$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931.cer File: 8c1a5536-816c-426b-b7e4-bad0d305a931.cer (raw, json) Hash identifier: +5aYtRvjQl35QI+tr+qPDaNaoTmjkOjtkoQUNj6g5iA= Subject key identifier: 51:9E:35:FE:1F:E0:DE:81:F8:F6:6E:63:A3:07:B4:5F:F7:F9:9F:BA Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BACA3DC216CDCAEF36EEA7040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Oct 2025 18:36:54 +0000 Certificate not after: Mon 31 Jan 2028 19:36:54 +0000 Subordinate resources: AS: 11409 IP: 198.212.180.0/24 IP: 216.46.96.0 -- 216.46.121.255 IP: 216.46.126.0/23 IP: 2620:118:2000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ac:a3:dc:21:6c:dc:ae:f3:6e:ea:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 28 18:36:54 2025 GMT Not After : Jan 31 19:36:54 2028 GMT Subject: CN=8c1a5536-816c-426b-b7e4-bad0d305a931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:74:cd:90:76:fd:6c:32:99:06:8a:af:95: 52:60:7b:07:70:3e:dc:0a:2b:ca:7f:2e:e0:9f:e9: 50:0d:95:0c:31:ea:ee:6a:42:e6:85:ee:dc:d6:3e: 6b:b1:00:c6:29:31:03:c1:71:b0:12:3a:a5:66:a4: 6a:4d:0b:4d:e4:a3:75:9a:6e:25:50:50:0d:28:7e: 78:e2:05:ae:89:61:b0:d0:d9:b9:38:8e:e6:db:1d: 40:f1:0e:58:47:f0:d5:a3:fb:ae:69:ad:8b:4e:1c: 90:04:2b:86:3c:bb:e1:16:66:1b:5f:3c:3c:9b:8b: 17:ac:c2:fc:e2:06:4f:ac:1a:a0:74:e7:10:33:3e: 29:8c:e6:ed:84:d3:24:fc:04:7d:ea:dd:4f:77:1c: 71:a2:f7:2e:d8:d2:b5:b2:cd:33:c6:59:e2:6c:aa: 98:a1:e5:ad:bf:18:ee:84:77:63:b8:54:82:26:8f: 6c:3c:6d:86:23:0c:21:4f:15:24:c4:4c:e8:4f:5b: 47:be:37:b0:44:f2:f2:e3:75:2e:39:a9:cd:30:a5: 14:39:ac:87:ab:14:0d:ed:5b:6a:74:9e:67:64:56: 41:95:b3:e5:56:f5:f8:78:e7:02:29:0e:c3:54:dc: 82:72:4b:ff:ad:ad:ab:58:46:48:d5:39:89:55:fd: 6c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9E:35:FE:1F:E0:DE:81:F8:F6:6E:63:A3:07:B4:5F:F7:F9:9F:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 198.212.180.0/24 216.46.96.0-216.46.121.255 216.46.126.0/23 IPv6: 2620:118:2000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11409 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a5:a5:65:56:c1:8c:93:59:9a:8e:b8:c9:dd:d0:b0:a0:33: c1:09:e7:21:df:0a:c5:b1:8a:90:bd:9f:da:cf:47:4c:4d:c1: 5c:d8:33:93:0f:e2:f2:2c:bc:97:61:82:28:5e:f4:1b:a5:eb: e1:c5:18:dc:28:ce:b7:2f:bc:72:ff:ad:bd:87:29:d4:60:bb: d7:6e:74:ce:03:20:4c:0d:f5:74:52:5b:6c:0c:10:b2:f1:a4: 49:12:3f:9c:c2:cd:89:74:c0:20:9c:0a:a9:fb:ec:07:65:74: c3:07:fb:98:7f:41:3a:6a:e9:08:e1:02:9e:bd:7e:d5:b1:98: da:6c:74:11:fd:08:16:0b:3d:86:55:78:b6:53:d5:f4:2c:35: d7:8a:3b:d4:0a:0c:e8:07:04:6e:c8:76:25:65:a6:e3:42:df: 42:de:3d:c2:39:32:9b:3d:d8:90:84:a8:d7:a3:94:6d:79:f6: d5:e9:bf:26:30:f9:1d:8b:e0:56:9c:52:27:e8:d3:4b:8a:a1: 9a:13:85:ff:fa:44:66:62:2e:6e:9c:a6:6c:dc:14:24:7e:e0: c7:ba:0b:1b:79:a2:c6:bb:1c:e5:4a:1a:60:be:f6:89:6b:11: 6c:80:a9:9b:b4:e9:99:00:0f:7f:65:73:11:e5:b9:b6:0b:45: 99:e8:1c:f1 -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWEuso9whbNyu827qcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyODE4MzY1NFoXDTI4MDEzMTE5MzY1NFowLzEtMCsGA1UEAxMk OGMxYTU1MzYtODE2Yy00MjZiLWI3ZTQtYmFkMGQzMDVhOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0p0zZB2/WwymQaKr5VSYHsHcD7cCivKfy7g n+lQDZUMMeruakLmhe7c1j5rsQDGKTEDwXGwEjqlZqRqTQtN5KN1mm4lUFANKH54 4gWuiWGw0Nm5OI7m2x1A8Q5YR/DVo/uuaa2LThyQBCuGPLvhFmYbXzw8m4sXrML8 4gZPrBqgdOcQMz4pjObthNMk/AR96t1Pdxxxovcu2NK1ss0zxlnibKqYoeWtvxju hHdjuFSCJo9sPG2GIwwhTxUkxEzoT1tHvjewRPLy43UuOanNMKUUOayHqxQN7Vtq dJ5nZFZBlbPlVvX4eOcCKQ7DVNyCckv/ra2rWEZI1TmJVf1sjwIDAQABo4IEPjCC BDowHQYDVR0OBBYEFFGeNf4f4N6B+PZuY6MHtF/3+Z+6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84 YzFhNTUzNi04MTZjLTQyNmItYjdlNC1iYWQwZDMwNWE5MzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzhjMWE1NTM2LTgxNmMtNDI2Yi1i N2U0LWJhZDBkMzA1YTkzMS84YzFhNTUzNi04MTZjLTQyNmItYjdlNC1iYWQwZDMw NWE5MzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwQwYIKwYBBQUH AQcBAf8ENDAyMCAEAgABMBoDBADG1LQwDAMEBdguYAMEAdgueAMEAdgufjAOBAIA AjAIAwYAJiABGCAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLJEwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA fKWlZVbBjJNZmo64yd3QsKAzwQnnId8KxbGKkL2f2s9HTE3BXNgzkw/i8iy8l2GC KF70G6Xr4cUY3CjOty+8cv+tvYcp1GC71250zgMgTA31dFJbbAwQsvGkSRI/nMLN iXTAIJwKqfvsB2V0wwf7mH9BOmrpCOECnr1+1bGY2mx0Ef0IFgs9hlV4tlPV9Cw1 14o71AoM6AcEbsh2JWWm40LfQt49wjkymz3YkISo16OUbXn21em/JjD5HYvgVpxS J+jTS4qhmhOF//pEZmIubpymbNwUJH7gx7oLG3mixrsc5UoaYL72iWsRbICpm7Tp mQAPf2VzEeW5tgtFmegc8Q== -----END CERTIFICATE-----Generated at Tue Nov 4 20:36:26 2025 by rpki-client