$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1bd878cc-1079-46d4-959f-269b96f739ad.cer File: 1bd878cc-1079-46d4-959f-269b96f739ad.cer (raw, json) Hash identifier: PVgravx52weoNZQ59mvxUshz6fyVtRfS1PzvFetx3pQ= Subject key identifier: CD:BE:23:42:81:B1:AD:CF:25:9C:24:9E:B5:36:89:96:3F:7D:1A:9D Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BAC193D52BC5BBF69BDC1F000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1bd878cc-1079-46d4-959f-269b96f739ad/1bd878cc-1079-46d4-959f-269b96f739ad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1bd878cc-1079-46d4-959f-269b96f739ad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Oct 2025 13:57:35 +0000 Certificate not after: Mon 31 Jan 2028 14:57:35 +0000 Subordinate resources: AS: 19793 IP: 216.235.216.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ac:19:3d:52:bc:5b:bf:69:bd:c1:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 28 13:57:35 2025 GMT Not After : Jan 31 14:57:35 2028 GMT Subject: CN=1bd878cc-1079-46d4-959f-269b96f739ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:09:10:4f:c0:55:07:31:91:bd:2e:05:26:22: 3f:2b:84:ea:6f:49:f1:77:66:f0:b0:6b:b2:85:c6: 62:dd:ea:8a:d2:a0:cc:b2:71:2a:1f:fd:cd:e4:2b: b8:7f:40:84:84:40:1a:30:56:2e:b6:fe:78:1c:0e: 9d:93:d4:2a:63:cc:0f:18:08:d8:19:1b:32:9a:4b: 8b:85:f1:bf:10:41:7d:75:0e:1b:bc:59:06:d4:22: 7d:42:3b:18:2a:2a:8f:9a:17:4c:f7:ad:d9:d7:3a: 48:7e:f4:91:9e:a9:cb:ca:36:89:7a:63:65:61:09: a1:07:50:d6:59:d0:13:9a:e1:e1:18:8a:4d:4c:91: f0:8b:35:ff:ae:c7:ee:38:c2:cf:fa:99:d5:b4:e5: 8f:ea:19:78:7b:ed:9b:9b:ed:75:5c:a5:0f:d2:1d: f5:af:d8:3c:5d:3c:16:83:40:72:44:d8:0f:b0:60: 66:7f:97:66:76:9b:c9:01:1f:62:1f:f7:dc:3e:88: 99:7d:e3:5b:cd:cd:5e:63:07:55:a8:08:a6:03:79: 40:3e:32:8c:f2:59:9d:62:72:1f:11:6b:5a:1c:69: 97:f6:39:cc:df:37:3f:73:ee:95:ab:1a:70:8d:e7: 5f:26:87:b3:2a:55:f2:c0:23:7e:ef:c6:b6:8e:cf: 75:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BE:23:42:81:B1:AD:CF:25:9C:24:9E:B5:36:89:96:3F:7D:1A:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1bd878cc-1079-46d4-959f-269b96f739ad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1bd878cc-1079-46d4-959f-269b96f739ad/1bd878cc-1079-46d4-959f-269b96f739ad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 216.235.216.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19793 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:6d:ed:6f:cf:d4:20:82:9e:ca:e8:8e:06:cc:d1:dc:bf:d1: 41:08:b9:ad:c0:f6:a2:b3:80:b3:1a:62:67:9b:34:1f:91:55: 44:62:56:4a:83:ed:d4:8f:30:f6:22:b4:ac:97:b1:d5:7b:a9: 5a:5a:13:77:f0:2c:0d:d7:87:46:1e:62:68:b2:86:7f:dd:81: 65:92:d0:bb:82:06:f4:20:92:c2:e7:d8:6a:20:5d:45:30:56: ef:a3:bf:e5:9d:78:7c:5e:7a:cd:6f:55:fd:65:29:2a:fd:4c: cf:47:2f:81:41:3c:6b:60:93:e6:02:34:9d:a2:fb:00:7f:8a: 37:59:62:a5:c1:11:34:86:e8:f5:33:a9:4e:61:0a:26:67:5a: 90:c3:93:b2:18:ec:82:6f:c2:ec:7c:7b:f8:54:91:75:c0:62: 94:e3:ad:c2:4b:40:64:67:cf:87:fb:79:f9:3e:92:55:c1:62: de:d8:c0:e5:be:d4:a8:74:0c:5f:a1:02:bb:83:ca:dd:af:b4: 6c:c8:ba:a4:1c:cf:16:4b:6d:08:a7:14:68:8e:c6:2b:63:5d: 62:31:30:7e:13:0d:73:69:23:86:bd:7f:77:38:88:26:ed:2c: 53:7a:bd:a5:04:a2:a7:92:d2:24:8e:5a:db:c1:a7:4c:85:e7: 00:44:51:71 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEusGT1SvFu/ab3B8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyODEzNTczNVoXDTI4MDEzMTE0NTczNVowLzEtMCsGA1UEAxMk MWJkODc4Y2MtMTA3OS00NmQ0LTk1OWYtMjY5Yjk2ZjczOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAkQT8BVBzGRvS4FJiI/K4Tqb0nxd2bwsGuy hcZi3eqK0qDMsnEqH/3N5Cu4f0CEhEAaMFYutv54HA6dk9QqY8wPGAjYGRsymkuL hfG/EEF9dQ4bvFkG1CJ9QjsYKiqPmhdM963Z1zpIfvSRnqnLyjaJemNlYQmhB1DW WdATmuHhGIpNTJHwizX/rsfuOMLP+pnVtOWP6hl4e+2bm+11XKUP0h31r9g8XTwW g0ByRNgPsGBmf5dmdpvJAR9iH/fcPoiZfeNbzc1eYwdVqAimA3lAPjKM8lmdYnIf EWtaHGmX9jnM3zc/c+6VqxpwjedfJoezKlXywCN+78a2js91oQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFM2+I0KBsa3PJZwknrU2iZY/fRqdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8x YmQ4NzhjYy0xMDc5LTQ2ZDQtOTU5Zi0yNjliOTZmNzM5YWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzFiZDg3OGNjLTEwNzktNDZkNC05 NTlmLTI2OWI5NmY3MzlhZC8xYmQ4NzhjYy0xMDc5LTQ2ZDQtOTU5Zi0yNjliOTZm NzM5YWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALY69gwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC TVEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAW23tb8/UIIKeyuiOBszR3L/RQQi5rcD2orOAsxpiZ5s0H5FV RGJWSoPt1I8w9iK0rJex1XupWloTd/AsDdeHRh5iaLKGf92BZZLQu4IG9CCSwufY aiBdRTBW76O/5Z14fF56zW9V/WUpKv1Mz0cvgUE8a2CT5gI0naL7AH+KN1lipcER NIbo9TOpTmEKJmdakMOTshjsgm/C7Hx7+FSRdcBilOOtwktAZGfPh/t5+T6SVcFi 3tjA5b7UqHQMX6ECu4PK3a+0bMi6pBzPFkttCKcUaI7GK2NdYjEwfhMNc2kjhr1/ dziIJu0sU3q9pQSip5LSJI5a28GnTIXnAERRcQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:28 2025 by rpki-client