$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5f216085-dc85-479c-aafa-c09566c6040a.cer File: 5f216085-dc85-479c-aafa-c09566c6040a.cer (raw, json) Hash identifier: wKhhD/HrUttqDYJBiKghY2fcZhPV9iCQGHoJj42V4zU= Subject key identifier: AF:7A:CA:AF:E1:D1:02:B5:DE:C3:A5:1F:61:B1:C5:84:B7:EE:10:1D Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B84660A7C375F63B583A45120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5f216085-dc85-479c-aafa-c09566c6040a/5f216085-dc85-479c-aafa-c09566c6040a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5f216085-dc85-479c-aafa-c09566c6040a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 08:40:00 +0000 Certificate not after: Mon 17 Jan 2028 09:40:00 +0000 Subordinate resources: AS: 26445 IP: 2602:f520::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:66:0a:7c:37:5f:63:b5:83:a4:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 14 08:40:00 2025 GMT Not After : Jan 17 09:40:00 2028 GMT Subject: CN=5f216085-dc85-479c-aafa-c09566c6040a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2c:a8:00:09:d2:3d:e3:d6:8c:cc:1d:40:af: 88:70:4f:32:cc:b1:3f:6b:12:2e:e0:d9:a9:b5:0a: 78:21:e1:6b:a1:a1:dc:63:28:4e:56:07:be:d7:60: d9:cf:42:25:7a:69:9d:69:a4:4c:1d:3c:b8:29:93: 72:fe:a1:1e:bb:11:f9:12:03:27:d8:71:d6:07:a5: 84:21:cd:fe:5d:c4:bf:9a:33:81:92:2e:3a:da:8a: 8f:ce:bf:7f:15:18:0d:82:ac:23:e6:24:37:41:c4: 1b:08:e0:c6:33:93:bc:71:2f:1c:9b:bc:2b:bb:cf: 1f:01:70:78:2d:23:c2:ac:e4:f8:e7:b5:73:12:aa: a2:9e:3d:ed:e5:6d:65:5a:8f:6d:dd:d4:44:f2:0b: 48:a1:c4:58:11:99:1d:72:d7:1b:fc:6c:3c:21:84: 8a:a2:cb:c7:f8:72:06:c9:7d:bc:f7:df:30:63:3c: 60:94:ac:1d:cf:50:8f:21:09:be:9a:a4:11:b4:61: c4:3c:9b:32:df:ca:58:3a:fa:a1:09:58:d3:cd:5a: 77:69:c3:49:20:2d:0c:31:a3:f7:0c:59:b5:f3:72: 0c:83:29:f6:a7:0a:ff:fe:9f:59:f4:bc:8e:c8:67: 41:60:51:c6:76:d9:56:cf:01:85:c2:bb:67:c0:15: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7A:CA:AF:E1:D1:02:B5:DE:C3:A5:1F:61:B1:C5:84:B7:EE:10:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5f216085-dc85-479c-aafa-c09566c6040a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5f216085-dc85-479c-aafa-c09566c6040a/5f216085-dc85-479c-aafa-c09566c6040a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv6: 2602:f520::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26445 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:94:69:db:04:8d:d8:f2:d1:d6:93:d0:f0:58:37:9b:ca:b9: df:b3:7b:d2:a4:32:fc:0f:93:c5:7c:3c:19:b1:c2:38:27:7d: 2a:71:25:b1:f7:63:53:14:2b:01:0a:31:ed:41:92:9b:5e:d2: 7c:c1:20:b0:53:8d:95:0c:c2:61:a9:08:09:42:e8:21:c3:62: 6a:ca:c0:ce:5f:f0:67:01:05:99:16:fe:b2:d6:4d:c0:01:47: 36:66:ca:f1:4c:55:e8:c2:f8:d6:db:6d:31:c5:d4:a3:0e:99: de:f3:b1:0a:fc:c3:8a:29:db:8f:eb:16:a6:1b:42:85:15:ea: b4:c0:df:2c:ba:d1:bf:3b:02:06:89:63:2c:cc:bc:ba:f3:0c: a6:c6:80:aa:4a:08:4c:1c:27:bb:b7:3e:1f:0f:37:34:3c:ec: 6a:f8:2d:9a:1b:82:d2:35:d5:79:11:53:28:37:fc:bd:69:ce: 5f:db:a8:f3:a9:09:c6:c4:11:b4:5d:eb:01:34:39:64:39:5c: 15:b0:da:91:5d:f2:e4:57:45:32:0b:5d:8d:99:70:b4:e9:11: 3b:1f:9c:e3:8a:83:66:64:fa:20:58:10:15:77:19:4b:76:ae: 6b:03:d2:b0:81:fd:a1:38:e9:5c:c5:b0:4f:f0:e1:36:da:db: 1c:cd:3f:8a -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEuEZgp8N19jtYOkUSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNDA4NDAwMFoXDTI4MDExNzA5NDAwMFowLzEtMCsGA1UEAxMk NWYyMTYwODUtZGM4NS00NzljLWFhZmEtYzA5NTY2YzYwNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiyoAAnSPePWjMwdQK+IcE8yzLE/axIu4Nmp tQp4IeFroaHcYyhOVge+12DZz0IlemmdaaRMHTy4KZNy/qEeuxH5EgMn2HHWB6WE Ic3+XcS/mjOBki462oqPzr9/FRgNgqwj5iQ3QcQbCODGM5O8cS8cm7wru88fAXB4 LSPCrOT457VzEqqinj3t5W1lWo9t3dRE8gtIocRYEZkdctcb/Gw8IYSKosvH+HIG yX28998wYzxglKwdz1CPIQm+mqQRtGHEPJsy38pYOvqhCVjTzVp3acNJIC0MMaP3 DFm183IMgyn2pwr//p9Z9LyOyGdBYFHGdtlWzwGFwrtnwBXNXwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFK96yq/h0QK13sOlH2GxxYS37hAdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 ZjIxNjA4NS1kYzg1LTQ3OWMtYWFmYS1jMDk1NjZjNjA0MGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzVmMjE2MDg1LWRjODUtNDc5Yy1h YWZhLWMwOTU2NmM2MDQwYS81ZjIxNjA4NS1kYzg1LTQ3OWMtYWFmYS1jMDk1NjZj NjA0MGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvUgADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJnTTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBvlGnbBI3Y8tHWk9DwWDebyrnfs3vSpDL8D5PFfDwZscI4 J30qcSWx92NTFCsBCjHtQZKbXtJ8wSCwU42VDMJhqQgJQughw2JqysDOX/BnAQWZ Fv6y1k3AAUc2ZsrxTFXowvjW220xxdSjDpne87EK/MOKKduP6xamG0KFFeq0wN8s utG/OwIGiWMszLy68wymxoCqSghMHCe7tz4fDzc0POxq+C2aG4LSNdV5EVMoN/y9 ac5f26jzqQnGxBG0XesBNDlkOVwVsNqRXfLkV0UyC12NmXC06RE7H5zjioNmZPog WBAVdxlLdq5rA9Kwgf2hOOlcxbBP8OE22tsczT+K -----END CERTIFICATE-----Generated at Wed Oct 29 05:01:11 2025 by rpki-client