$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/73589ee7-3fa2-40c5-9d80-05aa29dfa5c6.cer File: 73589ee7-3fa2-40c5-9d80-05aa29dfa5c6.cer (raw, json) Hash identifier: 5WpTg5teQmo4xTxgyVFOSYg4a6556PBTKUsqKhsxXfA= Subject key identifier: 4C:61:3B:E5:D8:D8:48:F9:7D:1F:84:E4:44:6C:E7:36:F5:F7:C5:EA Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B9E9A954B9A5419DC547B7140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/73589ee7-3fa2-40c5-9d80-05aa29dfa5c6/73589ee7-3fa2-40c5-9d80-05aa29dfa5c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/73589ee7-3fa2-40c5-9d80-05aa29dfa5c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Oct 2025 17:56:53 +0000 Certificate not after: Wed 26 Jan 2028 18:56:53 +0000 Subordinate resources: AS: 393725 IP: 104.193.124.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:9a:95:4b:9a:54:19:dc:54:7b:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 23 17:56:53 2025 GMT Not After : Jan 26 18:56:53 2028 GMT Subject: CN=73589ee7-3fa2-40c5-9d80-05aa29dfa5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:19:a2:96:fb:00:cf:90:8b:c5:d8:61:c1:25: d6:87:d4:f3:08:86:4d:40:7f:2f:a9:0b:72:59:78: 78:3a:bf:e1:a7:3f:34:55:e0:f2:54:01:60:6a:c5: cf:78:0f:ac:84:19:4a:6f:83:20:b2:9d:a6:9e:8b: 9e:bd:fa:c7:ad:82:29:90:0c:6f:f3:00:98:93:56: 82:69:68:03:fc:8e:33:67:8e:42:94:54:bc:8a:5e: e5:85:66:bf:29:f3:2c:e1:b1:05:0f:5b:e2:d5:bf: 11:98:40:06:3a:65:a2:04:53:d6:86:60:de:37:b8: 66:09:9d:c8:40:55:37:0b:b8:e8:0e:d2:9b:84:02: 6b:e4:72:48:85:d5:fe:85:79:61:dd:96:98:22:a8: 93:a2:bb:de:03:64:07:eb:00:b9:20:2c:a3:92:f6: 27:dd:5e:dd:03:a2:07:7c:30:98:ed:5f:f3:f7:5c: 0b:68:47:bb:7f:c5:24:dc:ca:72:4d:e4:60:fa:88: ae:65:25:47:30:01:16:40:38:e3:78:f9:8b:a1:a1: 9a:15:df:6c:cc:61:b2:ef:99:0e:16:ad:dc:ca:cf: 96:dc:ec:88:94:36:9c:8e:9f:42:77:f0:bb:1f:ce: 0c:6e:19:6b:d5:41:f4:2a:87:8c:19:c8:a2:25:c5: 0a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:61:3B:E5:D8:D8:48:F9:7D:1F:84:E4:44:6C:E7:36:F5:F7:C5:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/73589ee7-3fa2-40c5-9d80-05aa29dfa5c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/73589ee7-3fa2-40c5-9d80-05aa29dfa5c6/73589ee7-3fa2-40c5-9d80-05aa29dfa5c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 104.193.124.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393725 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a3:ce:56:23:36:71:17:27:38:20:79:6d:87:10:63:b2:a8: 7e:04:ce:4c:08:e3:74:53:a5:54:7d:f8:00:ac:48:4c:d8:dd: 07:a3:c5:0c:7d:3b:92:96:57:2b:4f:8c:d9:bf:1b:13:d3:59: e4:eb:15:cb:b1:cb:00:97:1d:c8:2f:5d:32:da:60:27:a2:f3: 1a:c8:e3:b4:c2:57:03:84:54:06:00:6f:7e:91:b0:d6:25:ce: 18:94:2d:20:95:94:1e:79:7f:eb:01:a6:f7:0d:cf:a7:34:4d: 8d:5e:31:c8:89:cc:84:f9:78:26:93:57:77:bf:8a:78:db:ab: 9b:b2:ba:9a:41:4d:e0:91:98:75:68:da:8f:6c:35:1b:61:e3: 88:25:96:f9:d5:a8:28:cc:03:63:37:9e:2e:82:5d:e5:9e:5c: 73:e7:99:5d:31:6d:02:64:2c:86:04:8b:0d:71:11:90:8c:ee: 5b:9f:6b:18:7b:55:06:77:8c:95:a7:c8:70:8f:5d:7e:dc:23: a9:04:31:de:e9:1a:78:9c:78:3f:1f:52:37:99:6e:eb:5c:c8: 75:52:31:b6:22:2b:f4:6a:fe:28:8b:93:18:5a:f0:13:a9:4b: b7:96:b9:21:4b:2e:04:a8:21:4f:f5:f6:a1:dd:9c:5d:4d:9a: b3:b7:95:bf -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEuempVLmlQZ3FR7cUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyMzE3NTY1M1oXDTI4MDEyNjE4NTY1M1owLzEtMCsGA1UEAxMk NzM1ODllZTctM2ZhMi00MGM1LTlkODAtMDVhYTI5ZGZhNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xmilvsAz5CLxdhhwSXWh9TzCIZNQH8vqQty WXh4Or/hpz80VeDyVAFgasXPeA+shBlKb4Mgsp2mnouevfrHrYIpkAxv8wCYk1aC aWgD/I4zZ45ClFS8il7lhWa/KfMs4bEFD1vi1b8RmEAGOmWiBFPWhmDeN7hmCZ3I QFU3C7joDtKbhAJr5HJIhdX+hXlh3ZaYIqiTorveA2QH6wC5ICyjkvYn3V7dA6IH fDCY7V/z91wLaEe7f8Uk3MpyTeRg+oiuZSVHMAEWQDjjePmLoaGaFd9szGGy75kO Fq3cys+W3OyIlDacjp9Cd/C7H84Mbhlr1UH0KoeMGciiJcUK5wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFExhO+XY2Ej5fR+E5ERs5zb198XqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83 MzU4OWVlNy0zZmEyLTQwYzUtOWQ4MC0wNWFhMjlkZmE1YzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzczNTg5ZWU3LTNmYTItNDBjNS05 ZDgwLTA1YWEyOWRmYTVjNi83MzU4OWVlNy0zZmEyLTQwYzUtOWQ4MC0wNWFhMjlk ZmE1YzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJowXwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgH9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGCjzlYjNnEXJzggeW2HEGOyqH4EzkwI43RTpVR9+ACsSEzY 3QejxQx9O5KWVytPjNm/GxPTWeTrFcuxywCXHcgvXTLaYCei8xrI47TCVwOEVAYA b36RsNYlzhiULSCVlB55f+sBpvcNz6c0TY1eMciJzIT5eCaTV3e/injbq5uyuppB TeCRmHVo2o9sNRth44gllvnVqCjMA2M3ni6CXeWeXHPnmV0xbQJkLIYEiw1xEZCM 7lufaxh7VQZ3jJWnyHCPXX7cI6kEMd7pGniceD8fUjeZbutcyHVSMbYiK/Rq/iiL kxha8BOpS7eWuSFLLgSoIU/19qHdnF1NmrO3lb8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:31 2025 by rpki-client