$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700.cer File: b2c58ba9-3393-4f4c-abe1-b231a3ea2700.cer (raw, json) Hash identifier: KZZrdq83EUvM6AShbd0/ezP60jKZ6TaefuKDitfap/4= Subject key identifier: AE:12:28:05:FD:B0:9B:F5:B1:DF:DC:14:98:5A:C4:0F:07:F4:3E:85 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B9CE5B5EE1B18EED6E7B9EB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700/b2c58ba9-3393-4f4c-abe1-b231a3ea2700.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Oct 2025 03:16:38 +0000 Certificate not after: Wed 26 Jan 2028 04:16:38 +0000 Subordinate resources: IP: 23.148.20.0/24 IP: 2602:f507::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:e5:b5:ee:1b:18:ee:d6:e7:b9:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 23 03:16:38 2025 GMT Not After : Jan 26 04:16:38 2028 GMT Subject: CN=b2c58ba9-3393-4f4c-abe1-b231a3ea2700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:7c:d2:1b:8d:ab:c7:d9:04:4a:93:b3:35: ef:b9:82:89:a9:05:c3:1f:a4:02:03:1d:d8:af:c8: fc:28:9e:43:90:c9:67:43:77:ad:98:07:87:d7:5f: dd:e3:d3:01:c9:d9:0d:0e:eb:ce:77:c0:f7:90:4f: c4:87:26:72:c2:eb:65:6c:e4:67:e9:d0:01:00:60: 44:9d:9d:5a:e8:3a:a5:6d:b6:13:7d:d0:aa:d3:24: a7:5e:d2:f0:43:f1:a8:87:25:10:02:36:73:fe:69: d0:64:0e:30:41:d6:d0:21:fc:10:f8:98:ad:5c:fe: 05:cc:5d:cc:fd:c7:d6:18:07:98:eb:7f:89:ca:c6: 4f:3a:b6:d6:c2:4a:ac:09:4d:3f:e5:93:66:73:eb: 31:a4:a2:6e:36:5b:59:7c:05:bc:65:0d:eb:83:8a: e3:9b:bc:38:96:51:13:0e:c8:c5:55:24:1e:36:7b: c7:8c:be:12:5a:61:8c:22:35:5b:d9:a1:17:6a:e7: ca:18:85:cf:4f:15:1e:a3:7a:d9:f5:4b:3c:ce:d5: 13:7b:39:e1:f4:fd:c9:2b:99:d3:61:c6:76:b9:4b: 19:6a:28:13:c2:df:7b:e5:63:5e:98:c7:65:72:4c: f7:d1:f9:bc:77:ad:85:28:08:ca:0f:ad:1e:aa:bc: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:12:28:05:FD:B0:9B:F5:B1:DF:DC:14:98:5A:C4:0F:07:F4:3E:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700/b2c58ba9-3393-4f4c-abe1-b231a3ea2700.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.148.20.0/24 IPv6: 2602:f507::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:44:81:a4:e1:86:1a:d6:e6:be:5f:43:39:e7:0c:bd:2e:75: a4:8d:54:1e:44:08:1a:c5:90:38:7b:d9:11:a0:f2:9c:12:de: cd:4a:1f:cc:ab:41:98:b2:cc:e9:cd:71:0a:e8:3e:c8:f1:4d: d3:6a:f2:b0:f9:a4:f9:91:a3:fb:07:6d:47:1b:ed:4f:29:9b: a9:84:d5:c0:05:11:e9:37:ef:6e:cd:35:29:b0:e2:84:2a:08: 1b:38:1c:06:62:63:fa:74:9c:22:61:6f:09:c2:3d:d4:df:2a: 57:44:16:cd:3b:7f:ff:e7:37:5d:4f:98:4c:e9:91:1e:21:c3: 2a:ce:50:9f:d7:1d:a4:2a:30:b6:1f:d6:07:95:0d:99:48:28: c3:f9:dd:fd:30:96:0a:07:14:1a:21:aa:98:3b:32:ff:42:76: ea:5a:e8:2a:3d:50:b8:63:3d:5d:99:b1:c9:a2:47:4a:c8:d6: f3:76:1b:0b:99:4e:43:1c:e9:b0:11:be:75:f4:d7:aa:9c:f9: 6a:43:2d:02:34:e7:c2:f3:07:39:44:02:1b:35:ec:06:32:39: 33:65:27:db:eb:6c:64:9f:cb:82:39:43:f1:b1:5f:40:d7:da: 65:ec:64:68:e5:21:cf:5d:f1:61:30:15:19:b3:33:af:32:9f: 3b:b8:23:da -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEuc5bXuGxju1ue564AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyMzAzMTYzOFoXDTI4MDEyNjA0MTYzOFowLzEtMCsGA1UEAxMk YjJjNThiYTktMzM5My00ZjRjLWFiZTEtYjIzMWEzZWEyNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbl80huNq8fZBEqTszXvuYKJqQXDH6QCAx3Y r8j8KJ5DkMlnQ3etmAeH11/d49MBydkNDuvOd8D3kE/EhyZywutlbORn6dABAGBE nZ1a6DqlbbYTfdCq0ySnXtLwQ/GohyUQAjZz/mnQZA4wQdbQIfwQ+JitXP4FzF3M /cfWGAeY63+JysZPOrbWwkqsCU0/5ZNmc+sxpKJuNltZfAW8ZQ3rg4rjm7w4llET DsjFVSQeNnvHjL4SWmGMIjVb2aEXaufKGIXPTxUeo3rZ9Us8ztUTeznh9P3JK5nT YcZ2uUsZaigTwt975WNemMdlckz30fm8d62FKAjKD60eqrzY0QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFK4SKAX9sJv1sd/cFJhaxA8H9D6FMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i MmM1OGJhOS0zMzkzLTRmNGMtYWJlMS1iMjMxYTNlYTI3MDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2IyYzU4YmE5LTMzOTMtNGY0Yy1h YmUxLWIyMzFhM2VhMjcwMC9iMmM1OGJhOS0zMzkzLTRmNGMtYWJlMS1iMjMxYTNl YTI3MDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlBQwDgQCAAIwCAMGACYC9QcAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AG1EgaThhhrW5r5fQznnDL0udaSNVB5ECBrFkDh72RGg8pwS3s1KH8yrQZiyzOnN cQroPsjxTdNq8rD5pPmRo/sHbUcb7U8pm6mE1cAFEek3727NNSmw4oQqCBs4HAZi Y/p0nCJhbwnCPdTfKldEFs07f//nN11PmEzpkR4hwyrOUJ/XHaQqMLYf1geVDZlI KMP53f0wlgoHFBohqpg7Mv9Cdupa6Co9ULhjPV2ZscmiR0rI1vN2GwuZTkMc6bAR vnX016qc+WpDLQI058LzBzlEAhs17AYyOTNlJ9vrbGSfy4I5Q/GxX0DX2mXsZGjl Ic9d8WEwFRmzM68ynzu4I9o= -----END CERTIFICATE-----Generated at Wed Nov 5 00:03:47 2025 by rpki-client