2:2f:91:1c:8c:9e:50:14:11:ed:a1:fa:17:64:3c: c2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 143.95.0.0/16 149.47.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:0b:0b:fe:e4:7f:58:e1:1b:36:17:58:c5:86:78:cf:77:a4: 1d:df:6e:e6:98:96:49:e1:d8:e6:be:48:70:05:17:96:d0:ad: e7:81:fa:cc:07:b8:0d:c0:51:cc:d0:6f:6b:56:79:71:eb:a1: e2:8d:06:32:c0:f5:03:60:06:ae:3c:e3:b6:ee:97:88:34:40: 5c:1b:05:91:cc:eb:77:41:6f:81:2b:3d:83:df:c4:57:e7:8c: 47:88:08:cb:26:ef:d3:f9:16:fe:96:e8:e4:3e:4e:69:4c:d1: b3:a6:a2:d3:77:3d:a6:57:52:c0:25:bb:0c:98:d4:de:3e:33: 57:e7:f2:c4:94:5a:52:6b:13:8e:7e:d2:eb:af:fb:9f:dc:e1: d0:27:64:a0:fa:82:f2:99:90:d0:3b:47:27:d9:45:da:57:2a: a8:b6:dd:5f:32:24:08:65:a3:9a:11:1b:34:ab:c3:f9:63:26: 61:c7:67:cd:fa:bf:14:8b:30:a1:37:39:0a:84:a9:b3:64:eb: a5:27:91:8a:d4:53:1b:aa:41:52:75:ce:b4:cb:20:3f:96:48: d0:e4:0e:11:10:08:a2:aa:11:9f:43:09:8c:0f:ae:48:ae:83: 45:91:43:93:24:af:89:39:16:3d:f8:74:2a:25:95:6c:1c:60: 81:e8:92:11 -----BEGIN CERTIFICATE----- MIIG8TCCBdmgAwIBAgIUAQ0Mn0MoWEuuz0RBE/oauU5IPiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyOTEzMTU1OFoXDTI4MDIwMTE0MTU1OFowLzEtMCsGA1UEAxMk ZGZjYjRhZWMtYTY2Yy00MDdiLThjYmEtN2RlZTQ3YTZjNmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeRejoBYmwLiKlO/hdSRHoxXEZ+gbMOE60pV veQG6pDrg2MZCyDl7zRdwSAFQPqfSJXBuVol/7DAk5TVbnHWnI6WTfh5TorHWkwF CmYttypPwsaetbUEDWHWQYr4Q23yl9BChurcT8ur5gnBTQnsV/lTrlqK5neuDO2s KUV2xMrOzsAIKBPRBvKPlXGaENuVaOK1gh8zyqzE0ZV7JQLMueZfIt3/yqCdJNtC Et7QJ8SUL1OfpTN1UxLSwZOrAMgvhviVsU4cf0xsLRwUsKhSHeu8bXdyJ6LpCnzj rhvkcdDiBuoGmBMJgfaafrGvzEbSL5EcjJ5QFBHtofoXZDzC/wIDAQABo4IEAzCC A/8wHQYDVR0OBBYEFMwBJULC67sUWh8uSVcbgCWzqZk5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9k ZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdhNmM2YjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2RmY2I0YWVjLWE2NmMtNDA3Yi04 Y2JhLTdkZWU0N2E2YzZiOS9kZmNiNGFlYy1hNjZjLTQwN2ItOGNiYS03ZGVlNDdh NmM2YjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwIwYIKwYBBQUH AQcBAf8EFDASMBAEAgABMAoDAwCPXwMDAJUvMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABQLC/7kf1jhGzYX WMWGeM93pB3fbuaYlknh2Oa+SHAFF5bQreeB+swHuA3AUczQb2tWeXHroeKNBjLA 9QNgBq4847bul4g0QFwbBZHM63dBb4ErPYPfxFfnjEeICMsm79P5Fv6W6OQ+TmlM 0bOmotN3PaZXUsAluwyY1N4+M1fn8sSUWlJrE45+0uuv+5/c4dAnZKD6gvKZkNA7 RyfZRdpXKqi23V8yJAhlo5oRGzSrw/ljJmHHZ836vxSLMKE3OQqEqbNk66UnkYrU UxuqQVJ1zrTLID+WSNDkDhEQCKKqEZ9DCYwPrkiug0WRQ5Mkr4k5Fj34dCollWwc YIHokhE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:57:36 2025 by rpki-client