$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f95c7db-d2f0-42cb-99bd-f472a8e5414c.cer File: 9f95c7db-d2f0-42cb-99bd-f472a8e5414c.cer (raw, json) Hash identifier: sQhmNBguPSmyQphewWnyRbjd519FG4zIHajjvSQBgTw= Subject key identifier: B0:87:FA:81:7D:42:A5:29:A6:C2:ED:EC:0C:7F:AC:6C:5B:03:50:33 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BBCC30ADFEE4EE7DC3646AA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f95c7db-d2f0-42cb-99bd-f472a8e5414c/9f95c7db-d2f0-42cb-99bd-f472a8e5414c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f95c7db-d2f0-42cb-99bd-f472a8e5414c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 13:12:39 +0000 Certificate not after: Sun 06 Feb 2028 13:12:39 +0000 Subordinate resources: AS: 401094 IP: 23.179.56.0/24 IP: 2602:f8e2::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:c3:0a:df:ee:4e:e7:dc:36:46:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 3 13:12:39 2025 GMT Not After : Feb 6 13:12:39 2028 GMT Subject: CN=9f95c7db-d2f0-42cb-99bd-f472a8e5414c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:57:d1:ba:d7:70:0f:2f:28:39:af:2d:bb: af:26:44:37:b3:c0:37:94:81:d6:c5:1c:15:13:7f: 0f:90:fe:4e:55:8b:3c:13:40:0c:0d:f1:d2:89:27: aa:3d:3c:a6:ca:13:eb:1c:97:8d:1b:31:b0:8b:16: 53:24:08:f2:0c:9a:09:97:bf:c4:60:7b:e3:91:1f: e7:43:fd:3d:73:8c:56:14:a8:0c:a8:7e:51:d0:a0: 1b:15:42:0e:e8:a9:06:de:4a:de:87:8c:7c:22:e2: f3:06:fe:66:99:67:1f:40:38:40:31:38:6c:e7:94: 0b:ca:94:45:a6:c9:12:30:33:d1:4e:df:0f:e5:a0: e4:20:6a:b9:f3:b0:6f:46:9a:9a:7b:07:74:5b:e0: 7f:05:cb:b4:4f:24:d0:f3:cb:b5:05:ca:68:fc:6c: 13:c5:87:9a:01:c4:dd:b4:86:96:3f:13:d7:6f:05: cf:60:db:38:fe:93:93:22:3b:c2:f8:f5:50:99:06: 12:62:68:02:b6:7c:6a:6a:fb:96:7f:82:e3:27:be: 4d:ea:e3:74:c2:b9:f5:ad:5f:b9:f1:63:4c:c1:d6: 5d:f2:b5:6e:90:3f:08:76:76:58:a0:f9:48:45:13: 61:ea:48:02:70:77:9c:4c:66:60:89:3c:83:8f:08: 22:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:87:FA:81:7D:42:A5:29:A6:C2:ED:EC:0C:7F:AC:6C:5B:03:50:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f95c7db-d2f0-42cb-99bd-f472a8e5414c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f95c7db-d2f0-42cb-99bd-f472a8e5414c/9f95c7db-d2f0-42cb-99bd-f472a8e5414c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.179.56.0/24 IPv6: 2602:f8e2::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401094 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:44:bd:40:13:75:fd:e3:3d:4e:2d:24:de:71:20:8a:d6:d6: 78:aa:6c:b9:27:6f:10:23:2c:92:b5:02:8c:3b:dc:23:83:fd: cf:bd:bb:5c:58:73:05:f9:81:56:d9:c6:03:43:18:94:1a:cf: ce:48:79:16:53:d6:46:6f:31:5f:39:c8:e3:8d:55:ee:94:47: d1:0f:f6:b6:e2:6b:78:58:5d:a7:fd:20:fc:36:71:eb:cd:41: 69:0a:b4:3d:a1:4c:b4:e9:0d:2f:df:7d:6a:00:4a:01:e8:2f: fe:34:25:1e:8e:29:f9:cf:e3:6f:ec:bf:17:0b:cc:4d:d0:8a: 8f:d4:6f:fc:5b:31:a5:67:a1:ef:f0:69:a9:a1:b6:bd:f5:af: c7:e5:5b:b9:a4:ff:cf:89:28:c2:c5:e0:e5:f7:34:52:5f:e9: 55:a0:e5:c6:f5:b7:23:ff:db:34:89:82:4b:dc:f9:1d:a8:47: 39:f6:a8:1f:06:9d:93:f6:be:35:e8:61:67:e6:b5:cb:50:1f: 78:62:42:e8:62:44:c8:48:70:62:78:bb:8c:67:4d:5f:a8:3f: ba:53:cc:2d:ef:c4:d3:8e:97:fe:b9:21:6e:af:a8:33:63:54: 0a:b9:a4:ff:57:65:f9:6e:29:92:9f:76:3d:12:2e:e8:2b:0e: 79:67:0d:5a -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEu8wwrf7k7n3DZGqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwMzEzMTIzOVoXDTI4MDIwNjEzMTIzOVowLzEtMCsGA1UEAxMk OWY5NWM3ZGItZDJmMC00MmNiLTk5YmQtZjQ3MmE4ZTU0MTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnhX0brXcA8vKDmvLbuvJkQ3s8A3lIHWxRwV E38PkP5OVYs8E0AMDfHSiSeqPTymyhPrHJeNGzGwixZTJAjyDJoJl7/EYHvjkR/n Q/09c4xWFKgMqH5R0KAbFUIO6KkG3kreh4x8IuLzBv5mmWcfQDhAMThs55QLypRF pskSMDPRTt8P5aDkIGq587BvRpqaewd0W+B/Bcu0TyTQ88u1Bcpo/GwTxYeaAcTd tIaWPxPXbwXPYNs4/pOTIjvC+PVQmQYSYmgCtnxqavuWf4LjJ75N6uN0wrn1rV+5 8WNMwdZd8rVukD8IdnZYoPlIRRNh6kgCcHecTGZgiTyDjwgijQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLCH+oF9QqUppsLt7Ax/rGxbA1AzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85 Zjk1YzdkYi1kMmYwLTQyY2ItOTliZC1mNDcyYThlNTQxNGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzlmOTVjN2RiLWQyZjAtNDJjYi05 OWJkLWY0NzJhOGU1NDE0Yy85Zjk1YzdkYi1kMmYwLTQyY2ItOTliZC1mNDcyYThl NTQxNGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXszgwDgQCAAIwCAMGACYC+OIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYexjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxRL1AE3X94z1OLSTecSCK1tZ4 qmy5J28QIyyStQKMO9wjg/3PvbtcWHMF+YFW2cYDQxiUGs/OSHkWU9ZGbzFfOcjj jVXulEfRD/a24mt4WF2n/SD8NnHrzUFpCrQ9oUy06Q0v331qAEoB6C/+NCUejin5 z+Nv7L8XC8xN0IqP1G/8WzGlZ6Hv8Gmpoba99a/H5Vu5pP/PiSjCxeDl9zRSX+lV oOXG9bcj/9s0iYJL3PkdqEc59qgfBp2T9r416GFn5rXLUB94YkLoYkTISHBieLuM Z01fqD+6U8wt78TTjpf+uSFur6gzY1QKuaT/V2X5bimSn3Y9Ei7oKw55Zw1a -----END CERTIFICATE-----Generated at Tue Nov 4 09:29:28 2025 by rpki-client