$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer File: 5e14e737-77b9-4efb-a5ea-e3119594a666.cer (raw, json) Hash identifier: ZjcZD1WixS1+GN4/qunmHbPfpgx9hUXFDPVN2NhLDCM= Subject key identifier: 43:0B:CC:D9:02:44:74:AC:73:0E:C2:8B:D0:21:83:BD:EE:06:4E:AB Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B7EC5631C0AC0C110B5CABF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Oct 2025 08:17:16 +0000 Certificate not after: Sat 15 Jan 2028 09:17:16 +0000 Subordinate resources: IP: 131.143.94.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7e:c5:63:1c:0a:c0:c1:10:b5:ca:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 12 08:17:16 2025 GMT Not After : Jan 15 09:17:16 2028 GMT Subject: CN=5e14e737-77b9-4efb-a5ea-e3119594a666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:50:a3:f1:a5:a6:a4:01:67:1b:a1:13:e3:f2: ad:f9:d5:84:77:d3:80:c4:d7:8f:90:e6:e1:0a:19: d9:33:98:ba:bf:39:a4:95:87:75:32:7a:00:03:5c: 2b:97:4b:bf:e0:ef:68:81:b8:39:27:05:f6:70:69: 0d:23:03:93:af:0d:b7:7f:95:4c:93:89:07:5f:0b: ee:b1:13:9d:30:31:8c:ec:0a:aa:d8:14:72:7d:73: ca:d7:ff:4d:20:ca:f4:80:52:13:00:bf:14:b5:7c: 9e:02:66:fb:fa:b6:0f:c6:c8:a3:dc:fc:0a:93:1e: 47:74:da:a2:66:c8:50:43:ef:56:2a:a1:a5:fa:ab: c0:c2:4e:ba:14:f0:11:6b:78:cf:83:17:13:34:59: 61:66:68:15:37:3b:a6:f2:a0:cb:9d:85:e2:b3:01: 6a:e8:70:42:05:8c:3a:87:3e:73:8f:eb:84:8c:f2: 25:f1:90:ac:d2:2e:b7:2a:08:29:e8:ae:3c:1d:3d: 7f:00:7a:9c:df:a0:64:ca:39:13:98:c1:7f:a0:4e: ed:17:a0:61:52:4f:9b:30:24:ee:85:9f:1f:fd:fe: 77:03:94:20:d3:7b:7f:0f:ac:48:02:87:e7:45:15: d1:b5:4f:13:16:15:3f:85:50:e4:1d:c8:c4:76:a9: 09:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0B:CC:D9:02:44:74:AC:73:0E:C2:8B:D0:21:83:BD:EE:06:4E:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 131.143.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:75:e3:e0:65:38:f7:15:c3:df:e8:4c:85:54:d5:dd:67:7b: cd:99:43:34:87:ba:ad:c4:e0:93:88:ad:46:d3:aa:d4:70:06: ca:26:a3:be:e8:b9:83:f9:b5:8f:4c:ba:c8:a0:86:b8:f1:f2: 19:c6:37:01:81:e6:cc:ca:17:76:81:6f:c6:31:f1:af:92:80: d9:5d:26:c8:cc:76:a4:7a:e5:e8:3d:c8:7c:1e:5a:a0:75:fe: ca:c7:f5:34:db:d9:4d:53:51:11:c0:fe:0f:44:d4:d2:2e:99: 7f:2f:1c:c8:41:d8:3c:c9:d0:56:2a:62:28:b4:13:54:d6:7a: 40:31:d3:5c:4c:3f:ce:69:24:cb:07:42:a0:b1:eb:50:6d:33: 80:81:5e:e9:cd:3c:89:8e:69:81:99:3d:01:59:fb:99:f5:5c: 17:c9:a8:4c:90:6d:30:43:87:91:f4:a3:f6:27:a7:2e:3c:7d: 8d:0d:7d:1b:35:f8:81:41:0a:b5:6b:bb:7b:ee:8c:69:51:3e: aa:c8:28:db:55:38:25:85:12:44:d1:e2:11:db:4d:7a:d1:b6: 99:21:ed:e6:29:07:8e:47:c7:ad:7c:72:78:35:93:18:b6:13: 74:52:5d:47:bb:9a:44:1d:55:88:8c:9d:9d:d3:6a:a5:ee:b8: 1b:02:8f:4b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt+xWMcCsDBELXKv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxMjA4MTcxNloXDTI4MDExNTA5MTcxNlowLzEtMCsGA1UEAxMk NWUxNGU3MzctNzdiOS00ZWZiLWE1ZWEtZTMxMTk1OTRhNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VCj8aWmpAFnG6ET4/Kt+dWEd9OAxNePkObh ChnZM5i6vzmklYd1MnoAA1wrl0u/4O9ogbg5JwX2cGkNIwOTrw23f5VMk4kHXwvu sROdMDGM7Aqq2BRyfXPK1/9NIMr0gFITAL8UtXyeAmb7+rYPxsij3PwKkx5HdNqi ZshQQ+9WKqGl+qvAwk66FPARa3jPgxcTNFlhZmgVNzum8qDLnYXiswFq6HBCBYw6 hz5zj+uEjPIl8ZCs0i63Kggp6K48HT1/AHqc36BkyjkTmMF/oE7tF6BhUk+bMCTu hZ8f/f53A5Qg03t/D6xIAofnRRXRtU8TFhU/hVDkHcjEdqkJmQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEMLzNkCRHSscw7Ci9Ahg73uBk6rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 ZTE0ZTczNy03N2I5LTRlZmItYTVlYS1lMzExOTU5NGE2NjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzVlMTRlNzM3LTc3YjktNGVmYi1h NWVhLWUzMTE5NTk0YTY2Ni81ZTE0ZTczNy03N2I5LTRlZmItYTVlYS1lMzExOTU5 NGE2NjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACDj14wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASXXj4GU49xXD3+hMhVTV 3Wd7zZlDNIe6rcTgk4itRtOq1HAGyiajvui5g/m1j0y6yKCGuPHyGcY3AYHmzMoX doFvxjHxr5KA2V0myMx2pHrl6D3IfB5aoHX+ysf1NNvZTVNREcD+D0TU0i6Zfy8c yEHYPMnQVipiKLQTVNZ6QDHTXEw/zmkkywdCoLHrUG0zgIFe6c08iY5pgZk9AVn7 mfVcF8moTJBtMEOHkfSj9ienLjx9jQ19GzX4gUEKtWu7e+6MaVE+qsgo21U4JYUS RNHiEdtNetG2mSHt5ikHjkfHrXxyeDWTGLYTdFJdR7uaRB1ViIydndNqpe64GwKP Sw== -----END CERTIFICATE-----Generated at Tue Oct 14 02:53:32 2025 by rpki-client