$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2.cer File: 452e93c5-9f6b-46bc-8a92-d0a6d80137b2.cer (raw, json) Hash identifier: H27iYpZMfRAMPXU764QIjnFKUfU9Sq8Z7FI+KGEZ8lw= Subject key identifier: D7:81:5F:84:16:3A:89:52:26:AB:15:16:DA:78:CE:73:5B:75:41:05 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B818EFE515F2CDC5F5B5C7600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 08:15:05 +0000 Certificate not after: Sun 16 Jan 2028 09:15:05 +0000 Subordinate resources: IP: 23.144.60.0/24 IP: 2602:f597::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:81:8e:fe:51:5f:2c:dc:5f:5b:5c:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 13 08:15:05 2025 GMT Not After : Jan 16 09:15:05 2028 GMT Subject: CN=452e93c5-9f6b-46bc-8a92-d0a6d80137b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:05:f5:9b:2e:1b:47:41:56:8b:71:b5:f1: b0:e1:e1:67:2a:65:be:1b:8c:49:e9:ed:5d:7f:20: 5e:87:e2:eb:fc:3a:57:cf:4b:ad:42:e9:7e:4a:5b: bf:4c:62:4b:e1:86:bf:b4:87:03:36:37:54:22:5a: 79:94:3b:1c:da:56:25:ab:35:9e:13:c7:a2:49:a6: bc:cb:58:3e:95:29:49:d2:09:ad:f2:fb:66:51:12: be:16:e2:e7:8f:a9:0e:88:fc:49:26:2e:a2:66:3e: 07:9d:9a:c4:7b:9e:41:f4:c4:b9:d3:a7:6f:d4:e2: 9d:4e:af:fb:1a:b1:33:f8:41:ee:d5:b2:e1:f3:93: 08:d0:2c:f2:fe:e7:8b:d9:18:4e:aa:4a:44:51:0b: 40:a9:0b:79:96:bb:ca:61:83:27:3c:b1:8d:c4:5e: 81:6f:6b:9b:ad:fa:e5:b5:1c:54:0e:5a:a7:5d:ed: 59:ab:d5:64:6e:4d:14:32:f7:d8:13:8a:6e:81:93: f7:64:e3:60:65:19:5b:57:27:f4:92:59:e3:43:9b: 34:6c:ed:4a:ee:ac:f6:ea:0f:00:3e:7e:2c:62:82: 69:1b:5b:78:4f:5f:10:4e:83:ef:51:99:1d:32:d2: 20:69:47:c2:b4:e4:ff:af:3d:a9:dc:42:c7:51:1f: 67:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:81:5F:84:16:3A:89:52:26:AB:15:16:DA:78:CE:73:5B:75:41:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2/452e93c5-9f6b-46bc-8a92-d0a6d80137b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.144.60.0/24 IPv6: 2602:f597::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:92:e5:56:6a:31:90:56:2e:5c:12:fb:3b:27:29:c5:91:3c: de:71:62:12:c5:f5:be:87:07:75:6b:3f:e5:35:53:21:b5:74: b2:33:74:0b:f1:23:03:3a:21:86:02:7a:52:be:41:b6:96:e3: 13:58:0b:6e:8e:14:10:37:59:6b:da:c1:a4:94:ed:44:f3:3e: 7a:74:3f:3d:eb:5d:40:67:f8:90:88:87:bd:37:49:a3:41:7b: 90:25:42:f6:f0:08:b7:ca:4a:a7:bc:44:cb:7b:18:44:38:30: 81:ef:3e:90:ab:66:b7:f3:28:7e:8e:7e:4e:03:6e:25:9d:0d: 8d:fa:ff:de:db:be:e7:b2:d9:24:47:66:c1:be:ce:90:b0:23: a0:65:44:dc:05:88:51:08:c8:ea:b2:3f:66:af:81:d4:e2:51: ec:24:45:40:46:09:d6:e3:38:f6:f2:42:fc:40:5a:18:04:51: ae:d7:1e:86:26:36:24:37:57:9e:74:1d:8c:1b:ac:1c:5d:ec: 7e:58:51:51:58:9c:6d:c7:f7:b7:e9:da:bc:8a:40:cb:ae:e2: c3:57:b7:d7:59:52:db:e9:63:00:ba:b8:34:3e:d7:98:b5:1e: 63:26:82:b8:d5:9f:26:82:d7:2d:e7:cb:2f:b4:77:2b:7e:3f: ea:4b:dc:82 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEuBjv5RXyzcX1tcdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxMzA4MTUwNVoXDTI4MDExNjA5MTUwNVowLzEtMCsGA1UEAxMk NDUyZTkzYzUtOWY2Yi00NmJjLThhOTItZDBhNmQ4MDEzN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8wF9ZsuG0dBVotxtfGw4eFnKmW+G4xJ6e1d fyBeh+Lr/DpXz0utQul+Slu/TGJL4Ya/tIcDNjdUIlp5lDsc2lYlqzWeE8eiSaa8 y1g+lSlJ0gmt8vtmURK+FuLnj6kOiPxJJi6iZj4HnZrEe55B9MS506dv1OKdTq/7 GrEz+EHu1bLh85MI0Czy/ueL2RhOqkpEUQtAqQt5lrvKYYMnPLGNxF6Bb2ubrfrl tRxUDlqnXe1Zq9Vkbk0UMvfYE4pugZP3ZONgZRlbVyf0klnjQ5s0bO1K7qz26g8A Pn4sYoJpG1t4T18QToPvUZkdMtIgaUfCtOT/rz2p3ELHUR9n4QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFNeBX4QWOolSJqsVFtp4znNbdUEFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 NTJlOTNjNS05ZjZiLTQ2YmMtOGE5Mi1kMGE2ZDgwMTM3YjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzQ1MmU5M2M1LTlmNmItNDZiYy04 YTkyLWQwYTZkODAxMzdiMi80NTJlOTNjNS05ZjZiLTQ2YmMtOGE5Mi1kMGE2ZDgw MTM3YjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkDwwDgQCAAIwCAMGACYC9ZcAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIOS5VZqMZBWLlwS+zsnKcWRPN5xYhLF9b6HB3VrP+U1UyG1dLIzdAvxIwM6IYYC elK+QbaW4xNYC26OFBA3WWvawaSU7UTzPnp0Pz3rXUBn+JCIh703SaNBe5AlQvbw CLfKSqe8RMt7GEQ4MIHvPpCrZrfzKH6Ofk4DbiWdDY36/97bvuey2SRHZsG+zpCw I6BlRNwFiFEIyOqyP2avgdTiUewkRUBGCdbjOPbyQvxAWhgEUa7XHoYmNiQ3V550 HYwbrBxd7H5YUVFYnG3H97fp2ryKQMuu4sNXt9dZUtvpYwC6uDQ+15i1HmMmgrjV nyaC1y3nyy+0dyt+P+pL3II= -----END CERTIFICATE-----Generated at Wed Nov 5 10:12:38 2025 by rpki-client