$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer File: 9ed327a2-62ee-4bd2-be90-1cf122db3819.cer (raw, json) Hash identifier: 2RbpEKCJBJk41xkr0xlM6X/WjKWdf6+FFb9DNOnWRfo= Subject key identifier: CA:67:09:F5:E9:84:71:C3:8D:ED:F6:A7:3A:EE:E2:99:24:9C:B9:94 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8E1DF92AF21C1D561FE069A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 20:12:53 +0000 Certificate not after: Thu 20 Jan 2028 21:12:53 +0000 Subordinate resources: IP: 104.241.208.0/20 IP: 2605:d080::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:1d:f9:2a:f2:1c:1d:56:1f:e0:69:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 17 20:12:53 2025 GMT Not After : Jan 20 21:12:53 2028 GMT Subject: CN=9ed327a2-62ee-4bd2-be90-1cf122db3819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f6:80:d7:b7:a3:ca:bf:47:57:b4:99:db:8b: e5:2b:2f:d2:9a:73:41:d6:ad:11:79:50:8a:8d:0c: 08:eb:c2:3b:bf:30:10:fa:b1:58:93:07:9c:47:4d: a9:ac:48:8d:d8:01:da:73:55:38:0c:9f:71:ff:5a: a3:8d:06:6b:2e:ba:97:b3:a5:9f:c6:d4:a9:ae:a4: b5:d1:b6:50:83:c9:78:5e:a2:d1:c5:40:2f:68:ec: d6:6b:5e:27:80:c0:0a:82:b4:e3:79:a6:00:13:ed: c8:cb:8e:5d:39:8f:50:92:ea:28:8f:70:a8:03:cc: 71:85:66:44:bf:68:0c:e5:fa:cd:c2:f3:c0:f2:65: 85:9f:4f:6f:8c:76:79:d1:ec:53:fb:e5:a8:bb:ff: 9c:58:39:51:2e:dd:6a:0e:cc:29:8f:40:15:7d:eb: ea:53:a5:01:3b:11:44:ee:72:ab:56:9a:4a:56:74: 4b:e2:e3:4f:9e:ee:f9:77:2a:3e:51:59:2f:b2:30: 1a:f9:f5:5a:22:d8:96:64:5f:59:64:5f:f3:5a:06: a8:e5:ea:61:81:6c:75:bd:d5:4c:6a:76:68:39:8d: 88:6a:9d:f8:e1:c8:38:9d:24:c1:c9:75:66:34:3a: 83:0e:9d:2a:a7:52:c4:af:29:95:1a:24:b4:ba:11: ea:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:67:09:F5:E9:84:71:C3:8D:ED:F6:A7:3A:EE:E2:99:24:9C:B9:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 104.241.208.0/20 IPv6: 2605:d080::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b9:8a:8d:d7:21:ef:9d:ce:23:e8:04:c7:69:28:0c:7b:a7: f5:79:62:11:5c:04:8a:83:42:12:d4:98:0f:d1:90:eb:33:89: 3e:8e:da:a5:e0:a1:e2:f7:7a:2a:b1:06:b0:d9:3e:94:e8:9d: 30:66:cc:ff:78:f6:74:30:a2:a9:ef:df:27:40:d7:7d:ea:1a: 4e:80:42:e7:f3:4d:8d:c5:02:2f:5a:c4:3a:06:71:80:2c:7b: 2d:fc:41:2b:e9:2e:02:71:f0:62:d8:65:f9:8d:71:36:d6:ca: 0d:55:db:97:3a:c6:ae:ce:a1:ba:70:83:3d:64:a6:ad:04:de: f4:a4:70:ae:66:5a:13:a2:a4:ec:6f:97:31:ca:c3:3a:07:29: 5a:84:85:08:d5:74:21:41:9c:36:fb:81:1c:5b:87:b6:89:81: 13:7d:1b:cf:da:57:38:3b:24:22:6e:e9:87:a3:bc:dd:a3:ab: 6b:35:9c:b9:00:f7:55:b2:da:f7:f0:48:4a:7f:a8:4e:1a:e1: e0:24:5f:a7:04:b5:c4:93:98:b2:09:cc:5f:bb:a2:b1:2c:8c: 54:d3:eb:ba:30:3a:63:dc:d2:5f:13:86:60:5e:b0:24:41:cb: df:5f:8a:b2:56:44:a8:96:e5:62:3f:46:ea:48:4c:68:33:97: 97:c9:93:86 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEuOHfkq8hwdVh/gaaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNzIwMTI1M1oXDTI4MDEyMDIxMTI1M1owLzEtMCsGA1UEAxMk OWVkMzI3YTItNjJlZS00YmQyLWJlOTAtMWNmMTIyZGIzODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPaA17ejyr9HV7SZ24vlKy/SmnNB1q0ReVCK jQwI68I7vzAQ+rFYkwecR02prEiN2AHac1U4DJ9x/1qjjQZrLrqXs6WfxtSprqS1 0bZQg8l4XqLRxUAvaOzWa14ngMAKgrTjeaYAE+3Iy45dOY9Qkuooj3CoA8xxhWZE v2gM5frNwvPA8mWFn09vjHZ50exT++Wou/+cWDlRLt1qDswpj0AVfevqU6UBOxFE 7nKrVppKVnRL4uNPnu75dyo+UVkvsjAa+fVaItiWZF9ZZF/zWgao5ephgWx1vdVM anZoOY2Iap344cg4nSTByXVmNDqDDp0qp1LErymVGiS0uhHqAwIDAQABo4IEDjCC BAowHQYDVR0OBBYEFMpnCfXphHHDje32pzru4pkknLmUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85 ZWQzMjdhMi02MmVlLTRiZDItYmU5MC0xY2YxMjJkYjM4MTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzllZDMyN2EyLTYyZWUtNGJkMi1i ZTkwLTFjZjEyMmRiMzgxOS85ZWQzMjdhMi02MmVlLTRiZDItYmU5MC0xY2YxMjJk YjM4MTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARo8dAwDQQCAAIwBwMFACYF0IAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA gbmKjdch753OI+gEx2koDHun9XliEVwEioNCEtSYD9GQ6zOJPo7apeCh4vd6KrEG sNk+lOidMGbM/3j2dDCiqe/fJ0DXfeoaToBC5/NNjcUCL1rEOgZxgCx7LfxBK+ku AnHwYthl+Y1xNtbKDVXblzrGrs6hunCDPWSmrQTe9KRwrmZaE6Kk7G+XMcrDOgcp WoSFCNV0IUGcNvuBHFuHtomBE30bz9pXODskIm7ph6O83aOrazWcuQD3VbLa9/BI Sn+oThrh4CRfpwS1xJOYsgnMX7uisSyMVNPrujA6Y9zSXxOGYF6wJEHL31+KslZE qJblYj9G6khMaDOXl8mThg== -----END CERTIFICATE-----Generated at Mon Oct 20 17:58:20 2025 by rpki-client