$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.cer File: a2b535b7-fbed-4c14-8ac0-7c5f32020c09.cer (raw, json) Hash identifier: dSy6B68wSuoOZrxfKZqJCh+C3dnWFhmqFHI1ZKIW3qw= Subject key identifier: 4C:9A:3C:37:5A:3C:37:6C:56:67:CF:06:66:93:00:59:D0:DE:F7:06 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8EFA37F6F1F374EAA90BBF60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Oct 2025 03:36:39 +0000 Certificate not after: Fri 21 Jan 2028 04:36:39 +0000 Subordinate resources: AS: 402072 IP: 2602:f52a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:fa:37:f6:f1:f3:74:ea:a9:0b:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 18 03:36:39 2025 GMT Not After : Jan 21 04:36:39 2028 GMT Subject: CN=a2b535b7-fbed-4c14-8ac0-7c5f32020c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c7:d2:2c:4d:a3:4e:d7:aa:0a:9e:55:84:eb: 8c:eb:65:49:b6:af:ac:6f:24:c0:4f:96:b6:ab:b5: 7d:55:89:e6:83:b9:00:0e:47:17:b1:43:8c:c9:bc: d7:ff:5e:54:5b:b9:c6:9b:d5:10:d8:f1:79:bc:3e: 64:4d:51:79:1a:a6:8e:39:55:0a:33:39:f4:30:17: 8b:10:e1:37:81:83:28:f8:44:60:df:bf:d0:e3:60: 55:19:35:4f:ee:79:bb:88:49:05:89:72:0d:60:ca: 00:14:37:92:5c:70:0b:1d:70:41:f9:f6:e6:57:7b: 97:db:96:ea:c7:fd:0f:b6:7c:90:e0:72:bd:e4:9c: c0:00:06:25:2b:41:8f:d9:e1:be:6c:5c:ac:0c:b0: 39:a8:64:3c:3b:c9:18:0d:33:b8:00:0b:04:4f:f2: 60:a9:f3:92:6e:ea:25:4c:25:c6:45:dc:a9:f2:8c: ba:70:0d:a0:98:2b:bb:8e:fd:8b:af:bc:88:60:a7: 2a:b0:b4:1d:b4:81:8b:9d:1a:3a:23:85:5b:bd:71: 8a:39:12:e7:42:54:cd:be:cf:f0:8d:e9:e7:84:44: 8c:dc:3e:ce:82:b2:95:4b:bd:86:5f:8b:a3:9a:af: a3:3d:33:d2:16:a1:87:58:2f:22:a9:85:c0:fb:2b: 70:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9A:3C:37:5A:3C:37:6C:56:67:CF:06:66:93:00:59:D0:DE:F7:06 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv6: 2602:f52a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402072 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:cc:c4:6b:4d:ea:f1:08:30:ba:50:06:ef:71:16:4f:cd:00: e7:18:8a:c1:10:73:25:c4:73:4d:c3:db:3e:90:a3:d3:0f:57: 07:cf:f4:62:96:02:28:38:f2:0f:52:a9:6a:5d:ac:26:fb:f2: 20:7a:cf:2d:79:ef:22:f5:69:0f:60:9b:21:91:a9:76:a2:9f: d0:24:b6:8b:81:bc:12:41:54:1e:aa:cb:88:29:96:ac:7b:ae: 3f:c9:11:4f:a3:f4:fe:e0:46:c4:35:34:a2:2d:0c:55:b9:a9: e1:a1:02:0f:d5:dd:fd:f8:3f:a4:30:6e:9e:bd:b7:f5:8f:4d: b4:9d:d9:ee:05:65:17:00:8c:16:7a:fa:2f:af:ab:c2:06:1f: a1:f2:1b:dc:fe:60:b8:96:c7:49:4d:bb:e7:24:3e:e8:a5:e3: 9b:f1:0b:df:a9:0b:e7:b0:f8:57:ef:27:6f:7b:60:a6:04:5f: 79:6b:9f:8c:34:e3:ae:4f:1b:5c:d4:c1:c8:67:00:ab:ab:e7: 35:89:6a:20:a0:38:43:7e:20:6d:9a:1d:05:80:b5:12:9b:43: 28:95:b5:b1:60:36:4a:47:17:39:35:af:1f:49:14:4a:c8:3c: 80:5f:34:7f:c4:fe:2e:6f:86:5b:ad:8d:d0:6e:c0:6c:e6:2a: 13:b8:3c:8f -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEuO+jf28fN06qkLv2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxODAzMzYzOVoXDTI4MDEyMTA0MzYzOVowLzEtMCsGA1UEAxMk YTJiNTM1YjctZmJlZC00YzE0LThhYzAtN2M1ZjMyMDIwYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MfSLE2jTteqCp5VhOuM62VJtq+sbyTAT5a2 q7V9VYnmg7kADkcXsUOMybzX/15UW7nGm9UQ2PF5vD5kTVF5GqaOOVUKMzn0MBeL EOE3gYMo+ERg37/Q42BVGTVP7nm7iEkFiXINYMoAFDeSXHALHXBB+fbmV3uX25bq x/0PtnyQ4HK95JzAAAYlK0GP2eG+bFysDLA5qGQ8O8kYDTO4AAsET/JgqfOSbuol TCXGRdyp8oy6cA2gmCu7jv2Lr7yIYKcqsLQdtIGLnRo6I4VbvXGKORLnQlTNvs/w jennhESM3D7OgrKVS72GX4ujmq+jPTPSFqGHWC8iqYXA+ytwuwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFEyaPDdaPDdsVmfPBmaTAFnQ3vcGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h MmI1MzViNy1mYmVkLTRjMTQtOGFjMC03YzVmMzIwMjBjMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2EyYjUzNWI3LWZiZWQtNGMxNC04 YWMwLTdjNWYzMjAyMGMwOS9hMmI1MzViNy1mYmVkLTRjMTQtOGFjMC03YzVmMzIw MjBjMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvUqADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGIpgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAb8zEa03q8QgwulAG73EWT80A5xiKwRBzJcRzTcPbPpCj 0w9XB8/0YpYCKDjyD1Kpal2sJvvyIHrPLXnvIvVpD2CbIZGpdqKf0CS2i4G8EkFU HqrLiCmWrHuuP8kRT6P0/uBGxDU0oi0MVbmp4aECD9Xd/fg/pDBunr239Y9NtJ3Z 7gVlFwCMFnr6L6+rwgYfofIb3P5guJbHSU275yQ+6KXjm/EL36kL57D4V+8nb3tg pgRfeWufjDTjrk8bXNTByGcAq6vnNYlqIKA4Q34gbZodBYC1EptDKJW1sWA2SkcX OTWvH0kUSsg8gF80f8T+Lm+GW62N0G7AbOYqE7g8jw== -----END CERTIFICATE-----Generated at Mon Oct 20 02:05:01 2025 by rpki-client