$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer File: 2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer (raw, json) Hash identifier: TDtfbQuBpWOmONIi9/5YayWNEOFKt1XjREqzA/EcwgE= Subject key identifier: B3:81:B5:75:94:35:76:B8:F5:24:28:4C:F7:C5:C1:BC:18:6D:F5:BD Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CE35A71D50E9EE61E245FB6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Feb 2026 01:45:22 +0000 Certificate not after: Mon 22 May 2028 00:45:22 +0000 Subordinate resources: IP: 137.104.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:5a:71:d5:0e:9e:e6:1e:24:5f:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 17 01:45:22 2026 GMT Not After : May 22 00:45:22 2028 GMT Subject: CN=2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d1:74:1a:d4:e2:fc:83:2d:e1:b6:d4:e2:c3: 70:15:70:de:5d:90:82:96:7c:7b:e6:d7:da:c5:f5: 74:be:cc:89:b4:d3:fa:b0:48:dd:c7:0d:d8:6d:6d: fa:75:fc:55:7a:00:cc:56:91:a1:e6:90:a7:a2:69: d8:4c:38:f2:90:ad:2e:fc:78:ef:ea:27:ff:bf:c2: b0:97:02:c9:dd:62:17:40:35:a6:c1:72:55:4f:5d: 86:a3:a6:14:ef:56:8a:09:93:91:b9:fd:f3:18:4b: 7e:cf:0c:f7:f9:5d:46:29:42:af:c6:3e:d3:80:cf: 6d:8e:a5:e0:b0:4a:ea:7f:18:19:a7:d2:5b:fa:3d: 03:67:02:ed:21:ef:da:16:8e:65:1d:54:32:b8:34: bc:4e:54:83:d7:29:30:68:fe:a8:52:24:0d:bf:27: 6d:ba:b9:d6:87:30:b5:da:18:0f:4c:5a:10:6f:8f: 0c:81:22:ca:d8:96:4b:01:20:14:e2:d6:67:08:2b: 3c:86:eb:a3:0b:b9:2f:ec:82:e9:33:78:9b:d5:60: 34:de:bf:3e:32:c8:62:4f:60:11:8a:f8:13:1e:c7: a0:21:a2:fe:76:7f:8b:db:e8:cc:9d:d4:49:ad:24: d5:1f:9c:00:00:05:0b:2f:1c:f7:4b:c3:2f:8d:c1: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:81:B5:75:94:35:76:B8:F5:24:28:4C:F7:C5:C1:BC:18:6D:F5:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 137.104.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:6b:72:a1:e3:1d:62:2c:83:6d:0c:13:7a:3f:7b:58:02:71: 36:4b:71:65:82:fc:40:b7:7b:2e:fe:8b:f5:0f:80:6b:79:f2: 12:f6:08:25:0c:f5:72:db:00:52:9a:7e:9c:99:89:e6:f2:f5: d0:b8:4c:be:3a:89:2a:c8:21:6a:3d:31:7c:30:ac:d8:6f:82: cc:e1:aa:cd:89:60:26:3a:d0:96:21:e8:28:bc:46:e1:42:2d: 14:12:1b:ca:58:d4:06:4c:76:84:09:43:8d:7e:59:d0:8f:7f: 66:a3:68:d8:8c:3c:f9:2a:00:9c:bd:c8:e2:38:35:54:f4:88: a0:93:e2:bf:3d:1c:52:d6:b1:fa:1c:42:93:e2:47:3b:62:71: 1e:76:12:37:22:c1:e1:65:1f:9b:d5:19:bc:a6:40:d5:5d:18: 14:23:0c:1f:81:98:65:50:05:7b:70:fe:c5:04:5a:3e:9d:ae: a8:af:d7:3d:2a:e7:3e:4b:c1:1b:45:19:5a:b2:83:57:01:49: fc:d3:8f:42:03:53:b6:8f:37:ca:8e:df:5c:83:26:06:d3:ba: ca:1a:af:09:62:0e:dd:ee:ca:59:45:93:2b:09:89:32:f3:a5: eb:a6:53:31:39:c8:ef:3b:18:0d:8e:f0:3d:5e:ec:05:f7:23: bc:20:cc:2b -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEzjWnHVDp7mHiRftsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIxNzAxNDUyMloXDTI4MDUyMjAwNDUyMlowLzEtMCsGA1UEAxMk MmQ3YWNiNjktMjFlYS00ZmQyLWEyNWQtZmZjYmVkMmFmOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9F0GtTi/IMt4bbU4sNwFXDeXZCClnx75tfa xfV0vsyJtNP6sEjdxw3YbW36dfxVegDMVpGh5pCnomnYTDjykK0u/Hjv6if/v8Kw lwLJ3WIXQDWmwXJVT12Go6YU71aKCZORuf3zGEt+zwz3+V1GKUKvxj7TgM9tjqXg sErqfxgZp9Jb+j0DZwLtIe/aFo5lHVQyuDS8TlSD1ykwaP6oUiQNvydturnWhzC1 2hgPTFoQb48MgSLK2JZLASAU4tZnCCs8huujC7kv7ILpM3ib1WA03r8+MshiT2AR ivgTHsegIaL+dn+L2+jMndRJrSTVH5wAAAULLxz3S8MvjcEdAwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFLOBtXWUNXa49SQoTPfFwbwYbfW9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8y ZDdhY2I2OS0yMWVhLTRmZDItYTI1ZC1mZmNiZWQyYWY4ZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzJkN2FjYjY5LTIxZWEtNGZkMi1h MjVkLWZmY2JlZDJhZjhkOC8yZDdhY2I2OS0yMWVhLTRmZDItYTI1ZC1mZmNiZWQy YWY4ZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCJaDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAca3Kh4x1iLINtDBN6P3tY AnE2S3FlgvxAt3su/ov1D4BrefIS9gglDPVy2wBSmn6cmYnm8vXQuEy+OokqyCFq PTF8MKzYb4LM4arNiWAmOtCWIegovEbhQi0UEhvKWNQGTHaECUONflnQj39mo2jY jDz5KgCcvcjiODVU9Iigk+K/PRxS1rH6HEKT4kc7YnEedhI3IsHhZR+b1Rm8pkDV XRgUIwwfgZhlUAV7cP7FBFo+na6or9c9Kuc+S8EbRRlasoNXAUn8049CA1O2jzfK jt9cgyYG07rKGq8JYg7d7spZRZMrCYky86XrplMxOcjvOxgNjvA9XuwF9yO8IMwr -----END CERTIFICATE-----Generated at Sun Feb 22 16:35:04 2026 by rpki-client