$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c82edaf-3653-4115-a59c-0421ba7b9607.cer File: 4c82edaf-3653-4115-a59c-0421ba7b9607.cer (raw, json) Hash identifier: Hvg1rLy4BY1MZMNDOrKyMKFNmv+1wLJghikFCloF0FM= Subject key identifier: F9:C8:3F:29:82:2E:87:45:80:1C:26:26:77:7A:62:7A:8B:24:68:89 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8E02888DE47DF827C8B14B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c82edaf-3653-4115-a59c-0421ba7b9607/4c82edaf-3653-4115-a59c-0421ba7b9607.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c82edaf-3653-4115-a59c-0421ba7b9607/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 19:17:35 +0000 Certificate not after: Thu 20 Jan 2028 20:17:35 +0000 Subordinate resources: AS: 13362 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:02:88:8d:e4:7d:f8:27:c8:b1:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 17 19:17:35 2025 GMT Not After : Jan 20 20:17:35 2028 GMT Subject: CN=4c82edaf-3653-4115-a59c-0421ba7b9607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:46:59:a8:ad:52:02:cd:1b:c3:dc:4f:cb:37: 48:e9:67:ff:a8:2e:7e:0a:a9:79:83:0a:fb:3c:f6: 2b:cd:27:f1:43:db:a5:d6:17:d5:62:e1:08:f8:35: 49:dd:7d:fa:24:cd:47:47:64:c1:65:72:12:e5:b8: 52:b1:95:d6:d2:36:0d:99:73:9a:6c:d6:fc:ae:d4: 07:e3:7a:ec:06:c5:de:1f:fe:28:b9:ab:58:92:a6: c4:5e:2f:f4:3c:f3:25:32:21:a9:61:f3:a3:6b:ef: b7:bc:05:36:1e:90:b6:19:8f:59:4b:90:e6:af:95: 86:ab:01:b9:99:e3:4d:8e:22:b7:7f:be:ff:ce:f4: 6e:87:5e:be:87:7d:69:22:fb:41:4d:ea:8a:dc:24: 84:03:5e:7b:dd:65:a7:db:d2:de:7e:fb:4e:74:77: 80:37:1a:6f:c5:62:f6:ec:61:0e:40:81:8a:95:bd: 98:0e:b1:ee:ee:33:8e:51:0a:fb:00:9d:1b:a3:b8: 22:f5:5b:82:7c:a4:0a:fe:b2:3d:9e:ff:85:ca:77: 4d:4d:3e:2c:b1:cf:7f:ac:c1:3e:71:54:60:8f:18: 85:7a:d2:b9:82:a4:cc:cc:9f:30:13:ea:f5:9e:00: 1b:1e:fc:3c:aa:b9:af:8d:72:dc:08:57:46:2e:15: c7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C8:3F:29:82:2E:87:45:80:1C:26:26:77:7A:62:7A:8B:24:68:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c82edaf-3653-4115-a59c-0421ba7b9607/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4c82edaf-3653-4115-a59c-0421ba7b9607/4c82edaf-3653-4115-a59c-0421ba7b9607.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 13362 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:9b:47:a6:8a:19:d9:77:e0:a6:fd:aa:04:8a:eb:32:88:93: 19:be:10:ab:9d:37:3f:b3:18:4d:05:8f:55:c4:dc:b3:47:d5: a5:75:ca:0f:2a:db:1c:2e:b5:41:74:cb:1c:49:0e:28:99:13: 69:e2:d1:45:e1:db:83:75:a2:a6:f3:fe:39:a6:d0:31:6c:1f: 4b:15:19:22:d3:cc:73:28:8a:ab:a7:5c:9b:f9:31:d0:aa:03: 88:df:b3:d6:78:34:41:29:20:f4:4e:dd:c6:ca:70:a5:64:f1: eb:75:41:12:25:eb:0b:92:89:2c:ee:be:43:58:50:88:08:ee: f0:22:ba:87:93:51:ab:8f:30:6c:40:6c:ae:76:31:62:f8:a2: 7b:f7:81:32:7f:5e:fb:28:d1:4b:ea:5b:42:ec:e5:d4:1a:1b: 1f:1b:ed:57:86:3d:ec:46:38:80:82:a9:32:cb:6a:92:9c:f8: e2:75:99:ac:47:57:20:cc:20:3e:88:d1:f9:a5:5a:06:05:27: a3:d5:23:99:46:4a:da:ab:b1:41:7d:38:97:77:12:3d:1e:72: 08:e7:10:df:3b:18:76:69:f6:e3:86:5e:e2:f9:52:e4:6f:60: 34:87:2a:cc:b8:ac:3b:df:c4:16:c3:13:c6:40:41:87:1e:07: d2:52:35:52 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEuOAoiN5H34J8ixSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNzE5MTczNVoXDTI4MDEyMDIwMTczNVowLzEtMCsGA1UEAxMk NGM4MmVkYWYtMzY1My00MTE1LWE1OWMtMDQyMWJhN2I5NjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEZZqK1SAs0bw9xPyzdI6Wf/qC5+Cql5gwr7 PPYrzSfxQ9ul1hfVYuEI+DVJ3X36JM1HR2TBZXIS5bhSsZXW0jYNmXOabNb8rtQH 43rsBsXeH/4ouatYkqbEXi/0PPMlMiGpYfOja++3vAU2HpC2GY9ZS5Dmr5WGqwG5 meNNjiK3f77/zvRuh16+h31pIvtBTeqK3CSEA1573WWn29LefvtOdHeANxpvxWL2 7GEOQIGKlb2YDrHu7jOOUQr7AJ0bo7gi9VuCfKQK/rI9nv+FyndNTT4ssc9/rME+ cVRgjxiFetK5gqTMzJ8wE+r1ngAbHvw8qrmvjXLcCFdGLhXHYwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFPnIPymCLodFgBwmJnd6YnqLJGiJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 YzgyZWRhZi0zNjUzLTQxMTUtYTU5Yy0wNDIxYmE3Yjk2MDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzRjODJlZGFmLTM2NTMtNDExNS1h NTljLTA0MjFiYTdiOTYwNy80YzgyZWRhZi0zNjUzLTQxMTUtYTU5Yy0wNDIxYmE3 Yjk2MDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICNDIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUZtHpooZ2Xfgpv2qBIrrMoiTGb4Q q503P7MYTQWPVcTcs0fVpXXKDyrbHC61QXTLHEkOKJkTaeLRReHbg3WipvP+OabQ MWwfSxUZItPMcyiKq6dcm/kx0KoDiN+z1ng0QSkg9E7dxspwpWTx63VBEiXrC5KJ LO6+Q1hQiAju8CK6h5NRq48wbEBsrnYxYviie/eBMn9e+yjRS+pbQuzl1BobHxvt V4Y97EY4gIKpMstqkpz44nWZrEdXIMwgPojR+aVaBgUno9UjmUZK2quxQX04l3cS PR5yCOcQ3zsYdmn244Ze4vlS5G9gNIcqzLisO9/EFsMTxkBBhx4H0lI1Ug== -----END CERTIFICATE-----Generated at Mon Oct 20 08:18:28 2025 by rpki-client