$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.cer File: 4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.cer (raw, json) Hash identifier: 6wZzK12qPeelcaIxJSHK/QwEDe+11e7pDK6DfSiQtos= Subject key identifier: 13:69:5C:7A:B2:9F:43:61:0B:E7:CE:B5:62:26:6E:E3:7E:6C:62:18 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8E19505B67081DC75E52FB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 20:03:29 +0000 Certificate not after: Thu 20 Jan 2028 21:03:29 +0000 Subordinate resources: AS: 398969 IP: 74.120.13.0/24 IP: 144.86.189.0/24 IP: 162.142.79.0/24 IP: 192.234.212.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:19:50:5b:67:08:1d:c7:5e:52:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 17 20:03:29 2025 GMT Not After : Jan 20 21:03:29 2028 GMT Subject: CN=4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:d3:2d:4d:f7:82:52:bc:77:b2:64:88:bc: 23:0e:e5:36:bd:07:36:fc:bd:8e:f6:06:4e:a3:46: b8:2f:b3:db:c7:73:b1:47:7e:f2:eb:d2:82:79:e6: 56:04:10:6f:52:0d:24:b3:7d:d2:34:db:79:cf:53: a7:f1:a7:c0:6e:77:e7:7f:9b:02:64:ba:14:09:03: 66:48:4c:1f:c2:85:30:dd:aa:99:db:6e:5c:c1:b5: da:43:ad:9b:b3:3e:18:ae:c9:74:ea:30:b9:31:07: d9:bb:9e:73:82:a0:0e:f3:c2:5e:1e:79:1d:8b:33: b5:47:02:99:8b:19:ed:af:08:db:be:18:8c:c9:4a: ff:e7:2c:e4:20:89:65:f8:1f:b7:eb:cd:e6:8d:be: 29:be:80:b5:0f:e1:08:db:ce:b9:dc:e1:de:1f:8c: cd:0f:7d:56:24:c1:7d:3d:45:f1:79:d7:17:11:2d: f1:4f:23:31:8e:66:52:85:5e:b5:1d:19:92:72:c4: fb:5b:6b:8d:0b:6a:13:05:55:2f:29:b9:54:ad:95: 17:84:8f:fc:34:ec:d9:dd:ce:c4:7d:78:a8:7f:e2: 44:69:04:89:7c:2a:44:0c:e2:83:f0:d0:0b:b7:7d: 49:5c:2f:23:b8:85:46:99:d6:1a:7e:0a:89:47:a1: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:69:5C:7A:B2:9F:43:61:0B:E7:CE:B5:62:26:6E:E3:7E:6C:62:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 74.120.13.0/24 144.86.189.0/24 162.142.79.0/24 192.234.212.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398969 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2e:9f:bd:cd:c5:56:bc:1e:46:2e:fc:6f:22:40:eb:4d:aa: 46:f4:93:76:8b:e6:bf:6f:bd:ae:7d:28:e0:d2:50:6a:5f:f2: f2:f4:99:66:ee:52:46:18:8b:0e:24:15:b3:8b:88:dd:4e:b5: 37:b9:0a:74:63:cf:0f:23:63:a1:ff:f5:47:1d:45:a5:d4:e7: fb:50:ae:2c:e2:c0:76:ef:71:0a:b1:9c:ed:93:62:75:58:52: c9:ff:35:24:c9:5a:21:17:d6:8a:0d:9e:d6:cb:a2:49:ef:07: 04:91:c1:b1:9e:e6:8b:26:09:dd:df:cb:53:6d:1f:22:85:cb: af:75:d5:1c:17:cc:db:45:54:0b:2e:b7:d4:1c:76:6b:4e:77: 79:a6:c3:9d:f9:a3:a9:2d:4a:50:06:ac:e8:00:67:71:47:b4: 91:58:65:88:da:93:66:d8:e0:4c:18:fb:63:7b:21:23:fa:83: 7c:e4:10:bd:23:c3:77:e1:04:07:1d:fa:1a:33:54:68:c5:42: 9e:eb:55:cf:8a:91:22:95:34:e1:ea:bc:7f:67:ba:70:b1:7c: f4:c6:b8:67:b0:b0:06:f2:04:a2:33:56:4d:3e:3e:3e:f4:20: 71:2d:5e:a5:b3:b3:bf:0d:0b:92:fe:23:8e:88:ce:42:f7:92: c7:56:dc:17 -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEuOGVBbZwgdx15S+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNzIwMDMyOVoXDTI4MDEyMDIxMDMyOVowLzEtMCsGA1UEAxMk NGZjNzAzMzMtOTRmZS00YzE4LWI0ZjgtNmE4YjlhMWExZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoDTLU33glK8d7JkiLwjDuU2vQc2/L2O9gZO o0a4L7Pbx3OxR37y69KCeeZWBBBvUg0ks33SNNt5z1On8afAbnfnf5sCZLoUCQNm SEwfwoUw3aqZ225cwbXaQ62bsz4Yrsl06jC5MQfZu55zgqAO88JeHnkdizO1RwKZ ixntrwjbvhiMyUr/5yzkIIll+B+3683mjb4pvoC1D+EI28653OHeH4zND31WJMF9 PUXxedcXES3xTyMxjmZShV61HRmScsT7W2uNC2oTBVUvKblUrZUXhI/8NOzZ3c7E fXiof+JEaQSJfCpEDOKD8NALt31JXC8juIVGmdYafgqJR6HZlwIDAQABo4IELTCC BCkwHQYDVR0OBBYEFBNpXHqyn0NhC+fOtWImbuN+bGIYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 ZmM3MDMzMy05NGZlLTRjMTgtYjRmOC02YThiOWExYTFkNTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzRmYzcwMzMzLTk0ZmUtNGMxOC1i NGY4LTZhOGI5YTFhMWQ1MS80ZmM3MDMzMy05NGZlLTRjMTgtYjRmOC02YThiOWEx YTFkNTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBABKeA0DBACQVr0DBACijk8DBADA6tQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBhZ5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACkun73NxVa8HkYu/G8iQOtN qkb0k3aL5r9vva59KODSUGpf8vL0mWbuUkYYiw4kFbOLiN1OtTe5CnRjzw8jY6H/ 9UcdRaXU5/tQriziwHbvcQqxnO2TYnVYUsn/NSTJWiEX1ooNntbLoknvBwSRwbGe 5osmCd3fy1NtHyKFy6911RwXzNtFVAsut9QcdmtOd3mmw535o6ktSlAGrOgAZ3FH tJFYZYjak2bY4EwY+2N7ISP6g3zkEL0jw3fhBAcd+hozVGjFQp7rVc+KkSKVNOHq vH9nunCxfPTGuGewsAbyBKIzVk0+Pj70IHEtXqWzs78NC5L+I46IzkL3ksdW3Bc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:05:28 2025 by rpki-client