$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f49ad95e-d6cc-4bc9-89ae-ea547f4a4532.cer File: f49ad95e-d6cc-4bc9-89ae-ea547f4a4532.cer (raw, json) Hash identifier: 3t9mw2xNEmo/0Tz03eLmw/HJL26wn0CQrmgxBjBBf8c= Subject key identifier: D2:89:82:17:69:14:51:38:99:23:47:9A:53:C0:E5:D1:27:6F:A3:52 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B9E6A118DD2306F5DCE0C8420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f49ad95e-d6cc-4bc9-89ae-ea547f4a4532/f49ad95e-d6cc-4bc9-89ae-ea547f4a4532.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f49ad95e-d6cc-4bc9-89ae-ea547f4a4532/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Oct 2025 16:19:08 +0000 Certificate not after: Wed 26 Jan 2028 17:19:08 +0000 Subordinate resources: AS: 16854 IP: 139.138.106.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:6a:11:8d:d2:30:6f:5d:ce:0c:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 23 16:19:08 2025 GMT Not After : Jan 26 17:19:08 2028 GMT Subject: CN=f49ad95e-d6cc-4bc9-89ae-ea547f4a4532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:28:19:bd:1d:f6:22:30:93:50:5e:9e:a8:c6: 60:17:17:12:21:01:6c:19:98:bd:4d:d0:03:e5:be: e2:b3:ec:ad:a9:75:c8:c0:52:eb:10:ae:86:f4:41: 7a:b3:f6:f6:95:37:07:fb:4e:7d:83:27:4e:da:ed: 4b:b7:24:46:ad:f0:ca:5b:21:7d:fb:cf:d2:41:d9: c2:ee:16:51:60:ed:cd:81:94:3e:2a:6c:f8:34:15: d2:f7:1f:48:7c:02:aa:52:b0:a6:04:da:13:6f:38: 5e:1e:28:97:ea:d9:97:1f:61:01:aa:e9:54:8c:2a: c8:1d:16:0e:88:5c:6e:09:9a:f2:28:e1:04:75:2c: d5:18:89:ce:6c:53:90:b5:02:58:91:0b:58:fb:f1: fb:e8:3d:bc:47:19:cb:18:cd:98:37:30:d3:67:9c: 01:af:c8:21:ec:1e:94:64:3d:9a:40:67:c6:76:78: ac:9f:c8:4b:28:68:a6:51:78:2a:24:9c:f0:d3:e5: d3:74:ad:e7:bc:0e:0e:4f:bb:1d:85:f5:f5:12:19: e0:f5:8d:12:b4:06:81:ff:a6:f0:06:e5:fd:95:97: 98:a4:65:9e:03:75:d4:a6:49:b3:66:6a:ba:8a:34: 07:81:82:d7:42:60:f6:6d:99:20:70:a9:de:7f:82: cb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:89:82:17:69:14:51:38:99:23:47:9A:53:C0:E5:D1:27:6F:A3:52 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f49ad95e-d6cc-4bc9-89ae-ea547f4a4532/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f49ad95e-d6cc-4bc9-89ae-ea547f4a4532/f49ad95e-d6cc-4bc9-89ae-ea547f4a4532.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 139.138.106.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16854 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b3:d1:a7:15:9b:19:62:8a:99:d9:ec:d9:ff:ec:a9:7a:d1: 11:32:8b:3d:94:e8:82:09:54:2e:30:79:b2:32:7b:1c:88:0d: f1:fd:5b:84:56:bd:e3:ef:1e:e3:e7:f0:42:86:f1:54:48:76: 10:94:4e:d9:ba:85:1c:39:71:b9:ac:4a:44:68:0e:3a:94:60: fe:08:1f:9f:96:12:a8:1f:a3:fa:48:07:a5:f9:cb:01:4e:a2: d2:73:3c:6d:dc:2b:63:f7:60:b4:a1:18:f6:78:24:52:e2:83: 26:64:8d:98:ce:28:2b:f0:25:2a:bf:1d:e3:6b:b5:47:51:ca: cb:fe:1d:6c:c6:cd:37:ef:bd:69:4d:7c:3b:cf:2e:b7:7d:1c: 69:ef:9c:9e:96:28:9d:60:69:f6:9d:24:64:7e:35:a3:f4:d5: c7:d1:36:18:27:b0:38:08:ee:ca:3a:25:66:bf:fb:57:4d:0f: 45:f7:92:16:5b:b5:53:eb:2b:9f:8b:d5:e2:da:5e:5a:fe:c9: 62:c5:4f:32:0c:60:0e:89:71:a4:d5:9d:b9:97:7a:00:c8:62: 0d:d4:90:94:92:6f:12:39:0c:2a:c8:85:2f:c4:db:8c:14:d8: 11:ba:6d:7d:2e:27:0c:a4:a3:f5:cb:f4:3d:50:aa:97:cf:c0: 18:af:14:3d -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEueahGN0jBvXc4MhCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyMzE2MTkwOFoXDTI4MDEyNjE3MTkwOFowLzEtMCsGA1UEAxMk ZjQ5YWQ5NWUtZDZjYy00YmM5LTg5YWUtZWE1NDdmNGE0NTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjygZvR32IjCTUF6eqMZgFxcSIQFsGZi9TdAD 5b7is+ytqXXIwFLrEK6G9EF6s/b2lTcH+059gydO2u1LtyRGrfDKWyF9+8/SQdnC 7hZRYO3NgZQ+Kmz4NBXS9x9IfAKqUrCmBNoTbzheHiiX6tmXH2EBqulUjCrIHRYO iFxuCZryKOEEdSzVGInObFOQtQJYkQtY+/H76D28RxnLGM2YNzDTZ5wBr8gh7B6U ZD2aQGfGdnisn8hLKGimUXgqJJzw0+XTdK3nvA4OT7sdhfX1Ehng9Y0StAaB/6bw BuX9lZeYpGWeA3XUpkmzZmq6ijQHgYLXQmD2bZkgcKnef4LLFQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFNKJghdpFFE4mSNHmlPA5dEnb6NSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m NDlhZDk1ZS1kNmNjLTRiYzktODlhZS1lYTU0N2Y0YTQ1MzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Y0OWFkOTVlLWQ2Y2MtNGJjOS04 OWFlLWVhNTQ3ZjRhNDUzMi9mNDlhZDk1ZS1kNmNjLTRiYzktODlhZS1lYTU0N2Y0 YTQ1MzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGLimowGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC QdYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAdLPRpxWbGWKKmdns2f/sqXrRETKLPZTogglULjB5sjJ7HIgN 8f1bhFa94+8e4+fwQobxVEh2EJRO2bqFHDlxuaxKRGgOOpRg/ggfn5YSqB+j+kgH pfnLAU6i0nM8bdwrY/dgtKEY9ngkUuKDJmSNmM4oK/AlKr8d42u1R1HKy/4dbMbN N++9aU18O88ut30cae+cnpYonWBp9p0kZH41o/TVx9E2GCewOAjuyjolZr/7V00P RfeSFlu1U+srn4vV4tpeWv7JYsVPMgxgDolxpNWduZd6AMhiDdSQlJJvEjkMKsiF L8TbjBTYEbptfS4nDKSj9cv0PVCql8/AGK8UPQ== -----END CERTIFICATE-----Generated at Wed Nov 5 15:55:07 2025 by rpki-client