$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/03baf73b-241c-429d-ab32-2e1987340d7f.cer File: 03baf73b-241c-429d-ab32-2e1987340d7f.cer (raw, json) Hash identifier: vz90NJ3QBFXubJvxzE91/9ssvAPdAbzCHWeE1tIKVdQ= Subject key identifier: 05:90:36:D1:D9:6C:9F:BD:20:77:0B:E1:77:FB:D3:52:0A:DD:3B:55 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B85BA234E3E07FBE205DDD808 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/03baf73b-241c-429d-ab32-2e1987340d7f/03baf73b-241c-429d-ab32-2e1987340d7f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/03baf73b-241c-429d-ab32-2e1987340d7f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 20:05:15 +0000 Certificate not after: Mon 17 Jan 2028 21:05:15 +0000 Subordinate resources: AS: 7260 IP: 23.147.32.0/24 IP: 172.82.56.0/22 IP: 2602:fe49::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:ba:23:4e:3e:07:fb:e2:05:dd:d8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 14 20:05:15 2025 GMT Not After : Jan 17 21:05:15 2028 GMT Subject: CN=03baf73b-241c-429d-ab32-2e1987340d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:53:d9:e5:fc:96:88:85:0b:61:f2:c3:2b: 5d:07:42:f4:0b:a3:f8:f0:5b:27:2a:72:32:dd:b9: 39:4b:73:d3:03:0b:5c:35:97:90:c4:1c:ce:d8:3a: 46:8b:de:74:0b:6d:37:3d:22:fa:94:59:4e:7e:45: 2a:85:63:39:a6:b2:d1:6a:a8:31:c9:49:96:0a:f8: 27:86:5e:7d:73:32:5e:b5:f7:71:0a:fc:7c:04:96: 76:51:6c:2b:bf:90:19:77:c0:d8:65:d0:c5:89:5b: fd:9c:d3:a6:02:62:c1:63:0f:02:4c:90:7e:b0:fd: b4:a7:05:b8:0f:93:7a:62:c7:76:af:4a:52:6d:9d: df:87:25:81:46:e7:8c:d6:12:68:5b:23:95:02:a0: a1:c7:77:1a:65:4e:de:e9:ac:75:5a:db:62:83:85: 0c:0f:3c:00:fd:dd:18:7b:0d:5f:10:d4:48:2e:93: 36:a3:7e:9f:73:f2:58:c3:b7:a9:1c:4a:02:2d:ad: e5:8c:3e:fd:70:ad:50:b4:3a:5d:7a:01:42:db:15: 01:3a:24:c7:d7:e1:aa:2b:cf:5e:18:54:7f:d8:c1: b4:3e:f3:6e:cb:14:61:dc:ad:d5:cb:c1:64:d7:e8: e9:86:36:0e:a2:28:f1:86:75:2e:9e:ca:5b:76:25: d6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:90:36:D1:D9:6C:9F:BD:20:77:0B:E1:77:FB:D3:52:0A:DD:3B:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/03baf73b-241c-429d-ab32-2e1987340d7f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/03baf73b-241c-429d-ab32-2e1987340d7f/03baf73b-241c-429d-ab32-2e1987340d7f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.147.32.0/24 172.82.56.0/22 IPv6: 2602:fe49::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7260 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d0:7c:7c:e8:2e:d3:f8:a6:db:b3:f1:9e:5b:7b:8e:73:7c: 36:20:4f:9e:0c:3b:66:d9:94:55:47:a9:b5:59:7a:2b:53:56: 3d:df:cb:f6:77:e4:51:0e:94:fd:34:7c:f3:21:18:c7:10:d6: ef:2a:95:8a:65:33:e4:a9:d8:ca:55:cf:4a:a3:54:a1:db:78: d2:67:5d:9c:cf:e6:1a:66:f3:c8:66:fa:03:2e:56:5c:16:bd: d3:73:c1:cf:49:3f:df:ac:df:b7:7c:31:cb:38:ee:49:d8:c3: 3c:46:27:a5:c8:a3:49:4d:61:7a:a2:53:f4:ee:ed:70:a0:bc: fe:f3:56:f6:ad:2b:18:d4:45:73:46:0a:c9:6e:ba:4a:84:4c: fb:dd:fd:6c:f1:a2:82:42:2f:9e:94:c7:6c:47:35:6d:19:86: 13:3c:c3:18:5b:c0:5e:b9:1e:ad:73:07:6d:01:96:f1:f1:74: 07:fe:50:89:df:fd:d7:2e:17:aa:29:a6:bb:6a:be:1b:cf:a9: c7:63:16:d4:0c:b2:34:b9:d2:6f:ba:fb:89:f7:46:2e:f9:9f: 18:01:b6:c2:e7:12:a8:af:1e:1e:16:22:45:a6:3e:1b:bf:a4: e6:8b:1a:4b:cc:ac:dd:3d:1f:20:7c:6e:45:8c:9c:0a:3c:28: 9b:a4:43:ef -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEuFuiNOPgf74gXd2AgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNDIwMDUxNVoXDTI4MDExNzIxMDUxNVowLzEtMCsGA1UEAxMk MDNiYWY3M2ItMjQxYy00MjlkLWFiMzItMmUxOTg3MzQwZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszhT2eX8loiFC2HywytdB0L0C6P48FsnKnIy 3bk5S3PTAwtcNZeQxBzO2DpGi950C203PSL6lFlOfkUqhWM5prLRaqgxyUmWCvgn hl59czJetfdxCvx8BJZ2UWwrv5AZd8DYZdDFiVv9nNOmAmLBYw8CTJB+sP20pwW4 D5N6Ysd2r0pSbZ3fhyWBRueM1hJoWyOVAqChx3caZU7e6ax1Wttig4UMDzwA/d0Y ew1fENRILpM2o36fc/JYw7epHEoCLa3ljD79cK1QtDpdegFC2xUBOiTH1+GqK89e GFR/2MG0PvNuyxRh3K3Vy8Fk1+jphjYOoijxhnUunspbdiXWowIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFAWQNtHZbJ+9IHcL4Xf701IK3TtVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8w M2JhZjczYi0yNDFjLTQyOWQtYWIzMi0yZTE5ODczNDBkN2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzAzYmFmNzNiLTI0MWMtNDI5ZC1h YjMyLTJlMTk4NzM0MGQ3Zi8wM2JhZjczYi0yNDFjLTQyOWQtYWIzMi0yZTE5ODcz NDBkN2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkyADBAKsUjgwDgQCAAIwCAMGBCYC/kkAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAhxcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHPQfHzoLtP4ptuz8Z5b e45zfDYgT54MO2bZlFVHqbVZeitTVj3fy/Z35FEOlP00fPMhGMcQ1u8qlYplM+Sp 2MpVz0qjVKHbeNJnXZzP5hpm88hm+gMuVlwWvdNzwc9JP9+s37d8Mcs47knYwzxG J6XIo0lNYXqiU/Tu7XCgvP7zVvatKxjURXNGCsluukqETPvd/WzxooJCL56Ux2xH NW0ZhhM8wxhbwF65Hq1zB20BlvHxdAf+UInf/dcuF6opprtqvhvPqcdjFtQMsjS5 0m+6+4n3Ri75nxgBtsLnEqivHh4WIkWmPhu/pOaLGkvMrN09HyB8bkWMnAo8KJuk Q+8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:05:33 2025 by rpki-client