$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b.cer File: ae67a0de-7e5b-4366-9901-6c83fac47b0b.cer (raw, json) Hash identifier: l1DLQBdRqOQVlXmUAvgFgrhvanIULsSjouTXcSF4+Es= Subject key identifier: E4:45:C0:E7:03:12:70:8E:29:F5:A5:96:82:F9:D9:32:93:9E:09:62 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8273403A6756DE331DC06F38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/ae67a0de-7e5b-4366-9901-6c83fac47b0b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 15:55:00 +0000 Certificate not after: Sun 16 Jan 2028 16:55:00 +0000 Subordinate resources: AS: 6652 IP: 104.204.240.0/22 IP: 2620:136:8000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:73:40:3a:67:56:de:33:1d:c0:6f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 13 15:55:00 2025 GMT Not After : Jan 16 16:55:00 2028 GMT Subject: CN=ae67a0de-7e5b-4366-9901-6c83fac47b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:28:b6:3c:92:5e:3d:3a:c2:1c:a0:3d:d7:76: 5f:7f:77:84:10:66:a9:1e:e4:04:5e:56:98:19:b1: 93:75:21:84:5c:14:b9:84:3e:cf:95:13:ea:af:57: 09:e0:68:e0:2a:fd:3f:3a:2c:43:3b:5c:da:fb:86: 7e:a7:6f:53:50:1b:0a:0b:da:d2:e8:a1:5a:06:a3: 71:55:d4:f4:ee:ee:c0:8d:f0:73:98:b5:81:c0:56: d1:f9:50:17:19:70:43:c6:36:2a:12:d2:01:d6:2d: d9:e3:d3:58:a3:76:42:e6:23:3c:51:c3:a7:fa:16: d6:6c:46:2e:42:86:89:10:78:0e:d4:c2:fa:ba:ce: 00:d2:c9:f9:20:81:92:a3:c5:bf:b2:4e:c8:26:7a: f9:fc:6b:5b:ff:b1:70:07:ce:d5:a5:70:13:01:ac: 39:84:40:f4:f9:fc:8e:01:b2:9d:21:d7:5c:d4:53: d0:d1:4c:c1:41:6d:9b:cf:c5:f9:2e:53:a2:9d:80: 64:62:76:97:be:22:6d:f7:00:33:3a:dc:99:59:21: d0:7a:9b:db:64:25:82:8f:5f:fd:cb:27:b9:9c:1d: f2:05:a0:0f:86:c0:de:ec:f6:a3:89:fd:41:0a:b4: 86:ec:d3:dc:5f:cb:e2:c2:68:ab:fe:9e:98:c8:f2: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:45:C0:E7:03:12:70:8E:29:F5:A5:96:82:F9:D9:32:93:9E:09:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/ae67a0de-7e5b-4366-9901-6c83fac47b0b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 104.204.240.0/22 IPv6: 2620:136:8000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6652 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:74:a4:8b:e9:48:a9:f0:a2:71:03:d2:96:84:e9:7f:19:7d: 97:cf:b8:ab:9e:55:e7:8f:39:bd:6e:d5:1d:06:68:db:6f:7c: 74:b6:38:27:1e:ab:27:e5:82:44:ff:9d:6d:f0:74:43:32:ca: d1:4c:a0:b1:e8:3f:be:dd:31:d4:aa:63:76:4d:ec:05:d6:62: bc:87:26:89:a0:48:a1:04:a0:a5:77:f2:48:0d:5d:eb:3d:4c: c4:7b:35:d4:f4:0d:9b:c9:f4:46:82:08:5a:ff:1a:63:26:80: ac:81:8b:fe:de:8d:14:eb:71:c6:08:76:45:32:37:df:c7:81: cd:b8:90:53:34:ad:63:6f:6b:16:be:5e:12:8f:9f:54:fc:0e: d3:4b:24:27:9c:59:c5:f3:17:21:bd:8b:42:6f:04:14:49:c2: 0b:d7:34:a8:81:ff:ff:8b:40:33:76:1d:fe:80:9b:5b:cf:87: 76:b2:84:dc:03:72:9e:14:5f:6f:86:2c:0b:a8:dc:b0:fc:9e: 68:03:ed:e2:53:00:d7:e6:c3:28:8f:1b:0f:6f:2e:4d:44:0b: ad:ae:c2:f2:9e:a2:7c:36:b7:b7:e4:ff:2d:2c:a9:17:8f:d2: 76:f3:f2:60:7b:9d:e2:a8:40:21:28:d7:b9:ce:d5:0f:7c:0e: f9:d0:2b:75 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEuCc0A6Z1beMx3AbzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxMzE1NTUwMFoXDTI4MDExNjE2NTUwMFowLzEtMCsGA1UEAxMk YWU2N2EwZGUtN2U1Yi00MzY2LTk5MDEtNmM4M2ZhYzQ3YjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCi2PJJePTrCHKA913Zff3eEEGapHuQEXlaY GbGTdSGEXBS5hD7PlRPqr1cJ4GjgKv0/OixDO1za+4Z+p29TUBsKC9rS6KFaBqNx VdT07u7AjfBzmLWBwFbR+VAXGXBDxjYqEtIB1i3Z49NYo3ZC5iM8UcOn+hbWbEYu QoaJEHgO1ML6us4A0sn5IIGSo8W/sk7IJnr5/Gtb/7FwB87VpXATAaw5hED0+fyO AbKdIddc1FPQ0UzBQW2bz8X5LlOinYBkYnaXviJt9wAzOtyZWSHQepvbZCWCj1/9 yye5nB3yBaAPhsDe7Pajif1BCrSG7NPcX8viwmir/p6YyPLnwQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFORFwOcDEnCOKfWlloL52TKTngliMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h ZTY3YTBkZS03ZTViLTQzNjYtOTkwMS02YzgzZmFjNDdiMGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2FlNjdhMGRlLTdlNWItNDM2Ni05 OTAxLTZjODNmYWM0N2IwYi9hZTY3YTBkZS03ZTViLTQzNjYtOTkwMS02YzgzZmFj NDdiMGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAJozPAwDgQCAAIwCAMGACYgATaAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAhn8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGR0pIvpSKnwonED0paE6X8ZfZfP uKueVeePOb1u1R0GaNtvfHS2OCceqyflgkT/nW3wdEMyytFMoLHoP77dMdSqY3ZN 7AXWYryHJomgSKEEoKV38kgNXes9TMR7NdT0DZvJ9EaCCFr/GmMmgKyBi/7ejRTr ccYIdkUyN9/Hgc24kFM0rWNvaxa+XhKPn1T8DtNLJCecWcXzFyG9i0JvBBRJwgvX NKiB//+LQDN2Hf6Am1vPh3ayhNwDcp4UX2+GLAuo3LD8nmgD7eJTANfmwyiPGw9v Lk1EC62uwvKeonw2t7fk/y0sqReP0nbz8mB7neKoQCEo17nO1Q98DvnQK3U= -----END CERTIFICATE-----Generated at Tue Oct 14 02:51:33 2025 by rpki-client