$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer File: 74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer (raw, json) Hash identifier: o661XeBV0YZT0SStdGWctUBe3BSKkDp5rWxlNmFusxU= Subject key identifier: D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BA8759CB3B7F368AD1716E980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Oct 2025 06:40:29 +0000 Certificate not after: Sun 30 Jan 2028 07:40:29 +0000 Subordinate resources: AS: 23506 -- 23507 IP: 23.133.204.0/23 IP: 2602:f704::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a8:75:9c:b3:b7:f3:68:ad:17:16:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 27 06:40:29 2025 GMT Not After : Jan 30 07:40:29 2028 GMT Subject: CN=74c5eaa7-78bb-4cca-835a-0df812ff7d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:1d:85:47:fb:19:cb:84:89:9f:1f:bc:26: 82:ca:e5:2b:d8:d3:a4:52:19:7c:4a:70:a5:1a:86: 0b:37:4f:31:8a:ea:68:2e:1b:50:b6:df:88:43:54: dc:ae:ac:db:82:a6:09:ae:f9:bd:88:ba:e5:79:db: 65:a1:60:06:fe:9b:84:88:da:d5:40:a4:c3:b9:19: bd:b5:4c:65:32:3b:75:db:a5:ce:e9:23:a6:f8:f1: fc:9d:5f:9f:f9:d6:b1:06:13:87:e9:03:06:d3:bd: 68:2f:81:ce:3f:e3:dd:88:23:58:26:4a:d1:31:4d: e4:5a:61:d0:bc:03:7b:6e:dd:47:c8:3d:d1:05:f5: 87:38:89:bb:29:29:cd:a8:c6:5b:ba:0f:29:8b:d7: dc:2e:16:82:77:9a:ee:4f:56:de:dd:8f:88:f6:8c: 7e:e2:2f:bf:a6:58:87:e6:67:d4:ab:64:56:75:eb: da:9f:36:7c:a0:c6:e8:80:1f:d8:be:97:a2:07:8b: 78:d3:f6:cf:38:6d:cb:5e:cc:04:93:50:a3:c5:7c: be:38:9a:fc:bf:5b:34:fb:70:bf:8c:f2:f3:4a:f7: ea:33:cc:27:e8:6c:0a:3b:92:39:91:e2:17:bb:12: 8c:67:95:31:7b:eb:38:a9:55:25:36:a9:a9:1c:6c: fc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.133.204.0/23 IPv6: 2602:f704::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23506-23507 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b3:cb:81:fa:e5:d3:5a:3f:ea:79:7b:ae:2c:f0:72:84:fe: 4b:8a:b7:33:59:8f:30:f9:f0:7e:b9:ce:3f:2b:5a:f4:d5:0d: b4:5f:ff:61:29:63:35:e3:20:77:e7:b3:0c:41:5b:cc:3c:e9: 79:f4:bf:2e:55:21:f0:31:25:79:ab:1b:24:d0:5d:a9:1c:4c: 2b:31:bd:cf:66:eb:fd:e1:5c:4c:b8:9c:39:35:7e:7f:6b:f4: 10:98:28:02:4f:ba:a6:c3:59:68:54:6f:31:e6:d4:68:a1:6a: 51:c2:1b:54:ee:c9:d8:e5:90:e9:cf:4f:54:52:3c:ea:5c:e8: 12:a7:43:0e:5c:91:ce:5b:bf:75:70:0f:9d:7c:51:9d:32:23: f7:e0:c8:6a:c2:bd:e5:f7:cf:19:05:7f:c4:c3:7e:27:fc:03: 70:32:89:59:8b:2c:df:a3:1b:a0:5d:82:49:19:8b:b8:5f:03: 08:af:c3:ce:b2:50:85:8b:08:db:1e:d7:c5:a8:6b:b0:aa:23: e9:9f:f6:1e:69:0d:ac:11:46:25:c5:8a:ce:7b:5d:82:49:33: 41:44:19:13:a2:f8:1d:ff:5c:c1:f0:1c:6b:5c:ae:b2:0f:35: 86:2b:4a:fb:8a:9b:63:52:42:5a:57:4e:d2:bd:be:76:c3:3f: b9:2f:b9:29 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEuodZyzt/NorRcW6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyNzA2NDAyOVoXDTI4MDEzMDA3NDAyOVowLzEtMCsGA1UEAxMk NzRjNWVhYTctNzhiYi00Y2NhLTgzNWEtMGRmODEyZmY3ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigsdhUf7GcuEiZ8fvCaCyuUr2NOkUhl8SnCl GoYLN08xiupoLhtQtt+IQ1TcrqzbgqYJrvm9iLrledtloWAG/puEiNrVQKTDuRm9 tUxlMjt126XO6SOm+PH8nV+f+daxBhOH6QMG071oL4HOP+PdiCNYJkrRMU3kWmHQ vAN7bt1HyD3RBfWHOIm7KSnNqMZbug8pi9fcLhaCd5ruT1be3Y+I9ox+4i+/pliH 5mfUq2RWdevanzZ8oMbogB/YvpeiB4t40/bPOG3LXswEk1CjxXy+OJr8v1s0+3C/ jPLzSvfqM8wn6GwKO5I5keIXuxKMZ5Uxe+s4qVUlNqmpHGz8GwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFNJFylSD96rDNYkQssEUnlwuYdPTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83 NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0wZGY4MTJmZjdkODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzc0YzVlYWE3LTc4YmItNGNjYS04 MzVhLTBkZjgxMmZmN2Q4Ny83NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0wZGY4MTJm ZjdkODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAEXhcwwDgQCAAIwCAMGBCYC9wQAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAowCAICW9ICAlvTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFmzy4H65dNaP+p5e64s 8HKE/kuKtzNZjzD58H65zj8rWvTVDbRf/2EpYzXjIHfnswxBW8w86Xn0vy5VIfAx JXmrGyTQXakcTCsxvc9m6/3hXEy4nDk1fn9r9BCYKAJPuqbDWWhUbzHm1GihalHC G1TuydjlkOnPT1RSPOpc6BKnQw5ckc5bv3VwD518UZ0yI/fgyGrCveX3zxkFf8TD fif8A3AyiVmLLN+jG6BdgkkZi7hfAwivw86yUIWLCNse18Woa7CqI+mf9h5pDawR RiXFis57XYJJM0FEGROi+B3/XMHwHGtcrrIPNYYrSvuKm2NSQlpXTtK9vnbDP7kv uSk= -----END CERTIFICATE-----Generated at Wed Nov 5 09:35:21 2025 by rpki-client