$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f.cer File: 0bb54491-b95e-4fa9-87fb-9692a405ea9f.cer (raw, json) Hash identifier: wQeMGUYWrvnLTk5la988sqxcAw6oN30Y/ZjtqIOtZSo= Subject key identifier: 58:9E:C6:78:48:B1:07:B7:73:0E:E6:5A:CF:CA:BD:F5:D6:06:2E:3A Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B7A8C42E8535A7E5FD9DA5DE2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f/0bb54491-b95e-4fa9-87fb-9692a405ea9f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 19:58:56 +0000 Certificate not after: Thu 13 Jan 2028 20:58:56 +0000 Subordinate resources: AS: 401988 IP: 23.145.164.0/24 IP: 64.111.94.0/23 IP: 2602:f55d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:8c:42:e8:53:5a:7e:5f:d9:da:5d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 10 19:58:56 2025 GMT Not After : Jan 13 20:58:56 2028 GMT Subject: CN=0bb54491-b95e-4fa9-87fb-9692a405ea9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:89:82:31:29:d3:ee:2c:62:53:f7:7c:dc:97: a5:e3:55:55:24:82:bb:55:c4:f4:80:09:bc:2b:25: b7:d5:8e:93:22:1a:cd:5e:5d:b9:bb:62:08:31:82: 89:57:ff:2d:0b:fa:64:46:f7:bf:9d:dc:7d:d0:a6: af:8a:b5:b8:88:14:a7:dd:8c:66:03:88:7e:df:c4: 60:79:2a:b3:a9:bf:13:8b:e2:73:26:80:88:48:d1: 0a:10:59:02:9e:19:a5:df:81:57:db:9e:08:68:74: 1f:a2:fb:2a:86:38:b4:20:4b:2a:c0:3f:f5:9b:69: ea:ab:26:50:0d:0c:e9:f8:04:76:5a:54:a2:09:bf: 4f:22:b0:09:83:a3:b8:dd:79:2b:af:2d:7f:8b:54: 9c:28:74:ec:89:2b:a7:ef:8c:58:46:37:fd:c5:7f: dc:a4:1d:b7:af:1b:d6:a4:71:76:b2:ad:77:b8:63: 6d:c0:fc:1b:ff:c4:04:f1:6a:c4:b7:77:8d:6e:bb: 38:1b:24:b0:40:6b:03:cc:3f:bb:64:00:ef:2e:1f: 17:12:3e:48:ad:72:ea:89:ac:09:b8:17:74:5d:ae: 45:e1:82:00:91:a5:75:5f:57:d0:4a:ed:c9:71:6e: de:d3:3a:0c:7b:c2:93:65:42:b7:3c:41:23:6b:10: 75:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:C6:78:48:B1:07:B7:73:0E:E6:5A:CF:CA:BD:F5:D6:06:2E:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0bb54491-b95e-4fa9-87fb-9692a405ea9f/0bb54491-b95e-4fa9-87fb-9692a405ea9f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.145.164.0/24 64.111.94.0/23 IPv6: 2602:f55d::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401988 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:75:a1:da:47:e4:d9:cf:bb:3a:f4:3e:27:ce:6a:e1:b9:32: bf:5f:b2:67:53:d8:bb:6e:ad:ba:d3:f2:ea:dc:a3:aa:49:7c: 34:b4:01:11:94:b7:ac:f1:e2:5f:92:83:47:cc:28:5f:79:e3: c0:3a:d2:c3:ad:43:64:4a:d7:03:4c:26:09:e0:09:d5:71:4e: 08:17:4a:60:9b:8c:a7:00:3b:cf:8a:20:46:98:6d:ca:ab:9f: e7:2b:3e:93:c2:48:84:49:91:d7:ab:b4:df:88:46:91:4c:8f: 09:e2:9b:7f:af:42:4e:d2:5f:0e:f7:5b:f6:60:45:96:f4:88: 47:f8:eb:40:78:dd:44:d5:4b:b0:4c:2e:4e:f3:2c:d3:7d:11: 0d:bd:c3:48:91:ac:34:00:0b:70:d4:d6:09:52:7c:7b:59:53: 9b:ff:97:66:2f:df:a9:fc:df:c7:ad:55:73:74:2b:c6:3c:1f: 24:ec:76:79:5d:e2:37:33:56:43:3d:2c:35:f5:1e:6a:a7:40: 01:a6:76:01:36:9d:c4:aa:de:d9:76:6b:e8:3f:e6:a3:53:29: 59:a6:e6:ce:db:ad:ff:ed:64:54:24:a5:d6:f4:9c:90:7a:98: 12:16:f9:50:38:70:92:52:e9:b9:13:3f:da:52:8e:c2:21:03: 53:88:64:a6 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEt6jELoU1p+X9naXeIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxMDE5NTg1NloXDTI4MDExMzIwNTg1NlowLzEtMCsGA1UEAxMk MGJiNTQ0OTEtYjk1ZS00ZmE5LTg3ZmItOTY5MmE0MDVlYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmomCMSnT7ixiU/d83Jel41VVJIK7VcT0gAm8 KyW31Y6TIhrNXl25u2IIMYKJV/8tC/pkRve/ndx90KavirW4iBSn3YxmA4h+38Rg eSqzqb8Ti+JzJoCISNEKEFkCnhml34FX254IaHQfovsqhji0IEsqwD/1m2nqqyZQ DQzp+AR2WlSiCb9PIrAJg6O43Xkrry1/i1ScKHTsiSun74xYRjf9xX/cpB23rxvW pHF2sq13uGNtwPwb/8QE8WrEt3eNbrs4GySwQGsDzD+7ZADvLh8XEj5IrXLqiawJ uBd0Xa5F4YIAkaV1X1fQSu3JcW7e0zoMe8KTZUK3PEEjaxB1WQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFFiexnhIsQe3cw7mWs/KvfXWBi46MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8w YmI1NDQ5MS1iOTVlLTRmYTktODdmYi05NjkyYTQwNWVhOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzBiYjU0NDkxLWI5NWUtNGZhOS04 N2ZiLTk2OTJhNDA1ZWE5Zi8wYmI1NDQ5MS1iOTVlLTRmYTktODdmYi05NjkyYTQw NWVhOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkaQDBAFAb14wDgQCAAIwCAMGACYC9V0AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYiRDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmdaHaR+TZz7s69D4n zmrhuTK/X7JnU9i7bq260/Lq3KOqSXw0tAERlLes8eJfkoNHzChfeePAOtLDrUNk StcDTCYJ4AnVcU4IF0pgm4ynADvPiiBGmG3Kq5/nKz6TwkiESZHXq7TfiEaRTI8J 4pt/r0JO0l8O91v2YEWW9IhH+OtAeN1E1UuwTC5O8yzTfRENvcNIkaw0AAtw1NYJ Unx7WVOb/5dmL9+p/N/HrVVzdCvGPB8k7HZ5XeI3M1ZDPSw19R5qp0ABpnYBNp3E qt7ZdmvoP+ajUylZpubO263/7WRUJKXW9JyQepgSFvlQOHCSUum5Ez/aUo7CIQNT iGSm -----END CERTIFICATE-----Generated at Tue Oct 14 02:51:34 2025 by rpki-client