$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer File: 5a154205-b480-44eb-8ce6-252aa97d28bd.cer (raw, json) Hash identifier: WNjuyZK/Nu2XATcDTbVklbpnIWB8hhaBe2qpncRcna0= Subject key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BAF6850A82828E6124BC30740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Oct 2025 18:24:21 +0000 Certificate not after: Sun 30 Jan 2028 14:18:32 +0000 Subordinate resources: AS: 401739 IP: 23.226.48.0/20 IP: 23.235.160.0/19 IP: 23.248.192.0/18 IP: 43.225.124.0/22 IP: 43.229.112.0/22 IP: 43.240.236.0/22 IP: 43.243.188.0/22 IP: 45.114.104.0/22 IP: 103.37.0.0/22 IP: 103.39.16.0/22 IP: 103.44.88.0/22 IP: 103.48.132.0/22 IP: 103.54.60.0/22 IP: 103.199.100.0/22 IP: 137.59.16.0/22 IP: 2604:1420::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:68:50:a8:28:28:e6:12:4b:c3:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 29 18:24:21 2025 GMT Not After : Jan 30 14:18:32 2028 GMT Subject: CN=5a154205-b480-44eb-8ce6-252aa97d28bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:4a:b5:f0:78:53:e5:b7:88:d8:04:38:93: 68:5d:de:a8:e4:9d:39:1d:1f:00:9c:1e:c4:3b:23: b7:6a:80:2e:2a:23:bd:20:4f:10:79:ec:8e:98:1c: 22:14:bd:89:96:ff:d3:51:0f:09:73:e8:ca:39:a0: ca:c7:c1:ed:9c:10:95:d7:92:44:37:45:81:d1:99: e4:5f:32:3a:79:1b:1b:02:92:f2:db:37:1f:b9:8d: ff:00:c0:8b:85:17:cd:38:62:c9:b1:7b:a0:94:3f: 1d:dd:fd:0f:9d:56:5d:69:4d:4f:92:0d:2f:62:11: df:79:91:14:14:7c:02:ce:35:be:ce:80:c1:c7:7e: a3:26:8d:b7:0c:66:ec:ba:6a:7b:d1:98:a6:39:73: 4e:49:22:74:04:8a:f0:98:33:e1:64:05:20:32:34: 38:82:8e:99:d7:a3:80:aa:36:d1:03:3c:d1:b5:c3: a9:81:22:40:6f:8b:f6:cd:c1:0d:7c:47:0a:41:b7: 25:28:da:cf:a4:1c:bc:4d:91:fb:cf:83:3d:d4:56: a7:1f:f9:c7:91:65:48:22:4a:36:90:57:de:63:ae: 66:82:71:33:8e:b8:ab:2b:37:2e:8a:3e:fa:d9:d8: 18:1e:35:55:e9:86:f1:3c:ff:83:10:81:75:4b:0d: d5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.226.48.0/20 23.235.160.0/19 23.248.192.0/18 43.225.124.0/22 43.229.112.0/22 43.240.236.0/22 43.243.188.0/22 45.114.104.0/22 103.37.0.0/22 103.39.16.0/22 103.44.88.0/22 103.48.132.0/22 103.54.60.0/22 103.199.100.0/22 137.59.16.0/22 IPv6: 2604:1420::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401739 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:dd:82:ee:11:1a:1b:46:38:b2:00:c9:1d:d5:25:bb:c0:aa: db:6d:1b:e5:82:f9:54:a1:27:c6:bc:94:4d:e5:1c:58:fa:3b: f3:9f:29:fa:ff:5c:5c:40:bc:ac:84:9c:94:63:1b:50:6d:25: 