$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer File: 5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer (raw, json) Hash identifier: P5YEg40sM6c+lglcctAE761IONGzaBZoIx4HmBI2KDI= Subject key identifier: 63:BF:62:78:29:F9:F6:03:78:70:BB:75:A2:DA:25:A2:87:9D:E2:FC Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8259E4B382BE471675ED0280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 15:03:55 +0000 Certificate not after: Sun 16 Jan 2028 16:03:55 +0000 Subordinate resources: IP: 142.248.191.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:59:e4:b3:82:be:47:16:75:ed:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 13 15:03:55 2025 GMT Not After : Jan 16 16:03:55 2028 GMT Subject: CN=5895640f-fe62-4aa8-a59c-0cda4c49bda4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:80:57:92:87:28:80:90:07:22:61:f8:f9: 00:14:ba:bc:5d:b0:d8:39:0c:de:35:76:be:15:8a: 2d:40:c1:cc:4b:38:22:ed:9d:26:33:cd:ce:b3:08: 37:03:a3:95:ce:90:e0:0f:2f:f3:81:8c:c5:70:84: 2b:b7:a4:96:c1:4e:ba:d7:7c:9b:08:cd:42:0c:3e: bb:98:a2:e0:c3:43:fe:83:ad:60:df:16:75:4a:6a: 09:c5:2b:27:2b:0d:7b:f9:32:38:69:21:93:25:10: f1:38:b6:ec:b9:ec:a8:72:06:1b:3e:c1:8a:f4:35: 9a:0d:18:55:ab:dd:d7:1d:16:61:da:93:27:86:bb: 50:4d:a0:53:de:4c:83:d4:07:8e:07:22:5d:b6:e2: 8d:8d:1d:f6:a9:b0:4d:8d:d5:bc:98:ed:2b:04:54: de:9f:9c:5d:0a:5f:43:c0:81:5b:2c:b1:87:40:e7: d2:17:ce:3a:42:a1:cc:18:77:b5:90:61:1e:cc:ad: 2d:10:43:d7:5d:10:1a:da:e1:36:5c:47:5d:16:c6: 12:f5:f3:8f:71:43:12:00:2c:e2:2e:e9:10:4b:36: 10:65:49:a6:46:38:b5:c3:2b:bf:bd:14:57:99:7c: f2:05:28:22:39:38:75:09:30:1c:74:ab:eb:c2:0f: 5f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BF:62:78:29:F9:F6:03:78:70:BB:75:A2:DA:25:A2:87:9D:E2:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 142.248.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:97:94:69:c8:83:d1:d7:b8:e5:a3:2a:fe:42:b0:78:ec:a7: 53:25:57:f6:ea:ff:12:01:24:1c:2f:20:7c:96:5e:d1:02:c0: b6:95:47:a4:dc:b0:bf:4a:09:47:d5:be:9b:e9:e9:60:71:1a: aa:61:0d:3a:d9:66:69:33:06:55:76:11:ab:50:f1:2a:a9:eb: 8f:4d:69:9b:3c:3b:db:20:11:12:89:2b:3a:2c:a0:0b:af:8b: 78:18:0d:07:d3:31:f2:fd:07:69:92:71:2f:ec:4d:57:64:12: 4d:f6:6c:2b:db:5a:23:72:56:54:2a:13:29:82:ac:b8:bd:f5: 88:82:8c:de:b4:3a:77:3e:3c:eb:80:02:40:32:fc:35:c7:e8: e6:b7:e9:b3:01:34:d9:25:0c:63:15:03:4f:9b:9f:3d:25:76: 18:9c:97:4b:23:d7:23:13:74:31:30:94:bd:31:f0:aa:95:ab: 6b:85:af:e5:28:c8:37:b7:06:a1:1e:fc:78:8e:87:18:52:f7: 34:c3:4f:8c:5f:d4:e1:7d:f3:bf:43:1b:37:5b:eb:b6:24:19: 19:5a:fb:63:f1:18:a5:66:28:7d:b4:8f:57:93:86:2d:b9:74: f6:74:a1:66:5d:5c:a5:be:92:0e:a0:7a:12:3c:61:f3:5e:e7: 4a:ba:1f:3e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEuCWeSzgr5HFnXtAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxMzE1MDM1NVoXDTI4MDExNjE2MDM1NVowLzEtMCsGA1UEAxMk NTg5NTY0MGYtZmU2Mi00YWE4LWE1OWMtMGNkYTRjNDliZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FmAV5KHKICQByJh+PkAFLq8XbDYOQzeNXa+ FYotQMHMSzgi7Z0mM83Oswg3A6OVzpDgDy/zgYzFcIQrt6SWwU6613ybCM1CDD67 mKLgw0P+g61g3xZ1SmoJxSsnKw17+TI4aSGTJRDxOLbsueyocgYbPsGK9DWaDRhV q93XHRZh2pMnhrtQTaBT3kyD1AeOByJdtuKNjR32qbBNjdW8mO0rBFTen5xdCl9D wIFbLLGHQOfSF846QqHMGHe1kGEezK0tEEPXXRAa2uE2XEddFsYS9fOPcUMSACzi LukQSzYQZUmmRji1wyu/vRRXmXzyBSgiOTh1CTAcdKvrwg9fzwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGO/Yngp+fYDeHC7daLaJaKHneL8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 ODk1NjQwZi1mZTYyLTRhYTgtYTU5Yy0wY2RhNGM0OWJkYTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzU4OTU2NDBmLWZlNjItNGFhOC1h NTljLTBjZGE0YzQ5YmRhNC81ODk1NjQwZi1mZTYyLTRhYTgtYTU5Yy0wY2RhNGM0 OWJkYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACO+L8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf5eUaciD0de45aMq/kKw eOynUyVX9ur/EgEkHC8gfJZe0QLAtpVHpNywv0oJR9W+m+npYHEaqmENOtlmaTMG VXYRq1DxKqnrj01pmzw72yAREokrOiygC6+LeBgNB9Mx8v0HaZJxL+xNV2QSTfZs K9taI3JWVCoTKYKsuL31iIKM3rQ6dz4864ACQDL8Ncfo5rfpswE02SUMYxUDT5uf PSV2GJyXSyPXIxN0MTCUvTHwqpWra4Wv5SjIN7cGoR78eI6HGFL3NMNPjF/U4X3z v0MbN1vrtiQZGVr7Y/EYpWYofbSPV5OGLbl09nShZl1cpb6SDqB6Ejxh817nSrof Pg== -----END CERTIFICATE-----Generated at Tue Oct 14 02:51:34 2025 by rpki-client