$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d.cer File: c3e0ec38-486f-470e-8921-ae8db2e3807d.cer (raw, json) Hash identifier: qhQUElJI9RAHbII3eA7xxYPsXAzsQjaTd7bkHEhx/Io= Subject key identifier: 5F:D5:2E:C0:FF:38:E5:BB:BD:10:28:F4:4A:0F:58:8E:7F:94:CF:84 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B7A887BF42A620BE574998A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d/c3e0ec38-486f-470e-8921-ae8db2e3807d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 19:51:19 +0000 Certificate not after: Thu 13 Jan 2028 20:46:34 +0000 Subordinate resources: AS: 29994 IP: 23.147.60.0/24 IP: 2602:81c:a000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:88:7b:f4:2a:62:0b:e5:74:99:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 10 19:51:19 2025 GMT Not After : Jan 13 20:46:34 2028 GMT Subject: CN=c3e0ec38-486f-470e-8921-ae8db2e3807d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:50:43:0e:72:6a:46:62:db:88:d2:11:c7:d4: 0b:24:99:b3:3b:3d:66:c8:8f:8d:80:9b:c2:04:21: 7d:13:42:bc:8e:af:d6:51:d3:b5:9a:73:99:d9:05: 76:35:cd:84:7b:27:5e:e9:31:18:98:49:31:62:2a: 0c:f2:c4:7e:ef:88:6d:ca:c5:72:bb:5b:ef:d8:30: 5c:41:df:49:bd:bb:2a:65:00:23:a6:16:75:12:f4: 04:b9:91:10:7b:38:70:2a:8b:d8:06:82:f2:8e:9d: 8d:bb:1d:c6:87:b7:70:25:25:73:9a:fa:ca:30:06: c8:4a:44:a8:a7:5b:fe:24:b0:5e:aa:cd:64:10:3e: 0e:21:2e:a8:8b:17:9a:e1:f6:02:b6:3d:24:dd:df: 3d:57:cc:d3:38:f2:ed:58:4c:96:6e:83:9e:5a:b5: 5d:db:77:ea:aa:81:06:85:5c:b1:27:79:0a:18:e4: f2:e7:39:cc:28:b5:a1:ea:c1:a6:dc:07:fa:3f:2a: 80:54:18:f3:dd:36:ab:ee:73:dc:bb:ed:cb:9b:19: 51:0c:c8:ad:1e:bb:95:d3:8f:65:82:c6:e9:37:1b: 59:b6:30:0c:42:88:ba:b4:0c:28:3a:43:71:04:49: 56:16:2f:17:b7:85:fc:2a:ee:d4:54:22:9d:18:09: cb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D5:2E:C0:FF:38:E5:BB:BD:10:28:F4:4A:0F:58:8E:7F:94:CF:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3e0ec38-486f-470e-8921-ae8db2e3807d/c3e0ec38-486f-470e-8921-ae8db2e3807d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.147.60.0/24 IPv6: 2602:81c:a000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29994 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:0e:0f:54:2d:8a:4a:b4:a8:e2:83:9a:18:30:c8:49:02:35: a6:2b:6c:3d:ff:93:6b:7b:64:da:b6:34:4d:a4:9f:16:74:00: c1:58:c4:72:04:cd:68:84:0e:33:4d:d2:f3:df:88:52:60:d2: 5e:e2:2e:cb:d7:17:a5:2e:cc:c4:1e:ed:51:e3:9f:a8:11:9d: fe:8c:c6:13:da:a2:a3:bf:22:87:06:95:78:90:32:19:2f:4f: c2:df:b8:d8:82:7c:35:57:93:1f:04:d5:fb:44:b5:89:c6:9e: 74:7d:81:e1:d1:b3:45:17:aa:c4:87:9f:c3:2f:d4:50:ac:de: 64:60:ec:ff:3b:7d:7c:cf:2f:42:62:b9:96:29:80:47:95:a2: 82:bf:b3:ff:90:32:78:06:75:f9:08:b1:9e:e5:6b:9a:36:2b: 0a:1c:b4:d1:68:2e:02:4c:1f:41:35:9f:f8:dd:03:50:94:19: 00:f1:de:84:7a:1f:66:a2:d2:b0:75:fd:e9:24:ee:4a:4a:6d: ff:b5:2e:d2:bb:7c:c4:02:0a:cd:1c:9e:5b:5a:9b:5b:a8:41: 92:75:32:50:3e:03:db:78:20:f4:2e:d6:fa:44:80:5c:65:c0: bf:a5:9e:9d:13:5e:6c:3b:60:ae:a5:7a:c2:2d:ba:de:8e:aa: 44:cb:a7:49 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEt6iHv0KmIL5XSZigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxMDE5NTExOVoXDTI4MDExMzIwNDYzNFowLzEtMCsGA1UEAxMk YzNlMGVjMzgtNDg2Zi00NzBlLTg5MjEtYWU4ZGIyZTM4MDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1BDDnJqRmLbiNIRx9QLJJmzOz1myI+NgJvC BCF9E0K8jq/WUdO1mnOZ2QV2Nc2Eeyde6TEYmEkxYioM8sR+74htysVyu1vv2DBc Qd9JvbsqZQAjphZ1EvQEuZEQezhwKovYBoLyjp2Nux3Gh7dwJSVzmvrKMAbISkSo p1v+JLBeqs1kED4OIS6oixea4fYCtj0k3d89V8zTOPLtWEyWboOeWrVd23fqqoEG hVyxJ3kKGOTy5znMKLWh6sGm3Af6PyqAVBjz3Tar7nPcu+3LmxlRDMitHruV049l gsbpNxtZtjAMQoi6tAwoOkNxBElWFi8Xt4X8Ku7UVCKdGAnLOwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFF/VLsD/OOW7vRAo9EoPWI5/lM+EMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j M2UwZWMzOC00ODZmLTQ3MGUtODkyMS1hZThkYjJlMzgwN2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2MzZTBlYzM4LTQ4NmYtNDcwZS04 OTIxLWFlOGRiMmUzODA3ZC9jM2UwZWMzOC00ODZmLTQ3MGUtODkyMS1hZThkYjJl MzgwN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXkzwwDwQCAAIwCQMHBCYCCBygADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJ1KjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmDg9ULYpKtKjig5oYMMhJAjWm K2w9/5Nre2TatjRNpJ8WdADBWMRyBM1ohA4zTdLz34hSYNJe4i7L1xelLszEHu1R 45+oEZ3+jMYT2qKjvyKHBpV4kDIZL0/C37jYgnw1V5MfBNX7RLWJxp50fYHh0bNF F6rEh5/DL9RQrN5kYOz/O318zy9CYrmWKYBHlaKCv7P/kDJ4BnX5CLGe5WuaNisK HLTRaC4CTB9BNZ/43QNQlBkA8d6Eeh9motKwdf3pJO5KSm3/tS7Su3zEAgrNHJ5b WptbqEGSdTJQPgPbeCD0Ltb6RIBcZcC/pZ6dE15sO2CupXrCLbrejqpEy6dJ -----END CERTIFICATE-----Generated at Tue Oct 14 02:55:53 2025 by rpki-client