$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer File: ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer (raw, json) Hash identifier: gKrTPDRLZXuzxEG+CRTnSsAbsJZ4BvX8+cyfM2ECyYw= Subject key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8507C380DA9698BBA5408B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 14:05:51 +0000 Certificate not after: Mon 17 Jan 2028 15:05:51 +0000 Subordinate resources: IP: 142.248.45.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:07:c3:80:da:96:98:bb:a5:40:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 14 14:05:51 2025 GMT Not After : Jan 17 15:05:51 2028 GMT Subject: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:01:a4:17:53:fc:1c:14:7e:a7:21:f5:ee: 07:01:44:8b:30:0f:b9:e9:6a:26:40:0c:69:3e:0a: d2:dd:06:48:b5:69:77:02:41:4a:d7:b5:9e:2b:9b: 50:ab:01:3d:74:db:b9:18:85:83:bb:f9:16:a6:08: f5:77:71:79:75:18:bd:83:c7:32:14:fd:dd:31:2b: b4:bd:b1:55:59:0f:b9:9e:2a:b7:0e:97:ec:71:bc: 12:dd:74:2b:7b:3b:50:7c:3b:cf:e1:f7:ab:1a:72: 3a:88:e8:6c:db:8f:35:04:f7:01:9d:25:d0:f4:0c: 86:e3:ea:eb:44:f8:f1:c2:75:44:de:a2:2d:ef:a2: 77:a2:1a:9a:63:b4:7b:ab:7a:12:8f:ec:8c:b0:12: fd:bc:f1:34:47:1d:66:f0:98:e4:10:d9:51:5a:23: b6:f9:e4:ba:4c:01:fb:29:03:fd:d6:45:59:fe:ec: d1:ba:1e:6f:01:71:8b:1e:93:39:a4:bc:04:b8:f8: 1e:ca:c6:09:cf:e8:79:02:f3:e4:19:07:a3:ab:e9: 98:8a:ad:90:1e:99:82:2b:4e:2f:20:fc:42:5d:c5: 02:03:ba:2b:6a:f8:ca:08:19:db:e4:5c:03:1d:03: b6:cf:84:66:03:ab:67:de:d8:c5:e7:c1:54:0f:7c: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 142.248.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d5:c6:dc:46:61:75:aa:65:26:34:e5:26:ee:10:b5:0f:7a: 36:3a:eb:a3:ef:eb:fc:f2:24:77:ed:03:ba:73:23:75:e8:49: 39:93:c9:36:be:b1:c5:71:cd:79:4e:d8:ac:c9:1d:d3:1b:02: 77:6b:6c:95:0d:12:b3:f8:c5:79:bb:a5:6a:e0:f5:92:b5:b8: 3a:fb:f4:2f:17:52:58:00:3f:72:f7:f3:4f:48:6d:dc:c9:ff: ff:66:10:24:c2:d8:ab:ef:87:ec:6e:b7:ec:46:f4:f9:ad:ee: 54:ac:32:8c:f2:b9:bd:93:ed:63:8e:d8:ce:dc:e4:53:ce:d9: 0b:43:09:53:58:e1:dc:39:22:3c:21:7a:eb:05:59:6c:da:55: 1f:65:ee:a6:4d:8c:42:4e:a5:ac:15:6a:e2:54:15:35:74:63: e2:4e:b7:e2:9d:5f:28:97:1b:21:6a:25:c0:a9:7e:b2:0a:48: 35:ef:1f:a0:b0:de:85:ce:95:c8:83:2e:ff:94:75:0b:80:be: 84:0b:91:e5:3b:87:d4:ea:82:c7:c0:12:0e:3f:f9:68:28:ce: 5e:ab:92:ad:40:07:db:35:ae:e4:bf:3b:58:0c:73:ec:c6:95: 08:16:70:8c:ca:cf:6d:d5:3a:b4:6a:36:e5:9a:ef:b0:c1:b7: a9:f5:65:2d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEuFB8OA2paYu6VAi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNDE0MDU1MVoXDTI4MDExNzE1MDU1MVowLzEtMCsGA1UEAxMk ZWMzNjdiYjAtYTZlMC00NzY5LTllOTMtZThlOWI2YTFhY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6cBpBdT/BwUfqch9e4HAUSLMA+56WomQAxp PgrS3QZItWl3AkFK17WeK5tQqwE9dNu5GIWDu/kWpgj1d3F5dRi9g8cyFP3dMSu0 vbFVWQ+5niq3DpfscbwS3XQreztQfDvP4ferGnI6iOhs2481BPcBnSXQ9AyG4+rr RPjxwnVE3qIt76J3ohqaY7R7q3oSj+yMsBL9vPE0Rx1m8JjkENlRWiO2+eS6TAH7 KQP91kVZ/uzRuh5vAXGLHpM5pLwEuPgeysYJz+h5AvPkGQejq+mYiq2QHpmCK04v IPxCXcUCA7oravjKCBnb5FwDHQO2z4RmA6tn3tjF58FUD3yHZwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIn7V0s4fNGmc3A2fS3n5aUrtWmWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9l YzM2N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5YjZhMWFjYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2VjMzY3YmIwLWE2ZTAtNDc2OS05 ZTkzLWU4ZTliNmExYWNiOS9lYzM2N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5YjZh MWFjYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACO+C0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcNXG3EZhdaplJjTlJu4Q tQ96Njrro+/r/PIkd+0DunMjdehJOZPJNr6xxXHNeU7YrMkd0xsCd2tslQ0Ss/jF ebulauD1krW4Ovv0LxdSWAA/cvfzT0ht3Mn//2YQJMLYq++H7G637Eb0+a3uVKwy jPK5vZPtY47YztzkU87ZC0MJU1jh3DkiPCF66wVZbNpVH2Xupk2MQk6lrBVq4lQV NXRj4k634p1fKJcbIWolwKl+sgpINe8foLDehc6VyIMu/5R1C4C+hAuR5TuH1OqC x8ASDj/5aCjOXquSrUAH2zWu5L87WAxz7MaVCBZwjMrPbdU6tGo25ZrvsMG3qfVl LQ== -----END CERTIFICATE-----Generated at Sun Oct 19 23:14:53 2025 by rpki-client