$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd.cer File: 53f88802-f72c-435e-8525-75ea583e4ccd.cer (raw, json) Hash identifier: XXjZyVDo79TXEaAeEktmNwOF6tufr6M1aePxS6nEmK4= Subject key identifier: 77:63:47:88:C5:8A:6B:ED:5F:84:8C:07:53:AB:B5:98:96:D6:B3:92 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BBCC8CD20898F3741B282B400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd/53f88802-f72c-435e-8525-75ea583e4ccd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 13:24:16 +0000 Certificate not after: Sun 06 Feb 2028 13:24:16 +0000 Subordinate resources: AS: 401159 IP: 23.180.168.0/24 IP: 2602:f8bd::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:c8:cd:20:89:8f:37:41:b2:82:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 3 13:24:16 2025 GMT Not After : Feb 6 13:24:16 2028 GMT Subject: CN=53f88802-f72c-435e-8525-75ea583e4ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b5:ee:32:22:50:88:57:bf:8e:ce:47:98:fb: a5:05:b0:d5:f7:7a:40:13:e4:a9:52:1a:83:8b:95: 06:c5:1c:c8:51:e2:6a:9a:08:5a:70:54:87:55:f9: 58:54:8e:7f:0b:5b:48:6e:dc:6c:9f:6b:aa:4d:58: 29:1b:8c:2f:58:11:41:b9:6b:99:1e:fc:eb:ee:cd: 28:04:92:23:7a:65:bb:2f:16:66:08:06:6d:b5:b1: c8:cd:5e:d8:00:f7:8e:1c:27:d4:63:b7:35:e0:1b: a7:4c:44:26:6c:18:f9:96:c1:d4:56:e9:b6:14:66: 8d:97:16:19:18:24:00:03:80:43:ea:27:e5:89:a1: 18:da:d0:91:8b:20:bc:3a:5d:88:31:9b:63:c4:a8: 2c:6a:ac:c5:bd:f3:05:d1:2b:49:99:c4:a0:24:be: e2:f7:3b:79:79:3b:f2:26:7d:b9:21:72:c2:4e:ef: 4c:af:5f:77:cb:71:27:32:2d:d3:80:b6:2d:97:66: 89:e6:bf:0c:97:64:c2:15:aa:c7:e2:03:23:c4:1f: 55:b8:81:2b:38:1d:41:b0:7d:db:7c:71:0d:92:93: a2:7e:d6:b0:ea:91:d0:87:c5:44:57:c8:1a:4f:41: bb:d1:cc:ad:eb:80:21:b1:2f:81:24:8e:e1:01:25: 70:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:63:47:88:C5:8A:6B:ED:5F:84:8C:07:53:AB:B5:98:96:D6:B3:92 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd/53f88802-f72c-435e-8525-75ea583e4ccd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.180.168.0/24 IPv6: 2602:f8bd::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401159 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:90:05:9c:f2:b5:3d:a4:ac:f7:3f:92:e2:d7:91:48:80:df: ca:2c:9f:f2:4b:10:59:4c:4f:93:41:e6:54:88:68:0a:28:b5: 9a:04:4d:62:6c:69:f7:63:68:97:79:58:4e:78:3a:f6:b0:66: 26:34:2b:59:dc:2a:5e:d9:33:93:48:ab:df:88:2f:38:bd:5e: 2c:fb:42:fc:21:80:7e:fa:03:b3:32:45:66:66:30:57:70:bd: 0c:10:77:64:95:34:b8:6c:3a:f2:17:dc:2e:cc:d5:fc:53:7b: 93:43:f2:df:12:86:f4:6e:af:7d:2f:86:78:11:7d:57:f9:35: 8d:d4:58:76:69:be:c0:0d:7a:4c:ba:7e:5e:b6:a2:12:33:bc: a0:f1:08:06:1d:c0:2e:bd:80:f8:ae:05:d1:0f:6f:69:0c:ff: 38:7c:05:d3:c1:50:f7:b9:51:47:d0:f0:07:62:13:2d:af:29: 2a:99:e7:8b:a2:5f:ae:32:b2:c2:64:7d:5a:8e:07:c6:78:34: 29:cc:13:94:71:14:a4:ea:ee:5d:21:55:68:50:d2:a0:b7:7f: bd:64:2d:ec:ea:58:d5:08:c4:e7:43:96:9d:9d:9e:b7:7e:ec: b1:ce:70:04:93:48:eb:c1:ab:4d:96:3a:d8:53:c0:88:82:d8: f5:d0:11:ba -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEu8yM0giY83QbKCtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwMzEzMjQxNloXDTI4MDIwNjEzMjQxNlowLzEtMCsGA1UEAxMk NTNmODg4MDItZjcyYy00MzVlLTg1MjUtNzVlYTU4M2U0Y2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrXuMiJQiFe/js5HmPulBbDV93pAE+SpUhqD i5UGxRzIUeJqmghacFSHVflYVI5/C1tIbtxsn2uqTVgpG4wvWBFBuWuZHvzr7s0o BJIjemW7LxZmCAZttbHIzV7YAPeOHCfUY7c14BunTEQmbBj5lsHUVum2FGaNlxYZ GCQAA4BD6ifliaEY2tCRiyC8Ol2IMZtjxKgsaqzFvfMF0StJmcSgJL7i9zt5eTvy Jn25IXLCTu9Mr193y3EnMi3TgLYtl2aJ5r8Ml2TCFarH4gMjxB9VuIErOB1BsH3b fHENkpOiftaw6pHQh8VEV8gaT0G70cyt64AhsS+BJI7hASVw6QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHdjR4jFimvtX4SMB1OrtZiW1rOSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81 M2Y4ODgwMi1mNzJjLTQzNWUtODUyNS03NWVhNTgzZTRjY2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzUzZjg4ODAyLWY3MmMtNDM1ZS04 NTI1LTc1ZWE1ODNlNGNjZC81M2Y4ODgwMi1mNzJjLTQzNWUtODUyNS03NWVhNTgz ZTRjY2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXtKgwDgQCAAIwCAMGACYC+L0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYfBzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAokAWc8rU9pKz3P5Li15FIgN/K LJ/ySxBZTE+TQeZUiGgKKLWaBE1ibGn3Y2iXeVhOeDr2sGYmNCtZ3Cpe2TOTSKvf iC84vV4s+0L8IYB++gOzMkVmZjBXcL0MEHdklTS4bDryF9wuzNX8U3uTQ/LfEob0 bq99L4Z4EX1X+TWN1Fh2ab7ADXpMun5etqISM7yg8QgGHcAuvYD4rgXRD29pDP84 fAXTwVD3uVFH0PAHYhMtrykqmeeLol+uMrLCZH1ajgfGeDQpzBOUcRSk6u5dIVVo UNKgt3+9ZC3s6ljVCMTnQ5adnZ63fuyxznAEk0jrwatNljrYU8CIgtj10BG6 -----END CERTIFICATE-----Generated at Tue Nov 4 09:23:36 2025 by rpki-client