$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9.cer File: 0e11dd15-4b74-4b7f-92f8-15cc426b84b9.cer (raw, json) Hash identifier: HwNBs0d9x5djuZNzwnac6rX3Cn+e382MnUjn6xBUZK0= Subject key identifier: 5B:64:81:C5:3B:05:91:DA:55:E6:27:ED:CF:87:DD:A2:81:2F:D0:99 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B9EDEEC7C4E7CE5B92E82FF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9/0e11dd15-4b74-4b7f-92f8-15cc426b84b9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Oct 2025 20:14:35 +0000 Certificate not after: Wed 26 Jan 2028 21:14:35 +0000 Subordinate resources: AS: 53861 IP: 50.115.16.0/20 IP: 2606:3680::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:de:ec:7c:4e:7c:e5:b9:2e:82:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 23 20:14:35 2025 GMT Not After : Jan 26 21:14:35 2028 GMT Subject: CN=0e11dd15-4b74-4b7f-92f8-15cc426b84b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ae:88:f0:eb:d6:ed:34:6c:e1:16:cf:61:a9: fe:a1:fd:36:2f:cd:23:8e:5b:b2:2e:7f:a6:57:62: f3:d2:60:42:fc:ea:5c:a2:44:39:3e:2f:c8:45:ea: 82:47:9a:4f:45:d3:0e:cd:9c:17:a2:5c:bd:08:a2: 82:5d:80:b6:14:4e:6f:96:89:e8:2a:6a:77:c0:e6: 9a:81:f9:2e:99:5d:df:43:2f:3f:82:e8:af:5e:42: 7a:32:3c:93:84:54:06:87:64:0e:b9:8f:48:02:2e: 1e:e5:df:98:f0:df:57:a4:1f:81:5d:a9:8b:3b:30: b5:60:aa:e9:e0:55:e1:1e:8d:94:46:db:2a:cf:62: a5:09:db:f7:0e:4d:49:bf:f1:d8:98:8a:0e:e7:6a: 20:55:27:1a:88:a9:06:be:0d:21:1c:4a:09:88:07: ed:55:04:37:1f:af:c5:94:66:2e:9f:2f:48:ba:a6: 66:e8:e5:83:89:de:05:f5:88:b3:a7:17:19:e5:42: c5:1a:79:56:d4:e5:54:79:f5:91:bc:07:55:85:52: ee:6d:f1:7c:40:ec:78:26:f6:c3:c5:4c:b3:94:21: 9a:41:db:7f:13:b7:1f:26:b8:82:31:de:03:d8:db: 24:7f:39:18:54:fc:21:93:fc:f6:5c:4c:d6:a5:1c: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:64:81:C5:3B:05:91:DA:55:E6:27:ED:CF:87:DD:A2:81:2F:D0:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9/0e11dd15-4b74-4b7f-92f8-15cc426b84b9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 50.115.16.0/20 IPv6: 2606:3680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53861 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a3:d9:15:9b:45:ea:e6:d1:13:1e:5c:a6:7a:7b:65:d1:e6: 22:10:ec:b6:ae:f5:2a:e2:66:78:df:60:4e:16:21:f7:fb:1b: 9c:1e:4e:7d:d0:b9:66:7d:c0:d7:3a:ef:0b:18:73:54:f9:66: 33:bd:c3:2d:29:e6:b6:07:8c:6e:ab:e4:4b:a2:68:8f:e3:15: de:6e:74:ad:27:f5:c2:9e:a5:bc:f9:35:b8:18:b7:b9:76:35: 40:82:42:4f:eb:00:55:8a:09:4b:8d:f8:77:87:d1:07:a7:fc: 52:6e:5f:4e:31:59:a1:f7:18:9a:d5:4c:27:df:8c:c1:3a:f2: ee:7d:f4:96:77:39:8c:7e:4e:bc:0e:07:a2:b4:ce:31:f2:70: 93:29:cb:34:50:5b:74:29:e7:5b:b5:3c:26:a4:f0:9e:f6:98: cd:9c:3e:27:89:85:29:5a:73:13:1d:cb:38:2a:ca:f3:4b:6b: f3:98:f9:43:82:9b:1f:71:f4:c9:96:10:5f:18:1e:c0:92:f1: 3d:73:a7:af:43:05:17:8f:3d:74:e6:cf:7c:25:db:e4:dd:3c: a9:7c:6e:32:0b:de:24:2c:2f:35:3a:b2:94:f3:da:a2:10:47: 6b:3e:7b:ef:7b:5e:f1:10:a8:0e:0a:71:51:43:13:12:49:10: a7:1e:d9:f2 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEue3ux8TnzluS6C/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyMzIwMTQzNVoXDTI4MDEyNjIxMTQzNVowLzEtMCsGA1UEAxMk MGUxMWRkMTUtNGI3NC00YjdmLTkyZjgtMTVjYzQyNmI4NGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma6I8OvW7TRs4RbPYan+of02L80jjluyLn+m V2Lz0mBC/OpcokQ5Pi/IReqCR5pPRdMOzZwXoly9CKKCXYC2FE5vlonoKmp3wOaa gfkumV3fQy8/guivXkJ6MjyThFQGh2QOuY9IAi4e5d+Y8N9XpB+BXamLOzC1YKrp 4FXhHo2URtsqz2KlCdv3Dk1Jv/HYmIoO52ogVScaiKkGvg0hHEoJiAftVQQ3H6/F lGYuny9IuqZm6OWDid4F9YizpxcZ5ULFGnlW1OVUefWRvAdVhVLubfF8QOx4JvbD xUyzlCGaQdt/E7cfJriCMd4D2NskfzkYVPwhk/z2XEzWpRz2hwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFtkgcU7BZHaVeYn7c+H3aKBL9CZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8w ZTExZGQxNS00Yjc0LTRiN2YtOTJmOC0xNWNjNDI2Yjg0YjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzBlMTFkZDE1LTRiNzQtNGI3Zi05 MmY4LTE1Y2M0MjZiODRiOS8wZTExZGQxNS00Yjc0LTRiN2YtOTJmOC0xNWNjNDI2 Yjg0YjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAQycxAwDQQCAAIwBwMFACYGNoAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANJlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAyj2RWbRerm0RMeXKZ6e2XR5iIQ 7Lau9SriZnjfYE4WIff7G5weTn3QuWZ9wNc67wsYc1T5ZjO9wy0p5rYHjG6r5Eui aI/jFd5udK0n9cKepbz5NbgYt7l2NUCCQk/rAFWKCUuN+HeH0Qen/FJuX04xWaH3 GJrVTCffjME68u599JZ3OYx+TrwOB6K0zjHycJMpyzRQW3Qp51u1PCak8J72mM2c PieJhSlacxMdyzgqyvNLa/OY+UOCmx9x9MmWEF8YHsCS8T1zp69DBRePPXTmz3wl 2+TdPKl8bjIL3iQsLzU6spTz2qIQR2s+e+97XvEQqA4KcVFDExJJEKce2fI= -----END CERTIFICATE-----Generated at Sat Oct 25 22:14:39 2025 by rpki-client