$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer File: 4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer (raw, json) Hash identifier: z7g5Jv4qSAGlyoE7k8t6hAQlFZyNqH86Uw0MZf1XUFM= Subject key identifier: 30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B953D71D7C053139E17114D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Oct 2025 09:26:57 +0000 Certificate not after: Sun 23 Jan 2028 10:26:57 +0000 Subordinate resources: IP: 68.232.104.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:3d:71:d7:c0:53:13:9e:17:11:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 20 09:26:57 2025 GMT Not After : Jan 23 10:26:57 2028 GMT Subject: CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:08:e7:66:0d:1f:9b:26:0c:04:6e:4f:ee: ae:b4:50:5d:ad:a0:8a:44:fa:94:f5:cb:ee:42:06: 51:75:ff:0e:f5:17:bb:89:59:4d:33:d0:d3:3f:44: 0e:95:d7:d9:cc:ff:1a:6b:9d:13:d7:8f:67:d1:d5: 02:19:b4:ab:8c:df:b2:12:fe:2a:5e:ae:38:01:0a: de:81:29:8e:c6:be:04:3d:0c:2d:08:db:b4:ec:1e: 01:1d:b7:1a:07:c1:f6:93:c1:4d:68:28:b3:f8:1e: 75:8f:a6:86:a5:82:4a:06:15:5c:46:40:5d:b4:4e: 62:74:38:90:a5:a7:56:d1:ac:c6:52:25:6d:7a:ca: 1d:0a:9f:cb:d9:8f:97:52:68:7c:b9:73:0e:b2:71: 9c:b4:be:57:16:b8:48:fc:74:06:3b:44:99:98:d8: 3b:69:93:51:20:b4:55:5d:17:5e:8d:23:ac:80:f7: 9a:91:30:40:5e:f2:7f:75:39:59:db:bb:1a:58:a0: 3f:83:5b:9e:4c:66:54:a4:2b:74:9a:e8:24:f7:3d: c3:7d:2d:a0:66:4c:33:8a:73:e7:f0:59:2a:d4:0e: 5a:51:96:bb:85:38:c6:98:59:df:0a:a4:64:75:bd: 76:5c:48:e4:32:bf:4c:5a:c4:c0:07:e2:fa:c4:48: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 68.232.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ef:11:4f:c4:a7:31:d5:b8:bd:d4:84:58:6a:56:6a:4a:a2: 58:14:25:75:1e:d7:2b:1e:32:95:45:26:0d:e2:44:d6:d1:02: f5:14:08:26:42:d1:be:36:3e:be:8f:e8:a6:6a:1b:8e:bd:d9: 32:d2:59:af:5c:7f:7a:48:8b:e3:10:f9:4e:a6:d8:0f:11:d6: bf:87:96:be:2b:76:e5:4c:d7:bc:91:bb:c8:20:61:24:10:7f: 58:d7:4c:60:6b:97:48:34:47:7c:55:dd:76:b6:03:1b:db:9c: 87:66:e0:12:a5:36:2e:7b:b4:4c:57:7c:5b:2c:54:06:03:f2: 96:29:15:dd:fe:3b:33:6c:07:bf:04:52:dd:0d:c0:22:97:d2: 26:0d:2b:ec:e6:0b:11:20:4e:b1:17:69:71:a9:39:20:a7:29: 47:58:c2:46:82:c4:c4:f6:d2:63:b6:38:12:52:7e:01:36:f0: ed:f5:27:ec:c8:1b:78:5e:e2:2b:1c:b5:17:55:23:fd:71:35: 57:54:65:c1:9d:c7:2e:c2:20:3b:92:ef:46:10:3a:4b:49:e4: f5:90:b9:d0:df:cc:10:a8:a4:70:1a:aa:1b:d6:b6:74:2f:80: 87:c1:78:04:fc:e6:3c:c0:60:04:34:ec:fb:6e:c7:20:41:d9: 68:64:7a:41 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEuVPXHXwFMTnhcRTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyMDA5MjY1N1oXDTI4MDEyMzEwMjY1N1owLzEtMCsGA1UEAxMk NGI3ODA0NWYtODIxZi00Y2U0LTk1ZTktYzA2ZGVjOGExYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3MI52YNH5smDARuT+6utFBdraCKRPqU9cvu QgZRdf8O9Re7iVlNM9DTP0QOldfZzP8aa50T149n0dUCGbSrjN+yEv4qXq44AQre gSmOxr4EPQwtCNu07B4BHbcaB8H2k8FNaCiz+B51j6aGpYJKBhVcRkBdtE5idDiQ padW0azGUiVtesodCp/L2Y+XUmh8uXMOsnGctL5XFrhI/HQGO0SZmNg7aZNRILRV XRdejSOsgPeakTBAXvJ/dTlZ27saWKA/g1ueTGZUpCt0mugk9z3DfS2gZkwzinPn 8Fkq1A5aUZa7hTjGmFnfCqRkdb12XEjkMr9MWsTAB+L6xEgMeQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDBKW/VOMgl/Gacm5wlof63jY6oYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 Yjc4MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZkZWM4YTFhN2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzRiNzgwNDVmLTgyMWYtNGNlNC05 NWU5LWMwNmRlYzhhMWE3Yi80Yjc4MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZkZWM4 YTFhN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJE6GgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfO8RT8SnMdW4vdSEWGpW akqiWBQldR7XKx4ylUUmDeJE1tEC9RQIJkLRvjY+vo/opmobjr3ZMtJZr1x/ekiL 4xD5TqbYDxHWv4eWvit25UzXvJG7yCBhJBB/WNdMYGuXSDRHfFXddrYDG9uch2bg EqU2Lnu0TFd8WyxUBgPylikV3f47M2wHvwRS3Q3AIpfSJg0r7OYLESBOsRdpcak5 IKcpR1jCRoLExPbSY7Y4ElJ+ATbw7fUn7MgbeF7iKxy1F1Uj/XE1V1RlwZ3HLsIg O5LvRhA6S0nk9ZC50N/MEKikcBqqG9a2dC+Ah8F4BPzmPMBgBDTs+27HIEHZaGR6 QQ== -----END CERTIFICATE-----Generated at Sat Oct 25 05:19:21 2025 by rpki-client