$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer File: 8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer (raw, json) Hash identifier: c3+xKw230qD16Sd9SJ5Bpgd7aYQZZJYH6ooZAu9StXU= Subject key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B85242B336762D88D2776E400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 15:03:05 +0000 Certificate not after: Mon 17 Jan 2028 16:03:05 +0000 Subordinate resources: AS: 13511 IP: 192.155.112.0/20 IP: 2620:5b::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:24:2b:33:67:62:d8:8d:27:76:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 14 15:03:05 2025 GMT Not After : Jan 17 16:03:05 2028 GMT Subject: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:75:62:af:11:3b:9b:a6:de:3b:24:5c:91:11: 2e:74:a3:05:0f:15:99:be:23:df:57:ec:6e:b5:9d: 13:26:fe:21:88:85:ee:62:51:74:62:b0:bb:95:a8: 12:1d:15:5b:c8:c8:b9:72:05:56:b3:1e:03:12:1c: b5:7e:3f:23:c6:4d:aa:3a:4f:1d:22:99:48:a8:c1: b1:a9:d7:e2:9c:84:16:0f:67:e3:28:34:10:11:01: db:2b:22:4e:c3:cc:67:e7:11:27:d2:ae:78:8d:4f: b9:90:72:c8:e1:cb:a0:35:0d:33:1a:aa:94:b1:ca: d9:da:ea:99:1f:62:06:ed:6d:1d:47:b3:18:94:e9: 38:6b:0b:7c:5c:ab:ea:56:a7:b5:a4:84:bd:ad:94: 59:5a:11:85:9b:11:1e:bc:b1:6d:3f:4f:a0:ce:c2: 10:b2:54:2c:67:30:3d:e8:61:b5:a2:17:05:2d:a4: 08:50:c8:ed:c9:4a:b3:e5:eb:69:22:22:51:3d:52: 64:e1:3b:97:69:59:06:c8:d3:0f:9f:dc:7d:ed:01: e7:ba:8b:74:7d:b9:f1:fc:ff:ff:07:21:71:1d:f5: 26:bf:46:b6:ce:bd:3c:ad:9a:b1:98:1e:0e:d3:32: 31:63:9d:ff:66:5a:57:dd:8c:fb:39:fa:20:7d:aa: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 192.155.112.0/20 IPv6: 2620:5b::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13511 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:2a:83:e6:a4:9e:21:6b:11:69:b9:bb:00:39:f4:88:fa:62: 73:6d:45:58:06:5c:6f:a6:5a:2d:9b:93:20:73:d6:99:c3:f2: a0:fa:53:50:a1:71:0b:76:d5:fc:63:21:86:89:f2:7a:e5:17: 33:32:38:50:e7:0a:8f:3c:e4:42:07:d4:af:af:5c:e9:1f:5f: 42:7b:b0:01:cf:80:5c:9b:1c:15:e7:d8:d9:97:4c:a6:67:c6: b3:6a:15:20:45:6c:0e:1a:a6:b2:d6:d9:15:9f:72:0c:2b:f0: ef:68:d5:3f:2c:1a:57:37:3d:6f:d0:ce:1d:25:59:5d:d2:d2: 66:5f:16:79:90:b7:17:80:83:2b:f6:dc:a5:50:31:c1:90:fb: 1a:42:73:fb:ab:e8:c0:78:9e:59:7e:3a:73:f3:b7:00:b9:cb: 6b:77:dd:ce:b7:f4:ae:6f:aa:63:de:86:97:3e:f0:71:63:b2: 9d:d1:88:36:38:44:56:1b:7e:ff:33:ea:bf:a8:67:0f:de:9d: 52:8b:4b:57:65:a4:52:a4:be:ed:80:f5:a7:eb:81:28:20:1a: 46:2a:e3:e3:bd:ba:d4:28:60:43:e2:07:0c:8d:98:77:64:e9: db:7a:a1:80:35:e1:7e:c2:d0:c3:b4:22:4d:63:29:d9:f9:e8: c1:72:93:fa -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEuFJCszZ2LYjSd25AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNDE1MDMwNVoXDTI4MDExNzE2MDMwNVowLzEtMCsGA1UEAxMk OGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJkZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinVirxE7m6beOyRckREudKMFDxWZviPfV+xu tZ0TJv4hiIXuYlF0YrC7lagSHRVbyMi5cgVWsx4DEhy1fj8jxk2qOk8dIplIqMGx qdfinIQWD2fjKDQQEQHbKyJOw8xn5xEn0q54jU+5kHLI4cugNQ0zGqqUscrZ2uqZ H2IG7W0dR7MYlOk4awt8XKvqVqe1pIS9rZRZWhGFmxEevLFtP0+gzsIQslQsZzA9 6GG1ohcFLaQIUMjtyUqz5etpIiJRPVJk4TuXaVkGyNMPn9x97QHnuot0fbnx/P// ByFxHfUmv0a2zr08rZqxmB4O0zIxY53/ZlpX3Yz7OfogfaqsSQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCFSz0Vnby5tVt8wB4jXupoLEeuNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84 YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzhhNzU5ZmQ1LTNmNTctNGVlOC1i YzMyLTM4Y2E5YjcyZGQ0Yi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3 MmRkNGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBATAm3AwDwQCAAIwCQMHACYgAFsAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgI0xzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBKoPmpJ4haxFpubsAOfSI+mJz bUVYBlxvplotm5Mgc9aZw/Kg+lNQoXELdtX8YyGGifJ65RczMjhQ5wqPPORCB9Sv r1zpH19Ce7ABz4BcmxwV59jZl0ymZ8azahUgRWwOGqay1tkVn3IMK/DvaNU/LBpX Nz1v0M4dJVld0tJmXxZ5kLcXgIMr9tylUDHBkPsaQnP7q+jAeJ5Zfjpz87cAuctr d93Ot/Sub6pj3oaXPvBxY7Kd0Yg2OERWG37/M+q/qGcP3p1Si0tXZaRSpL7tgPWn 64EoIBpGKuPjvbrUKGBD4gcMjZh3ZOnbeqGANeF+wtDDtCJNYynZ+ejBcpP6 -----END CERTIFICATE-----Generated at Mon Oct 20 02:05:06 2025 by rpki-client