$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer File: c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer (raw, json) Hash identifier: SLxiN4EJzwdm2XT2tQ+54oogLzgZcSbWjp1TNMQiOWo= Subject key identifier: DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B820CE9D3CC6B4B6A8D8C6B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 12:28:48 +0000 Certificate not after: Sun 16 Jan 2028 13:28:48 +0000 Subordinate resources: IP: 140.235.12.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:0c:e9:d3:cc:6b:4b:6a:8d:8c:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 13 12:28:48 2025 GMT Not After : Jan 16 13:28:48 2028 GMT Subject: CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f5:e4:1b:70:27:24:21:5f:d5:c0:8f:68:b5: 08:13:de:71:81:f7:9c:d9:70:e4:ed:e5:7c:0c:d6: ed:d7:95:4a:13:6e:09:d2:69:fd:72:4e:0f:ff:0f: 2d:bc:a9:7a:99:bb:7b:08:b7:5d:bd:93:3f:f8:26: af:ec:db:92:ed:79:d4:b2:a7:91:4c:c9:b8:32:73: c7:df:fa:f2:74:b5:be:86:2d:3e:7d:f1:71:ae:ae: 72:6b:cf:c4:4f:49:5b:e8:b1:41:ef:b0:41:9f:84: 60:97:3c:dd:34:9d:02:d7:7c:72:07:69:e5:c4:d9: 92:2f:57:d0:a5:d4:51:5d:b3:50:d3:31:47:43:9a: 85:73:e2:b7:65:b8:f6:56:d2:8f:1e:11:9d:e2:ef: 5b:bd:39:08:07:30:b1:17:d2:05:28:ed:cf:35:d6: c1:dc:f5:7f:78:3d:74:b1:bd:04:2e:6f:b4:d2:7a: ce:2d:b4:b5:e1:bc:fa:6d:ef:89:06:5c:86:a4:65: 9f:6d:a8:89:0a:05:e2:ce:f9:e4:51:c6:03:e7:5f: 61:34:ae:18:18:d7:c6:e3:06:87:7d:ac:57:34:87: 43:36:ea:68:fe:07:45:d6:33:48:ed:b6:41:4b:86: c0:3b:6c:cf:c6:c1:f0:3a:22:d0:e6:69:da:fa:ba: 87:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 140.235.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a5:c7:22:19:3c:f1:a3:6a:0e:ee:41:2d:30:e0:58:d6:2a: 8e:14:41:eb:4b:d0:26:e9:4f:7e:cc:e6:71:aa:00:ab:4e:8b: 08:8d:a9:b5:7f:87:28:39:8e:71:34:a8:81:b0:1a:0e:11:97: 33:92:52:b6:4e:2f:66:d3:bb:27:c5:5d:01:92:41:f7:b0:07: 79:2c:34:62:04:63:54:10:86:a2:e8:1a:53:62:a9:b3:8f:27: cb:21:f6:a0:a1:1f:55:33:71:d8:e6:38:34:42:8a:a5:ef:1b: 94:bf:3c:f2:68:14:bd:f0:0e:78:a1:87:9b:ba:cb:3b:a1:f2: e8:58:c4:ef:e5:23:3c:8c:44:41:c2:9c:5c:75:2b:0b:b3:99: aa:7d:e9:57:05:c8:26:2f:7c:30:27:3e:1f:ef:7a:20:dd:ef: a3:e1:4e:eb:c0:0b:56:5e:70:0a:ab:66:f3:f5:4c:82:31:39: b5:01:2e:f2:7a:66:c3:38:06:3a:67:3a:d3:a2:d3:18:bf:78: c3:66:af:7d:51:e1:9a:3c:78:44:a7:61:ab:2f:7f:49:b6:e9: 71:38:62:70:43:e2:30:f5:ff:10:ec:d9:da:26:d1:1a:18:4c: 4e:97:bf:c0:fc:f9:12:91:f5:f5:e6:14:eb:0b:a5:ec:35:2e: b3:46:88:78 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEuCDOnTzGtLao2MawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxMzEyMjg0OFoXDTI4MDExNjEzMjg0OFowLzEtMCsGA1UEAxMk YzhlZmVhMDQtYTRjNi00OGQ1LWI5NTUtNGE1Yjg2Y2NkMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifXkG3AnJCFf1cCPaLUIE95xgfec2XDk7eV8 DNbt15VKE24J0mn9ck4P/w8tvKl6mbt7CLddvZM/+Cav7NuS7XnUsqeRTMm4MnPH 3/rydLW+hi0+ffFxrq5ya8/ET0lb6LFB77BBn4RglzzdNJ0C13xyB2nlxNmSL1fQ pdRRXbNQ0zFHQ5qFc+K3Zbj2VtKPHhGd4u9bvTkIBzCxF9IFKO3PNdbB3PV/eD10 sb0ELm+00nrOLbS14bz6be+JBlyGpGWfbaiJCgXizvnkUcYD519hNK4YGNfG4waH faxXNIdDNupo/gdF1jNI7bZBS4bAO2zPxsHwOiLQ5mna+rqHvwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNsxdxTMVDMrQlYlGjeyZS60HUjpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j OGVmZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTViODZjY2QzMDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2M4ZWZlYTA0LWE0YzYtNDhkNS1i OTU1LTRhNWI4NmNjZDMwMC9jOGVmZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTViODZj Y2QzMDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKM6wwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHaXHIhk88aNqDu5BLTDg WNYqjhRB60vQJulPfszmcaoAq06LCI2ptX+HKDmOcTSogbAaDhGXM5JStk4vZtO7 J8VdAZJB97AHeSw0YgRjVBCGougaU2Kps48nyyH2oKEfVTNx2OY4NEKKpe8blL88 8mgUvfAOeKGHm7rLO6Hy6FjE7+UjPIxEQcKcXHUrC7OZqn3pVwXIJi98MCc+H+96 IN3vo+FO68ALVl5wCqtm8/VMgjE5tQEu8npmwzgGOmc606LTGL94w2avfVHhmjx4 RKdhqy9/SbbpcThicEPiMPX/EOzZ2ibRGhhMTpe/wPz5EpH19eYU6wul7DUus0aI eA== -----END CERTIFICATE-----Generated at Tue Oct 14 02:51:35 2025 by rpki-client