$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d76dd303-7536-4d5d-b437-f0186077a3e0.cer File: d76dd303-7536-4d5d-b437-f0186077a3e0.cer (raw, json) Hash identifier: R5XhLwS+4I4lYmmCaWcLoJxpE/LrHEmM5mzUpsukfFk= Subject key identifier: 81:D2:D2:ED:D9:0E:80:98:06:6B:53:4F:46:78:76:90:24:75:83:A0 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BAC2C952C5303DFCE45912800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d76dd303-7536-4d5d-b437-f0186077a3e0/d76dd303-7536-4d5d-b437-f0186077a3e0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d76dd303-7536-4d5d-b437-f0186077a3e0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Oct 2025 14:36:34 +0000 Certificate not after: Mon 31 Jan 2028 15:36:34 +0000 Subordinate resources: IP: 23.148.44.0/24 IP: 2602:f502::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ac:2c:95:2c:53:03:df:ce:45:91:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 28 14:36:34 2025 GMT Not After : Jan 31 15:36:34 2028 GMT Subject: CN=d76dd303-7536-4d5d-b437-f0186077a3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:90:c3:a9:11:e6:ce:61:77:79:3d:72:d9: 8d:b8:e4:f6:24:08:a2:23:38:fc:9f:c5:49:95:b4: ca:39:b1:82:b1:4b:f8:84:79:b7:10:f4:a5:5f:b5: be:5b:42:93:62:16:3c:ce:1c:af:d5:75:b0:62:04: a6:b2:47:cb:1f:c6:48:9d:fa:eb:65:2a:05:55:1f: 33:40:b0:ac:a1:8b:9a:e5:e8:d9:16:36:41:70:38: 0a:18:59:28:e3:ac:a2:94:ca:cf:c6:f9:ac:56:90: 96:0f:41:43:ed:c8:d5:29:8a:e4:f4:ed:d0:d6:e0: 0c:96:af:dc:29:ed:ec:53:c9:28:87:c5:cb:2e:f7: 15:01:dd:bc:0a:ef:b4:0d:c3:61:7a:97:9f:0b:45: 2b:0b:6b:65:01:24:69:f0:e4:37:1c:f5:0e:4b:89: 7f:68:30:7b:bc:6b:5e:19:47:19:93:0a:a4:36:94: 7e:9a:0c:f0:f8:01:c6:43:ef:a3:3f:41:68:a3:88: 9a:b3:78:fa:2c:21:9a:4c:63:a2:fc:10:47:7b:75: 36:e2:db:c7:7b:6e:86:29:3e:1a:fd:b0:63:1e:92: 6b:36:57:aa:64:19:8f:f6:89:d7:33:e5:1a:eb:aa: cf:c1:3a:f7:75:c9:40:5d:e6:4d:15:ea:d4:3e:3b: 06:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D2:D2:ED:D9:0E:80:98:06:6B:53:4F:46:78:76:90:24:75:83:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d76dd303-7536-4d5d-b437-f0186077a3e0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d76dd303-7536-4d5d-b437-f0186077a3e0/d76dd303-7536-4d5d-b437-f0186077a3e0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.148.44.0/24 IPv6: 2602:f502::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e2:ff:0d:ae:23:c4:7b:6e:b2:d6:9b:19:29:47:04:2c:bc: 8c:cc:d9:e6:87:e3:d3:6c:49:42:88:75:09:68:ae:eb:cc:d4: a7:7a:aa:87:af:86:93:f8:9e:3f:fe:bb:01:32:bb:49:45:93: 5f:b6:51:07:9b:e7:40:1b:6b:80:83:27:75:ae:51:32:b2:6f: d7:e6:09:d0:fb:8c:7e:69:7d:d2:f1:6d:f5:d3:ef:46:cf:73: ad:8b:60:77:e8:cc:b1:de:ff:2d:a3:e4:52:6d:4e:93:55:92: fc:7c:d0:2f:d5:67:1d:a3:76:6d:0f:dd:71:f4:b7:67:2a:c2: d0:62:e5:d8:92:9f:17:d2:ff:df:5f:92:59:cd:9d:2b:73:0a: a7:e3:42:41:ae:e7:08:6c:99:59:c5:da:74:08:e6:44:4d:c0: 14:e9:95:4e:1a:0c:0c:8b:99:e0:b8:66:93:ac:91:77:c7:20: a7:45:03:2a:90:0a:44:a8:b5:31:92:61:b9:3d:7e:22:90:9c: 62:c3:f4:21:71:5f:5c:59:6c:0e:df:58:3e:d1:7a:f5:b3:3a: e7:1d:a6:3e:30:74:76:c4:14:d3:a9:ff:bb:e2:2d:0f:70:6f: ba:51:1c:0d:d0:1f:cb:76:fa:dd:87:08:b9:3f:86:59:90:c3: 79:19:57:2d -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEusLJUsUwPfzkWRKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyODE0MzYzNFoXDTI4MDEzMTE1MzYzNFowLzEtMCsGA1UEAxMk ZDc2ZGQzMDMtNzUzNi00ZDVkLWI0MzctZjAxODYwNzdhM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUSQw6kR5s5hd3k9ctmNuOT2JAiiIzj8n8VJ lbTKObGCsUv4hHm3EPSlX7W+W0KTYhY8zhyv1XWwYgSmskfLH8ZInfrrZSoFVR8z QLCsoYua5ejZFjZBcDgKGFko46yilMrPxvmsVpCWD0FD7cjVKYrk9O3Q1uAMlq/c Ke3sU8koh8XLLvcVAd28Cu+0DcNhepefC0UrC2tlASRp8OQ3HPUOS4l/aDB7vGte GUcZkwqkNpR+mgzw+AHGQ++jP0Foo4ias3j6LCGaTGOi/BBHe3U24tvHe26GKT4a /bBjHpJrNleqZBmP9onXM+Ua66rPwTr3dclAXeZNFerUPjsGzwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFIHS0u3ZDoCYBmtTT0Z4dpAkdYOgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9k NzZkZDMwMy03NTM2LTRkNWQtYjQzNy1mMDE4NjA3N2EzZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2Q3NmRkMzAzLTc1MzYtNGQ1ZC1i NDM3LWYwMTg2MDc3YTNlMC9kNzZkZDMwMy03NTM2LTRkNWQtYjQzNy1mMDE4NjA3 N2EzZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlCwwDgQCAAIwCAMGACYC9QIAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEXi/w2uI8R7brLWmxkpRwQsvIzM2eaH49NsSUKIdQloruvM1Kd6qoevhpP4nj/+ uwEyu0lFk1+2UQeb50Aba4CDJ3WuUTKyb9fmCdD7jH5pfdLxbfXT70bPc62LYHfo zLHe/y2j5FJtTpNVkvx80C/VZx2jdm0P3XH0t2cqwtBi5diSnxfS/99fklnNnStz CqfjQkGu5whsmVnF2nQI5kRNwBTplU4aDAyLmeC4ZpOskXfHIKdFAyqQCkSotTGS Ybk9fiKQnGLD9CFxX1xZbA7fWD7RevWzOucdpj4wdHbEFNOp/7viLQ9wb7pRHA3Q H8t2+t2HCLk/hlmQw3kZVy0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:03:30 2025 by rpki-client