$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/338f462d-1518-41ff-8c38-4a148b2edecb.cer File: 338f462d-1518-41ff-8c38-4a148b2edecb.cer (raw, json) Hash identifier: i9ds7LVpamZeOeq3ICklpiXYb/FOA5JFQGQcM82p6lM= Subject key identifier: 5E:A1:33:E3:86:BD:46:C6:7A:01:05:9A:08:4A:28:2E:3B:6A:BB:9A Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BBA45E65A20B433266B163300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/338f462d-1518-41ff-8c38-4a148b2edecb/338f462d-1518-41ff-8c38-4a148b2edecb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/338f462d-1518-41ff-8c38-4a148b2edecb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Nov 2025 15:48:54 +0000 Certificate not after: Sat 05 Feb 2028 15:48:54 +0000 Subordinate resources: IP: 23.148.92.0/24 IP: 2602:f4f6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:45:e6:5a:20:b4:33:26:6b:16:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 2 15:48:54 2025 GMT Not After : Feb 5 15:48:54 2028 GMT Subject: CN=338f462d-1518-41ff-8c38-4a148b2edecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:54:49:38:46:ef:a2:22:82:86:d4:d1:99:9b: 14:b0:d4:2d:15:18:3c:c3:80:d7:51:b4:f5:fd:ed: 71:0d:1a:69:a6:3c:c8:53:f0:5a:9a:57:68:f0:b0: 4e:68:a6:03:66:35:59:0f:b7:44:cf:fc:90:8c:9c: 18:b0:0d:57:b6:0a:ad:c0:c6:d2:90:5f:54:56:56: e2:1a:1f:4c:7d:b1:87:32:ed:16:f7:f2:82:c2:d2: 2f:5c:e5:36:01:64:35:29:6d:e7:bf:f7:5c:5f:a8: 97:0a:a1:37:3b:5d:1a:8e:e9:e8:94:d7:73:e6:36: f3:38:db:b3:9a:60:a0:25:87:48:28:98:6b:be:77: 3f:9f:f5:91:00:99:af:84:f6:fa:52:d6:6a:36:cc: 11:62:71:62:5e:9b:14:0d:f1:fa:f8:c5:25:fb:97: 14:04:62:ba:ba:aa:80:54:32:d1:0e:dd:73:1c:a3: 90:cd:7f:b5:77:c0:4d:56:88:ac:89:bc:94:d3:5f: 38:01:70:15:75:17:a5:5f:14:d0:fc:78:08:1b:61: 17:f7:af:ee:9e:e2:63:69:88:a8:b4:2f:48:0c:56: 36:32:8d:6d:c1:5c:3d:2d:f6:f1:16:c0:f7:93:68: 78:61:98:ef:9a:99:d3:5b:b0:cd:1a:02:fc:de:0e: 2e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A1:33:E3:86:BD:46:C6:7A:01:05:9A:08:4A:28:2E:3B:6A:BB:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/338f462d-1518-41ff-8c38-4a148b2edecb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/338f462d-1518-41ff-8c38-4a148b2edecb/338f462d-1518-41ff-8c38-4a148b2edecb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.148.92.0/24 IPv6: 2602:f4f6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:71:5b:32:3f:e7:62:90:d1:7b:a7:04:0c:39:d2:3e:09:b6: 34:25:bd:13:49:a6:40:4f:64:a3:16:7d:9f:67:88:47:e0:1a: 31:94:71:ba:98:50:af:d5:3f:a0:07:5c:13:66:41:ad:83:f0: 91:7e:67:30:85:85:d7:75:b8:9c:f4:f2:36:80:47:2a:46:88: 98:1e:c8:d2:49:b9:25:64:fb:d2:9d:25:af:5b:5e:c4:bb:be: 3a:17:70:ec:bc:4d:36:fe:f2:04:eb:4e:3f:00:59:fa:6c:a3: ac:78:79:5c:a4:a5:60:9f:79:e9:4e:10:e7:83:14:eb:67:77: 89:be:11:8c:50:c5:ec:98:03:93:3f:4e:99:09:8d:dd:33:9b: 92:db:97:b7:ad:61:1c:73:94:98:cd:9a:86:a3:79:14:50:8a: 9b:0f:29:a0:11:70:a1:e5:60:11:d1:68:42:78:96:b8:43:d8: b8:d9:c5:df:65:fa:76:c7:8f:e8:53:04:c8:06:e4:62:5a:25: 93:2d:4a:a3:61:70:c2:71:43:64:60:ba:30:a2:6f:fb:ac:e0: bd:37:c7:2c:81:3c:c1:a9:d3:c4:f5:3f:99:33:58:eb:af:19: 96:af:52:a3:55:4b:41:9b:42:86:4b:a1:40:26:5b:38:5b:4d: 6b:17:75:58 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEu6ReZaILQzJmsWMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwMjE1NDg1NFoXDTI4MDIwNTE1NDg1NFowLzEtMCsGA1UEAxMk MzM4ZjQ2MmQtMTUxOC00MWZmLThjMzgtNGExNDhiMmVkZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFRJOEbvoiKChtTRmZsUsNQtFRg8w4DXUbT1 /e1xDRpppjzIU/Bamldo8LBOaKYDZjVZD7dEz/yQjJwYsA1XtgqtwMbSkF9UVlbi Gh9MfbGHMu0W9/KCwtIvXOU2AWQ1KW3nv/dcX6iXCqE3O10ajunolNdz5jbzONuz mmCgJYdIKJhrvnc/n/WRAJmvhPb6UtZqNswRYnFiXpsUDfH6+MUl+5cUBGK6uqqA VDLRDt1zHKOQzX+1d8BNVoisibyU0184AXAVdRelXxTQ/HgIG2EX96/unuJjaYio tC9IDFY2Mo1twVw9LfbxFsD3k2h4YZjvmpnTW7DNGgL83g4uawIDAQABo4IEDzCC BAswHQYDVR0OBBYEFF6hM+OGvUbGegEFmghKKC47aruaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8z MzhmNDYyZC0xNTE4LTQxZmYtOGMzOC00YTE0OGIyZWRlY2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzMzOGY0NjJkLTE1MTgtNDFmZi04 YzM4LTRhMTQ4YjJlZGVjYi8zMzhmNDYyZC0xNTE4LTQxZmYtOGMzOC00YTE0OGIy ZWRlY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlFwwDgQCAAIwCAMGACYC9PYAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABtxWzI/52KQ0XunBAw50j4JtjQlvRNJpkBPZKMWfZ9niEfgGjGUcbqYUK/VP6AH XBNmQa2D8JF+ZzCFhdd1uJz08jaARypGiJgeyNJJuSVk+9KdJa9bXsS7vjoXcOy8 TTb+8gTrTj8AWfpso6x4eVykpWCfeelOEOeDFOtnd4m+EYxQxeyYA5M/TpkJjd0z m5Lbl7etYRxzlJjNmoajeRRQipsPKaARcKHlYBHRaEJ4lrhD2LjZxd9l+nbHj+hT BMgG5GJaJZMtSqNhcMJxQ2RgujCib/us4L03xyyBPMGp08T1P5kzWOuvGZavUqNV S0GbQoZLoUAmWzhbTWsXdVg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:33:58 2025 by rpki-client