$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.cer File: b2f7cbf5-2e73-4320-80b9-696eb7d503fb.cer (raw, json) Hash identifier: 3Fy9vPYk5X7RlcPXtuXfS1fzFCCqJKc9+2T/7cfxXfk= Subject key identifier: CC:96:57:FD:15:57:42:F5:03:3B:58:B1:FD:9A:9D:E6:92:01:FE:99 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B887A2C2382C2DB7A429B1220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Oct 2025 19:43:48 +0000 Certificate not after: Tue 18 Jan 2028 20:43:48 +0000 Subordinate resources: AS: 22785 IP: 198.99.146.0/24 IP: 216.117.221.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:7a:2c:23:82:c2:db:7a:42:9b:12:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 15 19:43:48 2025 GMT Not After : Jan 18 20:43:48 2028 GMT Subject: CN=b2f7cbf5-2e73-4320-80b9-696eb7d503fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:6b:50:10:ec:ed:53:4b:b2:9c:0c:5b:cf: 54:a7:56:71:a5:3b:4c:f1:4b:66:56:64:f1:bb:13: 57:b7:7f:ba:20:25:f4:d3:1b:b5:7a:1a:a4:9c:be: 3d:48:6f:ba:8d:de:77:b7:aa:0c:09:0b:1b:6d:aa: 5b:11:af:a5:bc:69:61:36:f3:fc:0f:f2:94:7f:87: 42:33:f4:f1:5b:28:23:44:22:d5:6e:10:d4:34:c3: f7:15:cc:bd:2c:7b:fc:67:dd:0c:ee:82:d9:a3:fa: de:93:a7:9e:18:8a:68:66:fd:d3:25:b7:c4:da:33: dd:c2:90:1c:0b:62:8d:50:78:4c:d3:06:eb:2a:a0: e6:02:f9:46:21:65:15:dc:b1:71:13:b1:38:4a:43: 69:07:a1:ca:fb:2d:4b:dc:e5:29:e0:8c:ed:6d:35: 55:b6:2b:4f:b7:87:f7:1a:49:bf:62:4a:06:a9:c7: f5:d8:4f:02:c1:60:3c:67:26:33:fd:ba:da:9d:76: a0:fd:7b:42:76:51:7e:f2:10:64:c3:4d:df:f0:16: 8a:fb:ff:89:4b:d6:06:38:60:d5:53:c0:9b:c7:6b: 8e:75:8e:2f:c6:ba:d6:4a:d2:59:fc:d9:83:e0:c3: 39:5c:d4:53:c4:b6:1f:71:64:cc:38:6b:83:60:87: bc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:96:57:FD:15:57:42:F5:03:3B:58:B1:FD:9A:9D:E6:92:01:FE:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 198.99.146.0/24 216.117.221.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22785 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:19:f3:7e:3c:70:3e:1f:88:41:d4:53:1f:ed:ce:23:1e:bc: 34:7a:13:dd:50:b3:b7:9c:1e:c2:53:24:d7:59:d8:ee:6e:c5: 3a:f7:bf:a0:c5:4e:82:fe:69:d4:c7:ee:50:70:2b:57:3d:46: d3:56:90:d1:cb:d5:69:b8:78:a1:ad:2d:95:8a:27:2e:61:33: 15:03:de:82:ee:1b:17:0d:29:2c:7e:2e:07:6a:c1:d5:85:df: 42:91:cc:1b:2c:33:04:76:db:2f:0a:56:32:e6:e3:85:e5:ca: f7:1b:a3:0c:67:00:7a:e9:5d:65:8a:06:6b:f6:37:5a:41:00: ef:2e:12:77:80:50:7e:a3:03:e3:cb:e5:4a:38:c2:35:5b:f6: df:9c:2e:1f:da:09:d8:73:dc:c1:49:ee:fb:71:f0:87:c9:5c: 20:b0:70:11:7c:cd:b6:1e:f8:3f:4f:6a:a0:1c:e7:fe:cc:9f: d8:f6:02:30:79:2a:52:e7:22:4e:ef:20:9e:a6:75:2c:b4:fe: 27:67:21:ba:d3:7e:d8:34:74:92:dc:85:03:41:8d:ce:f5:70: 18:48:b9:66:9d:35:2e:5b:ed:da:a9:1f:a5:97:35:8f:db:e9: c6:35:98:38:a0:dd:ca:28:2a:48:72:d9:65:c9:22:b2:6c:03: 55:34:25:65 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEuIeiwjgsLbekKbEiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNTE5NDM0OFoXDTI4MDExODIwNDM0OFowLzEtMCsGA1UEAxMk YjJmN2NiZjUtMmU3My00MzIwLTgwYjktNjk2ZWI3ZDUwM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPhrUBDs7VNLspwMW89Up1ZxpTtM8UtmVmTx uxNXt3+6ICX00xu1ehqknL49SG+6jd53t6oMCQsbbapbEa+lvGlhNvP8D/KUf4dC M/TxWygjRCLVbhDUNMP3Fcy9LHv8Z90M7oLZo/rek6eeGIpoZv3TJbfE2jPdwpAc C2KNUHhM0wbrKqDmAvlGIWUV3LFxE7E4SkNpB6HK+y1L3OUp4IztbTVVtitPt4f3 Gkm/YkoGqcf12E8CwWA8ZyYz/branXag/XtCdlF+8hBkw03f8BaK+/+JS9YGOGDV U8Cbx2uOdY4vxrrWStJZ/NmD4MM5XNRTxLYfcWTMOGuDYIe8vwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFMyWV/0VV0L1AztYsf2aneaSAf6ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i MmY3Y2JmNS0yZTczLTQzMjAtODBiOS02OTZlYjdkNTAzZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2IyZjdjYmY1LTJlNzMtNDMyMC04 MGI5LTY5NmViN2Q1MDNmYi9iMmY3Y2JmNS0yZTczLTQzMjAtODBiOS02OTZlYjdk NTAzZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGY5IDBADYdd0wGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICWQEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAPBnzfjxwPh+IQdRTH+3OIx68NHoT3VCzt5wewlMk 11nY7m7FOve/oMVOgv5p1MfuUHArVz1G01aQ0cvVabh4oa0tlYonLmEzFQPegu4b Fw0pLH4uB2rB1YXfQpHMGywzBHbbLwpWMubjheXK9xujDGcAeuldZYoGa/Y3WkEA 7y4Sd4BQfqMD48vlSjjCNVv235wuH9oJ2HPcwUnu+3Hwh8lcILBwEXzNth74P09q oBzn/syf2PYCMHkqUuciTu8gnqZ1LLT+J2chutN+2DR0ktyFA0GNzvVwGEi5Zp01 Llvt2qkfpZc1j9vpxjWYOKDdyigqSHLZZckismwDVTQlZQ== -----END CERTIFICATE-----Generated at Sun Oct 19 23:14:36 2025 by rpki-client