74:7a:90:fb:a4:48:b8:ed:c0:20:98:b0:22:95:6d:40:48:61: 2b:24:f9:bb:4b:bf:70:fa:b3:d1:bc:38:e1:78:8c:af:de:30: 73:5e:16:d3:ac:8c:8a:15:4c:70:fc:a0:98:33:9b:e8:b7:b0: 0a:ca:e0:be:9d:c4:5c:72:7d:cc:75:b4:58:35:4f:de:17:75: b0:02:db:c2:7b:e4:4c:32:cf:da:84:21:f3:eb:45:25:5a:85: 9e:7c:3d:38:f0:79:bd:d7:46:c7:25:7e:3f:19:90:62:80:5b: 1f:c5:5e:3b:ee:47:f9:ca:db:0b:1f:cf:18:44:0c:72:2c:e0: 28:44:d1:2a:b6:4d:68:f5:79:07:35:cc:ae:eb:c7:35:88:6c: 7d:c7:7e:de:ff:14:ab:5f:e9:57:88:79:d8:64:2e:30:e0:49: 5d:b8:2e:6d:99:a5:b6:56:31:b8:94:4f:01:3c:a3:35:92:77: 88:0d:53:88:75:d5:aa:e0:d6:08:d6:f6:62:57:8d:f0:e3:88: 00:3e:e7:a2 -----BEGIN CERTIFICATE----- MIIHbTCCBlWgAwIBAgIUAQ0Mn0MoWEuvaFCoKCjmEkvDB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyOTE4MjQyMVoXDTI4MDEzMDE0MTgzMlowLzEtMCsGA1UEAxMk NWExNTQyMDUtYjQ4MC00NGViLThjZTYtMjUyYWE5N2QyOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDJKtfB4U+W3iNgEOJNoXd6o5J05HR8AnB7E OyO3aoAuKiO9IE8QeeyOmBwiFL2Jlv/TUQ8Jc+jKOaDKx8HtnBCV15JEN0WB0Znk XzI6eRsbApLy2zcfuY3/AMCLhRfNOGLJsXuglD8d3f0PnVZdaU1Pkg0vYhHfeZEU FHwCzjW+zoDBx36jJo23DGbsump70ZimOXNOSSJ0BIrwmDPhZAUgMjQ4go6Z16OA qjbRAzzRtcOpgSJAb4v2zcENfEcKQbclKNrPpBy8TZH7z4M91FanH/nHkWVIIko2 kFfeY65mgnEzjrirKzcuij762dgYHjVV6YbxPP+DEIF1Sw3VXwIDAQABo4IEfzCC BHswHQYDVR0OBBYEFGdIx8IoDiXE/+m8+yUrG7qNL1PFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 YTE1NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJhYTk3ZDI4YmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzVhMTU0MjA1LWI0ODAtNDRlYi04 Y2U2LTI1MmFhOTdkMjhiZC81YTE1NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJhYTk3 ZDI4YmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwgYIGCCsGAQUF BwEHAQH/BHMwcTBgBAIAATBaAwQEF+IwAwQFF+ugAwQGF/jAAwQCK+F8AwQCK+Vw AwQCK/DsAwQCK/O8AwQCLXJoAwQCZyUAAwQCZycQAwQCZyxYAwQCZzCEAwQCZzY8 AwQCZ8dkAwQCiTsQMA0EAgACMAcDBQAmBBQgMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwYhSzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBF3YLuERobRjiyAMkd1SW7wKrbbRvlgvlUoSfGvJRN 5RxY+jvznyn6/1xcQLyshJyUYxtQbSV0epD7pEi47cAgmLAilW1ASGErJPm7S79w +rPRvDjheIyv3jBzXhbTrIyKFUxw/KCYM5vot7AKyuC+ncRccn3MdbRYNU/eF3Ww AtvCe+RMMs/ahCHz60UlWoWefD048Hm910bHJX4/GZBigFsfxV477kf5ytsLH88Y RAxyLOAoRNEqtk1o9XkHNcyu68c1iGx9x37e/xSrX+lXiHnYZC4w4ElduC5tmaW2 VjG4lE8BPKM1kneIDVOIddWq4NYI1vZiV43w44gAPuei -----END CERTIFICATE-----Generated at Wed Nov 5 00:02:48 2025 by rpki-client