$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c.cer File: b6998fd9-7b69-498c-8135-f33f59d7256c.cer (raw, json) Hash identifier: fn4hTWsaN8mia/pXegjw+NtPmgb3uWASVFo1o12iEfY= Subject key identifier: 33:E5:33:4D:D8:9D:58:C6:36:03:CE:66:77:8F:66:71:0F:49:C2:0A Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B96A07DB18BFC491575328380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/b6998fd9-7b69-498c-8135-f33f59d7256c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Oct 2025 21:22:19 +0000 Certificate not after: Sun 23 Jan 2028 22:22:19 +0000 Subordinate resources: IP: 130.12.190.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:a0:7d:b1:8b:fc:49:15:75:32:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 20 21:22:19 2025 GMT Not After : Jan 23 22:22:19 2028 GMT Subject: CN=b6998fd9-7b69-498c-8135-f33f59d7256c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:86:6d:96:e3:92:60:d6:02:81:f2:ee:30: 5e:27:bc:b3:37:2d:e2:75:ca:57:60:61:e5:e1:cf: 6b:3b:82:65:51:85:6a:09:47:1b:4c:76:c8:09:ea: b8:33:8d:72:d1:7a:96:a0:07:a3:8a:7f:69:69:50: 6c:fe:6e:8c:22:49:02:48:0e:2a:c4:b0:16:86:ea: 20:08:68:9d:a9:93:90:a8:00:be:8e:5d:f1:5e:9b: 62:0a:64:5d:86:8d:5a:1b:fc:45:fc:52:3c:99:e8: 0e:f2:f9:43:54:a8:92:0f:72:7f:0d:3b:16:cc:65: dc:48:16:16:1e:77:e8:80:65:a1:e0:79:d0:3b:5e: 26:70:5d:49:d7:4d:06:bb:83:cb:7c:16:c3:f6:c7: ef:9c:ce:e0:d7:bc:80:aa:3c:be:1e:1e:a9:1f:a4: a5:a9:5c:f3:3b:53:2c:76:3a:c6:7e:4c:f6:d9:d4: cc:2c:a5:a4:38:ec:28:c7:a3:5d:12:f9:42:10:c3: b5:60:80:54:25:96:3b:5a:41:8e:fc:a6:09:80:8c: 25:02:59:48:36:79:91:01:2c:e8:69:b0:fa:63:a1: fa:f4:be:e9:9d:3c:00:52:99:08:15:14:dc:2a:82: 23:12:e4:14:2e:2b:8c:9d:37:b8:14:71:09:61:7f: 91:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E5:33:4D:D8:9D:58:C6:36:03:CE:66:77:8F:66:71:0F:49:C2:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6998fd9-7b69-498c-8135-f33f59d7256c/b6998fd9-7b69-498c-8135-f33f59d7256c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 130.12.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:fe:58:af:15:71:41:1a:80:a1:6c:36:a3:5d:eb:1c:13:13: 23:05:8a:ca:2d:62:a5:29:9d:3f:da:f9:d4:92:dc:80:5d:ba: 2d:a5:e2:6a:56:57:6e:98:c3:dd:6e:9d:85:aa:8f:41:2c:28: 65:54:ee:87:0a:0c:de:1c:88:02:2f:0a:61:42:b7:82:5f:3b: 63:a9:65:1e:b3:2d:64:ae:20:83:e4:49:eb:9c:0e:a6:74:c1: 15:c7:68:1e:5e:5a:12:b8:06:7c:0d:f0:69:aa:5a:2c:5d:bc: 20:c5:e5:a7:a7:d6:9c:16:24:c3:f0:b6:7f:f1:3b:15:f8:26: c1:78:08:6b:87:7b:48:a3:1e:7f:d0:96:d8:e1:2d:76:a1:c8: 90:b9:a1:7d:c8:be:f6:96:99:f3:95:d3:87:3f:71:95:f5:81: 57:39:4d:8a:c1:7b:6e:d6:12:98:88:56:ce:b9:84:7a:7e:5c: 79:60:69:e1:87:36:19:3b:69:e2:55:36:da:44:51:8c:b2:a1: f1:e1:f0:a4:93:dc:89:f6:31:53:8b:94:d9:5e:10:e0:2e:8e: 53:c9:62:ee:5b:74:f2:b3:13:00:f3:7f:bc:6b:87:31:5a:d0: db:6e:25:59:4a:42:ad:6e:9c:5a:ac:8c:82:f8:f6:22:56:02: b1:49:91:e4 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEuWoH2xi/xJFXUyg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyMDIxMjIxOVoXDTI4MDEyMzIyMjIxOVowLzEtMCsGA1UEAxMk YjY5OThmZDktN2I2OS00OThjLTgxMzUtZjMzZjU5ZDcyNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxyGbZbjkmDWAoHy7jBeJ7yzNy3idcpXYGHl 4c9rO4JlUYVqCUcbTHbICeq4M41y0XqWoAejin9paVBs/m6MIkkCSA4qxLAWhuog CGidqZOQqAC+jl3xXptiCmRdho1aG/xF/FI8megO8vlDVKiSD3J/DTsWzGXcSBYW HnfogGWh4HnQO14mcF1J100Gu4PLfBbD9sfvnM7g17yAqjy+Hh6pH6SlqVzzO1Ms djrGfkz22dTMLKWkOOwox6NdEvlCEMO1YIBUJZY7WkGO/KYJgIwlAllINnmRASzo abD6Y6H69L7pnTwAUpkIFRTcKoIjEuQULiuMnTe4FHEJYX+R9wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDPlM03YnVjGNgPOZnePZnEPScIKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i Njk5OGZkOS03YjY5LTQ5OGMtODEzNS1mMzNmNTlkNzI1NmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2I2OTk4ZmQ5LTdiNjktNDk4Yy04 MTM1LWYzM2Y1OWQ3MjU2Yy9iNjk5OGZkOS03YjY5LTQ5OGMtODEzNS1mMzNmNTlk NzI1NmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACCDL4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeP5YrxVxQRqAoWw2o13r HBMTIwWKyi1ipSmdP9r51JLcgF26LaXialZXbpjD3W6dhaqPQSwoZVTuhwoM3hyI Ai8KYUK3gl87Y6llHrMtZK4gg+RJ65wOpnTBFcdoHl5aErgGfA3waapaLF28IMXl p6fWnBYkw/C2f/E7FfgmwXgIa4d7SKMef9CW2OEtdqHIkLmhfci+9paZ85XThz9x lfWBVzlNisF7btYSmIhWzrmEen5ceWBp4Yc2GTtp4lU22kRRjLKh8eHwpJPcifYx U4uU2V4Q4C6OU8li7lt08rMTAPN/vGuHMVrQ224lWUpCrW6cWqyMgvj2IlYCsUmR 5A== -----END CERTIFICATE-----Generated at Tue Oct 28 03:44:02 2025 by rpki-client