$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6.cer File: f0e38106-b42f-4661-8168-b943de3f70a6.cer (raw, json) Hash identifier: ObhqnqYRVUhJb63KdLpB16YUx9DN0z/+23MURbOexQ8= Subject key identifier: 13:F5:EE:02:D8:EB:68:CA:7D:26:14:A5:BB:07:11:08:97:3C:7A:50 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BB23F8DAF7B1BA69D97616980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/f0e38106-b42f-4661-8168-b943de3f70a6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Oct 2025 18:49:38 +0000 Certificate not after: Wed 02 Feb 2028 19:49:38 +0000 Subordinate resources: IP: 2602:f993::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:3f:8d:af:7b:1b:a6:9d:97:61:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 30 18:49:38 2025 GMT Not After : Feb 2 19:49:38 2028 GMT Subject: CN=f0e38106-b42f-4661-8168-b943de3f70a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:27:5b:4e:3a:93:31:12:66:aa:c4:4c:b7:8c: 94:83:36:04:a6:0d:7b:87:10:c8:e5:75:13:9f:c9: 8a:3d:e2:78:18:0e:82:9b:4b:4e:89:a8:d2:93:9e: e5:56:0b:08:65:27:f1:e2:61:6f:4b:a1:3f:f2:dc: 51:ed:f3:bf:6c:74:b9:3f:12:39:3b:d2:7c:13:7c: 4f:7d:f2:d4:fc:5d:87:6d:43:3a:34:bd:4b:08:94: 67:63:7e:3b:38:fb:03:8e:ec:e8:85:cd:96:8f:de: 8b:77:91:79:8a:bb:4f:f2:38:14:05:99:43:de:a6: 1a:0f:5c:05:11:73:8f:de:c0:4a:65:14:cc:5e:36: 5a:25:5a:c3:c3:f4:6e:4e:42:a7:02:f5:f9:08:e2: e6:ba:0c:6b:3f:5a:1b:66:40:8e:f2:fa:f2:5a:14: 22:b0:18:ae:7b:1f:0b:04:77:9a:c6:df:4b:81:1b: 7a:55:30:21:16:50:76:6b:e3:97:3a:92:9a:28:13: d7:ad:52:77:ad:93:72:b6:35:88:92:b2:74:f4:a5: 99:75:3c:1e:2c:23:71:a1:90:9f:c5:25:ac:3e:6b: d9:0a:85:f9:c8:f0:20:29:df:39:9c:9d:31:5a:67: 50:31:3d:e5:fe:36:5d:cb:42:61:e6:68:e8:74:7b: 08:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F5:EE:02:D8:EB:68:CA:7D:26:14:A5:BB:07:11:08:97:3C:7A:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/f0e38106-b42f-4661-8168-b943de3f70a6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv6: 2602:f993::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c1:9c:46:2e:d7:a0:a0:67:69:a1:7d:52:b2:34:68:ee:0e: 34:92:4b:e8:85:cf:54:e6:1a:55:62:dd:22:6e:4b:54:cf:e5: 93:07:f5:35:a6:4e:47:ca:df:68:7d:4e:82:bc:6f:5c:bc:1a: ad:78:bd:66:29:b9:98:82:07:69:aa:e0:4b:68:43:c1:78:66: ca:8c:3d:b9:b8:6d:bc:5a:83:2c:e5:a2:e8:00:73:38:ae:0a: d3:ae:70:3a:73:a9:10:56:4c:c7:a0:b8:0f:64:35:fe:cb:b4: bc:07:79:76:2a:e3:e8:02:b8:7c:f8:99:26:3a:81:ba:03:ce: be:18:1a:65:8d:b2:03:13:3f:61:21:1d:e8:4d:3a:1b:bb:17: ea:76:c8:6a:3f:dd:65:5d:f5:10:9f:32:e9:ef:2d:b7:7e:55: 16:f9:24:7a:c5:65:0e:7f:7d:54:c7:c1:3f:2d:c8:f4:43:39: 73:2e:f8:e1:ea:b6:ab:0e:bc:fb:12:37:a3:98:92:1c:11:f6: 60:4f:dd:ed:cf:9a:51:e0:d2:3b:07:90:f3:83:66:a7:77:97: dd:0c:a3:5b:b2:5c:95:e4:96:a9:33:84:3f:11:48:df:6d:69: df:93:e8:64:47:e1:64:78:6a:0f:29:fe:5e:7d:0f:20:bc:17: 4a:ed:1b:e7 -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEuyP42vexumnZdhaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAzMDE4NDkzOFoXDTI4MDIwMjE5NDkzOFowLzEtMCsGA1UEAxMk ZjBlMzgxMDYtYjQyZi00NjYxLTgxNjgtYjk0M2RlM2Y3MGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgydbTjqTMRJmqsRMt4yUgzYEpg17hxDI5XUT n8mKPeJ4GA6Cm0tOiajSk57lVgsIZSfx4mFvS6E/8txR7fO/bHS5PxI5O9J8E3xP ffLU/F2HbUM6NL1LCJRnY347OPsDjuzohc2Wj96Ld5F5irtP8jgUBZlD3qYaD1wF EXOP3sBKZRTMXjZaJVrDw/RuTkKnAvX5COLmugxrP1obZkCO8vryWhQisBiuex8L BHeaxt9LgRt6VTAhFlB2a+OXOpKaKBPXrVJ3rZNytjWIkrJ09KWZdTweLCNxoZCf xSWsPmvZCoX5yPAgKd85nJ0xWmdQMT3l/jZdy0Jh5mjodHsILQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFBP17gLY62jKfSYUpbsHEQiXPHpQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m MGUzODEwNi1iNDJmLTQ2NjEtODE2OC1iOTQzZGUzZjcwYTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2YwZTM4MTA2LWI0MmYtNDY2MS04 MTY4LWI5NDNkZTNmNzBhNi9mMGUzODEwNi1iNDJmLTQ2NjEtODE2OC1iOTQzZGUz ZjcwYTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmAvmTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD7BnEYu16CgZ2mhfVKy NGjuDjSSS+iFz1TmGlVi3SJuS1TP5ZMH9TWmTkfK32h9ToK8b1y8Gq14vWYpuZiC B2mq4EtoQ8F4ZsqMPbm4bbxagyzlougAcziuCtOucDpzqRBWTMeguA9kNf7LtLwH eXYq4+gCuHz4mSY6gboDzr4YGmWNsgMTP2EhHehNOhu7F+p2yGo/3WVd9RCfMunv Lbd+VRb5JHrFZQ5/fVTHwT8tyPRDOXMu+OHqtqsOvPsSN6OYkhwR9mBP3e3PmlHg 0jsHkPODZqd3l90Mo1uyXJXklqkzhD8RSN9tad+T6GRH4WR4ag8p/l59DyC8F0rt G+c= -----END CERTIFICATE-----Generated at Thu Nov 6 04:29:12 2025 by rpki-client