$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315.cer File: 5e87876c-4225-44e7-b377-9a3bf9bdb315.cer (raw, json) Hash identifier: i3YxRoci0Gx/HyiU+mPm2S+KAI/c58mIQZtjVhmKmDo= Subject key identifier: 50:6D:8A:DF:E7:77:92:83:B0:4C:78:90:23:EE:6D:45:29:44:3B:AD Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8BF287B300C87C64FDB42360 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/5e87876c-4225-44e7-b377-9a3bf9bdb315.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 01:33:44 +0000 Certificate not after: Thu 20 Jan 2028 02:33:44 +0000 Subordinate resources: AS: 402090 IP: 23.147.140.0/24 IP: 2602:f519::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:f2:87:b3:00:c8:7c:64:fd:b4:23:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 17 01:33:44 2025 GMT Not After : Jan 20 02:33:44 2028 GMT Subject: CN=5e87876c-4225-44e7-b377-9a3bf9bdb315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:27:c3:33:bc:6e:2d:d9:5a:92:9a:89:36: 1d:84:1d:ec:53:49:7a:cd:51:55:a0:53:42:3a:ef: 42:48:44:93:f1:53:6c:a6:81:04:24:8e:99:66:b3: 75:16:c0:cd:53:22:5a:0f:8d:3a:99:4f:b1:4c:e0: 86:12:94:88:ad:32:45:5c:71:f4:65:15:e9:0f:89: ab:f0:cb:c5:b6:18:be:b8:3f:c1:7f:a9:16:c5:d8: 90:ed:1a:2c:51:92:9e:ae:12:8c:0b:4d:5d:79:ba: 5d:4c:59:64:7b:17:7f:1d:f5:cd:ff:07:03:bf:87: 28:79:c3:8f:3e:d2:39:fa:68:83:1b:b5:ca:0d:1a: f7:a5:a3:ca:18:59:42:c2:6b:3f:e0:37:90:08:f0: 82:53:5a:01:05:83:a4:8d:ea:3c:9e:65:0a:bb:ab: c6:f4:8a:b8:71:e4:72:f3:5f:f5:f0:f4:1d:80:e1: 1f:cb:b6:83:a4:8f:69:56:a0:4d:9b:ad:3e:45:91: f1:0c:df:79:25:3c:60:a4:ee:43:37:4f:67:7b:7d: 9f:12:bc:a4:80:23:e0:6f:94:7f:50:20:3f:a1:c9: 68:a0:ec:f6:e3:80:25:8d:d3:24:60:12:0b:28:a5: 9e:16:78:79:eb:64:88:b4:f6:b5:ea:8e:ad:a4:c7: 60:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6D:8A:DF:E7:77:92:83:B0:4C:78:90:23:EE:6D:45:29:44:3B:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/5e87876c-4225-44e7-b377-9a3bf9bdb315.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.147.140.0/24 IPv6: 2602:f519::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402090 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9a:6d:ec:57:ff:58:aa:d7:a9:77:39:ad:8d:6d:0b:38:f4: f3:a4:9d:1e:79:23:5d:81:de:b1:2a:71:50:3a:db:cf:b8:7c: 1f:2a:d4:2c:f9:47:9b:c4:b9:6b:16:dd:0a:42:03:ea:4b:45: 26:e1:a7:ad:f6:32:f9:b8:e6:ca:81:6a:f2:8c:61:83:8a:a3: 7b:52:40:3e:27:3a:d0:c1:69:ad:26:c5:43:ea:b0:fb:8c:4a: a0:cc:d9:c9:cd:63:bb:29:55:6e:e8:26:e0:f7:f6:88:b0:b3: 3c:d7:fb:44:a8:fb:33:4c:db:f0:81:8a:ca:5f:ae:70:8c:0d: 4d:a4:9e:d7:dc:2f:60:1e:ad:5c:7a:0a:7d:c2:a6:06:95:62: 70:96:80:b3:3e:73:e7:af:97:00:e5:5a:a9:5d:f3:2e:f5:d6: 34:f5:85:c4:d5:07:f6:45:62:ba:e7:21:a0:d2:86:0d:c4:dd: bc:12:42:96:b8:f3:93:66:c3:06:52:0c:28:92:de:88:2c:47: e4:8c:b4:4a:d1:1b:a0:af:4e:6e:19:b1:b0:1e:99:26:b0:6b: 66:7b:c6:90:61:24:84:a6:4d:0f:f9:9a:52:ac:c6:8e:77:44: 72:f6:68:a7:3b:cc:03:05:45:27:8f:3a:1b:0c:6b:9b:b0:f3: d9:7d:fe:de -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEuL8oezAMh8ZP20I2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNzAxMzM0NFoXDTI4MDEyMDAyMzM0NFowLzEtMCsGA1UEAxMk NWU4Nzg3NmMtNDIyNS00NGU3LWIzNzctOWEzYmY5YmRiMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufMnwzO8bi3ZWpKaiTYdhB3sU0l6zVFVoFNC Ou9CSEST8VNspoEEJI6ZZrN1FsDNUyJaD406mU+xTOCGEpSIrTJFXHH0ZRXpD4mr 8MvFthi+uD/Bf6kWxdiQ7RosUZKerhKMC01debpdTFlkexd/HfXN/wcDv4coecOP PtI5+miDG7XKDRr3paPKGFlCwms/4DeQCPCCU1oBBYOkjeo8nmUKu6vG9Iq4ceRy 81/18PQdgOEfy7aDpI9pVqBNm60+RZHxDN95JTxgpO5DN09ne32fErykgCPgb5R/ UCA/oclooOz244AljdMkYBILKKWeFnh562SItPa16o6tpMdgtQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFBtit/nd5KDsEx4kCPubUUpRDutMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 ZTg3ODc2Yy00MjI1LTQ0ZTctYjM3Ny05YTNiZjliZGIzMTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzVlODc4NzZjLTQyMjUtNDRlNy1i Mzc3LTlhM2JmOWJkYjMxNS81ZTg3ODc2Yy00MjI1LTQ0ZTctYjM3Ny05YTNiZjli ZGIzMTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXk4wwDgQCAAIwCAMGACYC9RkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiqjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1mm3sV/9YqtepdzmtjW0LOPTz pJ0eeSNdgd6xKnFQOtvPuHwfKtQs+UebxLlrFt0KQgPqS0Um4aet9jL5uObKgWry jGGDiqN7UkA+JzrQwWmtJsVD6rD7jEqgzNnJzWO7KVVu6Cbg9/aIsLM81/tEqPsz TNvwgYrKX65wjA1NpJ7X3C9gHq1cegp9wqYGlWJwloCzPnPnr5cA5VqpXfMu9dY0 9YXE1Qf2RWK65yGg0oYNxN28EkKWuPOTZsMGUgwokt6ILEfkjLRK0Rugr05uGbGw HpkmsGtme8aQYSSEpk0P+ZpSrMaOd0Ry9minO8wDBUUnjzobDGubsPPZff7e -----END CERTIFICATE-----Generated at Wed Nov 5 00:03:40 2025 by rpki-client