$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer File: 9539fe98-d93c-4eef-8521-e7da1838ec1e.cer (raw, json) Hash identifier: 2HAoRFHOQebZ0m/rAzivh641joCWqTZxEQdd1Mf0CXg= Subject key identifier: 30:60:F3:7D:D6:9A:74:5F:72:B7:96:87:23:A1:7A:5D:BC:20:03:18 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BBCBDE254C838108AEC610780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 13:02:16 +0000 Certificate not after: Sun 06 Feb 2028 13:02:16 +0000 Subordinate resources: AS: 401091 IP: 23.178.216.0/24 IP: 2602:f8e5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:bd:e2:54:c8:38:10:8a:ec:61:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 3 13:02:16 2025 GMT Not After : Feb 6 13:02:16 2028 GMT Subject: CN=9539fe98-d93c-4eef-8521-e7da1838ec1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:52:2a:dc:e0:5a:61:cc:be:8f:9f:89:2d:ec: ae:8d:45:a7:b7:0b:85:ea:6e:70:85:a7:ec:99:98: ad:2b:be:27:9b:4b:56:66:47:af:4e:a6:1d:68:cf: 79:66:f5:f0:42:18:e8:59:00:a5:97:58:b1:6c:97: 10:51:e2:d5:51:7f:b2:f3:02:81:61:05:fa:68:d2: 53:ca:37:ec:4c:f6:dd:bb:1b:a2:55:f6:fd:7e:03: f2:f6:c7:00:26:b5:78:7e:5b:b3:5c:5a:5a:bb:44: 01:c2:03:4c:9c:a8:0a:e5:59:5a:7b:68:d9:f6:6f: 81:ad:85:a1:ed:38:35:27:67:d3:74:24:98:10:a4: 19:df:a6:d5:d9:84:2e:de:3a:cb:0b:4e:24:3f:3d: 62:f3:ae:79:ea:9d:69:d9:63:f6:ac:1d:17:04:fe: a7:ca:29:65:ab:e9:02:f7:b1:c9:f3:2f:01:14:be: 76:06:9a:d5:bb:00:56:04:31:12:18:1e:c7:b8:b3: 2d:67:50:c7:f4:0a:09:41:7a:59:53:68:ae:71:85: 9a:19:69:58:fb:f8:52:7b:d1:63:c3:a7:78:d1:cf: 07:60:e7:74:79:b1:9b:16:d1:a8:44:4b:55:36:fb: 38:c7:1f:b4:32:39:b8:e2:cd:2f:41:66:9d:8d:c4: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:60:F3:7D:D6:9A:74:5F:72:B7:96:87:23:A1:7A:5D:BC:20:03:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.178.216.0/24 IPv6: 2602:f8e5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401091 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fe:32:4e:53:e8:2e:f4:fd:0a:f9:ee:5e:ab:a0:10:d4:0d: b1:61:c2:63:9e:fe:1b:6f:4c:0c:70:aa:aa:f8:11:38:d3:9b: f2:47:7e:69:3f:10:65:3a:d4:7e:8f:b6:16:9e:41:ce:86:72: ff:4c:b0:eb:d3:99:f8:c9:a1:3b:aa:a7:0b:a2:d7:92:91:3c: 24:b6:01:eb:0b:75:24:e4:7e:36:bb:89:7d:a8:89:70:dc:4b: da:78:ec:dc:09:1b:68:37:d8:ef:96:cc:71:f6:75:25:fd:6a: f5:a3:1b:40:5e:de:70:a2:2e:e0:6d:17:4c:1c:19:21:c4:a2: 60:2f:c5:26:dc:2f:e8:86:ec:f2:fe:d2:e3:fa:91:78:33:97: 4b:c7:2e:84:ad:72:37:ca:6a:83:71:10:ad:42:cd:bc:a3:1a: 0d:cd:3a:b4:d8:71:de:5c:eb:9a:a1:71:ed:e6:05:95:71:d5: 75:ec:51:b8:3c:dd:d0:cf:1a:4b:c4:06:62:f3:d1:20:c5:4c: f0:8c:62:40:ca:a8:a1:18:c0:81:98:4f:9b:56:6f:9f:f2:4a: 02:4a:e5:e8:3b:94:02:95:c8:6c:f8:1c:a0:01:36:07:26:11: 67:8c:23:47:84:ec:76:75:6d:9a:c5:8f:c8:0a:94:64:9f:80: f8:38:cc:4f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEu8veJUyDgQiuxhB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwMzEzMDIxNloXDTI4MDIwNjEzMDIxNlowLzEtMCsGA1UEAxMk OTUzOWZlOTgtZDkzYy00ZWVmLTg1MjEtZTdkYTE4MzhlYzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlIq3OBaYcy+j5+JLeyujUWntwuF6m5whafs mZitK74nm0tWZkevTqYdaM95ZvXwQhjoWQCll1ixbJcQUeLVUX+y8wKBYQX6aNJT yjfsTPbduxuiVfb9fgPy9scAJrV4fluzXFpau0QBwgNMnKgK5Vlae2jZ9m+BrYWh 7Tg1J2fTdCSYEKQZ36bV2YQu3jrLC04kPz1i86556p1p2WP2rB0XBP6nyillq+kC 97HJ8y8BFL52BprVuwBWBDESGB7HuLMtZ1DH9AoJQXpZU2iucYWaGWlY+/hSe9Fj w6d40c8HYOd0ebGbFtGoREtVNvs4xx+0Mjm44s0vQWadjcQUlwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDBg833WmnRfcreWhyOhel28IAMYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85 NTM5ZmU5OC1kOTNjLTRlZWYtODUyMS1lN2RhMTgzOGVjMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzk1MzlmZTk4LWQ5M2MtNGVlZi04 NTIxLWU3ZGExODM4ZWMxZS85NTM5ZmU5OC1kOTNjLTRlZWYtODUyMS1lN2RhMTgz OGVjMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXstgwDgQCAAIwCAMGACYC+OUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYewzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8/jJOU+gu9P0K+e5eq6AQ1A2x YcJjnv4bb0wMcKqq+BE405vyR35pPxBlOtR+j7YWnkHOhnL/TLDr05n4yaE7qqcL oteSkTwktgHrC3Uk5H42u4l9qIlw3EvaeOzcCRtoN9jvlsxx9nUl/Wr1oxtAXt5w oi7gbRdMHBkhxKJgL8Um3C/ohuzy/tLj+pF4M5dLxy6ErXI3ymqDcRCtQs28oxoN zTq02HHeXOuaoXHt5gWVcdV17FG4PN3QzxpLxAZi89EgxUzwjGJAyqihGMCBmE+b Vm+f8koCSuXoO5QClchs+BygATYHJhFnjCNHhOx2dW2axY/ICpRkn4D4OMxP -----END CERTIFICATE-----Generated at Wed Nov 5 11:40:40 2025 by rpki-client