$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65fd9c53-7fdb-4b3d-8fc7-45a0fcb75cf9.cer File: 65fd9c53-7fdb-4b3d-8fc7-45a0fcb75cf9.cer (raw, json) Hash identifier: qiI+1P+FdVZ+6CmQyKXLHsnL8i3dNlNEHSvwqBqCuQ8= Subject key identifier: 17:67:74:3B:14:50:54:CB:5B:C8:D1:1F:A5:BD:46:3D:13:7D:AE:8A Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B89240402C17CB6D9E5152840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65fd9c53-7fdb-4b3d-8fc7-45a0fcb75cf9/65fd9c53-7fdb-4b3d-8fc7-45a0fcb75cf9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65fd9c53-7fdb-4b3d-8fc7-45a0fcb75cf9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Oct 2025 01:26:01 +0000 Certificate not after: Wed 19 Jan 2028 02:26:01 +0000 Subordinate resources: AS: 11531 IP: 23.147.92.0/24 IP: 2602:f51e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:24:04:02:c1:7c:b6:d9:e5:15:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 16 01:26:01 2025 GMT Not After : Jan 19 02:26:01 2028 GMT Subject: CN=65fd9c53-7fdb-4b3d-8fc7-45a0fcb75cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:1d:7a:a9:29:08:ef:28:20:8f:46:64:59: 2b:85:40:53:e2:d6:ae:76:07:16:43:12:5a:d0:03: 0a:e3:12:bd:b9:ab:82:36:75:53:6e:27:60:cc:14: 4b:1b:a4:26:85:cd:40:bf:23:cd:b3:f5:cf:6f:ab: 52:30:ba:1e:fa:d4:a4:1c:42:5e:99:b1:80:d7:19: 13:84:b0:8e:51:dd:20:6e:10:25:80:2f:fc:04:16: f3:4f:ba:a5:e0:74:5b:16:fc:c2:a6:10:2a:b9:a2: 3a:35:f9:69:9b:81:52:f9:a6:80:4c:d9:af:ee:4d: cf:01:08:83:40:67:f7:3e:1c:48:df:cf:30:66:b0: 16:fd:f4:76:fa:dd:d6:be:07:1b:54:6e:04:9c:19: 1b:83:ea:f3:a9:5d:ea:f1:e8:c5:34:10:7c:14:df: 2f:e0:b1:10:8c:72:7c:85:b8:6e:90:c4:d3:9f:d8: a5:0c:fa:77:49:e0:dd:f7:45:4f:c0:21:4b:e8:1d: 81:6b:f3:26:92:5f:da:6c:3f:20:0f:8e:d9:33:03: b9:ef:a8:1a:67:81:c9:ad:c3:a3:14:12:30:65:14: e9:4a:6f:e3:7c:21:ca:6d:a5:45:43:fb:db:c1:d1: 54:26:7d:c9:0b:26:b3:e8:f2:74:a0:78:84:ee:86: 93:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:67:74:3B:14:50:54:CB:5B:C8:D1:1F:A5:BD:46:3D:13:7D:AE:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65fd9c53-7fdb-4b3d-8fc7-45a0fcb75cf9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65fd9c53-7fdb-4b3d-8fc7-45a0fcb75cf9/65fd9c53-7fdb-4b3d-8fc7-45a0fcb75cf9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.147.92.0/24 IPv6: 2602:f51e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11531 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:3a:0f:8b:d5:b3:fc:b3:5a:48:2a:01:eb:10:6f:87:1e:2e: 1c:ff:8e:7f:f7:7f:2d:77:cc:7d:b7:41:fb:bb:56:99:97:dc: e2:33:e3:ca:5d:e5:f0:cf:6d:0f:2c:dc:9c:7f:79:d9:3c:95: 7d:77:bf:5b:61:59:7c:25:e2:66:68:23:1c:a4:2f:1e:1e:02: 5f:99:11:a6:00:b0:5d:17:bc:a6:4b:1d:a1:50:55:dd:6b:65: 35:1e:23:c0:fb:25:78:b8:ba:91:fa:ba:1d:35:90:b6:42:02: b4:ee:07:67:65:f7:0d:33:cc:c8:9d:bb:19:ee:d3:de:a2:c0: ab:d7:16:46:e9:b3:60:29:7b:01:7d:15:3a:33:1c:29:4f:e0: 98:ad:80:48:7b:43:d7:10:89:b6:ec:eb:4e:bb:19:b5:44:d9: a9:9d:cb:70:70:07:b9:7b:13:5b:cc:8c:05:0f:6f:40:8f:7c: d6:bd:8f:84:7b:68:b0:0a:a7:51:08:b6:af:10:04:3e:c4:44: c7:df:e1:07:aa:43:f6:9b:72:04:90:37:06:8a:46:9a:09:20: cc:33:ab:d9:2e:24:30:0c:fa:9e:8c:ce:2d:6a:1f:a7:94:0c: 7d:12:5f:c2:9b:fe:15:8a:83:bc:e9:32:6b:31:3a:57:20:e8: cf:bd:f6:fd -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEuJJAQCwXy22eUVKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNjAxMjYwMVoXDTI4MDExOTAyMjYwMVowLzEtMCsGA1UEAxMk NjVmZDljNTMtN2ZkYi00YjNkLThmYzctNDVhMGZjYjc1Y2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXEdeqkpCO8oII9GZFkrhUBT4taudgcWQxJa 0AMK4xK9uauCNnVTbidgzBRLG6Qmhc1AvyPNs/XPb6tSMLoe+tSkHEJembGA1xkT hLCOUd0gbhAlgC/8BBbzT7ql4HRbFvzCphAquaI6Nflpm4FS+aaATNmv7k3PAQiD QGf3PhxI388wZrAW/fR2+t3WvgcbVG4EnBkbg+rzqV3q8ejFNBB8FN8v4LEQjHJ8 hbhukMTTn9ilDPp3SeDd90VPwCFL6B2Ba/Mmkl/abD8gD47ZMwO576gaZ4HJrcOj FBIwZRTpSm/jfCHKbaVFQ/vbwdFUJn3JCyaz6PJ0oHiE7oaT3wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBdndDsUUFTLW8jRH6W9Rj0Tfa6KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82 NWZkOWM1My03ZmRiLTRiM2QtOGZjNy00NWEwZmNiNzVjZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzY1ZmQ5YzUzLTdmZGItNGIzZC04 ZmM3LTQ1YTBmY2I3NWNmOS82NWZkOWM1My03ZmRiLTRiM2QtOGZjNy00NWEwZmNi NzVjZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXk1wwDgQCAAIwCAMGACYC9R4AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAi0LMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFA6D4vVs/yzWkgqAesQb4ceLhz/ jn/3fy13zH23Qfu7VpmX3OIz48pd5fDPbQ8s3Jx/edk8lX13v1thWXwl4mZoIxyk Lx4eAl+ZEaYAsF0XvKZLHaFQVd1rZTUeI8D7JXi4upH6uh01kLZCArTuB2dl9w0z zMiduxnu096iwKvXFkbps2ApewF9FTozHClP4JitgEh7Q9cQibbs6067GbVE2amd y3BwB7l7E1vMjAUPb0CPfNa9j4R7aLAKp1EItq8QBD7ERMff4QeqQ/abcgSQNwaK RpoJIMwzq9kuJDAM+p6Mzi1qH6eUDH0SX8Kb/hWKg7zpMmsxOlcg6M+99v0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:06:06 2025 by rpki-client