$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae1dab8-0c28-4183-ad27-c76f21ceaec7.cer File: aae1dab8-0c28-4183-ad27-c76f21ceaec7.cer (raw, json) Hash identifier: xhXDYvaivj1DFhjilatt4ZTBkewDccxe+JJqDjA5rNU= Subject key identifier: 79:26:93:9C:77:C8:4C:27:5C:E0:2B:9B:32:02:D7:18:BB:82:00:AC Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8B03E41F162EFDE6471EFC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae1dab8-0c28-4183-ad27-c76f21ceaec7/aae1dab8-0c28-4183-ad27-c76f21ceaec7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae1dab8-0c28-4183-ad27-c76f21ceaec7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Oct 2025 17:32:54 +0000 Certificate not after: Wed 19 Jan 2028 18:32:54 +0000 Subordinate resources: AS: 397459 IP: 66.45.93.0 -- 66.45.94.255 IP: 2602:f8f5::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:03:e4:1f:16:2e:fd:e6:47:1e:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 16 17:32:54 2025 GMT Not After : Jan 19 18:32:54 2028 GMT Subject: CN=aae1dab8-0c28-4183-ad27-c76f21ceaec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:10:f5:87:e3:f9:c1:66:6f:54:6e:ed:fe: 4e:51:e0:0b:03:ce:b0:1b:71:4e:55:95:50:3c:8a: 53:15:14:f6:9c:85:d1:d9:42:2f:3a:c7:61:9b:ef: 31:17:3a:38:64:8a:11:dd:21:5c:1b:b4:3a:82:9b: ed:e8:e3:c7:5c:fd:8b:0f:97:ee:b1:53:b2:5a:3a: b7:21:62:7f:6f:a0:e4:dd:19:9a:0b:9d:e9:ea:91: e3:f9:98:11:ba:b2:c1:7f:eb:bd:3f:fc:66:f3:d4: ce:b8:55:c2:c2:aa:19:e3:f5:0a:c7:be:d8:56:6d: 5c:57:75:df:0f:35:6f:07:f0:83:1f:2c:d2:0b:8a: d0:cf:0e:3c:dd:f0:57:18:3d:98:6f:e2:c7:b5:98: 37:fe:0c:35:d9:62:c6:46:5f:5f:b2:cc:d9:ab:2e: d7:81:6b:ce:c4:f9:4e:ff:9e:43:cd:9e:5a:5a:a6: 96:f3:54:e2:e8:c8:46:73:6c:6e:d2:1a:7f:ca:de: b1:2a:17:b3:86:6d:e6:d5:bd:2e:09:38:d7:d5:72: 4e:5e:c5:93:8c:68:c5:d4:b5:90:d7:d5:07:76:04: e9:6d:f5:00:c0:43:f3:94:0b:e4:6a:96:df:cb:0c: f3:99:6c:5d:f4:ab:fc:bb:6a:31:69:4d:a9:24:7c: a5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:26:93:9C:77:C8:4C:27:5C:E0:2B:9B:32:02:D7:18:BB:82:00:AC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae1dab8-0c28-4183-ad27-c76f21ceaec7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aae1dab8-0c28-4183-ad27-c76f21ceaec7/aae1dab8-0c28-4183-ad27-c76f21ceaec7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 66.45.93.0-66.45.94.255 IPv6: 2602:f8f5::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397459 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:53:db:44:07:03:30:1d:5e:6b:2e:1a:2b:d3:9b:64:2d:53: 28:32:36:c4:8b:39:76:af:72:da:52:27:1e:16:95:db:24:e8: 47:a3:df:ff:cf:a6:cd:be:6a:2f:e0:65:3c:27:74:aa:b0:d9: 30:57:58:34:a3:31:14:5d:cd:8f:24:f5:53:f9:f8:dd:59:1b: 36:cf:bf:8e:f7:20:47:78:d1:92:b4:ff:d1:23:a1:50:99:ad: 67:47:6b:a1:00:e1:b6:4c:b8:66:32:f0:0a:05:90:c9:10:dc: f1:4e:ec:a8:4c:6a:17:d3:78:ae:aa:6c:51:57:9b:53:43:9d: 7a:ef:1e:14:35:85:67:b7:28:f2:e8:28:2a:49:a6:a0:a1:ba: 2e:aa:99:44:a4:d9:e9:fb:58:a4:8c:43:b1:b2:70:fd:da:01: 7c:1b:6a:a1:e0:31:7c:90:05:79:bd:fc:f4:5f:38:5d:0b:2f: 56:ff:49:c0:50:3f:42:3f:63:42:aa:55:84:5f:31:f7:ff:b0: 59:50:ac:2a:ed:dd:54:ba:d3:cc:40:da:52:bb:e2:98:fb:77: 10:5f:9d:77:8c:0b:dd:08:40:05:26:f9:46:b8:46:06:e2:1b: 48:ba:24:69:1b:95:d2:62:d7:44:c5:1f:a7:0d:b3:f9:48:4a: 80:16:97:3b -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEuLA+QfFi795kce/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNjE3MzI1NFoXDTI4MDExOTE4MzI1NFowLzEtMCsGA1UEAxMk YWFlMWRhYjgtMGMyOC00MTgzLWFkMjctYzc2ZjIxY2VhZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ8Q9Yfj+cFmb1Ru7f5OUeALA86wG3FOVZVQ PIpTFRT2nIXR2UIvOsdhm+8xFzo4ZIoR3SFcG7Q6gpvt6OPHXP2LD5fusVOyWjq3 IWJ/b6Dk3RmaC53p6pHj+ZgRurLBf+u9P/xm89TOuFXCwqoZ4/UKx77YVm1cV3Xf DzVvB/CDHyzSC4rQzw483fBXGD2Yb+LHtZg3/gw12WLGRl9fsszZqy7XgWvOxPlO /55DzZ5aWqaW81Ti6MhGc2xu0hp/yt6xKhezhm3m1b0uCTjX1XJOXsWTjGjF1LWQ 19UHdgTpbfUAwEPzlAvkapbfywzzmWxd9Kv8u2oxaU2pJHylgQIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFHkmk5x3yEwnXOArmzIC1xi7ggCsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h YWUxZGFiOC0wYzI4LTQxODMtYWQyNy1jNzZmMjFjZWFlYzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2FhZTFkYWI4LTBjMjgtNDE4My1h ZDI3LWM3NmYyMWNlYWVjNy9hYWUxZGFiOC0wYzI4LTQxODMtYWQyNy1jNzZmMjFj ZWFlYzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMBQEAgABMA4wDAMEAEItXQMEAEItXjAOBAIAAjAIAwYEJgL49QAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhCTMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADpT20QHAzAdXmsu GivTm2QtUygyNsSLOXavctpSJx4Wldsk6Eej3//Pps2+ai/gZTwndKqw2TBXWDSj MRRdzY8k9VP5+N1ZGzbPv473IEd40ZK0/9EjoVCZrWdHa6EA4bZMuGYy8AoFkMkQ 3PFO7KhMahfTeK6qbFFXm1NDnXrvHhQ1hWe3KPLoKCpJpqChui6qmUSk2en7WKSM Q7GycP3aAXwbaqHgMXyQBXm9/PRfOF0LL1b/ScBQP0I/Y0KqVYRfMff/sFlQrCrt 3VS608xA2lK74pj7dxBfnXeMC90IQAUm+Ua4RgbiG0i6JGkbldJi10TFH6cNs/lI SoAWlzs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:05:53 2025 by rpki-client