$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer File: ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer (raw, json) Hash identifier: u/OoWUrOQL0/WZwALXWcmLOcmsoWFg+BneCDSoS9sEc= Subject key identifier: 9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BA9CFEB4D395EB9D5FB049700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Oct 2025 18:18:15 +0000 Certificate not after: Sun 30 Jan 2028 19:18:15 +0000 Subordinate resources: AS: 13490 IP: 23.226.96.0/20 IP: 24.52.64.0/18 IP: 24.53.128.0/18 IP: 72.240.0.0/15 IP: 134.228.0.0/16 IP: 162.210.136.0/21 IP: 192.252.192.0/20 IP: 199.83.104.0/21 IP: 199.191.112.0/21 IP: 2600:2800::/30 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:cf:eb:4d:39:5e:b9:d5:fb:04:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 27 18:18:15 2025 GMT Not After : Jan 30 19:18:15 2028 GMT Subject: CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:03:30:04:3e:b3:70:bd:81:dc:0d:08:c0: 29:00:96:2d:4f:c4:d0:6f:cd:e2:d5:eb:03:f6:af: 36:18:6f:23:9e:5e:bf:fc:31:d0:21:42:4a:60:63: 83:22:3d:f1:06:ef:1d:bb:61:80:0d:a2:fa:05:67: 89:bc:8e:74:de:b0:7b:30:ca:d4:84:7f:cc:2c:09: 9a:f7:92:30:db:6f:9d:17:29:ae:0d:0c:4f:17:06: 5f:a6:b7:3d:72:21:1a:4f:2b:c2:25:7d:d1:0d:b9: 87:14:02:3a:12:70:0f:31:87:79:92:07:63:b2:07: ba:c2:5b:b0:41:d6:5a:06:ab:51:a5:a6:57:25:56: 0e:44:c6:4b:0e:30:de:d1:dc:27:96:25:e4:fa:08: 67:bd:26:c0:65:4e:12:3f:f2:bf:cd:db:8c:b1:69: 77:70:dc:d3:41:18:c1:80:34:01:da:bb:8d:16:a4: 3d:f3:6b:eb:13:1f:9b:51:42:1a:f8:eb:28:26:4d: 8d:55:24:fb:3e:6a:43:90:81:29:96:41:46:52:53: 3b:d6:2c:86:8f:3e:50:ce:3d:10:b7:51:46:02:b2: 7c:53:71:a0:35:bd:3a:52:88:d6:34:52:0c:24:9c: 55:b0:a3:b7:14:f7:91:ab:7f:36:f6:bf:cc:20:b8: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.226.96.0/20 24.52.64.0/18 24.53.128.0/18 72.240.0.0/15 134.228.0.0/16 162.210.136.0/21 192.252.192.0/20 199.83.104.0/21 199.191.112.0/21 IPv6: 2600:2800::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13490 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ff:38:42:42:88:98:30:29:fb:7d:16:48:08:80:7a:62:c5: b0:7c:52:82:86:8a:14:99:bc:c2:3d:68:7c:92:2e:37:5a:8b: 45:4e:1a:00:09:fc:cb:0e:76:b0:b1:ae:77:f0:6a:73:fd:cb: 38:d5:d1:e1:05:29:45:aa:91:2f:d5:f7:73:e7:d8:ff:74:91: 45:5c:9a:f3:b2:3d:8f:bb:b5:45:de:e0:50:98:23:e2:9c:0a: 7f:e1:2a:84:43:e1:b7:ea:2f:cd:58:d4:fb:0e:a1:7f:a9:6b: 15:86:7a:a7:0a:e0:b9:5c:84:85:66:42:af:06:06:a2:b7:94: ba:a8:da:72:8b:76:af:5d:aa:7c:d9:db:8a:c2:a8:c6:30:2d: e5:8a:7b:fe:72:a1:dd:9f:01:9f:2e:a0:8c:38:f9:4c:79:0c: 01:56:d8:37:01:19:fb:c8:fa:0a:59:da:ce:72:e9:30:9b:92: 25:df:b1:cb:c9:67:9b:f2:4c:74:9b:5f:a8:8b:c2:d9:2e:bd: 07:da:e1:b8:d0:7b:0a:05:3a:db:1e:a2:aa:6c:03:59:d1:8e: 7f:0b:0c:2a:a7:3b:5f:05:3c:24:a0:ce:61:68:5f:63:b8:e2: e7:9c:d5:bf:61:28:91:76:cd:75:23:18:22:7c:58:4c:0a:32: 5d:4f:12:40 -----BEGIN CERTIFICATE----- MIIHRTCCBi2gAwIBAgIUAQ0Mn0MoWEupz+tNOV651fsElwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyNzE4MTgxNVoXDTI4MDEzMDE5MTgxNVowLzEtMCsGA1UEAxMk Y2U0YmFlMjItMjgyYy00YzQyLWEwNGYtZGM2YjQyNTBmYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/wDMAQ+s3C9gdwNCMApAJYtT8TQb83i1esD 9q82GG8jnl6//DHQIUJKYGODIj3xBu8du2GADaL6BWeJvI503rB7MMrUhH/MLAma 95Iw22+dFymuDQxPFwZfprc9ciEaTyvCJX3RDbmHFAI6EnAPMYd5kgdjsge6wluw QdZaBqtRpaZXJVYORMZLDjDe0dwnliXk+ghnvSbAZU4SP/K/zduMsWl3cNzTQRjB gDQB2ruNFqQ982vrEx+bUUIa+OsoJk2NVST7PmpDkIEplkFGUlM71iyGjz5Qzj0Q t1FGArJ8U3GgNb06UojWNFIMJJxVsKO3FPeRq3829r/MILjoHQIDAQABo4IEVzCC BFMwHQYDVR0OBBYEFJr6MO/bVill9OeEma6x1dWniVzRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j ZTRiYWUyMi0yODJjLTRjNDItYTA0Zi1kYzZiNDI1MGZhODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2NlNGJhZTIyLTI4MmMtNGM0Mi1h MDRmLWRjNmI0MjUwZmE4NC9jZTRiYWUyMi0yODJjLTRjNDItYTA0Zi1kYzZiNDI1 MGZhODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwXAYIKwYBBQUH AQcBAf8ETTBLMDoEAgABMDQDBAQX4mADBAYYNEADBAYYNYADAwFI8AMDAIbkAwQD otKIAwQEwPzAAwQDx1NoAwQDx79wMA0EAgACMAcDBQImACgAMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAjSyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFX/OEJCiJgwKft9FkgIgHpixbB8UoKG ihSZvMI9aHySLjdai0VOGgAJ/MsOdrCxrnfwanP9yzjV0eEFKUWqkS/V93Pn2P90 kUVcmvOyPY+7tUXe4FCYI+KcCn/hKoRD4bfqL81Y1PsOoX+paxWGeqcK4LlchIVm Qq8GBqK3lLqo2nKLdq9dqnzZ24rCqMYwLeWKe/5yod2fAZ8uoIw4+Ux5DAFW2DcB GfvI+gpZ2s5y6TCbkiXfscvJZ5vyTHSbX6iLwtkuvQfa4bjQewoFOtseoqpsA1nR jn8LDCqnO18FPCSgzmFoX2O44uec1b9hKJF2zXUjGCJ8WEwKMl1PEkA= -----END CERTIFICATE-----Generated at Tue Nov 4 17:12:22 2025 by rpki-client