$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee.cer File: 34d1b905-337d-46f2-b028-65359c387fee.cer (raw, json) Hash identifier: Y2A9HPN47nu5JrRZ8LJ50ZwkUNr+aufXYehDIi8xM2w= Subject key identifier: 13:95:BF:1E:0C:4F:C8:E2:4F:2A:40:0A:33:2A:60:5B:83:C8:D9:94 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8F6367CFB0142D0E056EE080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/34d1b905-337d-46f2-b028-65359c387fee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Oct 2025 07:08:35 +0000 Certificate not after: Fri 21 Jan 2028 08:08:35 +0000 Subordinate resources: IP: 23.147.172.0/24 IP: 2602:f515::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8f:63:67:cf:b0:14:2d:0e:05:6e:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 18 07:08:35 2025 GMT Not After : Jan 21 08:08:35 2028 GMT Subject: CN=34d1b905-337d-46f2-b028-65359c387fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c1:b7:86:d6:29:04:e5:66:1b:42:c5:cc:28: f9:98:0c:30:99:46:46:60:20:3f:42:29:73:e7:b7: 4b:b3:11:5c:69:92:04:e0:7d:7f:b1:ef:85:f3:a5: de:7a:50:18:62:d1:dc:4a:e9:77:30:95:f7:2b:b2: b7:79:4e:35:67:88:23:f7:20:b9:16:67:bb:bc:ce: a7:74:71:49:29:4b:20:c4:48:11:16:72:cd:3f:bd: f0:3d:42:1e:2b:61:9a:1d:0f:f6:8f:4e:e2:d2:11: 77:e5:11:ab:17:c3:e7:39:0c:94:c2:e7:c8:03:df: 58:ea:4c:e4:c6:4e:d2:05:77:fc:b9:0b:6a:50:8f: 84:82:2d:d9:c3:99:96:3e:8f:14:e3:31:55:1c:79: eb:aa:3e:09:e3:77:87:de:ef:10:27:1b:46:cc:f4: a0:78:aa:d0:7e:6c:7b:01:a6:01:e2:ce:fb:0b:db: 3e:81:21:16:4b:c5:d4:8c:30:88:9c:5b:c9:e3:f4: 62:93:9d:49:22:b6:f6:2d:00:76:1c:e0:d4:d6:e4: 2d:96:ec:4c:78:ad:b8:5b:e1:e9:b1:9e:ff:fa:58: 20:88:68:bb:0f:cb:61:2b:f9:46:0a:90:af:3e:e0: 25:f6:1b:38:29:c8:4f:56:0d:27:34:46:c5:23:b8: d3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:95:BF:1E:0C:4F:C8:E2:4F:2A:40:0A:33:2A:60:5B:83:C8:D9:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/34d1b905-337d-46f2-b028-65359c387fee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.147.172.0/24 IPv6: 2602:f515::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:46:f7:26:e8:77:f4:b5:34:d2:01:a1:45:05:8b:3a:a9:a9: 76:95:68:4e:40:8d:07:1d:76:af:19:9e:76:0e:02:7e:fa:e9: eb:3f:07:75:cc:f1:90:71:a6:45:9a:41:e7:e4:24:37:9d:1b: 3e:c1:ae:6a:79:ff:e5:71:af:d2:43:a4:07:b2:8a:ee:72:eb: e8:76:61:0a:67:dd:17:65:0d:30:0b:2c:84:6d:4e:e4:e9:f7: bd:9f:49:0b:cf:29:0a:d9:20:60:de:7d:d0:54:24:13:c2:75: d7:b6:10:d5:8e:69:a5:78:c8:2b:4e:a6:ea:58:db:0f:b2:a6: c6:25:8c:b4:86:02:f6:39:d0:0c:6d:60:42:58:b7:09:7c:13: b8:62:cb:87:1b:52:e9:90:50:95:31:61:e0:17:08:06:d0:a7: 59:65:5e:88:09:da:0e:04:ba:7d:cd:28:9c:58:0e:59:48:0c: c2:ea:ad:e4:80:c2:3c:c1:8d:9a:01:8b:11:1f:db:5e:f9:53: a4:70:72:a2:c3:80:77:d3:40:43:75:4f:bf:90:03:99:c0:36: 8b:2a:f7:c5:e5:e3:32:cb:8d:7a:ac:70:64:ab:19:8e:19:b8: 65:3b:de:80:8c:1b:89:fe:d3:f6:de:8a:49:96:6c:6e:94:5d: 9f:31:4e:9e -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEuPY2fPsBQtDgVu4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxODA3MDgzNVoXDTI4MDEyMTA4MDgzNVowLzEtMCsGA1UEAxMk MzRkMWI5MDUtMzM3ZC00NmYyLWIwMjgtNjUzNTljMzg3ZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicG3htYpBOVmG0LFzCj5mAwwmUZGYCA/Qilz 57dLsxFcaZIE4H1/se+F86XeelAYYtHcSul3MJX3K7K3eU41Z4gj9yC5Fme7vM6n dHFJKUsgxEgRFnLNP73wPUIeK2GaHQ/2j07i0hF35RGrF8PnOQyUwufIA99Y6kzk xk7SBXf8uQtqUI+Egi3Zw5mWPo8U4zFVHHnrqj4J43eH3u8QJxtGzPSgeKrQfmx7 AaYB4s77C9s+gSEWS8XUjDCInFvJ4/Rik51JIrb2LQB2HODU1uQtluxMeK24W+Hp sZ7/+lggiGi7D8thK/lGCpCvPuAl9hs4KchPVg0nNEbFI7jTIwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFBOVvx4MT8jiTypACjMqYFuDyNmUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8z NGQxYjkwNS0zMzdkLTQ2ZjItYjAyOC02NTM1OWMzODdmZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzM0ZDFiOTA1LTMzN2QtNDZmMi1i MDI4LTY1MzU5YzM4N2ZlZS8zNGQxYjkwNS0zMzdkLTQ2ZjItYjAyOC02NTM1OWMz ODdmZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXk6wwDgQCAAIwCAMGACYC9RUAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGxG9ybod/S1NNIBoUUFizqpqXaVaE5AjQcddq8ZnnYOAn766es/B3XM8ZBxpkWa QefkJDedGz7Brmp5/+Vxr9JDpAeyiu5y6+h2YQpn3RdlDTALLIRtTuTp972fSQvP KQrZIGDefdBUJBPCdde2ENWOaaV4yCtOpupY2w+ypsYljLSGAvY50AxtYEJYtwl8 E7hiy4cbUumQUJUxYeAXCAbQp1llXogJ2g4Eun3NKJxYDllIDMLqreSAwjzBjZoB ixEf2175U6RwcqLDgHfTQEN1T7+QA5nANosq98Xl4zLLjXqscGSrGY4ZuGU73oCM G4n+0/beikmWbG6UXZ8xTp4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:28:32 2025 by rpki-client