$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer File: f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer (raw, json) Hash identifier: eqgq3MvMG19LfS7Zx+gVCoUYb4QLtBchUrkw6vZN0hc= Subject key identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BC01C2671253BD03CAA14F880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Nov 2025 17:59:37 +0000 Certificate not after: Mon 07 Feb 2028 17:59:37 +0000 Subordinate resources: IP: 76.76.19.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:26:71:25:3b:d0:3c:aa:14:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 4 17:59:37 2025 GMT Not After : Feb 7 17:59:37 2028 GMT Subject: CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:55:65:f1:d2:16:45:14:db:dd:ba:9f:48: d1:96:3b:40:45:37:16:9c:f1:99:8b:e0:47:e7:b9: 54:cd:8e:65:a4:55:74:00:2e:37:8f:ef:54:d2:96: b6:ba:92:2c:4c:36:34:a0:65:03:71:09:d4:2f:b4: 97:23:49:72:25:45:8a:70:20:ca:0c:74:87:33:9c: dd:e3:4c:ad:ea:ba:20:af:2d:82:69:a4:cc:d5:90: 45:72:d9:ac:51:67:2c:a9:aa:02:b0:92:d6:6e:3b: 24:0f:ab:0a:52:49:a0:fe:26:73:60:c1:76:7f:4e: 21:ce:90:5d:30:f0:01:26:09:54:f6:61:0b:5f:5d: 9d:ba:69:39:4a:dd:08:71:59:de:08:f1:39:96:85: 29:1a:c5:b7:52:83:8b:b8:b4:80:2c:6e:e2:3d:8d: 60:2e:ef:ae:fe:69:7e:46:62:b1:e8:8a:26:49:56: f7:29:83:4e:cc:1c:a0:87:1d:e0:48:26:74:96:fe: ce:ab:df:74:ee:b2:6e:08:fe:82:fa:7d:d2:a2:4f: 31:ee:54:ba:f1:3a:aa:ce:e9:25:e6:d8:dc:ed:87: 09:f1:76:a8:8e:1f:0d:5d:67:93:0c:38:15:05:4a: 0a:55:e1:2e:ec:2c:58:90:8f:9e:1d:ec:9a:24:c6: ac:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 76.76.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:48:5c:a9:a5:fc:2b:21:68:dc:22:71:cd:56:17:df:49:54: b6:eb:42:85:56:6f:92:ff:24:a4:b5:15:bd:6d:52:c7:a0:48: 42:69:54:02:84:89:80:60:ab:be:f1:43:f4:54:1d:95:2a:03: e6:69:e0:b9:19:77:70:2f:c0:f4:65:a7:75:07:57:b5:b6:29: d4:d3:e5:63:1a:47:11:9e:f0:83:07:28:e7:cd:ec:60:2e:48: 78:4f:83:f2:c9:13:6b:10:db:24:a3:de:ac:2b:14:ad:a6:ce: 4f:ce:33:90:e5:9d:13:6f:8f:ea:0e:cd:29:66:ca:51:3c:53: ff:96:0e:35:79:03:4d:0e:a4:af:7b:3b:56:fa:45:cc:06:ff: 32:dc:06:45:be:92:26:36:3c:5a:c8:fe:af:84:1b:62:ef:79: 28:57:83:6a:4b:3a:06:5e:e7:b3:5b:4d:7e:12:03:6b:95:c0: 17:eb:ea:e0:6f:1d:8a:54:bf:87:32:29:6b:9b:20:48:92:29: 7a:42:92:03:0e:c0:8f:59:d2:2e:dc:7d:ed:73:51:99:70:9f: e5:65:7e:bc:2c:05:fa:ba:e0:87:74:96:34:44:f0:eb:a1:70: 4f:d9:cb:d0:da:27:4a:ac:52:8e:59:75:ce:0b:23:38:f1:0f: da:cc:c3:f1 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEvAHCZxJTvQPKoU+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwNDE3NTkzN1oXDTI4MDIwNzE3NTkzN1owLzEtMCsGA1UEAxMk ZjAyM2NlNWQtN2FmOC00MzQ1LWEyZDktZDIyZTc3ZWZhNjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG9VZfHSFkUU2926n0jRljtARTcWnPGZi+BH 57lUzY5lpFV0AC43j+9U0pa2upIsTDY0oGUDcQnUL7SXI0lyJUWKcCDKDHSHM5zd 40yt6rogry2CaaTM1ZBFctmsUWcsqaoCsJLWbjskD6sKUkmg/iZzYMF2f04hzpBd MPABJglU9mELX12dumk5St0IcVneCPE5loUpGsW3UoOLuLSALG7iPY1gLu+u/ml+ RmKx6IomSVb3KYNOzByghx3gSCZ0lv7Oq9907rJuCP6C+n3Sok8x7lS68Tqqzukl 5tjc7YcJ8Xaojh8NXWeTDDgVBUoKVeEu7CxYkI+eHeyaJMaskwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFE+C7uJB9Ji2GVMPvrIAe9Gd5uWEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m MDIzY2U1ZC03YWY4LTQzNDUtYTJkOS1kMjJlNzdlZmE2OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2YwMjNjZTVkLTdhZjgtNDM0NS1h MmQ5LWQyMmU3N2VmYTY4ZC9mMDIzY2U1ZC03YWY4LTQzNDUtYTJkOS1kMjJlNzdl ZmE2OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABMTBMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADUhcqaX8KyFo3CJxzVYX 30lUtutChVZvkv8kpLUVvW1Sx6BIQmlUAoSJgGCrvvFD9FQdlSoD5mnguRl3cC/A 9GWndQdXtbYp1NPlYxpHEZ7wgwco583sYC5IeE+D8skTaxDbJKPerCsUrabOT84z kOWdE2+P6g7NKWbKUTxT/5YONXkDTQ6kr3s7VvpFzAb/MtwGRb6SJjY8Wsj+r4Qb Yu95KFeDaks6Bl7ns1tNfhIDa5XAF+vq4G8dilS/hzIpa5sgSJIpekKSAw7Aj1nS Ltx97XNRmXCf5WV+vCwF+rrgh3SWNETw66FwT9nL0NonSqxSjll1zgsjOPEP2szD 8Q== -----END CERTIFICATE-----Generated at Sat Nov 8 12:07:25 2025 by rpki-client