$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945.cer File: 7363c75e-c9d4-47b4-9294-7a310c041945.cer (raw, json) Hash identifier: 7pvX4Dw3FfU/vwPpqd7MHh7Dd42bUDrtevKwRKJstg0= Subject key identifier: 3F:12:0C:B9:D9:5A:71:99:5C:88:46:39:6C:34:8B:DB:F5:26:4B:8B Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B82364151E1783D27E347CC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/7363c75e-c9d4-47b4-9294-7a310c041945.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 13:52:06 +0000 Certificate not after: Sun 16 Jan 2028 14:52:06 +0000 Subordinate resources: AS: 20443 IP: 23.130.180.0/24 IP: 142.248.128.0/22 IP: 2602:f774::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:36:41:51:e1:78:3d:27:e3:47:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 13 13:52:06 2025 GMT Not After : Jan 16 14:52:06 2028 GMT Subject: CN=7363c75e-c9d4-47b4-9294-7a310c041945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:8b:08:73:7c:38:a9:96:ea:a8:85:ba:bf: 29:d3:3d:fa:c2:09:ff:30:9e:2f:ab:7f:e6:9e:ac: 8d:69:eb:9d:cc:bf:44:9e:34:d7:89:07:d6:6e:1a: 2e:2d:3a:75:ae:09:98:ee:40:2d:2d:91:e9:0e:14: c5:85:41:35:55:d3:ed:a9:e4:81:42:e6:57:f0:86: 86:c9:2d:66:68:49:9a:da:b4:31:b2:fc:1a:0a:11: ee:e8:c2:c0:a4:f2:11:73:ea:63:54:22:c9:4a:49: af:a4:fe:49:41:e4:ee:01:04:d7:0b:3e:22:58:77: bc:c5:45:ab:a3:2b:9c:49:c1:19:30:d7:bf:8a:36: d7:82:30:57:91:94:1d:2e:8b:ea:f3:a0:9e:4b:68: ab:7a:14:bc:ee:38:3a:d5:c7:b7:ee:0e:0f:8f:9b: 96:84:23:27:26:1e:ab:67:15:68:73:91:50:15:a4: ad:67:c4:33:e9:1a:4b:83:6b:2b:bc:de:2d:f4:4a: e2:2b:6d:53:fe:01:21:24:d4:bd:8d:28:c0:c4:4c: b2:06:24:d7:86:fc:23:e6:a2:de:be:7b:38:d3:c7: 96:ad:a7:46:09:c6:88:dc:88:11:7c:38:18:57:f4: d8:de:36:42:17:63:7e:47:0c:7f:8b:d4:95:1a:95: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:12:0C:B9:D9:5A:71:99:5C:88:46:39:6C:34:8B:DB:F5:26:4B:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/7363c75e-c9d4-47b4-9294-7a310c041945.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.130.180.0/24 142.248.128.0/22 IPv6: 2602:f774::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20443 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:45:2c:48:01:79:bf:36:dd:8d:bf:0d:5d:8b:5b:0f:d8:ee: 79:4f:4e:f5:1f:ac:72:93:bf:f0:a7:67:ff:d5:d7:60:b4:46: 12:1e:e6:c1:1c:d4:6e:e0:84:87:57:39:e9:d7:d1:61:db:ae: 00:b7:a3:50:03:5d:e0:8d:47:ee:73:6c:13:50:b9:4e:d8:2f: b4:a8:d4:ed:a1:50:89:64:5f:b0:80:87:41:1a:55:0f:96:57: 77:7c:5a:5b:59:51:64:98:e0:63:ce:55:69:8d:1a:9a:36:fe: aa:48:38:54:50:66:d7:19:86:e1:02:47:39:e3:45:67:5b:ea: df:44:59:b3:19:44:5d:da:94:e1:a3:ec:ed:31:cc:2d:f8:90: d8:10:c8:f7:66:5f:80:0b:f8:1d:f8:44:46:e1:3a:08:77:16: 79:ce:ec:00:d8:2b:e4:12:ad:d2:38:df:a0:a0:b2:77:51:9b: 95:01:50:0a:a0:40:55:3c:51:91:11:9a:9a:5e:de:52:62:88: ac:b2:54:50:1e:a3:db:d7:32:71:ce:56:d1:70:60:b2:d1:96: fe:00:c6:6f:90:04:af:4b:f6:b5:fa:d6:ff:be:4d:16:9d:60: 91:62:d5:58:88:ce:66:b2:7f:0e:14:f8:74:ad:da:c6:2c:6f: b6:06:4c:1c -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEuCNkFR4Xg9J+NHzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxMzEzNTIwNloXDTI4MDExNjE0NTIwNlowLzEtMCsGA1UEAxMk NzM2M2M3NWUtYzlkNC00N2I0LTkyOTQtN2EzMTBjMDQxOTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHGLCHN8OKmW6qiFur8p0z36wgn/MJ4vq3/m nqyNaeudzL9EnjTXiQfWbhouLTp1rgmY7kAtLZHpDhTFhUE1VdPtqeSBQuZX8IaG yS1maEma2rQxsvwaChHu6MLApPIRc+pjVCLJSkmvpP5JQeTuAQTXCz4iWHe8xUWr oyucScEZMNe/ijbXgjBXkZQdLovq86CeS2irehS87jg61ce37g4Pj5uWhCMnJh6r ZxVoc5FQFaStZ8Qz6RpLg2srvN4t9EriK21T/gEhJNS9jSjAxEyyBiTXhvwj5qLe vns408eWradGCcaI3IgRfDgYV/TY3jZCF2N+Rwx/i9SVGpVffwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFD8SDLnZWnGZXIhGOWw0i9v1JkuLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83 MzYzYzc1ZS1jOWQ0LTQ3YjQtOTI5NC03YTMxMGMwNDE5NDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzczNjNjNzVlLWM5ZDQtNDdiNC05 Mjk0LTdhMzEwYzA0MTk0NS83MzYzYzc1ZS1jOWQ0LTQ3YjQtOTI5NC03YTMxMGMw NDE5NDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgrQDBAKO+IAwDgQCAAIwCAMGACYC93QAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAk/bMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADtFLEgBeb823Y2/DV2L Ww/Y7nlPTvUfrHKTv/CnZ//V12C0RhIe5sEc1G7ghIdXOenX0WHbrgC3o1ADXeCN R+5zbBNQuU7YL7So1O2hUIlkX7CAh0EaVQ+WV3d8WltZUWSY4GPOVWmNGpo2/qpI OFRQZtcZhuECRznjRWdb6t9EWbMZRF3alOGj7O0xzC34kNgQyPdmX4AL+B34REbh Ogh3FnnO7ADYK+QSrdI436CgsndRm5UBUAqgQFU8UZERmppe3lJiiKyyVFAeo9vX MnHOVtFwYLLRlv4Axm+QBK9L9rX61v++TRadYJFi1ViIzmayfw4U+HSt2sYsb7YG TBw= -----END CERTIFICATE-----Generated at Tue Oct 14 02:53:35 2025 by rpki-client