$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer File: 265875fa-2cd8-4782-9b63-97850fa49dfa.cer (raw, json) Hash identifier: buRhZT+l4+5707oG7wsELkeOSoV5E5vxjc6ax9XSquo= Subject key identifier: 2C:5D:06:09:CF:16:D0:66:81:D1:58:51:A3:F8:E8:5D:50:A9:9F:D3 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8F61EB2004220FE8297FEE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Oct 2025 07:05:35 +0000 Certificate not after: Fri 21 Jan 2028 08:05:35 +0000 Subordinate resources: AS: 10931 IP: 23.147.156.0/24 IP: 2602:f51c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8f:61:eb:20:04:22:0f:e8:29:7f:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 18 07:05:35 2025 GMT Not After : Jan 21 08:05:35 2028 GMT Subject: CN=265875fa-2cd8-4782-9b63-97850fa49dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3d:17:7e:2e:f0:a3:83:de:33:54:3c:97:6e: 4c:9c:79:2b:34:e6:e6:6c:be:9f:b6:b8:6f:ac:44: 3c:8a:14:3d:2d:f7:01:9f:31:b8:17:b5:df:4b:ad: 72:87:92:86:54:f5:96:d9:23:20:43:59:b5:d8:fe: 09:98:29:52:5f:30:93:c0:c9:76:15:36:18:6f:68: 1c:16:e3:c5:0e:fa:9a:eb:fc:da:5b:aa:97:0e:1c: 74:07:1e:f1:0e:64:1c:ed:fa:1c:c6:75:82:01:72: 73:23:f6:89:78:a0:0d:b3:00:31:0b:93:73:ca:75: 34:3d:62:56:45:84:b5:ff:d3:90:dc:fb:c4:5b:be: 60:2a:7e:f8:f5:a8:29:4a:a9:07:47:14:50:c4:86: 01:26:3d:be:99:56:15:2c:79:1b:40:7c:b6:bc:1c: ae:8d:ba:4f:56:99:a6:a9:08:a9:10:1a:b4:7f:9e: d8:70:0c:42:e7:c7:10:0c:92:69:91:ad:3d:cb:f6: 54:c4:04:a2:0a:a4:27:c6:0c:20:d3:61:e8:cd:33: 90:1f:bb:9e:4d:75:42:44:51:e5:7b:a8:d6:11:7d: 69:b5:6a:8e:30:84:86:63:23:8a:ae:49:fd:b5:e9: ea:16:44:3c:08:85:3c:6d:e1:4a:66:99:71:85:9d: 50:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5D:06:09:CF:16:D0:66:81:D1:58:51:A3:F8:E8:5D:50:A9:9F:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.147.156.0/24 IPv6: 2602:f51c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10931 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2e:69:e1:c2:ce:41:8c:1d:6e:81:18:91:0f:54:35:e8:d5: 0a:5f:59:21:38:35:38:22:b2:9c:65:49:89:e1:45:bc:ec:74: 6b:2a:b9:36:20:76:96:c7:b3:9d:9f:7d:06:ce:6a:f6:f3:91: cb:c2:d0:7b:cf:5f:de:cc:b2:8c:8c:ef:18:7d:6e:c7:29:d3: 38:db:56:6d:fb:4a:1c:35:e5:7f:7f:67:f5:01:ce:99:63:d3: 23:5d:28:7d:cb:66:c1:7c:66:82:62:8e:7e:24:90:c9:76:23: 6c:9a:ae:2a:0d:8c:13:83:c4:72:2a:95:6c:f9:ee:87:6f:a9: 2e:ed:d8:80:12:a5:d1:cb:44:db:40:15:38:e0:11:16:6f:8c: 0d:10:7b:27:5c:97:be:cd:bc:ab:ec:61:bd:92:27:eb:c7:4b: a1:0a:72:ac:bb:7f:32:f6:88:f9:a0:57:5c:c2:ab:dd:46:13: 50:fb:04:61:7f:11:fa:e9:ef:22:bd:58:aa:bc:7d:b7:08:b5: 62:2f:0d:14:35:27:94:7d:ff:64:0d:45:19:dd:4b:b9:6e:0e: ae:d9:1e:b4:a7:2f:89:eb:0a:12:ba:36:f8:0f:9a:9a:a0:20: 00:f6:01:68:b8:22:7a:ee:5b:44:eb:3e:ba:c7:a1:b4:27:08: 88:9f:30:90 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEuPYesgBCIP6Cl/7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxODA3MDUzNVoXDTI4MDEyMTA4MDUzNVowLzEtMCsGA1UEAxMk MjY1ODc1ZmEtMmNkOC00NzgyLTliNjMtOTc4NTBmYTQ5ZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj0Xfi7wo4PeM1Q8l25MnHkrNObmbL6ftrhv rEQ8ihQ9LfcBnzG4F7XfS61yh5KGVPWW2SMgQ1m12P4JmClSXzCTwMl2FTYYb2gc FuPFDvqa6/zaW6qXDhx0Bx7xDmQc7focxnWCAXJzI/aJeKANswAxC5NzynU0PWJW RYS1/9OQ3PvEW75gKn749agpSqkHRxRQxIYBJj2+mVYVLHkbQHy2vByujbpPVpmm qQipEBq0f57YcAxC58cQDJJpka09y/ZUxASiCqQnxgwg02HozTOQH7ueTXVCRFHl e6jWEX1ptWqOMISGYyOKrkn9tenqFkQ8CIU8beFKZplxhZ1Q3QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFCxdBgnPFtBmgdFYUaP46F1QqZ/TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8y NjU4NzVmYS0yY2Q4LTQ3ODItOWI2My05Nzg1MGZhNDlkZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzI2NTg3NWZhLTJjZDgtNDc4Mi05 YjYzLTk3ODUwZmE0OWRmYS8yNjU4NzVmYS0yY2Q4LTQ3ODItOWI2My05Nzg1MGZh NDlkZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXk5wwDgQCAAIwCAMGACYC9RwAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAiqzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABYuaeHCzkGMHW6BGJEPVDXo1Qpf WSE4NTgispxlSYnhRbzsdGsquTYgdpbHs52ffQbOavbzkcvC0HvPX97MsoyM7xh9 bscp0zjbVm37Shw15X9/Z/UBzplj0yNdKH3LZsF8ZoJijn4kkMl2I2yarioNjBOD xHIqlWz57odvqS7t2IASpdHLRNtAFTjgERZvjA0Qeydcl77NvKvsYb2SJ+vHS6EK cqy7fzL2iPmgV1zCq91GE1D7BGF/Efrp7yK9WKq8fbcItWIvDRQ1J5R9/2QNRRnd S7luDq7ZHrSnL4nrChK6NvgPmpqgIAD2AWi4InruW0TrPrrHobQnCIifMJA= -----END CERTIFICATE-----Generated at Mon Oct 20 02:05:12 2025 by rpki-client