$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer File: a8d70f86-b257-4225-9609-989938a4164f.cer (raw, json) Hash identifier: 3jXX90N/inozJCSzb4kCj0Q3AUn/aFx2Ers7fOMzIvg= Subject key identifier: 02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8169C59A8BB7327629BD2800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 07:00:06 +0000 Certificate not after: Sun 16 Jan 2028 08:00:06 +0000 Subordinate resources: IP: 23.147.44.0/24 IP: 2602:f52b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:81:69:c5:9a:8b:b7:32:76:29:bd:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 13 07:00:06 2025 GMT Not After : Jan 16 08:00:06 2028 GMT Subject: CN=a8d70f86-b257-4225-9609-989938a4164f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:27:d7:7f:1f:be:9d:4d:cd:82:2a:48:13: 7d:e0:8b:9e:5d:1b:76:87:9f:17:b7:1d:27:fb:55: 12:ec:3c:38:17:86:48:36:06:e9:90:99:de:c0:74: 80:7f:62:e1:91:e3:94:b7:f5:50:7f:5c:15:32:4c: 60:de:16:dc:3c:84:66:d3:d4:77:0f:4d:81:f6:f9: 2d:51:f1:8c:7f:ec:ce:70:03:5f:5e:ae:1e:de:a4: 42:42:5d:9b:f7:13:b5:27:1c:ef:f7:1f:fb:5a:ed: 3b:dc:83:7d:33:e8:ff:84:d3:d2:c8:36:91:e0:67: 3e:83:d2:08:35:b7:37:cc:fc:49:49:9e:41:5d:05: 72:f0:cb:c5:e3:d8:9e:f9:ba:d2:3a:d3:23:a7:25: 33:2e:72:c5:2f:cb:4c:97:28:5d:1a:99:0a:00:a9: 56:9f:d7:ff:1a:9b:20:d9:f6:fb:c2:8a:74:59:72: 4c:2a:31:f2:e1:4c:6e:3e:39:96:c8:46:92:86:b8: 8f:45:6e:c2:20:14:d7:d5:94:39:87:a1:88:1b:39: e1:88:2e:b2:7e:00:3a:dc:24:19:65:25:73:02:f5: 75:91:17:e2:ff:aa:7b:25:a8:67:47:c4:43:d6:12: 3c:ba:31:aa:ff:62:d5:6e:4d:12:9d:01:43:44:92: b2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.147.44.0/24 IPv6: 2602:f52b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:47:66:72:8d:2f:97:c1:b5:30:cc:32:f4:2d:d4:fb:d3:cb: 18:04:ca:c7:d9:16:69:04:b7:39:da:5d:d9:bb:02:6f:49:d0: b2:77:b1:a8:36:8e:d6:45:64:90:a9:e3:54:5f:14:cf:e5:69: 8a:26:d5:6e:ed:b2:b5:f5:68:58:c2:b9:32:d9:6d:7a:6a:4a: 07:a5:9c:06:64:1f:a6:01:12:4c:c0:7d:bc:a2:0b:3e:dc:7a: 82:c3:4f:0f:91:cc:98:c1:c8:e8:f6:0e:6b:c6:d5:58:92:0b: cb:42:51:3d:c7:8c:2c:c2:04:6f:af:88:5a:80:f9:b2:f2:f5: 5f:5b:90:80:ef:e1:9d:a3:95:29:5b:17:94:bd:70:a2:86:54: 9b:9e:0a:39:33:50:bd:e4:14:d9:bc:1a:e0:12:1d:1c:a9:b6: 49:d9:68:c0:76:67:62:78:57:83:73:dc:e3:b9:a4:81:d3:27: 98:fb:fe:0d:91:23:04:4f:4f:95:3a:5d:68:8b:1c:a7:aa:4d: 70:77:9b:33:ea:5d:f9:0a:32:a5:3b:ba:ce:aa:18:da:00:1b: 61:4d:cb:92:1a:13:66:d8:a4:ee:2f:3a:12:fd:4c:a8:e9:22: 23:55:77:8d:a2:98:0a:32:0c:e2:40:58:09:b8:2e:7d:c6:93: d0:b5:52:20 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEuBacWai7cydim9KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxMzA3MDAwNloXDTI4MDExNjA4MDAwNlowLzEtMCsGA1UEAxMk YThkNzBmODYtYjI1Ny00MjI1LTk2MDktOTg5OTM4YTQxNjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujUn138fvp1NzYIqSBN94IueXRt2h58Xtx0n +1US7Dw4F4ZINgbpkJnewHSAf2LhkeOUt/VQf1wVMkxg3hbcPIRm09R3D02B9vkt UfGMf+zOcANfXq4e3qRCQl2b9xO1Jxzv9x/7Wu073IN9M+j/hNPSyDaR4Gc+g9II Nbc3zPxJSZ5BXQVy8MvF49ie+brSOtMjpyUzLnLFL8tMlyhdGpkKAKlWn9f/Gpsg 2fb7wop0WXJMKjHy4UxuPjmWyEaShriPRW7CIBTX1ZQ5h6GIGznhiC6yfgA63CQZ ZSVzAvV1kRfi/6p7JahnR8RD1hI8ujGq/2LVbk0SnQFDRJKyrQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFAJvSmk3dEiWyYB5jhW9BFU6QwxKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9h OGQ3MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5MzhhNDE2NGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2E4ZDcwZjg2LWIyNTctNDIyNS05 NjA5LTk4OTkzOGE0MTY0Zi9hOGQ3MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5Mzhh NDE2NGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkywwDgQCAAIwCAMGACYC9SsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AAlHZnKNL5fBtTDMMvQt1PvTyxgEysfZFmkEtznaXdm7Am9J0LJ3sag2jtZFZJCp 41RfFM/laYom1W7tsrX1aFjCuTLZbXpqSgelnAZkH6YBEkzAfbyiCz7ceoLDTw+R zJjByOj2DmvG1ViSC8tCUT3HjCzCBG+viFqA+bLy9V9bkIDv4Z2jlSlbF5S9cKKG VJueCjkzUL3kFNm8GuASHRyptknZaMB2Z2J4V4Nz3OO5pIHTJ5j7/g2RIwRPT5U6 XWiLHKeqTXB3mzPqXfkKMqU7us6qGNoAG2FNy5IaE2bYpO4vOhL9TKjpIiNVd42i mAoyDOJAWAm4Ln3Gk9C1UiA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:33:45 2025 by rpki-client