$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.cer File: 4b1a33d4-9e8c-465b-86d6-ab0b137cae90.cer (raw, json) Hash identifier: Ug0Te2aUSB8coVMo8n+Jzn692mrjFPqp1kQtb3mkQGU= Subject key identifier: C7:E0:75:FC:ED:F9:4B:CE:90:5C:01:CE:27:2A:43:3D:55:BF:D7:46 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B807644610FC25D80F4F27380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Oct 2025 22:49:28 +0000 Certificate not after: Sat 15 Jan 2028 23:49:28 +0000 Subordinate resources: IP: 74.115.124.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:76:44:61:0f:c2:5d:80:f4:f2:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 12 22:49:28 2025 GMT Not After : Jan 15 23:49:28 2028 GMT Subject: CN=4b1a33d4-9e8c-465b-86d6-ab0b137cae90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:ac:b3:cb:6b:4b:82:02:f7:f1:21:df:6d: 22:86:cf:c6:67:f8:7e:08:0b:91:e4:7d:db:16:74: 51:7a:dc:65:d9:ad:d3:01:b3:e4:0c:f6:bb:4d:ab: 20:b0:d7:a1:43:27:bf:2d:d0:6e:48:34:2c:f5:7b: 06:93:2b:a5:a5:8d:02:b3:01:d3:08:42:be:f4:53: 6b:2a:35:d3:1b:04:91:43:d9:e9:f2:f3:46:81:37: f8:d5:51:5a:6d:5f:52:fd:97:6b:1a:3c:84:54:f6: 49:03:88:b2:59:16:98:fa:d5:4c:be:66:b4:8c:21: 0c:01:83:a5:4d:79:66:86:a5:dd:b5:75:82:58:79: 8c:07:02:92:56:d2:74:01:ba:3b:0d:0a:45:25:2c: ac:e9:57:6a:2d:44:b7:a3:03:f0:cf:b0:8f:36:23: 05:08:62:98:58:9d:2f:5c:38:af:59:0a:62:5f:02: c8:82:ac:f0:ef:0b:b0:bf:2d:0e:3a:48:5b:7f:7d: 05:e6:a3:54:11:f4:8d:2c:9a:86:df:a4:d2:28:57: 04:98:e8:8f:ec:e3:d2:63:18:70:b4:e9:0d:b6:c7: 83:09:a5:9a:89:97:43:f5:a7:2f:42:99:f5:bf:a9: 2e:60:a0:48:76:ee:40:f6:e2:66:46:13:fd:91:f1: 7e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E0:75:FC:ED:F9:4B:CE:90:5C:01:CE:27:2A:43:3D:55:BF:D7:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 74.115.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:34:98:27:d6:08:ce:15:51:a3:58:42:39:36:05:b2:26:5d: 92:95:2b:6d:fa:ae:3b:b9:38:44:38:02:12:50:b6:df:ef:ca: ec:d4:8d:24:cb:f3:a3:09:70:8f:fa:51:b7:64:77:15:90:f7: 75:9c:d6:d1:65:5e:d1:30:83:ce:aa:3d:8c:fd:9b:1b:30:6f: 1f:8d:d2:3b:00:e7:46:17:1c:36:cb:50:5d:2d:5c:c6:b6:cc: df:42:e3:78:7b:93:b4:20:e7:74:3e:2a:af:14:99:49:e4:c5: ed:e3:ab:ec:7a:8f:62:f2:db:2a:a5:f0:b0:85:43:62:a0:c4: af:77:14:b8:86:3b:44:c8:d9:42:99:af:05:81:15:21:12:f2: 07:e7:38:99:f3:83:8e:5e:58:4f:27:73:2a:91:43:e4:41:fc: d7:fe:10:6f:26:19:59:5c:ad:67:25:9e:87:b2:ca:92:b6:53: a7:32:51:aa:c6:f9:db:f9:9b:38:19:58:81:eb:5b:d8:21:2b: 42:77:07:5e:15:84:ee:48:39:3f:7e:2d:28:67:3e:9e:55:74: 18:fe:e2:42:10:f8:dc:bc:a4:eb:ef:56:a7:99:06:1a:ab:9c: 7f:96:d6:be:f3:29:37:a2:b4:c9:3d:9d:3e:d8:c7:ff:33:07: 57:db:88:2c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEuAdkRhD8JdgPTyc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxMjIyNDkyOFoXDTI4MDExNTIzNDkyOFowLzEtMCsGA1UEAxMk NGIxYTMzZDQtOWU4Yy00NjViLTg2ZDYtYWIwYjEzN2NhZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq2ss8trS4IC9/Eh320ihs/GZ/h+CAuR5H3b FnRRetxl2a3TAbPkDPa7TasgsNehQye/LdBuSDQs9XsGkyulpY0CswHTCEK+9FNr KjXTGwSRQ9np8vNGgTf41VFabV9S/ZdrGjyEVPZJA4iyWRaY+tVMvma0jCEMAYOl TXlmhqXdtXWCWHmMBwKSVtJ0Abo7DQpFJSys6VdqLUS3owPwz7CPNiMFCGKYWJ0v XDivWQpiXwLIgqzw7wuwvy0OOkhbf30F5qNUEfSNLJqG36TSKFcEmOiP7OPSYxhw tOkNtseDCaWaiZdD9acvQpn1v6kuYKBIdu5A9uJmRhP9kfF+xwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMfgdfzt+UvOkFwBzicqQz1Vv9dGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 YjFhMzNkNC05ZThjLTQ2NWItODZkNi1hYjBiMTM3Y2FlOTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzRiMWEzM2Q0LTllOGMtNDY1Yi04 NmQ2LWFiMGIxMzdjYWU5MC80YjFhMzNkNC05ZThjLTQ2NWItODZkNi1hYjBiMTM3 Y2FlOTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKc3wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbjSYJ9YIzhVRo1hCOTYF siZdkpUrbfquO7k4RDgCElC23+/K7NSNJMvzowlwj/pRt2R3FZD3dZzW0WVe0TCD zqo9jP2bGzBvH43SOwDnRhccNstQXS1cxrbM30LjeHuTtCDndD4qrxSZSeTF7eOr 7HqPYvLbKqXwsIVDYqDEr3cUuIY7RMjZQpmvBYEVIRLyB+c4mfODjl5YTydzKpFD 5EH81/4QbyYZWVytZyWeh7LKkrZTpzJRqsb52/mbOBlYgetb2CErQncHXhWE7kg5 P34tKGc+nlV0GP7iQhD43Lyk6+9Wp5kGGqucf5bWvvMpN6K0yT2dPtjH/zMHV9uI LA== -----END CERTIFICATE-----Generated at Tue Oct 14 02:45:29 2025 by rpki-client