$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer File: 85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer (raw, json) Hash identifier: DbCESnCimHJgzO8ML2HmV87NkdTkWgzi66fwzwI3EM0= Subject key identifier: 0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A073A435F205A278A2A618140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 May 2025 19:48:49 +0000 Certificate not after: Thu 02 Sep 2027 19:48:49 +0000 Subordinate resources: AS: 40346 IP: 199.48.248.0/22 IP: 2602:816:8000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:3a:43:5f:20:5a:27:8a:2a:61:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 30 19:48:49 2025 GMT Not After : Sep 2 19:48:49 2027 GMT Subject: CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a4:08:e6:ce:39:5e:89:7e:6e:07:ac:cb:ae: d0:b0:01:c4:85:78:c3:f8:6e:31:2f:25:1f:09:de: 35:40:06:73:ee:94:96:c6:c1:0c:5b:33:a7:3b:70: 36:2a:8d:39:1e:a8:c1:fe:f6:0e:9f:c6:4c:5f:25: 23:43:ab:e8:4e:77:f9:35:1e:43:75:c4:f0:5e:51: 44:2a:f4:41:83:40:2b:99:20:57:8b:4f:24:c5:66: 60:56:06:13:c5:ef:cf:87:3c:20:0c:66:c6:e8:b7: c4:93:3e:56:f5:e3:9f:d5:5e:a1:d9:22:c9:d7:4d: f6:27:d4:f7:7e:45:ed:f8:93:65:52:62:9c:7b:17: 6d:bc:05:df:23:96:01:20:da:32:7c:9d:1c:ea:ae: 49:02:34:d9:3a:01:2f:02:d8:15:0f:b1:cf:42:03: cb:cb:7e:66:45:f1:42:ae:20:68:f7:8c:7a:8b:e4: c6:7a:f7:84:c2:e0:ce:55:6f:46:92:18:a4:89:70: 44:36:30:91:70:a8:d9:e8:64:8c:11:1c:6b:82:cf: 2f:0e:d8:df:95:51:f3:c8:1c:27:e7:99:d0:05:e1: 54:b4:76:78:2e:e5:21:d8:ba:60:a2:2e:1c:c2:57: 9f:ea:1b:bc:22:5a:ea:89:60:20:6a:63:86:42:77: 7f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.48.248.0/22 IPv6: 2602:816:8000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40346 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:65:19:99:d7:27:34:12:2d:c9:fb:ff:fb:db:71:f9:9c:15: 01:f2:cd:82:29:89:38:0f:c2:8c:71:31:3f:da:a1:8f:7c:18: c2:b5:95:c6:23:c2:32:ba:b3:58:38:85:f9:f2:50:53:f8:80: 44:1b:15:b6:c2:fa:cc:ef:ad:4e:6d:0b:27:ea:4d:da:5f:6a: a2:85:06:5d:31:fe:41:f6:69:7c:e6:a6:ba:c5:49:79:77:ad: 27:f8:ee:73:53:92:65:9f:e8:b5:f1:30:d4:ba:9b:7d:a5:2f: b2:60:2f:8e:6e:0f:34:23:0e:58:41:72:3b:18:18:28:4f:5c: 0d:66:b4:d5:be:f2:c8:e1:4b:73:77:95:0b:c3:f4:3f:4c:7e: a4:31:56:34:fe:43:29:25:ad:c2:e9:3d:bd:b8:3f:6b:4d:c4: 00:0c:41:51:97:0a:e0:a9:90:c3:eb:3a:39:43:2b:03:a0:b8: 8b:d2:a3:81:95:a0:34:bb:ca:9a:59:07:82:f8:5a:f2:4f:88: 38:6f:36:1c:d8:74:47:e9:cd:1e:dc:d2:05:8f:c0:13:11:43: b5:d9:74:8f:41:e6:61:16:13:11:38:cf:a4:ad:2f:41:86:7b: ff:d1:60:77:b4:26:c8:e4:5d:4e:85:40:87:b9:b1:ed:56:98: 2d:4a:eb:35 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEoHOkNfIFoniiphgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUzMDE5NDg0OVoXDTI3MDkwMjE5NDg0OVowLzEtMCsGA1UEAxMk ODViMmRlNzMtMWQ0Mi00NTk1LThjYjEtOWU4MmQ4NzNlZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqQI5s45Xol+bgesy67QsAHEhXjD+G4xLyUf Cd41QAZz7pSWxsEMWzOnO3A2Ko05HqjB/vYOn8ZMXyUjQ6voTnf5NR5DdcTwXlFE KvRBg0ArmSBXi08kxWZgVgYTxe/PhzwgDGbG6LfEkz5W9eOf1V6h2SLJ1032J9T3 fkXt+JNlUmKcexdtvAXfI5YBINoyfJ0c6q5JAjTZOgEvAtgVD7HPQgPLy35mRfFC riBo94x6i+TGeveEwuDOVW9GkhikiXBENjCRcKjZ6GSMERxrgs8vDtjflVHzyBwn 55nQBeFUtHZ4LuUh2Lpgoi4cwlef6hu8IlrqiWAgamOGQnd/rwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFA2WbuY11AzQEHD49XhRwkf09gwvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84 NWIyZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgyZDg3M2VlMWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzg1YjJkZTczLTFkNDItNDU5NS04 Y2IxLTllODJkODczZWUxYy84NWIyZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgyZDg3 M2VlMWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALHMPgwDgQCAAIwCAMGACYCCBaAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCdmjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVZRmZ1yc0Ei3J+//723H5nBUB 8s2CKYk4D8KMcTE/2qGPfBjCtZXGI8IyurNYOIX58lBT+IBEGxW2wvrM761ObQsn 6k3aX2qihQZdMf5B9ml85qa6xUl5d60n+O5zU5Jln+i18TDUupt9pS+yYC+Obg80 Iw5YQXI7GBgoT1wNZrTVvvLI4Utzd5ULw/Q/TH6kMVY0/kMpJa3C6T29uD9rTcQA DEFRlwrgqZDD6zo5QysDoLiL0qOBlaA0u8qaWQeC+FryT4g4bzYc2HRH6c0e3NIF j8ATEUO12XSPQeZhFhMROM+krS9Bhnv/0WB3tCbI5F1OhUCHubHtVpgtSus1 -----END CERTIFICATE-----Generated at Wed Nov 5 06:02:05 2025 by rpki-client