$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f1350ada-259d-4608-82d0-6a6cd6c5b944.cer File: f1350ada-259d-4608-82d0-6a6cd6c5b944.cer (raw, json) Hash identifier: oxmlaVf8d2RdvknvFX/oa8ZmMAiQsRCEbZ3U7Fpeunw= Subject key identifier: 65:EB:BD:96:33:7E:05:5B:FE:76:6F:15:15:4C:65:1C:24:21:31:4A Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BBCC7B892A842537143E94AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f1350ada-259d-4608-82d0-6a6cd6c5b944/f1350ada-259d-4608-82d0-6a6cd6c5b944.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f1350ada-259d-4608-82d0-6a6cd6c5b944/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 13:22:05 +0000 Certificate not after: Sun 06 Feb 2028 13:22:05 +0000 Subordinate resources: AS: 401161 IP: 23.180.152.0/24 IP: 2602:f8cd::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:c7:b8:92:a8:42:53:71:43:e9:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 3 13:22:05 2025 GMT Not After : Feb 6 13:22:05 2028 GMT Subject: CN=f1350ada-259d-4608-82d0-6a6cd6c5b944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b2:af:82:5d:9e:c7:56:80:9a:c5:0f:07:34: 1d:0d:6e:21:61:c2:8f:21:68:8a:03:64:f8:02:18: 1e:34:a0:af:34:d5:3c:51:66:55:64:72:3f:7b:51: 70:01:02:23:36:31:3e:ef:10:75:6f:ec:04:28:71: e4:f7:6c:62:38:a1:6b:3b:87:b2:a9:66:af:36:73: 68:e2:78:1c:49:fc:b1:bb:34:ea:da:69:1b:dc:69: 1c:77:f9:da:90:e0:39:bf:7e:68:76:19:16:ec:1b: 32:02:43:96:2a:6e:90:2c:ed:bf:3a:56:cb:36:20: 5c:e5:6a:47:77:08:66:4a:f3:92:3a:7c:d0:27:4e: bf:2e:9a:d7:62:29:db:bc:9c:57:41:d6:fe:01:d3: 39:cb:78:bb:be:a2:d4:3e:a9:b0:d8:48:c8:f4:65: 57:ef:38:79:0d:ce:91:a5:17:a1:36:4c:fe:2d:e8: 1e:c1:be:9a:30:e7:42:dc:eb:68:a4:7f:aa:83:43: e1:42:26:83:6a:53:9f:d7:7c:45:07:6d:ac:5b:ef: c7:d0:46:b4:f6:9b:ff:a4:7c:f8:5d:7f:b1:c5:05: c3:70:48:21:6b:2d:a6:43:8f:57:70:ea:3a:58:8a: 3b:90:66:37:8b:7d:a7:e1:4b:e8:ee:be:97:bf:a8: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EB:BD:96:33:7E:05:5B:FE:76:6F:15:15:4C:65:1C:24:21:31:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f1350ada-259d-4608-82d0-6a6cd6c5b944/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f1350ada-259d-4608-82d0-6a6cd6c5b944/f1350ada-259d-4608-82d0-6a6cd6c5b944.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.180.152.0/24 IPv6: 2602:f8cd::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401161 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:2f:64:42:5f:2a:ae:00:08:f5:61:e5:cd:7c:27:66:2f:e0: 4b:a8:a8:6e:cb:37:7f:fe:8e:f7:ea:f8:74:67:c7:49:a3:69: d5:d8:f6:2a:1d:f5:a2:ba:a8:b8:54:63:c1:e3:62:76:6e:a3: da:48:6b:de:b4:0c:10:d9:8a:62:c7:9c:45:0c:ea:94:e5:5f: e1:8d:97:54:59:db:15:c7:f4:c5:ab:03:fb:04:5e:5e:6f:11: a0:90:d1:f0:06:3b:6b:03:5d:4b:e1:97:af:ac:a6:35:04:ed: a4:14:d5:83:76:e6:69:a7:8a:8b:56:15:bf:ae:b1:a9:f0:1e: ae:8a:49:71:e6:dd:b1:b8:8d:63:d1:88:85:07:ce:90:a2:3e: cd:86:41:ad:08:14:bc:97:10:ba:d3:8c:95:7c:44:af:a6:8c: fa:70:01:df:2c:79:4f:0d:61:05:87:f8:0e:04:50:49:1c:db: ae:3b:93:19:16:ca:35:d0:69:b5:ac:45:5c:b6:8f:61:44:33: 9f:3a:fb:e3:f7:16:ec:2d:8f:b3:33:57:ee:8d:ab:15:b7:2b: 7a:7a:67:18:8b:da:9a:27:d1:1d:ad:7b:eb:db:58:38:f9:d1: a0:b5:8a:6f:02:f5:78:48:8a:d3:63:83:9a:e6:ea:30:ed:e9: 63:0f:e2:ad -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEu8x7iSqEJTcUPpSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwMzEzMjIwNVoXDTI4MDIwNjEzMjIwNVowLzEtMCsGA1UEAxMk ZjEzNTBhZGEtMjU5ZC00NjA4LTgyZDAtNmE2Y2Q2YzViOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLKvgl2ex1aAmsUPBzQdDW4hYcKPIWiKA2T4 AhgeNKCvNNU8UWZVZHI/e1FwAQIjNjE+7xB1b+wEKHHk92xiOKFrO4eyqWavNnNo 4ngcSfyxuzTq2mkb3Gkcd/nakOA5v35odhkW7BsyAkOWKm6QLO2/OlbLNiBc5WpH dwhmSvOSOnzQJ06/LprXYinbvJxXQdb+AdM5y3i7vqLUPqmw2EjI9GVX7zh5Dc6R pRehNkz+Legewb6aMOdC3OtopH+qg0PhQiaDalOf13xFB22sW+/H0Ea09pv/pHz4 XX+xxQXDcEghay2mQ49XcOo6WIo7kGY3i32n4Uvo7r6Xv6hMQwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGXrvZYzfgVb/nZvFRVMZRwkITFKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9m MTM1MGFkYS0yNTlkLTQ2MDgtODJkMC02YTZjZDZjNWI5NDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2YxMzUwYWRhLTI1OWQtNDYwOC04 MmQwLTZhNmNkNmM1Yjk0NC9mMTM1MGFkYS0yNTlkLTQ2MDgtODJkMC02YTZjZDZj NWI5NDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXtJgwDgQCAAIwCAMGACYC+M0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYfCTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdL2RCXyquAAj1YeXNfCdmL+BL qKhuyzd//o736vh0Z8dJo2nV2PYqHfWiuqi4VGPB42J2bqPaSGvetAwQ2Ypix5xF DOqU5V/hjZdUWdsVx/TFqwP7BF5ebxGgkNHwBjtrA11L4ZevrKY1BO2kFNWDduZp p4qLVhW/rrGp8B6uiklx5t2xuI1j0YiFB86Qoj7NhkGtCBS8lxC604yVfESvpoz6 cAHfLHlPDWEFh/gOBFBJHNuuO5MZFso10Gm1rEVcto9hRDOfOvvj9xbsLY+zM1fu jasVtyt6emcYi9qaJ9EdrXvr21g4+dGgtYpvAvV4SIrTY4Oa5uow7eljD+Kt -----END CERTIFICATE-----Generated at Wed Nov 5 20:41:55 2025 by rpki-client