$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4.cer File: 0f8ed543-19ca-48fe-a0cf-79f7a10432d4.cer (raw, json) Hash identifier: qtdlV6Qiacj6W1rIbkz0rHZF/bAoylGurnT3F4+dOU0= Subject key identifier: 80:2C:46:AE:48:E6:70:28:2F:6A:93:56:EB:2F:EB:C8:D7:E1:61:35 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8DDA59D7CB74A95D7AF91248 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4/0f8ed543-19ca-48fe-a0cf-79f7a10432d4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 17:56:38 +0000 Certificate not after: Thu 20 Jan 2028 18:56:38 +0000 Subordinate resources: IP: 130.12.72.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:da:59:d7:cb:74:a9:5d:7a:f9:12:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 17 17:56:38 2025 GMT Not After : Jan 20 18:56:38 2028 GMT Subject: CN=0f8ed543-19ca-48fe-a0cf-79f7a10432d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:02:15:30:1a:08:3d:75:16:47:6d:d0:97:8d: c0:ca:9d:68:e4:41:48:f1:4b:d5:da:ad:98:29:50: 3c:b8:f1:78:f5:7d:d0:46:30:f5:3a:69:b0:be:6c: ef:eb:c8:ef:d2:c6:ee:50:fa:31:c0:e3:64:ed:58: 08:ba:68:5d:e7:54:a5:3d:1d:79:1a:6b:8f:e5:3b: 94:b1:67:95:2d:ec:9c:3e:4d:3c:7e:5d:37:71:5a: b1:dd:24:d8:d0:5d:3e:40:77:d7:2b:f7:d7:5c:bc: 21:62:ef:67:b4:76:1d:50:68:da:d8:13:05:06:9d: 59:83:a5:15:62:36:02:92:70:1d:93:4b:26:28:ea: a8:62:66:76:8f:d5:9b:f7:52:5a:9e:cc:c3:2c:a9: 00:7f:2a:70:6b:d7:00:e9:ba:d4:ea:b0:1d:3f:f4: f6:17:12:0c:16:1d:31:d1:9c:3a:a7:78:5b:ca:97: 2b:3e:bf:34:00:81:87:9d:18:1e:63:2f:8e:3f:c4: 41:49:26:b4:f9:fa:39:69:7c:d7:64:00:83:6a:72: 1b:96:13:7e:79:e5:67:6c:39:bf:f4:fd:3c:9d:7a: cf:9d:b4:36:56:23:c4:53:ee:af:55:d4:16:56:7f: 2c:56:f7:27:20:26:5a:eb:90:c9:36:6c:30:42:95: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2C:46:AE:48:E6:70:28:2F:6A:93:56:EB:2F:EB:C8:D7:E1:61:35 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4/0f8ed543-19ca-48fe-a0cf-79f7a10432d4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 130.12.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:79:90:3e:f3:90:42:ba:21:7b:7c:54:07:de:dd:96:8e:52: 67:63:b2:aa:7b:09:b4:65:9b:65:a2:ee:84:36:51:e9:cb:fd: 76:11:f5:ae:ab:53:6c:a8:71:3c:58:8e:c1:65:c9:cb:2a:99: 01:ff:42:ca:2f:43:52:52:1c:7c:6a:bb:82:4e:3b:c9:c3:c3: 80:4f:d6:c0:6a:c9:a7:ec:7a:a9:2d:09:5e:0a:24:91:b7:da: 0a:fb:dc:4c:f4:cf:5d:04:e5:dd:f4:81:08:c6:ca:2b:32:d6: 0c:f9:6a:b5:c7:f6:7c:25:f1:6a:2f:66:22:0a:47:f1:44:5e: cc:60:24:a1:66:6c:c1:7f:76:dd:60:1b:f9:cc:53:a5:95:fa: 3f:4c:0e:40:5e:24:68:c1:bc:dd:fe:b6:76:d7:f0:e6:71:61: 0b:4d:2d:d1:0e:3d:fc:c7:65:cd:a5:c3:25:72:74:94:14:41: 88:a7:81:50:3e:e5:ca:9f:f3:b5:29:15:19:04:b7:48:be:04: 03:fc:1d:4b:14:70:65:68:6c:96:ca:bf:c7:a1:c6:f8:14:bf: 1c:35:a5:19:b8:d1:6a:85:cf:17:db:1a:4c:5f:a2:bf:51:dc: dd:c2:c1:fc:d4:b2:54:fa:a3:d7:de:db:16:33:5e:dc:14:c4: 71:ff:2f:de -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEuN2lnXy3SpXXr5EkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNzE3NTYzOFoXDTI4MDEyMDE4NTYzOFowLzEtMCsGA1UEAxMk MGY4ZWQ1NDMtMTljYS00OGZlLWEwY2YtNzlmN2ExMDQzMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAIVMBoIPXUWR23Ql43Ayp1o5EFI8UvV2q2Y KVA8uPF49X3QRjD1Ommwvmzv68jv0sbuUPoxwONk7VgIumhd51SlPR15GmuP5TuU sWeVLeycPk08fl03cVqx3STY0F0+QHfXK/fXXLwhYu9ntHYdUGja2BMFBp1Zg6UV YjYCknAdk0smKOqoYmZ2j9Wb91JanszDLKkAfypwa9cA6brU6rAdP/T2FxIMFh0x 0Zw6p3hbypcrPr80AIGHnRgeYy+OP8RBSSa0+fo5aXzXZACDanIblhN+eeVnbDm/ 9P08nXrPnbQ2ViPEU+6vVdQWVn8sVvcnICZa65DJNmwwQpXukQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIAsRq5I5nAoL2qTVusv68jX4WE1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8w ZjhlZDU0My0xOWNhLTQ4ZmUtYTBjZi03OWY3YTEwNDMyZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzBmOGVkNTQzLTE5Y2EtNDhmZS1h MGNmLTc5ZjdhMTA0MzJkNC8wZjhlZDU0My0xOWNhLTQ4ZmUtYTBjZi03OWY3YTEw NDMyZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKCDEgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKXmQPvOQQrohe3xUB97d lo5SZ2OyqnsJtGWbZaLuhDZR6cv9dhH1rqtTbKhxPFiOwWXJyyqZAf9Cyi9DUlIc fGq7gk47ycPDgE/WwGrJp+x6qS0JXgokkbfaCvvcTPTPXQTl3fSBCMbKKzLWDPlq tcf2fCXxai9mIgpH8URezGAkoWZswX923WAb+cxTpZX6P0wOQF4kaMG83f62dtfw 5nFhC00t0Q49/MdlzaXDJXJ0lBRBiKeBUD7lyp/ztSkVGQS3SL4EA/wdSxRwZWhs lsq/x6HG+BS/HDWlGbjRaoXPF9saTF+iv1Hc3cLB/NSyVPqj197bFjNe3BTEcf8v 3g== -----END CERTIFICATE-----Generated at Tue Oct 28 03:44:00 2025 by rpki-client