$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c.cer File: 1222a11d-80a3-457a-aa55-a4b1fec71a5c.cer (raw, json) Hash identifier: 7Ghg1FGuCYoFSWAuZq0rUnXksyQgqK0nIdszXNxlIZs= Subject key identifier: A0:85:C2:F0:36:BB:26:C6:41:97:8C:70:46:D1:29:00:5D:DD:BE:87 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8C59159A1B520F12589BE080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/1222a11d-80a3-457a-aa55-a4b1fec71a5c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 05:00:22 +0000 Certificate not after: Thu 20 Jan 2028 06:00:22 +0000 Subordinate resources: AS: 398220 IP: 23.148.144.0 -- 23.148.146.255 IP: 2602:fd8f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8c:59:15:9a:1b:52:0f:12:58:9b:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 17 05:00:22 2025 GMT Not After : Jan 20 06:00:22 2028 GMT Subject: CN=1222a11d-80a3-457a-aa55-a4b1fec71a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:74:b8:49:15:0f:7a:ac:c0:2b:b9:4a:6d:db: 0c:74:85:7b:4a:44:8a:ca:5e:d9:34:7c:7d:ee:9c: 3e:98:5e:0d:fe:83:d5:1c:fd:8e:c3:40:89:d5:3e: 6f:8e:da:2b:6c:cb:bb:e5:49:8c:b0:72:92:62:78: 10:56:9c:88:b6:e2:31:d1:fa:ed:c4:39:be:5a:7e: ad:b0:8f:7f:0b:94:b8:7e:48:2c:3c:8a:53:43:39: 0b:5c:f1:e2:ee:86:80:1d:fc:fd:b9:14:01:00:5c: 49:88:b0:2d:a2:5f:a0:8a:b0:bd:b7:49:02:12:08: ed:20:bc:f9:3a:3c:19:f0:92:6c:76:b0:b3:04:bd: b4:5a:5e:d4:06:75:bf:15:f5:17:32:bd:0d:4d:90: 8b:9b:56:67:a7:70:87:39:7d:01:4c:ec:8f:6c:d5: 9a:ed:b5:ca:49:21:e0:8c:71:89:a3:19:68:d4:db: 1c:7f:c8:cf:72:b4:4f:30:54:69:45:e7:40:e6:4f: 0a:6a:cc:ca:08:64:9a:eb:91:5c:0a:0b:49:75:65: cd:0d:ad:0b:5c:d5:73:ac:7e:7d:74:3c:a1:7f:98: b7:73:9e:b5:37:c4:9f:81:a7:60:a5:c4:26:c5:60: f4:96:3d:01:53:e0:e6:48:81:ef:88:43:63:39:5f: 4f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:85:C2:F0:36:BB:26:C6:41:97:8C:70:46:D1:29:00:5D:DD:BE:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/1222a11d-80a3-457a-aa55-a4b1fec71a5c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.148.144.0-23.148.146.255 IPv6: 2602:fd8f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398220 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e8:08:d4:ee:d0:6b:c8:f3:04:d7:a6:06:1c:8a:48:83:a6: c6:67:a8:f0:dd:a0:9e:58:21:fa:12:08:51:56:57:1c:06:4a: 0d:f3:bc:dc:51:32:e5:69:5e:1c:30:ae:26:08:e1:93:7c:cb: ac:05:f3:49:ce:5c:56:94:2c:bd:cf:37:96:6c:02:59:3c:64: 53:4b:7b:62:29:12:23:92:ef:36:97:26:5e:a2:33:f1:53:1a: 8d:a3:fb:fd:6a:13:4d:50:78:3d:bb:f1:b0:d1:7c:b2:fc:dd: 12:57:54:0e:5f:17:03:79:86:37:df:b1:13:ec:58:7f:de:60: ca:d8:0b:bf:bc:af:7c:5a:7b:54:c6:74:68:b3:c8:d9:66:b9: 12:18:86:62:d9:b8:76:ae:7d:85:dd:6c:cc:e1:8b:98:2a:cc: 63:93:16:34:25:50:3f:91:ef:12:b5:b3:c5:ca:b6:72:07:1c: f4:e0:df:e1:37:68:97:92:f3:89:f1:ab:e1:16:5d:44:37:46: 46:60:1b:22:2c:e7:f8:de:00:63:7b:28:c5:c8:ce:98:66:ba: 39:d1:90:8d:51:e0:6c:9a:71:da:67:b8:3a:75:5e:7c:f0:bb: 90:17:bf:97:11:81:f4:2f:e7:c6:e9:ff:5b:17:90:39:f9:b5: b9:a0:be:0b -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEuMWRWaG1IPElib4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNzA1MDAyMloXDTI4MDEyMDA2MDAyMlowLzEtMCsGA1UEAxMk MTIyMmExMWQtODBhMy00NTdhLWFhNTUtYTRiMWZlYzcxYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHS4SRUPeqzAK7lKbdsMdIV7SkSKyl7ZNHx9 7pw+mF4N/oPVHP2Ow0CJ1T5vjtorbMu75UmMsHKSYngQVpyItuIx0frtxDm+Wn6t sI9/C5S4fkgsPIpTQzkLXPHi7oaAHfz9uRQBAFxJiLAtol+girC9t0kCEgjtILz5 OjwZ8JJsdrCzBL20Wl7UBnW/FfUXMr0NTZCLm1Znp3CHOX0BTOyPbNWa7bXKSSHg jHGJoxlo1Nscf8jPcrRPMFRpRedA5k8KaszKCGSa65FcCgtJdWXNDa0LXNVzrH59 dDyhf5i3c561N8SfgadgpcQmxWD0lj0BU+DmSIHviENjOV9PkQIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFKCFwvA2uybGQZeMcEbRKQBd3b6HMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8x MjIyYTExZC04MGEzLTQ1N2EtYWE1NS1hNGIxZmVjNzFhNWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzEyMjJhMTFkLTgwYTMtNDU3YS1h YTU1LWE0YjFmZWM3MWE1Yy8xMjIyYTExZC04MGEzLTQ1N2EtYWE1NS1hNGIxZmVj NzFhNWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMBQEAgABMA4wDAMEBBeUkAMEABeUkjAOBAIAAjAIAwYEJgL9jwAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhOMMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHToCNTu0GvI8wTX pgYcikiDpsZnqPDdoJ5YIfoSCFFWVxwGSg3zvNxRMuVpXhwwriYI4ZN8y6wF80nO XFaULL3PN5ZsAlk8ZFNLe2IpEiOS7zaXJl6iM/FTGo2j+/1qE01QeD278bDRfLL8 3RJXVA5fFwN5hjffsRPsWH/eYMrYC7+8r3xae1TGdGizyNlmuRIYhmLZuHaufYXd bMzhi5gqzGOTFjQlUD+R7xK1s8XKtnIHHPTg3+E3aJeS84nxq+EWXUQ3RkZgGyIs 5/jeAGN7KMXIzphmujnRkI1R4GyacdpnuDp1Xnzwu5AXv5cRgfQv58bp/1sXkDn5 tbmgvgs= -----END CERTIFICATE-----Generated at Sat Nov 8 01:29:33 2025 by rpki-client