$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer File: a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer (raw, json) Hash identifier: txV5uzcu4qTOn4mZV7QD5+0FZySaioZsrxBoOEUce7A= Subject key identifier: 09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BB5D40F3C1B3C82D7E4941880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 01 Nov 2025 01:36:17 +0000 Certificate not after: Fri 04 Feb 2028 02:36:17 +0000 Subordinate resources: AS: 30381 IP: 23.148.236.0/24 IP: 2602:f4e4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:d4:0f:3c:1b:3c:82:d7:e4:94:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 1 01:36:17 2025 GMT Not After : Feb 4 02:36:17 2028 GMT Subject: CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:58:32:f2:51:1b:1c:8a:44:43:73:ad:4c:39: a9:24:8a:f3:c6:ef:26:53:24:b6:93:ca:8b:c4:8e: 25:98:49:d9:df:4b:6f:c4:b6:05:75:3d:9d:08:5d: be:6b:5d:b0:50:f1:57:80:cb:9e:b5:ce:b2:28:65: bf:a8:69:06:06:a7:f8:6c:6a:5f:d0:7e:09:70:d8: 1c:2b:9b:57:d1:27:1a:f2:4a:cc:57:b7:32:e1:6d: 8f:54:cc:e5:42:6f:30:dc:7c:e5:70:0e:c0:1f:9b: 85:12:cc:06:db:c7:d4:2b:93:9e:a4:7c:73:07:7a: 94:18:27:f6:f1:f0:02:52:92:7e:3a:ee:e6:77:5d: 8d:13:11:0e:79:1a:04:9b:c6:b1:bb:64:c2:68:74: 48:98:27:5c:39:0c:ab:95:37:7f:c6:ae:ac:24:71: 13:bf:74:09:4a:b9:1a:ae:3a:a9:14:1e:de:1a:39: a8:96:79:51:9b:1e:14:19:64:90:3a:8b:ae:0c:5f: 8a:18:93:37:37:90:cd:7c:0e:e4:db:f1:27:aa:88: b8:65:43:07:96:5a:54:cd:fe:6c:bc:b3:c1:03:df: 73:bb:5e:97:37:63:53:eb:d7:06:1a:b9:f4:89:9a: 30:22:d2:ac:a6:96:99:f5:54:d2:00:23:24:a9:5a: 3b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.148.236.0/24 IPv6: 2602:f4e4::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30381 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:26:4e:83:dc:41:27:e4:14:a6:cd:28:54:e6:a5:e8:36:3e: 7a:da:8a:35:58:3a:94:91:05:75:f5:ab:eb:bf:08:aa:db:0f: 07:6c:7e:db:06:4f:e5:b3:db:a4:9d:52:e5:06:44:c6:20:cd: a5:cb:0e:76:e9:41:83:02:63:f4:a6:42:a2:27:8a:42:4f:32: fd:b9:d6:d8:29:30:2b:18:91:d2:6d:26:23:f1:0a:e6:2b:a0: ac:58:26:59:08:d4:96:8b:d5:92:88:90:da:20:c4:31:64:29: d5:f5:d5:0f:af:a5:37:6b:a2:0d:b1:ca:01:66:8c:ce:dc:83: b3:1a:09:2b:a5:6d:f7:97:b1:b0:07:98:7d:e3:18:63:8b:e8: b9:76:71:54:32:c4:ec:9e:4d:d9:10:c9:65:f8:36:ce:3e:6b: e6:01:8a:f2:19:7f:93:d1:5f:6f:bc:69:ef:ec:9d:26:1b:61: 98:a5:25:25:dc:b8:fb:06:d8:00:69:52:37:1f:f3:e3:56:03: be:89:be:59:96:fa:f8:8b:5c:0d:20:0e:5c:63:cc:78:12:eb: 66:aa:e4:5d:37:49:53:7d:4c:5c:0e:d3:e0:21:90:b5:c1:32: 40:0c:41:98:77:87:8f:7c:60:5c:49:ba:1b:52:70:ec:fb:49: 7f:c6:21:97 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEu11A88GzyC1+SUGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwMTAxMzYxN1oXDTI4MDIwNDAyMzYxN1owLzEtMCsGA1UEAxMk YTRmOWM2YjgtMzk0NC00MjJiLThjOWMtMmNlNDVjOWQwMzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVgy8lEbHIpEQ3OtTDmpJIrzxu8mUyS2k8qL xI4lmEnZ30tvxLYFdT2dCF2+a12wUPFXgMuetc6yKGW/qGkGBqf4bGpf0H4JcNgc K5tX0Sca8krMV7cy4W2PVMzlQm8w3HzlcA7AH5uFEswG28fUK5OepHxzB3qUGCf2 8fACUpJ+Ou7md12NExEOeRoEm8axu2TCaHRImCdcOQyrlTd/xq6sJHETv3QJSrka rjqpFB7eGjmolnlRmx4UGWSQOouuDF+KGJM3N5DNfA7k2/Enqoi4ZUMHllpUzf5s vLPBA99zu16XN2NT69cGGrn0iZowItKsppaZ9VTSACMkqVo7kQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAlGioVH7tAGM9ZAAumaaR26EVEtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h NGY5YzZiOC0zOTQ0LTQyMmItOGM5Yy0yY2U0NWM5ZDAzOGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2E0ZjljNmI4LTM5NDQtNDIyYi04 YzljLTJjZTQ1YzlkMDM4ZC9hNGY5YzZiOC0zOTQ0LTQyMmItOGM5Yy0yY2U0NWM5 ZDAzOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlOwwDgQCAAIwCAMGACYC9OQAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnatMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAComToPcQSfkFKbNKFTmpeg2Pnra ijVYOpSRBXX1q+u/CKrbDwdsftsGT+Wz26SdUuUGRMYgzaXLDnbpQYMCY/SmQqIn ikJPMv251tgpMCsYkdJtJiPxCuYroKxYJlkI1JaL1ZKIkNogxDFkKdX11Q+vpTdr og2xygFmjM7cg7MaCSulbfeXsbAHmH3jGGOL6Ll2cVQyxOyeTdkQyWX4Ns4+a+YB ivIZf5PRX2+8ae/snSYbYZilJSXcuPsG2ABpUjcf8+NWA76JvlmW+viLXA0gDlxj zHgS62aq5F03SVN9TFwO0+AhkLXBMkAMQZh3h498YFxJuhtScOz7SX/GIZc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:41:36 2025 by rpki-client