$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer File: 3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer (raw, json) Hash identifier: 4UwomeCwZ8tZzE0tUr7S1DiHPo6vW8jkizWlpyluH7M= Subject key identifier: 04:25:0A:C7:4E:4D:D3:95:46:55:BB:39:96:37:F5:FE:A3:71:5B:60 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BACFB0D5AC03B605E506FB8EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Oct 2025 21:32:35 +0000 Certificate not after: Mon 31 Jan 2028 22:32:35 +0000 Subordinate resources: IP: 66.235.96.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ac:fb:0d:5a:c0:3b:60:5e:50:6f:b8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 28 21:32:35 2025 GMT Not After : Jan 31 22:32:35 2028 GMT Subject: CN=3cfc6d7b-a1e6-4d32-803d-0e5060c00725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7d:0c:fa:e1:99:db:b5:c2:c6:1f:c9:e0:23: b9:0c:56:a2:e2:82:3d:b7:95:f5:1a:7f:85:58:9a: f7:52:d9:24:55:c2:fc:51:4b:40:23:9a:43:7b:24: 44:ee:93:ac:17:e4:96:ff:f3:03:fe:a8:de:51:ba: 2c:5a:48:c9:77:67:dd:bc:be:b3:64:dc:17:1e:ee: 9c:7a:31:db:ef:d0:60:14:a4:a8:64:7e:23:bd:e9: 6a:53:a9:9b:55:70:bb:97:c3:1f:85:c9:c5:ea:15: 68:71:21:f5:55:bc:ba:47:6b:c9:a7:fb:57:54:c4: 9f:d5:f6:73:bb:51:aa:4f:45:b4:22:54:cf:f8:00: 0b:ea:af:7e:39:59:d4:11:39:c7:d9:3a:8b:50:6c: b6:71:8e:f2:d0:97:da:ee:ac:12:b1:16:55:71:2e: be:70:46:64:f4:c7:92:69:06:51:2d:4c:93:ee:d0: 28:90:f2:66:d6:83:54:fd:99:5e:17:9e:10:19:98: af:c2:3d:b1:e1:84:9f:9a:7d:45:5b:b2:6a:13:77: 85:01:92:6e:a5:c0:b6:23:e9:41:58:1d:d6:4b:70: 1c:93:c8:29:88:5f:39:49:01:48:78:a9:19:22:cb: fc:d6:31:9f:fe:f0:1f:89:b0:d8:82:8e:50:99:29: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:25:0A:C7:4E:4D:D3:95:46:55:BB:39:96:37:F5:FE:A3:71:5B:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 66.235.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ad:a6:cd:1c:dd:61:58:86:28:18:cc:05:be:4d:56:5a:3d: 98:37:f2:58:1c:b8:1a:f9:19:df:8e:96:0e:12:80:15:cb:08: 85:82:c7:c2:58:9f:6b:7b:93:80:a3:38:0e:1c:96:9e:c4:be: 98:9e:46:15:20:6f:b7:5c:e4:3b:0d:3c:1a:b5:73:6e:81:5c: 6b:c1:ee:0e:98:9f:a3:34:e5:45:c5:af:3f:53:07:79:96:97: 0f:a5:f1:e1:e9:73:77:d3:e6:a2:f5:97:7c:e9:9e:57:19:fc: 59:d7:71:b8:50:1e:d8:48:98:49:25:fd:7b:5e:63:c9:70:de: f0:4c:f7:18:18:b8:f9:6a:a1:04:0e:38:3a:29:5f:a3:cb:8c: 1e:f8:70:d1:9e:3d:a4:69:5f:b9:f6:36:7b:c9:66:0c:e6:2c: 68:00:cb:12:7c:72:c7:5d:ae:e2:f2:b0:bb:f6:b5:bc:b7:70: 92:ce:0b:38:88:55:36:19:78:88:00:28:aa:55:ad:bb:ed:00: 27:c1:97:e5:63:a8:65:93:00:c8:1e:ca:68:80:6b:2a:d5:88: be:c1:1b:4e:75:57:23:99:f3:91:43:8f:4a:5c:82:3c:11:68: ab:a1:91:87:b0:27:af:f9:ba:26:95:f3:8c:bb:e8:f7:10:0a: 3c:6a:25:e5 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEus+w1awDtgXlBvuOwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyODIxMzIzNVoXDTI4MDEzMTIyMzIzNVowLzEtMCsGA1UEAxMk M2NmYzZkN2ItYTFlNi00ZDMyLTgwM2QtMGU1MDYwYzAwNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX0M+uGZ27XCxh/J4CO5DFai4oI9t5X1Gn+F WJr3UtkkVcL8UUtAI5pDeyRE7pOsF+SW//MD/qjeUbosWkjJd2fdvL6zZNwXHu6c ejHb79BgFKSoZH4jvelqU6mbVXC7l8MfhcnF6hVocSH1Vby6R2vJp/tXVMSf1fZz u1GqT0W0IlTP+AAL6q9+OVnUETnH2TqLUGy2cY7y0Jfa7qwSsRZVcS6+cEZk9MeS aQZRLUyT7tAokPJm1oNU/ZleF54QGZivwj2x4YSfmn1FW7JqE3eFAZJupcC2I+lB WB3WS3Ack8gpiF85SQFIeKkZIsv81jGf/vAfibDYgo5QmSnxSwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAQlCsdOTdOVRlW7OZY39f6jcVtgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8z Y2ZjNmQ3Yi1hMWU2LTRkMzItODAzZC0wZTUwNjBjMDA3MjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzNjZmM2ZDdiLWExZTYtNGQzMi04 MDNkLTBlNTA2MGMwMDcyNS8zY2ZjNmQ3Yi1hMWU2LTRkMzItODAzZC0wZTUwNjBj MDA3MjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJC62AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGK2mzRzdYViGKBjMBb5N Vlo9mDfyWBy4GvkZ346WDhKAFcsIhYLHwlifa3uTgKM4DhyWnsS+mJ5GFSBvt1zk Ow08GrVzboFca8HuDpifozTlRcWvP1MHeZaXD6Xx4elzd9PmovWXfOmeVxn8Wddx uFAe2EiYSSX9e15jyXDe8Ez3GBi4+WqhBA44Oilfo8uMHvhw0Z49pGlfufY2e8lm DOYsaADLEnxyx12u4vKwu/a1vLdwks4LOIhVNhl4iAAoqlWtu+0AJ8GX5WOoZZMA yB7KaIBrKtWIvsEbTnVXI5nzkUOPSlyCPBFoq6GRh7Anr/m6JpXzjLvo9xAKPGol 5Q== -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:29 2025 by rpki-client