$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da.cer File: 4762a56d-346a-4bc0-937b-e8cd029694da.cer (raw, json) Hash identifier: XSE5w6sXGy+2rLbzz/UCwwlTfZYLGVukk1teagRpBJc= Subject key identifier: 1D:65:6D:1E:65:EE:6F:46:C4:7E:63:0E:6A:9E:67:C2:18:DA:2F:25 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B82BA49E46283D680AA8E91E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da/4762a56d-346a-4bc0-937b-e8cd029694da.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 18:18:08 +0000 Certificate not after: Sun 16 Jan 2028 19:18:08 +0000 Subordinate resources: AS: 23335 IP: 23.139.4.0/24 IP: 2602:f65a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:ba:49:e4:62:83:d6:80:aa:8e:91:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 13 18:18:08 2025 GMT Not After : Jan 16 19:18:08 2028 GMT Subject: CN=4762a56d-346a-4bc0-937b-e8cd029694da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:b4:7b:c9:3e:33:14:1a:cf:7c:fc:44:5b: f7:b5:d4:0a:26:c3:38:dd:0a:cc:b5:1b:78:51:2d: 20:09:2e:4e:54:dd:8a:d5:aa:ff:5e:46:89:cc:67: 4e:7e:99:c4:5e:9c:f7:10:39:ba:25:34:fc:12:7a: a8:87:95:2f:bc:78:49:71:40:96:3d:29:55:6b:8c: 46:53:b7:5d:99:19:5c:20:3d:b2:34:6e:2f:c1:4e: d7:a0:62:33:d4:08:50:2d:51:b4:7b:ea:63:9b:5d: ba:66:4c:c2:40:bc:68:15:0d:7e:60:6b:0b:d0:df: cc:e2:8f:bf:bb:83:1c:ae:74:4b:8e:0d:ac:4b:40: b7:6b:53:17:58:38:8d:8b:e7:e8:a2:c9:f7:eb:5c: 04:b6:88:0d:01:31:96:1d:b1:f3:d1:d2:87:a8:ec: d0:1c:90:ca:f5:46:83:6f:5a:5f:61:a8:5e:17:62: ac:b0:ac:0b:ee:30:10:51:7d:93:2e:f7:2f:00:3c: 1b:f0:eb:65:53:ca:61:44:9f:05:41:e7:3d:2f:a2: 9c:2e:ff:7a:9c:b8:c5:1f:05:e6:5c:62:49:f3:be: c5:8b:6f:1a:c6:e8:f9:a1:48:4f:a3:1f:94:7b:a7: d9:73:73:37:74:c1:17:20:dc:35:f9:62:0b:14:5f: a9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:65:6D:1E:65:EE:6F:46:C4:7E:63:0E:6A:9E:67:C2:18:DA:2F:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4762a56d-346a-4bc0-937b-e8cd029694da/4762a56d-346a-4bc0-937b-e8cd029694da.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.139.4.0/24 IPv6: 2602:f65a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23335 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6a:2c:d0:e1:ef:74:d5:9c:55:09:7c:d4:7a:81:20:51:e5: 84:28:5c:33:a9:8b:65:16:b7:5d:15:3c:8e:31:fe:a5:c5:09: 25:2c:41:6c:54:0e:8d:27:6b:51:45:52:e5:65:d5:09:b0:dd: 83:a2:c3:83:da:a5:d0:fa:98:d3:ec:b2:4b:59:03:80:a8:48: 95:22:a6:aa:76:3d:73:46:1b:36:e3:a0:f4:ba:4b:e9:5c:ce: 53:62:59:98:a8:a0:5e:2b:9b:0c:08:68:23:fb:68:61:df:91: 23:76:40:fb:6c:e8:a1:c8:b4:0a:29:32:bf:e7:f0:65:36:21: cc:04:dc:e2:84:a5:7c:5e:08:91:c5:38:a1:c6:38:78:73:ec: 16:b3:4c:65:1c:41:2f:81:29:d9:95:ed:73:72:d5:6f:94:b7: f7:90:f7:6d:c2:5e:32:fa:44:60:7d:54:8b:21:52:f7:2f:88: 04:e5:07:03:51:b3:a6:b5:7f:72:84:9a:26:c5:99:43:c3:9b: 61:59:d2:a7:22:ce:14:94:c6:e0:ad:a8:7d:8c:95:c7:0e:b7: 0f:37:29:58:1b:a6:b6:ce:5d:92:f8:04:f2:8f:15:37:a3:7b: fc:82:45:54:b6:27:8d:cc:e8:e8:47:8e:0d:ae:d2:ae:9f:9d: 9f:58:d1:ce -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEuCuknkYoPWgKqOkeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxMzE4MTgwOFoXDTI4MDExNjE5MTgwOFowLzEtMCsGA1UEAxMk NDc2MmE1NmQtMzQ2YS00YmMwLTkzN2ItZThjZDAyOTY5NGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuK0e8k+MxQaz3z8RFv3tdQKJsM43QrMtRt4 US0gCS5OVN2K1ar/XkaJzGdOfpnEXpz3EDm6JTT8Enqoh5UvvHhJcUCWPSlVa4xG U7ddmRlcID2yNG4vwU7XoGIz1AhQLVG0e+pjm126ZkzCQLxoFQ1+YGsL0N/M4o+/ u4McrnRLjg2sS0C3a1MXWDiNi+foosn361wEtogNATGWHbHz0dKHqOzQHJDK9UaD b1pfYaheF2KssKwL7jAQUX2TLvcvADwb8OtlU8phRJ8FQec9L6KcLv96nLjFHwXm XGJJ877Fi28axuj5oUhPox+Ue6fZc3M3dMEXINw1+WILFF+piwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFB1lbR5l7m9GxH5jDmqeZ8IY2i8lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80 NzYyYTU2ZC0zNDZhLTRiYzAtOTM3Yi1lOGNkMDI5Njk0ZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzQ3NjJhNTZkLTM0NmEtNGJjMC05 MzdiLWU4Y2QwMjk2OTRkYS80NzYyYTU2ZC0zNDZhLTRiYzAtOTM3Yi1lOGNkMDI5 Njk0ZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiwQwDgQCAAIwCAMGACYC9loAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlsnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADZqLNDh73TVnFUJfNR6gSBR5YQo XDOpi2UWt10VPI4x/qXFCSUsQWxUDo0na1FFUuVl1Qmw3YOiw4PapdD6mNPssktZ A4CoSJUipqp2PXNGGzbjoPS6S+lczlNiWZiooF4rmwwIaCP7aGHfkSN2QPts6KHI tAopMr/n8GU2IcwE3OKEpXxeCJHFOKHGOHhz7BazTGUcQS+BKdmV7XNy1W+Ut/eQ 923CXjL6RGB9VIshUvcviATlBwNRs6a1f3KEmibFmUPDm2FZ0qcizhSUxuCtqH2M lccOtw83KVgbprbOXZL4BPKPFTeje/yCRVS2J43M6OhHjg2u0q6fnZ9Y0c4= -----END CERTIFICATE-----Generated at Tue Oct 14 02:47:17 2025 by rpki-client