$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer File: dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer (raw, json) Hash identifier: wiZ0dePKWcKzM/ew/IBWa8XtnQPDgOYO6fzH5NYQ78s= Subject key identifier: BF:C1:82:C5:D5:C0:98:39:07:1B:F1:6D:3F:F3:9C:AB:D9:A3:F0:6C Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B865CC822B8BCA4453761C0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Oct 2025 01:32:58 +0000 Certificate not after: Tue 18 Jan 2028 02:32:58 +0000 Subordinate resources: AS: 402037 IP: 23.146.132.0/24 IP: 2602:f539::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:5c:c8:22:b8:bc:a4:45:37:61:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 15 01:32:58 2025 GMT Not After : Jan 18 02:32:58 2028 GMT Subject: CN=dd7b2d92-487c-472a-b6c0-a0d9cfc490ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:8e:c8:53:4f:c7:13:f9:7f:34:bf:9a:4f: e4:a9:1e:68:0c:54:4a:8b:a1:47:ab:94:61:3f:fd: 85:ef:7a:f4:f6:bd:52:f4:0e:ac:55:63:aa:27:a2: 29:cf:fd:20:a6:b2:4d:c0:5e:9b:ce:53:70:9a:4c: 15:f6:f3:1f:e8:be:55:e6:cc:bd:57:84:9d:e6:3b: b7:01:41:d2:bb:a1:19:6f:0c:73:1b:e9:ea:5f:d2: 9e:5e:e4:12:0c:66:bc:ac:8b:8e:85:b5:b1:9f:6f: 6b:1c:94:61:24:cb:58:df:79:77:66:26:04:f9:7c: 68:a5:aa:27:ea:12:d8:91:aa:59:2f:39:9d:99:ac: 14:e8:71:68:0d:4f:88:97:fc:1c:83:51:72:9a:e0: e3:fd:36:d1:52:c5:cb:43:80:83:10:75:32:ca:99: 8a:82:7e:08:46:2a:65:33:8b:14:d2:36:20:e1:86: 4f:a1:5e:07:45:6e:db:7c:de:0c:25:ae:8b:df:2b: 14:17:a4:a9:5f:d2:56:10:83:9d:e1:b4:9d:5a:72: d1:a5:e5:ab:9f:a4:90:5e:3b:09:73:20:8e:d4:25: 24:25:b4:7d:e3:0f:59:74:43:13:6f:41:e7:1e:62: 20:69:bc:89:be:35:ea:29:46:c5:45:3c:c4:79:6f: ce:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C1:82:C5:D5:C0:98:39:07:1B:F1:6D:3F:F3:9C:AB:D9:A3:F0:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.146.132.0/24 IPv6: 2602:f539::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402037 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:2c:41:1f:f5:71:90:70:8b:27:8c:87:12:96:c0:aa:2f:a2: b5:b5:1e:c2:73:19:80:cc:7d:17:a3:35:1c:32:e0:1c:14:5c: 55:ce:64:70:bf:b0:14:f8:20:4e:bf:6c:b5:4c:a9:33:ee:0b: f0:c7:1c:a7:2b:e9:05:a7:a8:cd:63:98:c7:78:74:17:a4:c3: a1:aa:d8:f8:ee:16:81:77:69:c0:a4:61:31:0c:73:5f:f7:bd: 4c:a7:a0:c7:94:7b:30:b2:13:ed:5a:89:78:04:6d:20:40:0b: 78:69:64:bb:fb:18:68:33:56:b2:8a:8f:1a:f9:28:c6:f5:8a: b2:98:8c:6e:53:3d:77:c2:99:ce:fd:fb:66:c9:5f:bc:70:24: 63:d6:d8:c2:40:c9:fe:28:d6:e4:46:f7:02:6f:a9:f9:b5:47: 32:21:82:87:8f:0b:64:2e:c8:5c:42:fd:16:82:f9:23:ff:e4: 78:33:3f:a8:3e:de:b4:c6:ff:3f:1d:a9:c9:13:a2:ee:6e:44: 1c:81:51:e2:c0:48:a8:7d:a8:89:79:e3:b9:d3:d8:b9:5c:f4: 20:fe:60:6a:49:f7:35:67:f0:7a:f5:cc:ea:96:ad:4c:e8:73: 97:6e:ec:65:97:5c:31:93:a2:22:4b:0d:15:ec:98:bf:e8:ad: 19:e5:7f:a9 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEuGXMgiuLykRTdhwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNTAxMzI1OFoXDTI4MDExODAyMzI1OFowLzEtMCsGA1UEAxMk ZGQ3YjJkOTItNDg3Yy00NzJhLWI2YzAtYTBkOWNmYzQ5MGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzaOyFNPxxP5fzS/mk/kqR5oDFRKi6FHq5Rh P/2F73r09r1S9A6sVWOqJ6Ipz/0gprJNwF6bzlNwmkwV9vMf6L5V5sy9V4Sd5ju3 AUHSu6EZbwxzG+nqX9KeXuQSDGa8rIuOhbWxn29rHJRhJMtY33l3ZiYE+Xxopaon 6hLYkapZLzmdmawU6HFoDU+Il/wcg1FymuDj/TbRUsXLQ4CDEHUyypmKgn4IRipl M4sU0jYg4YZPoV4HRW7bfN4MJa6L3ysUF6SpX9JWEIOd4bSdWnLRpeWrn6SQXjsJ cyCO1CUkJbR94w9ZdEMTb0HnHmIgabyJvjXqKUbFRTzEeW/O+QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFL/BgsXVwJg5BxvxbT/znKvZo/BsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9k ZDdiMmQ5Mi00ODdjLTQ3MmEtYjZjMC1hMGQ5Y2ZjNDkwYmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2RkN2IyZDkyLTQ4N2MtNDcyYS1i NmMwLWEwZDljZmM0OTBiYS9kZDdiMmQ5Mi00ODdjLTQ3MmEtYjZjMC1hMGQ5Y2Zj NDkwYmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkoQwDgQCAAIwCAMGACYC9TkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYidTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4LEEf9XGQcIsnjIcSlsCqL6K1 tR7CcxmAzH0XozUcMuAcFFxVzmRwv7AU+CBOv2y1TKkz7gvwxxynK+kFp6jNY5jH eHQXpMOhqtj47haBd2nApGExDHNf971Mp6DHlHswshPtWol4BG0gQAt4aWS7+xho M1ayio8a+SjG9YqymIxuUz13wpnO/ftmyV+8cCRj1tjCQMn+KNbkRvcCb6n5tUcy IYKHjwtkLshcQv0Wgvkj/+R4Mz+oPt60xv8/HanJE6LubkQcgVHiwEiofaiJeeO5 09i5XPQg/mBqSfc1Z/B69czqlq1M6HOXbuxll1wxk6IiSw0V7Ji/6K0Z5X+p -----END CERTIFICATE-----Generated at Mon Oct 20 02:05:21 2025 by rpki-client