$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/740c35e6-b6f6-492e-ac88-d65d821a17f1.cer File: 740c35e6-b6f6-492e-ac88-d65d821a17f1.cer (raw, json) Hash identifier: +5pSDxHTd8iWuO6AWZWUFsAf2F0ty24WuKwjN6BzJzE= Subject key identifier: F7:30:71:F0:17:E7:09:D4:60:34:D7:68:CC:3E:90:86:96:C6:E1:A2 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BABB908B483EBC5D99DCE8220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/740c35e6-b6f6-492e-ac88-d65d821a17f1/740c35e6-b6f6-492e-ac88-d65d821a17f1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/740c35e6-b6f6-492e-ac88-d65d821a17f1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Oct 2025 10:43:45 +0000 Certificate not after: Mon 31 Jan 2028 11:43:45 +0000 Subordinate resources: AS: 19695 IP: 216.239.96.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:b9:08:b4:83:eb:c5:d9:9d:ce:82:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 28 10:43:45 2025 GMT Not After : Jan 31 11:43:45 2028 GMT Subject: CN=740c35e6-b6f6-492e-ac88-d65d821a17f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ed:0f:3c:db:69:fd:ea:93:3d:8c:5d:6a:54: f9:ac:18:a7:83:d4:f7:7a:a2:c9:af:92:95:8b:f4: eb:60:a6:15:14:a1:52:77:95:63:f6:54:4d:4d:68: 1a:b9:32:08:01:b4:59:ef:c3:81:c2:88:2f:a2:14: 55:bd:25:2b:4b:db:28:af:44:07:23:ed:c9:6c:fa: 6c:71:9a:61:e3:62:ed:5a:9b:59:e5:db:25:b4:94: 74:6c:ac:3f:ad:5c:e6:85:21:6a:39:97:46:3f:06: c6:e0:1a:ce:fb:69:93:7a:90:76:f9:ed:d9:34:c5: 50:70:16:2d:57:e9:b5:da:0c:5d:5a:02:03:30:8f: 96:78:ae:81:ae:22:bd:c7:45:0c:7a:af:ed:0a:b2: 81:a3:8f:a7:0c:bf:b7:73:28:c4:1a:1e:e9:ba:e4: 97:92:94:31:73:da:66:c6:34:39:5c:31:7b:03:31: 9d:0d:10:24:c5:a1:fe:e9:b2:1d:93:64:a0:ce:99: 3a:8a:65:d6:ac:05:b2:a8:95:03:15:db:b3:48:90: 9f:33:83:6d:72:3b:3a:f9:b2:06:5a:76:22:88:93: fa:ca:e6:8d:5f:c5:61:90:5b:d7:b8:80:86:d1:9d: 96:ff:40:c6:77:91:3b:36:70:33:76:a6:18:77:24: 24:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:30:71:F0:17:E7:09:D4:60:34:D7:68:CC:3E:90:86:96:C6:E1:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/740c35e6-b6f6-492e-ac88-d65d821a17f1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/740c35e6-b6f6-492e-ac88-d65d821a17f1/740c35e6-b6f6-492e-ac88-d65d821a17f1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 216.239.96.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19695 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:84:c8:e4:75:0b:6c:55:11:45:f2:a8:be:fd:9f:fe:8f:43: c2:76:80:00:bd:cc:98:e2:41:89:8c:2f:d1:45:ed:63:37:f2: 70:b2:f4:8f:bd:e1:2f:ad:0f:b8:b1:60:b2:63:71:1e:4a:57: cb:d3:9a:eb:45:c0:53:a1:67:d2:ad:3f:ca:c4:6c:f5:1d:e7: b0:26:45:5e:aa:32:76:b7:fc:2f:1c:f1:6d:9a:85:48:a6:52: e3:91:5f:41:70:6c:0b:07:b5:61:3b:b3:af:2f:d9:8d:fd:fb: 7b:ed:db:8f:d5:be:96:3b:61:74:0f:3b:ee:ba:61:8e:c5:06: 5f:eb:a0:11:5c:3a:09:3e:5a:39:0f:aa:4d:31:fd:7f:d6:32: 10:8b:96:5d:d3:7d:20:f6:03:f2:df:fb:68:e4:90:2b:25:5f: 8b:f0:98:70:26:63:e1:5f:bb:2d:34:95:60:5a:fb:b3:ca:8e: c5:86:ce:1f:30:ed:78:83:2a:cd:b8:f1:6b:37:f0:f7:cf:ab: 67:c8:01:ad:f8:f3:03:02:aa:fe:76:6b:dc:1a:da:7b:dd:74: b3:9e:3f:28:45:e5:84:dd:a2:dd:01:bb:22:62:4f:fe:56:92: dc:e2:24:54:a1:6c:54:42:85:72:45:44:e4:e6:7f:7a:a2:36: 66:a0:2c:ed -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEuruQi0g+vF2Z3OgiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyODEwNDM0NVoXDTI4MDEzMTExNDM0NVowLzEtMCsGA1UEAxMk NzQwYzM1ZTYtYjZmNi00OTJlLWFjODgtZDY1ZDgyMWExN2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO0PPNtp/eqTPYxdalT5rBing9T3eqLJr5KV i/TrYKYVFKFSd5Vj9lRNTWgauTIIAbRZ78OBwogvohRVvSUrS9sor0QHI+3JbPps cZph42LtWptZ5dsltJR0bKw/rVzmhSFqOZdGPwbG4BrO+2mTepB2+e3ZNMVQcBYt V+m12gxdWgIDMI+WeK6BriK9x0UMeq/tCrKBo4+nDL+3cyjEGh7puuSXkpQxc9pm xjQ5XDF7AzGdDRAkxaH+6bIdk2Sgzpk6imXWrAWyqJUDFduzSJCfM4Ntcjs6+bIG WnYiiJP6yuaNX8VhkFvXuICG0Z2W/0DGd5E7NnAzdqYYdyQkBQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFPcwcfAX5wnUYDTXaMw+kIaWxuGiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83 NDBjMzVlNi1iNmY2LTQ5MmUtYWM4OC1kNjVkODIxYTE3ZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzc0MGMzNWU2LWI2ZjYtNDkyZS1h Yzg4LWQ2NWQ4MjFhMTdmMS83NDBjMzVlNi1iNmY2LTQ5MmUtYWM4OC1kNjVkODIx YTE3ZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALY72AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC TO8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAPYTI5HULbFURRfKovv2f/o9DwnaAAL3MmOJBiYwv0UXtYzfy cLL0j73hL60PuLFgsmNxHkpXy9Oa60XAU6Fn0q0/ysRs9R3nsCZFXqoydrf8Lxzx bZqFSKZS45FfQXBsCwe1YTuzry/Zjf37e+3bj9W+ljthdA877rphjsUGX+ugEVw6 CT5aOQ+qTTH9f9YyEIuWXdN9IPYD8t/7aOSQKyVfi/CYcCZj4V+7LTSVYFr7s8qO xYbOHzDteIMqzbjxazfw98+rZ8gBrfjzAwKq/nZr3Brae910s54/KEXlhN2i3QG7 ImJP/laS3OIkVKFsVEKFckVE5OZ/eqI2ZqAs7Q== -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:30 2025 by rpki-client