$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f.cer File: c74e641d-a8b6-48e3-9084-066627b0310f.cer (raw, json) Hash identifier: yA8tukadVwbfS/DY5D5WFAI0ZyTb99IwFCobIKKu3xM= Subject key identifier: 57:D7:86:B5:49:7A:C5:76:6A:AF:DA:BF:A6:E4:49:AC:BE:2E:EB:6B Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BA6E34B804B8765F626593800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Oct 2025 17:09:51 +0000 Certificate not after: Sat 29 Jan 2028 18:09:51 +0000 Subordinate resources: IP: 23.144.124.0/24 IP: 2602:f58b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:e3:4b:80:4b:87:65:f6:26:59:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 26 17:09:51 2025 GMT Not After : Jan 29 18:09:51 2028 GMT Subject: CN=c74e641d-a8b6-48e3-9084-066627b0310f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2d:00:13:b9:b4:b3:3c:ed:ef:6c:a6:72:88: f6:6d:88:37:8c:9b:0d:48:ce:05:88:57:bc:6a:48: 5b:1d:9f:a5:ec:69:dc:5f:f9:09:7c:35:bf:bd:1f: 0f:e7:96:fa:35:f3:b0:8e:c9:91:cb:89:91:3b:02: 2c:a7:fc:35:10:ae:95:ae:c9:39:ca:92:45:6e:9d: d5:25:59:13:95:74:b0:04:f8:4b:3c:a7:7c:9c:60: 88:ed:b2:9c:56:24:ce:73:e3:b8:43:8a:c8:5b:9f: be:2a:7f:5f:ed:77:20:8a:cd:48:74:70:6f:df:97: 17:76:df:44:eb:70:bf:f9:20:28:f9:82:5b:7e:b0: e0:1c:5a:91:18:37:cc:55:c9:2b:23:7b:11:fe:eb: b7:c6:1e:bd:13:6b:b4:43:45:ae:c5:96:e2:e3:0c: 92:35:77:63:a8:68:ed:ce:cc:33:d0:d8:91:32:f5: aa:9e:db:00:0d:44:13:58:6d:0e:cb:63:c1:35:0a: d7:41:e9:d7:bf:87:fa:57:ad:ce:ec:af:63:d7:b9: 08:27:ec:3d:c1:12:62:a4:01:58:59:56:31:4c:4f: e7:e1:99:97:bd:1e:f3:f9:f2:f9:be:ee:13:40:7b: cf:f8:e4:49:89:29:9f:15:c3:14:37:42:d0:b9:09: 69:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D7:86:B5:49:7A:C5:76:6A:AF:DA:BF:A6:E4:49:AC:BE:2E:EB:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.144.124.0/24 IPv6: 2602:f58b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:0c:95:f9:8f:ff:6a:56:3f:bb:13:77:c7:85:a1:0f:fd:a5: 82:66:b6:36:4c:ee:ff:46:9b:83:8c:3e:b4:35:14:02:f2:25: 69:0e:c5:a1:e0:c1:5b:6d:6e:13:96:82:2e:92:5b:75:ec:c2: 09:95:91:5e:96:f5:48:62:ab:37:13:03:b7:14:fd:c6:62:dd: 55:bf:87:52:e8:b6:1d:2d:ad:5e:d5:7a:c8:fc:d9:f7:34:88: 84:ea:41:c8:d6:73:83:8e:9d:d9:2d:d9:3c:5f:fa:58:c1:7f: f2:bc:16:46:6f:b4:dc:3d:ab:2d:eb:aa:47:c1:9e:a1:15:e7: 25:43:88:5c:4a:e5:fa:a5:d2:c5:bb:8e:fb:c2:4e:6a:ef:4e: ff:90:e2:fc:9a:98:a0:61:4c:50:74:18:98:76:4e:63:76:97: d3:de:43:90:91:19:45:ac:89:80:91:30:29:75:99:74:43:bb: 4e:80:46:b8:55:1a:01:e3:88:5d:3d:85:29:46:d2:5c:64:8e: 07:a0:98:89:85:c9:63:31:1b:8b:1e:47:4a:a3:c9:72:26:0c: 2f:b9:3c:53:c7:1c:4e:00:f6:43:76:b4:e9:2b:47:8b:40:37: 9d:37:20:78:24:57:51:fa:d6:7c:39:1a:d4:bb:45:bb:d9:ed: ad:bf:7a:4e -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEum40uAS4dl9iZZOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyNjE3MDk1MVoXDTI4MDEyOTE4MDk1MVowLzEtMCsGA1UEAxMk Yzc0ZTY0MWQtYThiNi00OGUzLTkwODQtMDY2NjI3YjAzMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi0AE7m0szzt72ymcoj2bYg3jJsNSM4FiFe8 akhbHZ+l7GncX/kJfDW/vR8P55b6NfOwjsmRy4mROwIsp/w1EK6Vrsk5ypJFbp3V JVkTlXSwBPhLPKd8nGCI7bKcViTOc+O4Q4rIW5++Kn9f7Xcgis1IdHBv35cXdt9E 63C/+SAo+YJbfrDgHFqRGDfMVckrI3sR/uu3xh69E2u0Q0WuxZbi4wySNXdjqGjt zswz0NiRMvWqntsADUQTWG0Oy2PBNQrXQenXv4f6V63O7K9j17kIJ+w9wRJipAFY WVYxTE/n4ZmXvR7z+fL5vu4TQHvP+ORJiSmfFcMUN0LQuQlpmQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFFfXhrVJesV2aq/av6bkSay+LutrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j NzRlNjQxZC1hOGI2LTQ4ZTMtOTA4NC0wNjY2MjdiMDMxMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2M3NGU2NDFkLWE4YjYtNDhlMy05 MDg0LTA2NjYyN2IwMzEwZi9jNzRlNjQxZC1hOGI2LTQ4ZTMtOTA4NC0wNjY2Mjdi MDMxMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkHwwDgQCAAIwCAMGACYC9YsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHMMlfmP/2pWP7sTd8eFoQ/9pYJmtjZM7v9Gm4OMPrQ1FALyJWkOxaHgwVttbhOW gi6SW3XswgmVkV6W9UhiqzcTA7cU/cZi3VW/h1Loth0trV7Vesj82fc0iITqQcjW c4OOndkt2Txf+ljBf/K8FkZvtNw9qy3rqkfBnqEV5yVDiFxK5fql0sW7jvvCTmrv Tv+Q4vyamKBhTFB0GJh2TmN2l9PeQ5CRGUWsiYCRMCl1mXRDu06ARrhVGgHjiF09 hSlG0lxkjgegmImFyWMxG4seR0qjyXImDC+5PFPHHE4A9kN2tOkrR4tAN503IHgk V1H61nw5GtS7RbvZ7a2/ek4= -----END CERTIFICATE-----Generated at Wed Nov 5 21:04:40 2025 by rpki-client