$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969.cer File: bfcded43-2d76-428f-b7f1-3042af66f969.cer (raw, json) Hash identifier: 7ApNEBPbZKXKM+a+1o1gyEHKsOwCZWx5vg78rKhzCuo= Subject key identifier: E5:80:74:93:4A:D6:00:AE:DC:44:7A:A6:7D:10:61:9A:31:85:E3:6B Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B8C5B6344183D2A80297360A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 05:05:00 +0000 Certificate not after: Thu 20 Jan 2028 06:05:00 +0000 Subordinate resources: AS: 398357 IP: 23.159.176.0/24 IP: 23.175.48.0 -- 23.175.50.255 IP: 2602:fd3e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8c:5b:63:44:18:3d:2a:80:29:73:60:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 17 05:05:00 2025 GMT Not After : Jan 20 06:05:00 2028 GMT Subject: CN=bfcded43-2d76-428f-b7f1-3042af66f969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:ef:88:25:1f:11:2a:4f:4e:43:91:9f:5d: 62:a1:8a:e4:a2:50:49:0f:c4:d4:0b:e3:41:37:f8: e8:62:eb:51:2c:b6:6d:2e:ca:60:f3:c6:23:e7:d9: e7:86:d7:c2:89:a8:0a:f1:6d:37:7b:a9:81:55:e1: 08:8f:ff:b8:39:97:0a:4d:1e:13:12:ce:db:a0:1a: 9b:ab:5c:c3:77:c1:2a:de:b2:a3:61:cf:2d:a3:96: 42:da:09:19:6e:f2:95:5b:4b:a3:c1:93:e2:5f:cc: 71:84:87:45:c3:53:ad:61:55:5e:83:e4:99:02:4a: 08:a5:19:56:df:e6:70:3c:c7:27:8a:fa:b4:77:d0: 26:24:2d:83:ff:22:bf:b7:27:97:ef:9a:47:30:b3: 0d:2b:6b:d4:91:41:6c:b6:0a:31:54:3a:7b:3b:c4: da:47:af:4f:47:d8:db:51:ce:a2:28:16:63:41:d8: 80:f6:c1:65:22:46:5d:1f:fc:29:60:c0:f9:c0:70: b8:f6:0b:ef:c5:97:fe:ce:83:b2:81:c7:89:64:e3: 0e:a9:ca:0e:fc:8c:a3:d5:42:5c:41:41:35:c5:e0: 8a:ce:80:09:f1:1e:52:dc:86:33:ff:cd:f2:3e:8c: d1:41:58:02:b1:57:e0:45:f5:30:44:9b:c9:e1:fc: 6c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:80:74:93:4A:D6:00:AE:DC:44:7A:A6:7D:10:61:9A:31:85:E3:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.159.176.0/24 23.175.48.0-23.175.50.255 IPv6: 2602:fd3e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398357 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:96:81:6e:0c:86:a7:d1:4e:30:62:f5:cd:31:56:30:a0:7d: f1:6a:3a:73:a1:63:92:03:2c:68:8a:26:48:6c:b9:67:2a:62: d8:42:2f:30:3e:45:1a:45:67:b7:6d:64:87:d1:78:95:39:35: 6b:22:e4:96:a8:d1:83:81:03:92:be:3d:21:47:c5:18:e4:a0: 52:9b:ea:06:97:e9:08:eb:83:9e:06:ed:1f:1b:b9:5e:f6:32: 6b:81:40:1d:06:23:23:e2:86:8f:c9:7d:02:1c:3b:03:06:d0: 03:04:2a:2e:fb:fd:18:0a:bd:24:92:b3:b7:4f:08:13:fd:f7: cc:a7:91:83:fc:90:a4:87:2a:da:f4:36:a5:5c:51:b4:02:41: 7c:fa:78:fa:97:bc:2b:87:fc:e8:17:0f:45:20:ad:19:bb:da: d7:a0:ae:2b:9b:c7:b4:07:8c:e7:0f:c1:86:a1:26:16:bb:cb: 5b:de:b1:f8:d3:e9:1a:18:b0:e4:b3:bc:59:f5:fc:80:6f:ac: 70:e9:39:9d:ae:6d:e4:40:79:cc:2a:0f:f4:62:e5:4b:6c:8d: 47:09:37:05:50:7a:f3:36:9f:bc:71:0d:e5:e6:f3:26:fb:bd: c8:90:24:98:12:e9:0c:d6:c7:72:bd:80:cb:ce:57:15:26:72: 29:7e:c3:cf -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWEuMW2NEGD0qgClzYKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxNzA1MDUwMFoXDTI4MDEyMDA2MDUwMFowLzEtMCsGA1UEAxMk YmZjZGVkNDMtMmQ3Ni00MjhmLWI3ZjEtMzA0MmFmNjZmOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo43viCUfESpPTkORn11ioYrkolBJD8TUC+NB N/joYutRLLZtLspg88Yj59nnhtfCiagK8W03e6mBVeEIj/+4OZcKTR4TEs7boBqb q1zDd8Eq3rKjYc8to5ZC2gkZbvKVW0ujwZPiX8xxhIdFw1OtYVVeg+SZAkoIpRlW 3+ZwPMcnivq0d9AmJC2D/yK/tyeX75pHMLMNK2vUkUFstgoxVDp7O8TaR69PR9jb Uc6iKBZjQdiA9sFlIkZdH/wpYMD5wHC49gvvxZf+zoOygceJZOMOqcoO/Iyj1UJc QUE1xeCKzoAJ8R5S3IYz/83yPozRQVgCsVfgRfUwRJvJ4fxsCwIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFOWAdJNK1gCu3ER6pn0QYZoxheNrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9i ZmNkZWQ0My0yZDc2LTQyOGYtYjdmMS0zMDQyYWY2NmY5NjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2JmY2RlZDQzLTJkNzYtNDI4Zi1i N2YxLTMwNDJhZjY2Zjk2OS9iZmNkZWQ0My0yZDc2LTQyOGYtYjdmMS0zMDQyYWY2 NmY5NjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMBoEAgABMBQDBAAXn7AwDAMEBBevMAMEABevMjAOBAIAAjAIAwYE JgL9PgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhQVMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAACWgW4M hqfRTjBi9c0xVjCgffFqOnOhY5IDLGiKJkhsuWcqYthCLzA+RRpFZ7dtZIfReJU5 NWsi5Jao0YOBA5K+PSFHxRjkoFKb6gaX6Qjrg54G7R8buV72MmuBQB0GIyPiho/J fQIcOwMG0AMEKi77/RgKvSSSs7dPCBP998ynkYP8kKSHKtr0NqVcUbQCQXz6ePqX vCuH/OgXD0UgrRm72tegriubx7QHjOcPwYahJha7y1vesfjT6RoYsOSzvFn1/IBv rHDpOZ2ubeRAecwqD/Ri5UtsjUcJNwVQevM2n7xxDeXm8yb7vciQJJgS6QzWx3K9 gMvOVxUmcil+w88= -----END CERTIFICATE-----Generated at Sat Nov 8 01:32:33 2025 by rpki-client