$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b0b2528-60bb-483e-9b2c-27c6fcd25ea7.cer File: 3b0b2528-60bb-483e-9b2c-27c6fcd25ea7.cer (raw, json) Hash identifier: BhmchYTxia5Rr0GKtjxIXiNMaWnfbPG1B0UF2+7DBZo= Subject key identifier: 06:7D:C4:E7:F0:75:6A:A9:85:5E:0E:84:80:80:4C:14:EE:9C:EE:4B Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BB3BF10D94443A189B56E5F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b0b2528-60bb-483e-9b2c-27c6fcd25ea7/3b0b2528-60bb-483e-9b2c-27c6fcd25ea7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b0b2528-60bb-483e-9b2c-27c6fcd25ea7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Oct 2025 07:42:22 +0000 Certificate not after: Thu 03 Feb 2028 08:42:22 +0000 Subordinate resources: IP: 23.148.108.0/24 IP: 2602:f4fd::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b3:bf:10:d9:44:43:a1:89:b5:6e:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 31 07:42:22 2025 GMT Not After : Feb 3 08:42:22 2028 GMT Subject: CN=3b0b2528-60bb-483e-9b2c-27c6fcd25ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8d:64:24:bd:ec:78:d2:50:33:58:f6:13:0b: 25:a6:eb:d9:9b:f9:41:df:fb:dc:df:f6:ef:61:41: c2:13:e8:b1:ab:f7:83:50:13:9f:b9:86:6c:65:b5: 11:e8:44:25:ca:19:a5:1b:5c:89:01:ad:2f:c7:98: 13:3e:06:e8:e2:a4:81:97:0b:b1:b4:4f:bf:56:0f: ab:ad:c3:16:87:27:ce:1c:36:b3:57:d8:d3:18:f0: 40:b0:01:d1:e5:d0:46:ac:71:1a:4c:ce:0b:ca:7e: 65:f7:20:34:5d:17:26:52:cc:75:67:f4:f7:74:0f: 4c:5e:9b:21:6e:cc:f8:46:63:17:b4:de:6a:a2:f2: 8b:3d:e0:b6:c9:d8:d3:90:e2:0c:a8:a6:99:4d:1f: de:86:9f:ca:5c:c2:4b:7e:9d:c5:4e:4e:3f:0e:2b: e2:6a:8a:a4:69:48:fa:d6:34:46:13:c1:f5:62:42: 6c:0e:53:ae:2f:80:81:5b:85:ac:80:f3:b5:c7:a3: 31:04:d7:85:f2:ed:7d:44:db:73:a3:b4:7f:ed:bc: b4:92:ee:ad:ac:fc:56:9c:89:fc:e4:66:f8:4a:75: 43:1d:a8:d2:64:fb:1d:46:94:ce:20:21:7c:f6:ac: f7:20:da:5e:4f:c2:c9:a2:4a:fe:60:9c:5d:9a:d4: dc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7D:C4:E7:F0:75:6A:A9:85:5E:0E:84:80:80:4C:14:EE:9C:EE:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b0b2528-60bb-483e-9b2c-27c6fcd25ea7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b0b2528-60bb-483e-9b2c-27c6fcd25ea7/3b0b2528-60bb-483e-9b2c-27c6fcd25ea7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.148.108.0/24 IPv6: 2602:f4fd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:35:19:97:fd:2c:92:05:a3:4f:06:72:f5:de:cb:45:09:2d: 99:f4:36:b6:10:c1:cf:dd:b1:d8:03:18:6d:1e:7a:0c:38:97: 9b:e5:88:6c:57:9e:f3:3a:53:02:e5:14:0d:b6:4d:55:7a:ee: 57:9c:ee:60:58:ad:f4:bb:52:7d:5a:b3:46:6b:71:05:7f:cd: 64:f5:0d:55:4c:b9:58:2e:e3:96:6b:c0:38:f5:4d:0c:5c:0e: 46:8a:44:55:29:91:45:69:40:f4:a5:38:cb:e0:ec:54:39:8f: 16:9f:c5:53:c3:96:46:d8:a8:af:ef:66:9b:d5:69:78:0f:be: 02:c4:84:38:b5:c2:0d:c7:58:5c:02:51:24:7f:23:c9:3a:19: 84:30:ed:c2:8c:27:cf:93:16:ce:27:9e:7c:22:d3:7b:fc:2b: ff:eb:70:a5:1d:7e:de:df:5a:3a:99:73:78:80:fa:ba:de:6a: 21:2f:6f:8f:68:a7:62:7b:d6:35:d5:92:3b:86:e4:80:39:8e: 2b:c0:e6:5a:08:42:1c:20:f2:62:bb:41:50:ab:b8:2d:7a:53: 12:f0:ea:03:02:99:09:0e:90:8a:04:8b:90:ee:6e:1d:92:9c: d5:e9:71:b5:49:2f:63:cd:a7:d4:ac:01:8f:da:87:ba:69:29: 47:70:79:f4 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEuzvxDZREOhibVuX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAzMTA3NDIyMloXDTI4MDIwMzA4NDIyMlowLzEtMCsGA1UEAxMk M2IwYjI1MjgtNjBiYi00ODNlLTliMmMtMjdjNmZjZDI1ZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY1kJL3seNJQM1j2EwslpuvZm/lB3/vc3/bv YUHCE+ixq/eDUBOfuYZsZbUR6EQlyhmlG1yJAa0vx5gTPgbo4qSBlwuxtE+/Vg+r rcMWhyfOHDazV9jTGPBAsAHR5dBGrHEaTM4Lyn5l9yA0XRcmUsx1Z/T3dA9MXpsh bsz4RmMXtN5qovKLPeC2ydjTkOIMqKaZTR/ehp/KXMJLfp3FTk4/DiviaoqkaUj6 1jRGE8H1YkJsDlOuL4CBW4WsgPO1x6MxBNeF8u19RNtzo7R/7by0ku6trPxWnIn8 5Gb4SnVDHajSZPsdRpTOICF89qz3INpeT8LJokr+YJxdmtTckQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFAZ9xOfwdWqphV4OhICATBTunO5LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8z YjBiMjUyOC02MGJiLTQ4M2UtOWIyYy0yN2M2ZmNkMjVlYTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzNiMGIyNTI4LTYwYmItNDgzZS05 YjJjLTI3YzZmY2QyNWVhNy8zYjBiMjUyOC02MGJiLTQ4M2UtOWIyYy0yN2M2ZmNk MjVlYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlGwwDgQCAAIwCAMGACYC9P0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AF01GZf9LJIFo08GcvXey0UJLZn0NrYQwc/dsdgDGG0eegw4l5vliGxXnvM6UwLl FA22TVV67lec7mBYrfS7Un1as0ZrcQV/zWT1DVVMuVgu45ZrwDj1TQxcDkaKRFUp kUVpQPSlOMvg7FQ5jxafxVPDlkbYqK/vZpvVaXgPvgLEhDi1wg3HWFwCUSR/I8k6 GYQw7cKMJ8+TFs4nnnwi03v8K//rcKUdft7fWjqZc3iA+rreaiEvb49op2J71jXV kjuG5IA5jivA5loIQhwg8mK7QVCruC16UxLw6gMCmQkOkIoEi5Dubh2SnNXpcbVJ L2PNp9SsAY/ah7ppKUdwefQ= -----END CERTIFICATE-----Generated at Wed Nov 5 03:08:05 2025 by rpki-client