$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer File: 89089cbd-0f7a-444f-95e7-38535bb2fc45.cer (raw, json) Hash identifier: AS9cGhy8vnINQHci2Ewd7CPt2Zp3tTyxc6o4ZGnYG1o= Subject key identifier: 38:2A:5A:14:16:40:82:F8:CA:90:33:DD:00:00:78:7D:21:E0:F1:68 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B815770EC2BA83DC5E6091870 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 06:23:10 +0000 Certificate not after: Sun 16 Jan 2028 07:23:10 +0000 Subordinate resources: IP: 23.147.36.0/24 IP: 2602:f524::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:81:57:70:ec:2b:a8:3d:c5:e6:09:18:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 13 06:23:10 2025 GMT Not After : Jan 16 07:23:10 2028 GMT Subject: CN=89089cbd-0f7a-444f-95e7-38535bb2fc45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:bf:18:75:49:5f:11:e7:76:84:b5:30:7f: 73:c0:05:24:4c:8b:f9:62:fa:28:fb:d6:27:7c:dd: de:51:31:a6:5d:16:e2:cc:0b:62:ce:61:86:8b:cd: e9:94:97:c4:1e:b7:47:8e:5e:d1:27:b3:df:f2:04: 5d:11:8e:c2:81:62:da:db:44:8d:ec:21:e5:bf:16: 76:e5:c3:cb:b3:5a:1b:90:7b:fe:13:32:7a:c7:bc: ad:d0:c4:74:ae:d0:9d:ba:87:03:75:6b:06:68:81: 9a:2f:5c:2f:80:87:e4:52:38:03:e6:05:cd:f7:fb: 2a:26:c4:7c:c8:f1:52:93:77:93:b3:ea:c5:e2:35: 9e:b7:16:54:80:fd:79:38:06:e1:36:07:da:43:4c: c5:b0:04:67:09:81:c8:0b:33:0e:5c:b1:15:35:7c: 74:2f:c6:18:f0:95:16:2f:55:1b:75:ad:7a:7b:dd: e1:89:dc:77:16:e5:5f:aa:b9:46:7d:2b:81:b8:3d: 3a:df:be:7c:3e:9a:0f:52:b3:a2:cb:20:b9:51:7f: a3:35:4d:b2:9e:97:50:50:ff:12:8b:e4:60:d6:17: 78:86:05:8b:53:6f:34:95:f7:44:89:95:14:34:b2: 47:96:21:6b:7e:0b:4d:c5:25:68:8c:aa:7c:c7:ad: a2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2A:5A:14:16:40:82:F8:CA:90:33:DD:00:00:78:7D:21:E0:F1:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.147.36.0/24 IPv6: 2602:f524::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b1:89:9f:74:08:af:21:f7:15:d5:85:1a:cb:10:c1:9f:f5: 9f:1f:63:78:00:ff:9c:2b:1f:6e:0b:b8:ff:59:5a:ca:fd:f1: 1c:41:58:bb:36:ce:91:a9:10:42:3f:b6:56:9e:c8:a4:60:09: df:bd:b1:dc:c5:f0:23:af:8f:c9:ee:eb:82:4d:ad:80:bb:8c: f7:6e:9c:25:b4:cf:10:86:a0:d4:d3:9a:d1:85:95:42:7a:a6: ca:22:fe:36:5f:84:25:d8:f7:d7:c2:68:f7:09:74:e8:cc:92: 14:9d:04:ca:fd:8a:88:c9:72:ce:0b:97:e6:b6:f1:e4:50:73: 2f:c8:05:27:e2:77:6c:82:f6:79:32:f7:ab:6d:ff:87:13:c5: d1:99:69:b9:1c:5e:01:05:37:e1:24:fb:6b:da:b4:5e:79:0f: fb:ba:a9:2a:ef:a1:e3:a1:b1:36:0f:bc:45:ba:24:dc:25:f6: ac:3d:76:2d:fd:99:2f:f6:e9:ae:7a:96:fd:d8:e1:3b:9d:cb: 6c:32:a1:a1:c1:28:85:31:06:99:8d:d7:b5:b9:64:32:6b:c0: 45:4f:b0:87:33:c7:e2:b7:35:bc:25:85:79:0b:b3:b6:fd:06: db:be:4c:cf:9e:2b:bf:3c:68:cd:18:0c:44:7d:56:39:c2:cc: 60:c7:46:1b -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEuBV3DsK6g9xeYJGHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxMzA2MjMxMFoXDTI4MDExNjA3MjMxMFowLzEtMCsGA1UEAxMk ODkwODljYmQtMGY3YS00NDRmLTk1ZTctMzg1MzViYjJmYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXa/GHVJXxHndoS1MH9zwAUkTIv5Yvoo+9Yn fN3eUTGmXRbizAtizmGGi83plJfEHrdHjl7RJ7Pf8gRdEY7CgWLa20SN7CHlvxZ2 5cPLs1obkHv+EzJ6x7yt0MR0rtCduocDdWsGaIGaL1wvgIfkUjgD5gXN9/sqJsR8 yPFSk3eTs+rF4jWetxZUgP15OAbhNgfaQ0zFsARnCYHICzMOXLEVNXx0L8YY8JUW L1Ubda16e93hidx3FuVfqrlGfSuBuD063758PpoPUrOiyyC5UX+jNU2ynpdQUP8S i+Rg1hd4hgWLU280lfdEiZUUNLJHliFrfgtNxSVojKp8x62iswIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDgqWhQWQIL4ypAz3QAAeH0h4PFoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84 OTA4OWNiZC0wZjdhLTQ0NGYtOTVlNy0zODUzNWJiMmZjNDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzg5MDg5Y2JkLTBmN2EtNDQ0Zi05 NWU3LTM4NTM1YmIyZmM0NS84OTA4OWNiZC0wZjdhLTQ0NGYtOTVlNy0zODUzNWJi MmZjNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkyQwDgQCAAIwCAMGACYC9SQAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACyxiZ90CK8h9xXVhRrLEMGf9Z8fY3gA/5wrH24LuP9ZWsr98RxBWLs2zpGpEEI/ tlaeyKRgCd+9sdzF8COvj8nu64JNrYC7jPdunCW0zxCGoNTTmtGFlUJ6psoi/jZf hCXY99fCaPcJdOjMkhSdBMr9iojJcs4Ll+a28eRQcy/IBSfid2yC9nky96tt/4cT xdGZabkcXgEFN+Ek+2vatF55D/u6qSrvoeOhsTYPvEW6JNwl9qw9di39mS/26a56 lv3Y4Tudy2wyoaHBKIUxBpmN17W5ZDJrwEVPsIczx+K3NbwlhXkLs7b9Btu+TM+e K788aM0YDER9VjnCzGDHRhs= -----END CERTIFICATE-----Generated at Tue Oct 14 02:48:00 2025 by rpki-client