$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer File: 4625cd05-e90e-4f91-9b34-2899122cfc5f.cer (raw, json) Hash identifier: fmC4Xk4wRTmbyuCOSkWvpsQ+7H3dGtkYifpjNIikeXc= Subject key identifier: 52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B963CEBEBA5BE0329E51BC600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Oct 2025 18:01:42 +0000 Certificate not after: Sun 23 Jan 2028 19:01:42 +0000 Subordinate resources: IP: 23.144.92.0/24 IP: 2602:f58c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:3c:eb:eb:a5:be:03:29:e5:1b:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 20 18:01:42 2025 GMT Not After : Jan 23 19:01:42 2028 GMT Subject: CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3b:71:d2:17:63:82:b5:dc:dc:8d:64:0e:fb: 6b:0e:26:55:ff:89:f9:a4:5d:53:ac:3c:54:b8:6b: 6f:3e:cd:c0:db:c2:01:4a:5e:e3:e2:3a:f4:5e:7d: f1:ed:50:7e:1c:84:26:70:e4:50:ff:9b:02:0d:77: 80:a6:68:21:a3:b6:db:ed:67:1b:d6:c1:d3:5d:a0: ac:ff:d9:7b:dd:0b:62:9d:e8:0b:3c:cc:eb:ea:ab: ec:71:d4:ce:34:5c:35:4e:c3:d6:ee:65:8c:2a:0c: f7:ca:4c:ea:36:e3:de:15:3f:4d:fc:a2:91:14:ef: 6a:da:b2:9d:bb:f5:a3:32:b1:f7:d3:98:5d:ad:ed: 04:70:30:af:9b:f9:21:47:0c:84:43:ca:cc:88:88: cc:2c:cd:0c:68:d5:21:10:aa:37:9c:15:15:5d:8d: 45:3c:4c:a6:c4:70:16:b4:fc:8b:85:4e:a9:c5:0b: d9:da:d5:78:3a:70:73:0d:62:a7:03:ee:9f:e8:f2: 15:fb:e3:f3:cc:6f:6a:fa:5f:d9:ac:40:07:30:7e: 35:18:e8:fa:71:b6:87:20:b0:b5:d3:2b:1e:75:a3: 3a:56:30:78:d9:d2:03:3b:eb:f8:f6:fe:74:f8:a0: e6:6e:2f:56:94:09:5a:53:3b:c8:43:51:70:6f:5b: 82:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.144.92.0/24 IPv6: 2602:f58c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:8d:dd:7c:a4:ee:15:93:1b:01:28:82:db:59:40:1c:ce:51: 0e:98:7b:a7:59:00:a1:bf:1b:ae:45:73:db:6c:db:17:d1:78: fd:4b:e7:4c:50:6f:4d:e4:b2:c1:38:89:48:ed:a4:ca:05:b3: 6b:81:db:e6:4b:07:f2:59:8a:de:53:d8:2f:08:ed:0d:a6:57: 1c:27:0e:93:90:22:ae:4e:66:80:c5:33:1e:27:e0:14:d5:fd: 5e:84:df:b5:80:f9:50:e5:20:58:6b:1d:88:a4:e6:54:d6:80: a0:dc:21:91:ff:10:3d:56:99:d3:a2:90:69:32:f3:64:cb:56: 66:d0:ec:e5:bf:a0:5a:8b:2a:8d:a6:16:f1:06:ed:a3:da:09: fc:bb:77:94:f4:01:12:bb:f2:ca:9c:e7:45:bb:ed:c1:de:68: 35:40:aa:17:51:84:3b:37:5e:dd:e4:4d:9d:0e:5d:f4:5d:01: fb:1f:8b:34:ea:aa:0d:3b:58:eb:b5:97:c2:a8:fa:0f:a3:d1: e8:cf:e7:97:af:ba:bc:44:03:a8:f1:0b:23:e9:0a:a5:6d:79: ee:80:b4:73:a3:1f:1b:b8:40:cb:2a:9e:12:50:34:05:33:6b: 91:53:c8:82:bc:9c:fc:fa:27:30:07:13:24:05:71:2a:ac:cf: 5f:00:4f:ce -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEuWPOvrpb4DKeUbxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyMDE4MDE0MloXDTI4MDEyMzE5MDE0MlowLzEtMCsGA1UEAxMk NDYyNWNkMDUtZTkwZS00ZjkxLTliMzQtMjg5OTEyMmNmYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjtx0hdjgrXc3I1kDvtrDiZV/4n5pF1TrDxU uGtvPs3A28IBSl7j4jr0Xn3x7VB+HIQmcORQ/5sCDXeApmgho7bb7Wcb1sHTXaCs /9l73QtinegLPMzr6qvscdTONFw1TsPW7mWMKgz3ykzqNuPeFT9N/KKRFO9q2rKd u/WjMrH305hdre0EcDCvm/khRwyEQ8rMiIjMLM0MaNUhEKo3nBUVXY1FPEymxHAW tPyLhU6pxQvZ2tV4OnBzDWKnA+6f6PIV++PzzG9q+l/ZrEAHMH41GOj6cbaHILC1 0ysedaM6VjB42dIDO+v49v50+KDmbi9WlAlaUzvIQ1Fwb1uCOQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFFIXnnFsdX4dcwXvFr1NViHKImNaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 NjI1Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5MTIyY2ZjNWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzQ2MjVjZDA1LWU5MGUtNGY5MS05 YjM0LTI4OTkxMjJjZmM1Zi80NjI1Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5MTIy Y2ZjNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkFwwDgQCAAIwCAMGACYC9YwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACmN3Xyk7hWTGwEogttZQBzOUQ6Ye6dZAKG/G65Fc9ts2xfReP1L50xQb03kssE4 iUjtpMoFs2uB2+ZLB/JZit5T2C8I7Q2mVxwnDpOQIq5OZoDFMx4n4BTV/V6E37WA +VDlIFhrHYik5lTWgKDcIZH/ED1WmdOikGky82TLVmbQ7OW/oFqLKo2mFvEG7aPa Cfy7d5T0ARK78sqc50W77cHeaDVAqhdRhDs3Xt3kTZ0OXfRdAfsfizTqqg07WOu1 l8Ko+g+j0ejP55evurxEA6jxCyPpCqVtee6AtHOjHxu4QMsqnhJQNAUza5FTyIK8 nPz6JzAHEyQFcSqsz18AT84= -----END CERTIFICATE-----Generated at Wed Nov 5 09:46:13 2025 by rpki-client