$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a237db0e-3fe6-4950-a5df-30d73593ae4a.cer File: a237db0e-3fe6-4950-a5df-30d73593ae4a.cer (raw, json) Hash identifier: 31m7Aicjc27HGQF2TG93iKky3JQeQxs1WrGbdrPXBQA= Subject key identifier: 99:83:AF:D3:15:AA:2E:5C:DA:E9:A6:74:B2:8D:50:DB:E8:B7:36:0B Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B83E901C9AEA27E4C17A90580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a237db0e-3fe6-4950-a5df-30d73593ae4a/a237db0e-3fe6-4950-a5df-30d73593ae4a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a237db0e-3fe6-4950-a5df-30d73593ae4a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 04:28:04 +0000 Certificate not after: Mon 17 Jan 2028 05:28:04 +0000 Subordinate resources: IP: 142.249.93.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:e9:01:c9:ae:a2:7e:4c:17:a9:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 14 04:28:04 2025 GMT Not After : Jan 17 05:28:04 2028 GMT Subject: CN=a237db0e-3fe6-4950-a5df-30d73593ae4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:90:90:7e:44:67:d3:68:ff:d2:15:78:20:72: 9e:8b:8e:54:b7:7d:29:65:42:75:ce:4d:87:63:82: 09:ba:8e:c3:f6:8e:bd:14:9c:c3:cb:e4:8e:e2:95: b8:7c:80:15:25:d3:d3:11:3a:86:ec:bc:c9:2e:b4: d5:21:08:df:cb:c4:77:63:bd:1d:80:de:5e:20:57: e6:4d:a0:ce:16:6a:10:ec:25:78:ed:3f:41:87:e7: 73:7c:94:87:d5:12:e7:44:df:2a:b9:5e:2b:ab:96: 15:66:07:9c:dc:db:39:5e:9e:75:c5:7b:18:53:e2: f8:9d:97:5a:43:36:7b:c6:c4:f2:16:f0:77:ef:7e: 1d:18:7f:6c:1b:27:9f:3b:b2:6b:c9:67:2e:95:80: 13:f8:c9:da:58:3e:f0:69:17:17:ef:2b:15:2e:46: 22:7b:54:c4:eb:2f:30:2f:9b:e4:a6:dc:8c:56:ed: c9:13:06:6f:4e:5e:19:19:2e:f7:50:cd:bb:ac:2c: c9:dd:ec:26:aa:66:fb:56:f0:e5:d5:19:e5:33:1e: 50:0d:4c:7a:35:8e:29:69:80:dd:b0:9f:4e:20:60: 6a:0f:89:d6:b6:72:10:04:0e:b0:d1:73:9e:ac:dd: 30:96:ec:6f:94:43:80:ce:8e:70:51:1d:72:90:55: d5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:83:AF:D3:15:AA:2E:5C:DA:E9:A6:74:B2:8D:50:DB:E8:B7:36:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a237db0e-3fe6-4950-a5df-30d73593ae4a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a237db0e-3fe6-4950-a5df-30d73593ae4a/a237db0e-3fe6-4950-a5df-30d73593ae4a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 142.249.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:08:17:28:a6:f4:15:c0:38:a3:b2:7f:19:b4:1c:b8:18:40: 94:d8:6a:0d:5a:cd:57:a9:c2:e5:6d:40:39:eb:0a:63:ab:09: b8:92:a3:82:17:8a:eb:5d:7b:2b:90:fc:35:77:e0:d2:90:c9: a5:17:aa:77:bc:bb:87:17:2b:72:88:43:d6:c0:59:18:ef:42: 64:29:1a:67:02:fd:52:70:08:c9:08:f6:c2:62:52:7e:23:91: c9:96:eb:fd:27:f2:dd:a7:f4:5b:bb:26:c7:b3:c6:99:83:fb: 22:88:61:24:32:0f:7f:2b:c0:fc:c0:0a:89:1e:65:89:59:06: d3:54:80:d0:fa:9e:91:f0:ef:2a:de:d3:89:ae:26:5f:eb:87: 79:fd:1a:6f:a1:62:03:17:ed:a3:20:62:f2:d4:13:f7:53:3d: 11:35:85:53:7f:e8:66:36:2f:6b:40:8b:35:14:ee:57:ce:0f: 09:f4:80:f8:2d:d9:a3:ab:83:ba:71:11:21:23:b4:3b:f6:33: 2c:3d:2d:26:46:5c:c7:5c:e8:26:2e:a3:2c:bf:8e:bf:24:40: 79:73:a3:5a:dd:be:38:b7:62:94:bd:db:81:8d:c5:61:54:6e: 6f:8f:1a:47:9e:73:1c:9d:3b:a4:40:36:f9:bd:68:14:a3:16: db:37:8b:3b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEuD6QHJrqJ+TBepBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNDA0MjgwNFoXDTI4MDExNzA1MjgwNFowLzEtMCsGA1UEAxMk YTIzN2RiMGUtM2ZlNi00OTUwLWE1ZGYtMzBkNzM1OTNhZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpCQfkRn02j/0hV4IHKei45Ut30pZUJ1zk2H Y4IJuo7D9o69FJzDy+SO4pW4fIAVJdPTETqG7LzJLrTVIQjfy8R3Y70dgN5eIFfm TaDOFmoQ7CV47T9Bh+dzfJSH1RLnRN8quV4rq5YVZgec3Ns5Xp51xXsYU+L4nZda QzZ7xsTyFvB3734dGH9sGyefO7JryWculYAT+MnaWD7waRcX7ysVLkYie1TE6y8w L5vkptyMVu3JEwZvTl4ZGS73UM27rCzJ3ewmqmb7VvDl1RnlMx5QDUx6NY4paYDd sJ9OIGBqD4nWtnIQBA6w0XOerN0wluxvlEOAzo5wUR1ykFXVEwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJmDr9MVqi5c2ummdLKNUNvotzYLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h MjM3ZGIwZS0zZmU2LTQ5NTAtYTVkZi0zMGQ3MzU5M2FlNGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2EyMzdkYjBlLTNmZTYtNDk1MC1h NWRmLTMwZDczNTkzYWU0YS9hMjM3ZGIwZS0zZmU2LTQ5NTAtYTVkZi0zMGQ3MzU5 M2FlNGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACO+V0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXQgXKKb0FcA4o7J/GbQc uBhAlNhqDVrNV6nC5W1AOesKY6sJuJKjgheK6117K5D8NXfg0pDJpReqd7y7hxcr cohD1sBZGO9CZCkaZwL9UnAIyQj2wmJSfiORyZbr/Sfy3af0W7smx7PGmYP7Iohh JDIPfyvA/MAKiR5liVkG01SA0PqekfDvKt7Tia4mX+uHef0ab6FiAxftoyBi8tQT 91M9ETWFU3/oZjYva0CLNRTuV84PCfSA+C3Zo6uDunERISO0O/YzLD0tJkZcx1zo Ji6jLL+OvyRAeXOjWt2+OLdilL3bgY3FYVRub48aR55zHJ07pEA2+b1oFKMW2zeL Ow== -----END CERTIFICATE-----Generated at Mon Oct 20 02:05:17 2025 by rpki-client