$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer File: ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer (raw, json) Hash identifier: VhVUXd6M3zrcr2cBilm86PWZq5TpP+ow8naEYq6X8jo= Subject key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BACA0A013DEA67F8508BD3180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Oct 2025 18:30:23 +0000 Certificate not after: Mon 17 Jan 2028 15:05:51 +0000 Subordinate resources: AS: 18636 IP: 142.248.45.0/24 IP: 2602:f4f2::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ac:a0:a0:13:de:a6:7f:85:08:bd:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 28 18:30:23 2025 GMT Not After : Jan 17 15:05:51 2028 GMT Subject: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:01:a4:17:53:fc:1c:14:7e:a7:21:f5:ee: 07:01:44:8b:30:0f:b9:e9:6a:26:40:0c:69:3e:0a: d2:dd:06:48:b5:69:77:02:41:4a:d7:b5:9e:2b:9b: 50:ab:01:3d:74:db:b9:18:85:83:bb:f9:16:a6:08: f5:77:71:79:75:18:bd:83:c7:32:14:fd:dd:31:2b: b4:bd:b1:55:59:0f:b9:9e:2a:b7:0e:97:ec:71:bc: 12:dd:74:2b:7b:3b:50:7c:3b:cf:e1:f7:ab:1a:72: 3a:88:e8:6c:db:8f:35:04:f7:01:9d:25:d0:f4:0c: 86:e3:ea:eb:44:f8:f1:c2:75:44:de:a2:2d:ef:a2: 77:a2:1a:9a:63:b4:7b:ab:7a:12:8f:ec:8c:b0:12: fd:bc:f1:34:47:1d:66:f0:98:e4:10:d9:51:5a:23: b6:f9:e4:ba:4c:01:fb:29:03:fd:d6:45:59:fe:ec: d1:ba:1e:6f:01:71:8b:1e:93:39:a4:bc:04:b8:f8: 1e:ca:c6:09:cf:e8:79:02:f3:e4:19:07:a3:ab:e9: 98:8a:ad:90:1e:99:82:2b:4e:2f:20:fc:42:5d:c5: 02:03:ba:2b:6a:f8:ca:08:19:db:e4:5c:03:1d:03: b6:cf:84:66:03:ab:67:de:d8:c5:e7:c1:54:0f:7c: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 142.248.45.0/24 IPv6: 2602:f4f2::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18636 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:24:d6:5d:fa:13:b2:6c:4d:48:5f:dd:8b:33:36:47:f9:e7: f9:82:92:18:6e:92:36:72:d5:80:c3:d4:ba:6b:6c:8c:79:ee: 42:aa:d7:84:6e:7e:f4:89:72:e8:60:c7:26:f3:c1:f7:9a:b8: 54:d4:6e:91:bb:a0:05:02:15:47:c9:46:48:14:70:8e:bb:b2: 09:39:92:99:25:59:10:2c:59:34:30:4b:1e:9f:ba:83:f4:5a: da:f4:75:10:ab:51:84:1e:30:5e:dd:e0:72:fa:94:1f:11:3f: 86:7c:92:c5:0f:19:c4:c2:44:14:8a:11:10:6b:49:ba:c3:c2: 5c:8e:53:22:98:84:e6:8d:a6:3c:ac:54:8d:2a:d9:b1:29:2d: 29:d7:50:6f:ad:17:09:27:d4:01:62:7c:90:d3:77:40:5a:05: 94:87:34:80:c6:61:ab:0c:d8:23:c5:fd:c2:01:6b:bb:1b:ba: ab:98:1c:0f:ad:94:3b:00:75:db:0b:1a:7e:36:b9:d3:09:3e: 1c:d7:e3:90:4f:e8:53:bc:d0:93:5f:da:ae:73:a1:09:c1:7d: be:01:df:b6:62:16:db:d7:58:04:8b:8f:67:b9:a3:3c:30:d1: 75:69:ff:b4:f2:df:65:ad:48:23:ea:66:93:58:3a:a5:6f:c7: cb:c1:75:dc -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEusoKAT3qZ/hQi9MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyODE4MzAyM1oXDTI4MDExNzE1MDU1MVowLzEtMCsGA1UEAxMk ZWMzNjdiYjAtYTZlMC00NzY5LTllOTMtZThlOWI2YTFhY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6cBpBdT/BwUfqch9e4HAUSLMA+56WomQAxp PgrS3QZItWl3AkFK17WeK5tQqwE9dNu5GIWDu/kWpgj1d3F5dRi9g8cyFP3dMSu0 vbFVWQ+5niq3DpfscbwS3XQreztQfDvP4ferGnI6iOhs2481BPcBnSXQ9AyG4+rr RPjxwnVE3qIt76J3ohqaY7R7q3oSj+yMsBL9vPE0Rx1m8JjkENlRWiO2+eS6TAH7 KQP91kVZ/uzRuh5vAXGLHpM5pLwEuPgeysYJz+h5AvPkGQejq+mYiq2QHpmCK04v IPxCXcUCA7oravjKCBnb5FwDHQO2z4RmA6tn3tjF58FUD3yHZwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIn7V0s4fNGmc3A2fS3n5aUrtWmWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9l YzM2N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5YjZhMWFjYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2VjMzY3YmIwLWE2ZTAtNDc2OS05 ZTkzLWU4ZTliNmExYWNiOS9lYzM2N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5YjZh MWFjYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACO+C0wDgQCAAIwCAMGACYC9PIAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkjMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD4k1l36E7JsTUhf3YszNkf55/mC khhukjZy1YDD1LprbIx57kKq14RufvSJcuhgxybzwfeauFTUbpG7oAUCFUfJRkgU cI67sgk5kpklWRAsWTQwSx6fuoP0Wtr0dRCrUYQeMF7d4HL6lB8RP4Z8ksUPGcTC RBSKERBrSbrDwlyOUyKYhOaNpjysVI0q2bEpLSnXUG+tFwkn1AFifJDTd0BaBZSH NIDGYasM2CPF/cIBa7sbuquYHA+tlDsAddsLGn42udMJPhzX45BP6FO80JNf2q5z oQnBfb4B37ZiFtvXWASLj2e5ozww0XVp/7Ty32WtSCPqZpNYOqVvx8vBddw= -----END CERTIFICATE-----Generated at Wed Nov 5 13:59:54 2025 by rpki-client