$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645.cer File: 16d71376-e8fa-4e6c-bbf4-978708d88645.cer (raw, json) Hash identifier: 1l09Peb7SrVqUuRTyBBoSdOLuHRuu26yNbOwrsr9l4Y= Subject key identifier: 4F:1F:74:1C:B5:05:7E:10:C8:53:1F:E1:B4:D5:44:29:C1:44:B0:A6 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8A14FF6CFBD04D99FD3B1000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/16d71376-e8fa-4e6c-bbf4-978708d88645.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Oct 2025 09:31:34 +0000 Certificate not after: Wed 19 Jan 2028 10:31:34 +0000 Subordinate resources: AS: 401311 IP: 130.12.105.0/24 IP: 2620:cd:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:14:ff:6c:fb:d0:4d:99:fd:3b:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 16 09:31:34 2025 GMT Not After : Jan 19 10:31:34 2028 GMT Subject: CN=16d71376-e8fa-4e6c-bbf4-978708d88645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:63:ea:52:a8:66:0c:01:f3:fd:2b:88:91:fd: 68:f4:31:47:e5:21:0b:4f:01:b5:21:d3:0c:59:1b: e1:63:c0:32:cb:ee:24:c8:34:30:b5:3c:11:5d:70: 4a:d8:b6:bc:9b:0a:21:57:74:09:29:ff:00:df:c4: f7:7b:1d:f4:d3:e3:e2:13:43:ec:44:91:5d:e5:e5: e0:40:35:b3:f1:1e:1e:7b:43:80:ed:ec:24:a1:b1: 97:6a:20:21:87:78:b3:bb:ae:0d:75:f7:1c:47:0d: 77:a9:66:8e:ce:22:bb:a3:d9:7b:a3:0d:2a:28:85: 9c:81:18:93:06:e1:cc:7d:fb:52:61:44:4f:7f:b4: 0b:0a:e2:1a:2f:af:49:55:7e:6a:c4:f2:6d:ca:d1: 34:c2:23:45:23:9c:74:3f:e4:b5:b9:a3:f3:c1:69: dc:e1:d2:46:73:01:18:1a:cd:af:6d:fe:70:a2:c6: 78:cd:67:0e:7a:aa:f0:50:1d:09:78:c2:2a:7c:a7: bd:ff:65:dd:35:b6:f3:6e:1c:58:fd:3f:02:57:8c: 25:69:00:26:50:40:42:10:ec:60:12:01:9d:4b:cb: 07:6a:69:00:6b:91:ed:0a:2d:6f:d5:76:fd:54:07: 6e:d8:12:75:0c:3b:b4:bd:6a:74:c5:05:d9:ad:ea: 08:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1F:74:1C:B5:05:7E:10:C8:53:1F:E1:B4:D5:44:29:C1:44:B0:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/16d71376-e8fa-4e6c-bbf4-978708d88645.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 130.12.105.0/24 IPv6: 2620:cd:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401311 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:dc:f6:2f:70:e1:f1:ac:c7:98:f7:e2:ea:25:0e:0b:1d:d1: 42:6f:25:3b:d6:fb:bf:55:c0:5c:47:e4:39:81:65:7b:0a:ff: 50:dd:71:a6:0f:e1:81:ee:cc:0a:96:55:ce:bd:f2:39:1c:ce: e7:18:21:be:0f:6c:87:d5:3d:ed:d9:36:54:84:dc:b4:8b:f8: fc:7a:a2:a8:05:41:34:ca:c4:f0:50:85:68:81:67:fc:b5:05: 28:03:92:ec:09:4b:05:09:ec:97:4a:a1:c0:ca:40:4e:3a:85: 77:ae:cd:0a:b0:f8:f5:8e:12:47:57:a8:66:e5:93:d3:94:e2: 1b:91:ff:a7:94:0d:2f:b6:c2:d3:15:bc:64:40:2b:1c:4b:39: 69:32:e7:8c:1e:79:2e:cb:f4:7a:b3:8c:87:f2:0e:f9:3b:cf: 24:79:83:ec:fb:1c:dd:e3:5c:66:3e:23:63:92:f0:42:e5:54: 6a:64:f6:97:ce:9e:cc:0b:bf:23:d0:6c:40:53:84:00:66:90: 88:19:ce:13:c0:1e:2d:92:6a:60:40:16:14:c8:2d:cb:ff:2e: 4a:3f:59:d0:0b:48:f7:ef:ec:f4:67:9a:d8:49:d3:1b:70:77: ff:63:9a:e3:ad:96:77:51:5d:4b:6e:52:6b:2e:a0:dd:c1:b0: bf:ae:0a:06 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEuKFP9s+9BNmf07EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNjA5MzEzNFoXDTI4MDExOTEwMzEzNFowLzEtMCsGA1UEAxMk MTZkNzEzNzYtZThmYS00ZTZjLWJiZjQtOTc4NzA4ZDg4NjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWPqUqhmDAHz/SuIkf1o9DFH5SELTwG1IdMM WRvhY8Ayy+4kyDQwtTwRXXBK2La8mwohV3QJKf8A38T3ex300+PiE0PsRJFd5eXg QDWz8R4ee0OA7ewkobGXaiAhh3izu64NdfccRw13qWaOziK7o9l7ow0qKIWcgRiT BuHMfftSYURPf7QLCuIaL69JVX5qxPJtytE0wiNFI5x0P+S1uaPzwWnc4dJGcwEY Gs2vbf5wosZ4zWcOeqrwUB0JeMIqfKe9/2XdNbbzbhxY/T8CV4wlaQAmUEBCEOxg EgGdS8sHamkAa5HtCi1v1Xb9VAdu2BJ1DDu0vWp0xQXZreoIiwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFE8fdBy1BX4QyFMf4bTVRCnBRLCmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8x NmQ3MTM3Ni1lOGZhLTRlNmMtYmJmNC05Nzg3MDhkODg2NDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzE2ZDcxMzc2LWU4ZmEtNGU2Yy1i YmY0LTk3ODcwOGQ4ODY0NS8xNmQ3MTM3Ni1lOGZhLTRlNmMtYmJmNC05Nzg3MDhk ODg2NDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACCDGkwDwQCAAIwCQMHACYgAM0gADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGH58wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAM9z2L3Dh8azHmPfi6iUOCx3R Qm8lO9b7v1XAXEfkOYFlewr/UN1xpg/hge7MCpZVzr3yORzO5xghvg9sh9U97dk2 VITctIv4/HqiqAVBNMrE8FCFaIFn/LUFKAOS7AlLBQnsl0qhwMpATjqFd67NCrD4 9Y4SR1eoZuWT05TiG5H/p5QNL7bC0xW8ZEArHEs5aTLnjB55Lsv0erOMh/IO+TvP JHmD7Psc3eNcZj4jY5LwQuVUamT2l86ezAu/I9BsQFOEAGaQiBnOE8AeLZJqYEAW FMgty/8uSj9Z0AtI9+/s9Gea2EnTG3B3/2Oa462Wd1FdS25Say6g3cGwv64KBg== -----END CERTIFICATE-----Generated at Mon Oct 20 02:05:25 2025 by rpki-client