$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a.cer File: 190a907f-bde1-4ae9-a43b-80d0b516600a.cer (raw, json) Hash identifier: upT7BXyyfhBwbQ1IBx8AtenJHXDXApHaDHIdRElf3vU= Subject key identifier: 08:3A:AF:31:B7:C0:61:09:23:30:1E:39:8E:9C:75:6E:E8:81:CC:C9 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CDAFA661AC38CC1256130B100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/190a907f-bde1-4ae9-a43b-80d0b516600a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 14 Feb 2026 01:45:22 +0000 Certificate not after: Fri 19 May 2028 00:45:22 +0000 Subordinate resources: IP: 156.142.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:da:fa:66:1a:c3:8c:c1:25:61:30:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 14 01:45:22 2026 GMT Not After : May 19 00:45:22 2028 GMT Subject: CN=190a907f-bde1-4ae9-a43b-80d0b516600a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:e9:3f:dc:ec:16:f9:ac:36:e5:df:48:bb: 45:23:82:35:43:75:0c:e0:9f:c7:a5:b1:b6:87:74: dd:de:c9:c1:c6:d6:4e:41:24:f7:82:fa:6f:f7:d6: 7f:a0:ba:b1:f5:5d:f3:af:49:20:12:21:5a:98:28: 2c:64:88:52:f3:de:21:df:ab:d4:f2:7d:a9:c6:5d: 26:12:f1:d8:46:dc:db:2a:e7:2f:1f:71:4c:12:eb: 73:bf:ac:59:08:cd:9a:f4:67:fb:a2:36:02:94:a1: f8:9b:53:cc:5a:6c:3e:3b:44:36:37:ee:4a:ab:dd: d0:45:80:c3:e1:f8:5d:c4:c3:53:c6:65:f3:d6:e4: 5f:ac:de:4f:1f:76:c7:40:19:a5:f4:d4:fd:8c:bb: 72:4f:4d:46:f8:84:63:1a:51:b2:da:34:ff:14:d3: ca:37:f7:12:b5:26:5d:eb:76:00:4f:3a:b1:81:8a: de:7c:21:d7:45:89:d8:04:de:f1:c9:7d:c9:4e:6f: f9:1b:15:e2:5e:a5:0c:86:9a:82:13:14:3a:03:d7: c9:0c:6f:46:f8:12:ea:82:3e:5b:cd:08:5d:0c:88: e4:e0:a3:59:e1:13:78:e9:49:b6:5f:d5:1b:94:7f: 2c:40:90:b8:8b:6e:8c:2f:af:8b:fb:27:8c:c6:05: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3A:AF:31:B7:C0:61:09:23:30:1E:39:8E:9C:75:6E:E8:81:CC:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/190a907f-bde1-4ae9-a43b-80d0b516600a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 156.142.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fe:16:b2:89:44:e9:35:7e:ed:b7:03:12:37:f5:a1:be:fc: 0a:a1:d9:52:5d:38:26:05:7d:c3:77:83:0b:97:de:0e:5d:7b: 65:18:06:50:56:03:68:1f:6c:e1:a1:b7:35:89:05:76:4b:9f: be:ea:80:f9:db:9d:93:05:65:f8:90:55:7b:f0:34:d7:eb:bc: 04:6b:93:b6:33:9c:a5:7a:d8:cb:3c:dc:91:f9:d8:d6:8c:82: f3:c3:59:95:74:88:51:28:cf:ab:93:8b:20:c3:6e:ae:82:16: 81:ab:e5:b0:72:0c:7c:b2:ca:d5:87:d2:12:8a:48:6e:82:15: 20:05:d4:e2:a5:c7:86:5e:6b:3c:b4:ce:ba:90:18:5b:6f:27: 9f:28:7e:1b:c0:ad:2b:d6:30:d1:64:2a:99:7a:06:64:57:77: 7a:cb:7f:55:1d:5c:29:91:b0:9b:ae:c0:0e:02:1b:54:04:f0: 7f:84:c6:d7:f1:1d:47:92:f1:60:db:a6:08:6e:db:01:a0:ea: ce:31:8b:fa:eb:4e:59:69:c3:80:7e:5b:2f:2a:9f:ef:6b:c4: f5:95:3a:22:37:2f:0d:e8:2d:75:a5:11:26:23:98:bf:5f:71: dd:97:85:2e:14:ba:b1:14:9e:db:4f:56:c4:38:c6:e7:e9:73: 67:38:89:97 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEza+mYaw4zBJWEwsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIxNDAxNDUyMloXDTI4MDUxOTAwNDUyMlowLzEtMCsGA1UEAxMk MTkwYTkwN2YtYmRlMS00YWU5LWE0M2ItODBkMGI1MTY2MDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkfpP9zsFvmsNuXfSLtFI4I1Q3UM4J/HpbG2 h3Td3snBxtZOQST3gvpv99Z/oLqx9V3zr0kgEiFamCgsZIhS894h36vU8n2pxl0m EvHYRtzbKucvH3FMEutzv6xZCM2a9Gf7ojYClKH4m1PMWmw+O0Q2N+5Kq93QRYDD 4fhdxMNTxmXz1uRfrN5PH3bHQBml9NT9jLtyT01G+IRjGlGy2jT/FNPKN/cStSZd 63YATzqxgYrefCHXRYnYBN7xyX3JTm/5GxXiXqUMhpqCExQ6A9fJDG9G+BLqgj5b zQhdDIjk4KNZ4RN46Um2X9UblH8sQJC4i26ML6+L+yeMxgUiZQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFAg6rzG3wGEJIzAeOY6cdW7ogczJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8x OTBhOTA3Zi1iZGUxLTRhZTktYTQzYi04MGQwYjUxNjYwMGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzE5MGE5MDdmLWJkZTEtNGFlOS1h NDNiLTgwZDBiNTE2NjAwYS8xOTBhOTA3Zi1iZGUxLTRhZTktYTQzYi04MGQwYjUx NjYwMGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCcjjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz/hayiUTpNX7ttwMSN/Wh vvwKodlSXTgmBX3Dd4MLl94OXXtlGAZQVgNoH2zhobc1iQV2S5++6oD5252TBWX4 kFV78DTX67wEa5O2M5yletjLPNyR+djWjILzw1mVdIhRKM+rk4sgw26ughaBq+Ww cgx8ssrVh9ISikhughUgBdTipceGXms8tM66kBhbbyefKH4bwK0r1jDRZCqZegZk V3d6y39VHVwpkbCbrsAOAhtUBPB/hMbX8R1HkvFg26YIbtsBoOrOMYv6605ZacOA flsvKp/va8T1lToiNy8N6C11pREmI5i/X3Hdl4UuFLqxFJ7bT1bEOMbn6XNnOImX -----END CERTIFICATE-----Generated at Sun Feb 22 16:37:26 2026 by rpki-client