$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840.cer File: 9477d25a-981d-4eb4-9fd8-7eea914a2840.cer (raw, json) Hash identifier: B3JiaCvO+tIGXjNAWopftEmGI3laiEn2ibwb/zCrgvk= Subject key identifier: 15:0B:A4:99:6B:62:D4:0B:05:3C:1C:13:D4:B4:2E:49:A5:44:8B:B1 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8F624AD5E1F32D66B9D14880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/9477d25a-981d-4eb4-9fd8-7eea914a2840.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Oct 2025 07:06:20 +0000 Certificate not after: Fri 21 Jan 2028 08:06:20 +0000 Subordinate resources: IP: 23.147.148.0/24 IP: 2602:f514::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8f:62:4a:d5:e1:f3:2d:66:b9:d1:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 18 07:06:20 2025 GMT Not After : Jan 21 08:06:20 2028 GMT Subject: CN=9477d25a-981d-4eb4-9fd8-7eea914a2840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:15:eb:24:cf:00:70:11:2b:44:76:ef:07: 9d:e6:1b:88:fc:22:b1:2d:fa:94:68:cb:ef:c7:28: 36:c9:5e:c7:6b:2d:77:99:43:af:58:5f:ca:75:ff: 9b:fb:dc:b0:eb:d9:15:ee:be:c5:12:63:0e:06:61: dc:d6:61:ef:5c:20:5b:e9:a6:3d:92:e2:06:99:8d: 94:93:c8:28:44:44:73:6e:d0:c2:73:8b:82:94:ab: cc:6a:75:5e:5a:8d:d1:b9:00:14:8d:7d:ee:81:ab: aa:05:7c:e2:e2:f9:51:68:b2:71:88:1c:74:19:10: 29:2b:a2:79:d1:9f:5c:66:b5:2e:c2:b5:82:bc:ce: 07:45:34:f7:f4:de:1d:91:c0:d8:6b:b6:a2:64:a4: c9:4c:4d:3f:aa:9c:b9:b8:d8:c8:88:5a:30:b5:85: 7b:99:c1:bf:9a:93:95:3c:e8:29:dd:47:c2:92:31: ff:8d:9f:7a:b9:10:1a:d6:0c:ff:0a:7f:65:7b:5e: 7d:48:96:d7:89:01:a2:ce:56:b2:25:a1:e8:f4:ee: bd:43:28:21:ca:02:71:60:d4:6e:54:99:17:20:99: ed:be:fd:5d:a2:54:97:42:7d:47:01:aa:58:a6:dc: ad:56:d6:e8:a5:f3:1c:97:1e:26:91:11:e8:8a:57: 44:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0B:A4:99:6B:62:D4:0B:05:3C:1C:13:D4:B4:2E:49:A5:44:8B:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/9477d25a-981d-4eb4-9fd8-7eea914a2840.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.147.148.0/24 IPv6: 2602:f514::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:97:12:2d:a7:8c:9f:de:6a:c2:b0:63:4c:e7:3a:ce:06:1b: 75:b3:1d:29:8d:40:b1:c8:33:44:af:e8:20:d5:14:4e:60:a2: 4d:2c:6c:0e:ab:9e:e8:57:ff:12:76:6b:9b:82:5f:e1:ca:2f: de:c0:87:97:ec:ae:9e:c0:ee:aa:0e:10:c7:35:00:a5:ad:d8: 6b:fc:39:25:93:c0:d2:27:04:cc:36:7d:0d:09:73:ec:9b:c5: fb:1c:4f:65:28:bf:4e:79:90:7b:1c:a2:a4:38:2e:6a:53:15: c6:80:f5:8f:14:62:47:20:f1:08:c8:70:ba:87:62:79:63:2d: 02:66:38:78:84:72:da:90:14:e1:33:c1:2f:d9:90:85:b4:59: 2c:95:03:0e:80:e1:96:0c:01:06:53:35:0e:6e:02:98:5a:c2: 02:8c:a3:c3:52:1e:dc:d2:94:8f:94:f7:0b:f6:6d:80:c9:e7: 53:c8:ee:6a:79:e2:5a:8f:c8:20:8e:70:b9:44:4a:22:74:c8: 0c:43:fb:a5:a8:7e:93:d4:79:fb:57:cf:99:ea:63:8f:c2:30: 78:b2:f4:c9:05:d8:92:77:c3:03:7f:05:6e:07:a3:f0:3e:4e: 13:f9:69:c1:5c:f1:86:80:4c:1a:5d:d1:90:e5:90:93:f6:9a: b1:b9:f3:53 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEuPYkrV4fMtZrnRSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxODA3MDYyMFoXDTI4MDEyMTA4MDYyMFowLzEtMCsGA1UEAxMk OTQ3N2QyNWEtOTgxZC00ZWI0LTlmZDgtN2VlYTkxNGEyODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy28V6yTPAHARK0R27wed5huI/CKxLfqUaMvv xyg2yV7Hay13mUOvWF/Kdf+b+9yw69kV7r7FEmMOBmHc1mHvXCBb6aY9kuIGmY2U k8goRERzbtDCc4uClKvManVeWo3RuQAUjX3ugauqBXzi4vlRaLJxiBx0GRApK6J5 0Z9cZrUuwrWCvM4HRTT39N4dkcDYa7aiZKTJTE0/qpy5uNjIiFowtYV7mcG/mpOV POgp3UfCkjH/jZ96uRAa1gz/Cn9le159SJbXiQGizlayJaHo9O69QyghygJxYNRu VJkXIJntvv1dolSXQn1HAapYptytVtbopfMclx4mkRHoildErQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFBULpJlrYtQLBTwcE9S0LkmlRIuxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85 NDc3ZDI1YS05ODFkLTRlYjQtOWZkOC03ZWVhOTE0YTI4NDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzk0NzdkMjVhLTk4MWQtNGViNC05 ZmQ4LTdlZWE5MTRhMjg0MC85NDc3ZDI1YS05ODFkLTRlYjQtOWZkOC03ZWVhOTE0 YTI4NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXk5QwDgQCAAIwCAMGACYC9RQAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGaXEi2njJ/easKwY0znOs4GG3WzHSmNQLHIM0Sv6CDVFE5gok0sbA6rnuhX/xJ2 a5uCX+HKL97Ah5fsrp7A7qoOEMc1AKWt2Gv8OSWTwNInBMw2fQ0Jc+ybxfscT2Uo v055kHscoqQ4LmpTFcaA9Y8UYkcg8QjIcLqHYnljLQJmOHiEctqQFOEzwS/ZkIW0 WSyVAw6A4ZYMAQZTNQ5uAphawgKMo8NSHtzSlI+U9wv2bYDJ51PI7mp54lqPyCCO cLlESiJ0yAxD+6WofpPUeftXz5nqY4/CMHiy9MkF2JJ3wwN/BW4Ho/A+ThP5acFc 8YaATBpd0ZDlkJP2mrG581M= -----END CERTIFICATE-----Generated at Mon Oct 20 02:05:06 2025 by rpki-client