$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.cer File: 6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.cer (raw, json) Hash identifier: y38tURPpkuF9qu5mVBXCFESoje4motiSPK7rpH6oocE= Subject key identifier: FC:99:D6:C4:97:A8:48:B2:94:1E:9B:83:88:19:F8:EE:02:96:42:85 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BB42755E06007707B7F23A500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Oct 2025 11:12:28 +0000 Certificate not after: Thu 03 Feb 2028 12:12:28 +0000 Subordinate resources: IP: 23.148.76.0/24 IP: 2602:f4f7::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:27:55:e0:60:07:70:7b:7f:23:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 31 11:12:28 2025 GMT Not After : Feb 3 12:12:28 2028 GMT Subject: CN=6d7a15c9-bd4b-4b40-8bd0-21493b541c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:a9:3c:4e:b2:70:e3:e6:b2:ab:79:e9:86: c8:d9:c1:87:ee:a6:1d:d7:39:f5:bd:01:a3:d2:5a: d7:45:f5:0e:f8:3f:0f:14:f9:d6:b9:4f:60:5d:f3: 41:f7:63:1d:53:c6:b6:9a:8f:f9:a3:69:62:07:e7: d3:4a:ce:71:65:b6:19:92:f5:90:b1:f3:24:7c:bc: 3e:fa:8d:60:d5:ae:3d:7f:fa:db:96:46:7e:e9:8c: 46:63:49:89:96:79:08:ad:f9:99:b1:0e:fc:01:3d: cb:c2:b7:c4:95:37:c0:4d:2f:4c:02:d0:52:8f:b1: 94:23:73:09:b7:5a:20:6b:01:db:fe:ca:cc:d2:76: 05:e9:5b:db:0b:e6:1f:7e:67:fe:2d:42:07:15:20: 2b:6f:fc:cb:35:e2:71:8d:92:08:60:ab:02:f1:c0: 36:83:ba:72:82:c9:b5:19:b3:60:bf:76:eb:ea:13: e0:28:d8:c9:c2:30:49:8e:0d:e3:5e:95:0a:d7:72: f6:e7:c5:b4:71:12:7d:94:06:0b:86:53:7c:b1:46: a2:e5:af:94:82:4f:49:28:8d:fd:42:5a:e0:78:15: 95:b4:dc:a9:ef:83:c0:8f:90:6a:8d:85:83:e2:ca: 1b:4f:7d:ab:fd:7f:23:d7:67:44:93:f8:85:90:01: 70:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:99:D6:C4:97:A8:48:B2:94:1E:9B:83:88:19:F8:EE:02:96:42:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.148.76.0/24 IPv6: 2602:f4f7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:7f:09:17:b7:89:5a:96:9a:de:6e:6f:7a:e6:19:0a:28:95: 78:5f:52:d1:8d:41:55:3c:c2:de:6a:64:40:38:4f:a3:90:cf: 50:75:6e:01:f4:fa:d5:17:00:52:10:f5:02:3d:88:20:97:9b: 84:9a:5f:b7:56:48:cf:06:e2:be:e5:22:1f:63:10:f8:fb:0f: 3f:35:31:0a:9b:ab:07:92:d6:ca:07:af:5e:20:18:dd:51:a6: ee:8c:1d:bc:9c:a9:ff:35:8f:94:92:37:5e:b6:84:90:fd:45: 40:2f:64:49:95:a9:78:56:58:dc:69:94:6b:12:65:6d:e6:6e: f5:dc:c8:82:d1:7d:3f:a5:b3:25:cb:af:e1:b2:ed:49:19:1d: 26:5a:d0:98:ee:e6:33:0f:5c:d1:47:16:7d:e8:a6:a1:1e:f8: ba:aa:f8:e0:3a:77:71:58:59:9d:8c:d5:6a:77:4c:76:34:d7: ae:eb:ff:c6:98:78:54:1a:4c:bf:5b:44:05:a2:a7:63:3b:0b: 6d:d9:3a:7d:40:f1:fc:8a:27:92:2a:7a:6d:ba:a4:a8:b0:c1: 1b:b6:f6:3f:ad:88:df:28:fd:f6:50:b4:76:42:cd:e0:c9:01: 73:f2:5a:eb:90:cd:87:ae:b6:67:7b:2a:f8:c5:7d:5f:f1:86: f6:90:2c:c3 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEu0J1XgYAdwe38jpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAzMTExMTIyOFoXDTI4MDIwMzEyMTIyOFowLzEtMCsGA1UEAxMk NmQ3YTE1YzktYmQ0Yi00YjQwLThiZDAtMjE0OTNiNTQxYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8SpPE6ycOPmsqt56YbI2cGH7qYd1zn1vQGj 0lrXRfUO+D8PFPnWuU9gXfNB92MdU8a2mo/5o2liB+fTSs5xZbYZkvWQsfMkfLw+ +o1g1a49f/rblkZ+6YxGY0mJlnkIrfmZsQ78AT3LwrfElTfATS9MAtBSj7GUI3MJ t1ogawHb/srM0nYF6VvbC+Yffmf+LUIHFSArb/zLNeJxjZIIYKsC8cA2g7pygsm1 GbNgv3br6hPgKNjJwjBJjg3jXpUK13L258W0cRJ9lAYLhlN8sUai5a+Ugk9JKI39 QlrgeBWVtNyp74PAj5BqjYWD4sobT32r/X8j12dEk/iFkAFwXwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFPyZ1sSXqEiylB6bg4gZ+O4ClkKFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82 ZDdhMTVjOS1iZDRiLTRiNDAtOGJkMC0yMTQ5M2I1NDFjMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzZkN2ExNWM5LWJkNGItNGI0MC04 YmQwLTIxNDkzYjU0MWMwZC82ZDdhMTVjOS1iZDRiLTRiNDAtOGJkMC0yMTQ5M2I1 NDFjMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlEwwDgQCAAIwCAMGACYC9PcAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABJ/CRe3iVqWmt5ub3rmGQoolXhfUtGNQVU8wt5qZEA4T6OQz1B1bgH0+tUXAFIQ 9QI9iCCXm4SaX7dWSM8G4r7lIh9jEPj7Dz81MQqbqweS1soHr14gGN1Rpu6MHbyc qf81j5SSN162hJD9RUAvZEmVqXhWWNxplGsSZW3mbvXcyILRfT+lsyXLr+Gy7UkZ HSZa0Jju5jMPXNFHFn3opqEe+Lqq+OA6d3FYWZ2M1Wp3THY0167r/8aYeFQaTL9b RAWip2M7C23ZOn1A8fyKJ5Iqem26pKiwwRu29j+tiN8o/fZQtHZCzeDJAXPyWuuQ zYeutmd7KvjFfV/xhvaQLMM= -----END CERTIFICATE-----Generated at Wed Nov 5 03:22:15 2025 by rpki-client