$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer File: 9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer (raw, json) Hash identifier: VRpbsgsBF/4am5A8v/sWsV1jJBHExpQnDpVGO3KVnCo= Subject key identifier: E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B882CF4E14D000F60C1DF5440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Oct 2025 17:08:13 +0000 Certificate not after: Tue 18 Jan 2028 18:08:13 +0000 Subordinate resources: IP: 199.30.8.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:2c:f4:e1:4d:00:0f:60:c1:df:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 15 17:08:13 2025 GMT Not After : Jan 18 18:08:13 2028 GMT Subject: CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ff:14:ec:44:c0:60:2b:19:9f:cc:a4:32:bd: e1:74:82:2e:25:51:64:56:88:57:aa:39:89:a2:fd: 4b:7b:45:93:4e:b1:e6:19:5f:0d:de:6e:40:94:c5: c3:92:27:50:52:21:2d:75:f6:4d:21:76:2d:67:61: 82:46:34:3a:0d:10:a5:c8:e5:2e:44:a5:43:28:6f: 72:13:f2:fe:a3:c9:3f:3f:61:77:2e:29:23:95:9e: 08:d2:ee:2c:29:e0:a2:97:73:19:60:9f:5e:4c:89: 4b:8c:0e:55:43:c9:58:f0:92:48:b9:1e:71:4c:f1: 49:77:43:fe:15:93:e5:9a:c6:69:38:4e:71:11:7e: 15:2a:68:38:33:9e:17:09:de:63:2a:bf:7e:36:e3: 89:07:f5:0e:45:2c:da:bd:4b:be:a5:d1:ce:93:81: 02:8b:50:48:3c:80:16:3b:2f:17:19:22:b9:33:2e: 64:22:c3:50:ec:4a:ff:ce:6d:07:20:19:40:cd:65: 04:1c:36:45:73:dd:d2:94:ed:c2:b8:2e:b4:05:28: 6d:91:b7:37:a2:57:ef:be:6c:5c:36:8a:44:bd:c7: 60:49:3f:62:99:40:30:70:8c:d5:52:77:79:c0:b0: 0f:c4:2a:ff:f1:f4:ea:a9:83:5d:b6:92:ea:ef:5a: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 199.30.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:65:ff:f1:fd:75:84:90:f7:f4:53:15:fc:10:c7:b4:0e:ad: 79:17:c4:04:e3:d6:0b:02:d7:64:17:37:24:84:2f:52:06:19: aa:ca:b8:57:ad:90:a0:e2:d1:36:2e:d3:90:ef:16:ca:96:69: 2b:51:e6:8d:2b:5e:3c:fd:20:c3:0a:89:99:d3:e2:ae:88:02: 94:57:d6:e4:b3:de:d9:01:48:27:3b:55:f1:8e:81:54:dc:26: fa:71:90:d4:e7:60:ac:d7:a2:fe:13:df:ee:f9:29:72:65:65: c6:a3:4a:d9:10:97:78:eb:af:19:7e:f2:39:61:19:8e:94:0f: 5c:17:ef:0d:9f:e4:46:81:15:54:f9:81:aa:a2:31:41:0b:09: 41:ca:22:5b:25:ab:51:2f:9d:f6:a1:73:12:dc:f3:2d:9f:e7: f8:ec:47:7b:12:e8:7b:e7:53:22:e0:c8:5e:cf:60:22:04:b4: 1c:e8:68:35:3b:f6:8c:1e:b0:fe:35:6d:33:3f:cc:65:13:09: 7f:93:7d:27:31:6f:98:f3:f5:58:7a:6c:5b:4b:08:b4:d1:d8: 31:4d:64:a6:dd:9d:a0:2f:f9:08:67:97:22:fb:97:5d:82:70: fa:b2:b8:43:8a:62:25:6b:de:2d:fa:b9:ca:a5:98:ad:72:52: 92:b8:3f:24 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEuILPThTQAPYMHfVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNTE3MDgxM1oXDTI4MDExODE4MDgxM1owLzEtMCsGA1UEAxMk OTgyM2QxZjYtYjFmZC00OGJkLTg5YzQtZGE0ZTVkOTNmMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v8U7ETAYCsZn8ykMr3hdIIuJVFkVohXqjmJ ov1Le0WTTrHmGV8N3m5AlMXDkidQUiEtdfZNIXYtZ2GCRjQ6DRClyOUuRKVDKG9y E/L+o8k/P2F3LikjlZ4I0u4sKeCil3MZYJ9eTIlLjA5VQ8lY8JJIuR5xTPFJd0P+ FZPlmsZpOE5xEX4VKmg4M54XCd5jKr9+NuOJB/UORSzavUu+pdHOk4ECi1BIPIAW Oy8XGSK5My5kIsNQ7Er/zm0HIBlAzWUEHDZFc93SlO3CuC60BShtkbc3olfvvmxc NopEvcdgST9imUAwcIzVUnd5wLAPxCr/8fTqqYNdtpLq71rK6wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOH82YCcUtaRw2sEKaqkBp031Tv8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85 ODIzZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRlNWQ5M2YyMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzk4MjNkMWY2LWIxZmQtNDhiZC04 OWM0LWRhNGU1ZDkzZjIwOS85ODIzZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRlNWQ5 M2YyMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHHggwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUWX/8f11hJD39FMV/BDH tA6teRfEBOPWCwLXZBc3JIQvUgYZqsq4V62QoOLRNi7TkO8WypZpK1HmjStePP0g wwqJmdPirogClFfW5LPe2QFIJztV8Y6BVNwm+nGQ1OdgrNei/hPf7vkpcmVlxqNK 2RCXeOuvGX7yOWEZjpQPXBfvDZ/kRoEVVPmBqqIxQQsJQcoiWyWrUS+d9qFzEtzz LZ/n+OxHexLoe+dTIuDIXs9gIgS0HOhoNTv2jB6w/jVtMz/MZRMJf5N9JzFvmPP1 WHpsW0sItNHYMU1kpt2doC/5CGeXIvuXXYJw+rK4Q4piJWveLfq5yqWYrXJSkrg/ JA== -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:28 2025 by rpki-client