$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889.cer File: 67163ddd-ba7f-4a5f-91d1-39775f79b889.cer (raw, json) Hash identifier: NGMyJIt2silsZelvqn8janT/YUa3Pl8c4FcIpECuN28= Subject key identifier: D9:5F:7A:2F:E4:05:83:B4:7B:A7:95:2F:1F:47:BA:24:00:43:B3:21 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B93146E063E137EABA70C5B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889/67163ddd-ba7f-4a5f-91d1-39775f79b889.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Oct 2025 14:52:41 +0000 Certificate not after: Sat 22 Jan 2028 15:52:41 +0000 Subordinate resources: IP: 23.146.212.0/24 IP: 2602:f530::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:14:6e:06:3e:13:7e:ab:a7:0c:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 19 14:52:41 2025 GMT Not After : Jan 22 15:52:41 2028 GMT Subject: CN=67163ddd-ba7f-4a5f-91d1-39775f79b889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b0:a1:71:71:c1:95:0c:36:07:e6:1c:bd:d1: 0c:74:3e:61:96:c4:cc:74:c8:31:ad:de:60:31:51: dd:43:08:63:6d:2c:80:f3:54:13:c2:24:8f:42:b9: 49:26:ff:a4:70:2c:d9:76:cf:5c:ab:cd:62:e8:ce: 1d:cf:d3:31:df:be:a0:df:b0:80:45:71:4f:04:c5: d7:7e:d6:14:23:c4:ee:1a:a2:a6:55:bd:ad:5b:01: e6:2a:63:ec:b2:7e:ab:b3:1b:54:ee:d9:eb:9f:bc: 80:cb:91:7f:cd:e4:76:65:ef:cc:c3:71:e6:74:d3: 8f:b4:25:a9:cb:fd:a0:28:75:98:fa:85:de:40:e8: a9:df:bd:12:50:63:90:40:63:a6:20:67:c5:49:1d: d0:f0:78:a3:83:f9:e3:1a:e1:3b:c9:b7:21:99:bd: 3c:21:3a:da:6b:ab:91:7a:b0:65:a8:49:ad:0c:3f: 9a:71:29:6b:e4:32:89:68:b4:c0:5c:55:2b:f7:30: 47:5f:99:3c:24:3c:ee:22:cd:b2:54:2d:ec:dd:b4: 8d:78:6c:61:22:c9:cd:68:79:e5:a9:38:10:cb:fe: 23:f4:5a:d9:eb:e4:60:02:1e:50:9d:14:4d:49:10: 5b:e1:16:9a:02:93:2c:02:1e:2e:8e:61:37:3e:71: cc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5F:7A:2F:E4:05:83:B4:7B:A7:95:2F:1F:47:BA:24:00:43:B3:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889/67163ddd-ba7f-4a5f-91d1-39775f79b889.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.146.212.0/24 IPv6: 2602:f530::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:29:4b:cd:75:8c:2f:07:9b:34:4e:3a:ee:bb:b6:fd:fb:08: 98:8b:b8:cd:66:e9:a4:0e:09:72:85:17:18:0c:11:2c:3c:d3: d6:9a:04:17:fb:71:08:9a:69:c7:ed:71:4a:8b:91:9c:69:14: ca:ce:2a:4c:53:c9:5c:9c:2d:df:52:1c:dc:f6:6c:78:87:fe: f8:10:9c:06:84:80:7f:40:4f:3a:3d:9e:b3:10:20:6b:07:ac: ed:67:06:52:e5:e8:3a:d6:34:32:81:84:62:f0:67:db:c9:8f: 76:39:f3:d4:9d:cb:92:3d:a8:38:20:82:cf:58:0f:aa:58:20: 47:ff:6c:62:ce:bc:5b:9b:d8:93:fe:05:40:14:87:de:f6:b5: 01:94:47:de:80:ee:ed:a1:80:2f:3f:62:da:5d:8a:7e:a5:ea: 73:8e:d8:bb:3b:7f:8f:57:39:91:07:72:16:05:15:ad:58:1a: 01:fa:dc:3b:fd:00:b8:e6:39:7b:c5:0f:a1:42:bd:b7:bb:f0: 0b:ac:cb:89:64:2a:13:30:c5:54:7a:e6:61:89:ae:7a:09:e1: d0:33:dd:7a:72:34:40:fe:d5:e3:9e:68:a6:49:06:bb:d7:a9: 8f:08:09:58:bb:f6:dd:04:82:e1:d1:12:37:07:a2:da:ce:6a: 60:60:5b:b3 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEuTFG4GPhN+q6cMW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxOTE0NTI0MVoXDTI4MDEyMjE1NTI0MVowLzEtMCsGA1UEAxMk NjcxNjNkZGQtYmE3Zi00YTVmLTkxZDEtMzk3NzVmNzliODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbChcXHBlQw2B+YcvdEMdD5hlsTMdMgxrd5g MVHdQwhjbSyA81QTwiSPQrlJJv+kcCzZds9cq81i6M4dz9Mx376g37CARXFPBMXX ftYUI8TuGqKmVb2tWwHmKmPssn6rsxtU7tnrn7yAy5F/zeR2Ze/Mw3HmdNOPtCWp y/2gKHWY+oXeQOip370SUGOQQGOmIGfFSR3Q8Hijg/njGuE7ybchmb08ITraa6uR erBlqEmtDD+acSlr5DKJaLTAXFUr9zBHX5k8JDzuIs2yVC3s3bSNeGxhIsnNaHnl qTgQy/4j9FrZ6+RgAh5QnRRNSRBb4RaaApMsAh4ujmE3PnHMxwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFNlfei/kBYO0e6eVLx9HuiQAQ7MhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82 NzE2M2RkZC1iYTdmLTRhNWYtOTFkMS0zOTc3NWY3OWI4ODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzY3MTYzZGRkLWJhN2YtNGE1Zi05 MWQxLTM5Nzc1Zjc5Yjg4OS82NzE2M2RkZC1iYTdmLTRhNWYtOTFkMS0zOTc3NWY3 OWI4ODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXktQwDgQCAAIwCAMGACYC9TAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEopS811jC8HmzROOu67tv37CJiLuM1m6aQOCXKFFxgMESw809aaBBf7cQiaacft cUqLkZxpFMrOKkxTyVycLd9SHNz2bHiH/vgQnAaEgH9ATzo9nrMQIGsHrO1nBlLl 6DrWNDKBhGLwZ9vJj3Y589Sdy5I9qDgggs9YD6pYIEf/bGLOvFub2JP+BUAUh972 tQGUR96A7u2hgC8/Ytpdin6l6nOO2Ls7f49XOZEHchYFFa1YGgH63Dv9ALjmOXvF D6FCvbe78Ausy4lkKhMwxVR65mGJrnoJ4dAz3XpyNED+1eOeaKZJBrvXqY8ICVi7 9t0EguHREjcHotrOamBgW7M= -----END CERTIFICATE-----Generated at Mon Oct 20 17:58:22 2025 by rpki-client