$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b.cer File: d445edaf-9a6f-4523-9772-3e1b997c1a4b.cer (raw, json) Hash identifier: 8IGlYQjb63cYo5rOT5Fa2cyywl7Glt5fGwBPuOCH2+s= Subject key identifier: DD:1D:3C:4F:CD:FF:BF:00:E2:C7:88:65:3C:E8:64:20:46:E1:C1:EC Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8DBAE6C8CD597BC787D2BB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/d445edaf-9a6f-4523-9772-3e1b997c1a4b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 16:53:16 +0000 Certificate not after: Thu 20 Jan 2028 17:53:16 +0000 Subordinate resources: AS: 12126 IP: 130.12.126.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:ba:e6:c8:cd:59:7b:c7:87:d2:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 17 16:53:16 2025 GMT Not After : Jan 20 17:53:16 2028 GMT Subject: CN=d445edaf-9a6f-4523-9772-3e1b997c1a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:23:c7:37:ee:97:a6:54:6e:da:81:e1:45:19: 30:87:8a:ba:36:03:5f:6e:18:41:d4:83:8e:44:bd: a4:b3:c2:3c:f4:6b:51:f8:99:87:b5:16:d0:a6:63: 3c:52:19:ac:51:28:c9:88:9f:b9:a3:db:c8:a9:f8: fa:06:b3:be:79:98:2b:d5:7c:d2:9b:e9:a7:78:e7: f3:27:4a:cc:c4:d9:8c:de:23:83:6a:95:4c:ea:f1: 4e:66:12:9c:06:42:9b:fe:28:10:85:6e:f7:ec:3b: 6d:c7:83:2e:7b:64:db:f6:8c:70:c0:6e:9d:84:7d: 3b:0f:f1:be:0b:f8:06:5f:76:5e:91:4e:78:47:70: 3f:a7:c9:4f:03:10:48:b8:c9:2e:83:02:32:e0:bc: b3:3b:1c:d3:39:bf:d1:cb:2b:62:be:4a:67:22:6c: 30:c2:90:bf:ea:a0:1f:fc:92:c3:e1:0b:cc:70:8e: ef:f3:d7:66:84:37:4e:22:83:d2:27:4a:8c:14:8a: ab:71:19:dc:6c:e7:8a:0c:25:28:e1:50:f7:3f:b0: 4c:ab:b3:77:38:a5:26:89:c3:ec:49:a0:66:40:ca: 31:7d:71:50:8d:49:fb:d9:aa:a1:9b:71:cb:74:c3: b4:74:4b:fb:14:66:bb:29:6a:9d:c3:cc:b0:07:53: a1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1D:3C:4F:CD:FF:BF:00:E2:C7:88:65:3C:E8:64:20:46:E1:C1:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/d445edaf-9a6f-4523-9772-3e1b997c1a4b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 130.12.126.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12126 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a8:ec:e1:f1:41:6a:2e:4d:e6:3e:94:d6:e6:86:99:cd:53: df:40:f3:02:71:ed:0f:c2:1d:d8:44:19:c4:af:94:96:e9:6b: 52:35:87:45:e0:d7:29:5f:98:f0:06:dc:b0:26:f4:23:d6:fd: 7d:ef:b0:df:54:79:fd:7e:1f:51:c6:04:2e:a5:1b:6e:ce:5d: 53:5f:05:3b:0d:fb:bb:cf:83:f5:78:5a:df:f5:d2:00:fe:c3: 07:ed:6c:bc:61:01:7e:41:6f:3a:40:8c:4e:64:4f:c3:d4:be: 6d:67:04:5a:d8:3e:30:9d:8f:a1:75:bf:4e:8a:a0:54:79:9f: fe:d5:5f:0c:d4:2e:d6:c0:f1:b1:ad:a3:77:b8:37:10:45:2d: 68:5e:58:96:dc:96:13:cd:34:96:b9:a9:bd:e2:eb:eb:9e:e0: fc:2c:7d:82:89:1a:1e:fe:a1:93:17:a8:c7:4e:20:3d:ee:62: 35:44:ad:f1:bf:8e:48:50:34:98:c0:b9:17:09:68:ad:af:ea: ea:7c:96:2f:fb:74:2f:a4:3b:ca:61:cc:32:ae:46:a1:a1:96: 74:46:88:18:ad:2e:a6:75:8d:aa:c5:88:f5:e3:70:d6:4c:4e: ab:87:55:27:6d:aa:80:1d:20:f1:0a:e3:e9:3b:9c:93:2a:41: 16:a1:f4:de -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEuNuubIzVl7x4fSuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNzE2NTMxNloXDTI4MDEyMDE3NTMxNlowLzEtMCsGA1UEAxMk ZDQ0NWVkYWYtOWE2Zi00NTIzLTk3NzItM2UxYjk5N2MxYTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSPHN+6XplRu2oHhRRkwh4q6NgNfbhhB1IOO RL2ks8I89GtR+JmHtRbQpmM8UhmsUSjJiJ+5o9vIqfj6BrO+eZgr1XzSm+mneOfz J0rMxNmM3iODapVM6vFOZhKcBkKb/igQhW737Dttx4Mue2Tb9oxwwG6dhH07D/G+ C/gGX3ZekU54R3A/p8lPAxBIuMkugwIy4LyzOxzTOb/RyytivkpnImwwwpC/6qAf /JLD4QvMcI7v89dmhDdOIoPSJ0qMFIqrcRncbOeKDCUo4VD3P7BMq7N3OKUmicPs SaBmQMoxfXFQjUn72aqhm3HLdMO0dEv7FGa7KWqdw8ywB1OhxwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFN0dPE/N/78A4seIZTzoZCBG4cHsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9k NDQ1ZWRhZi05YTZmLTQ1MjMtOTc3Mi0zZTFiOTk3YzFhNGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Q0NDVlZGFmLTlhNmYtNDUyMy05 NzcyLTNlMWI5OTdjMWE0Yi9kNDQ1ZWRhZi05YTZmLTQ1MjMtOTc3Mi0zZTFiOTk3 YzFhNGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACCDH4wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC L14wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAe6js4fFBai5N5j6U1uaGmc1T30DzAnHtD8Id2EQZxK+Ululr UjWHReDXKV+Y8AbcsCb0I9b9fe+w31R5/X4fUcYELqUbbs5dU18FOw37u8+D9Xha 3/XSAP7DB+1svGEBfkFvOkCMTmRPw9S+bWcEWtg+MJ2PoXW/ToqgVHmf/tVfDNQu 1sDxsa2jd7g3EEUtaF5YltyWE800lrmpveLr657g/Cx9gokaHv6hkxeox04gPe5i NUSt8b+OSFA0mMC5Fwlora/q6nyWL/t0L6Q7ymHMMq5GoaGWdEaIGK0upnWNqsWI 9eNw1kxOq4dVJ22qgB0g8Qrj6TuckypBFqH03g== -----END CERTIFICATE-----Generated at Mon Oct 20 03:49:31 2025 by rpki-client