$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer File: 3228caa5-d014-404b-9e3d-61cdea1ff493.cer (raw, json) Hash identifier: 0hTrJ+MzGBopGgl5+lAg4ACO+bnT8Tpw7r7rVdCz1vQ= Subject key identifier: 61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CAB84BE2035C1EB6650801300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Jan 2026 01:45:19 +0000 Certificate not after: Tue 02 May 2028 00:45:19 +0000 Subordinate resources: AS: 401438 IP: 198.200.242.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:84:be:20:35:c1:eb:66:50:80:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 28 01:45:19 2026 GMT Not After : May 2 00:45:19 2028 GMT Subject: CN=3228caa5-d014-404b-9e3d-61cdea1ff493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8a:a3:ef:7a:34:d9:71:34:46:f7:eb:8d:62: 0e:3d:0d:96:24:17:55:00:22:e0:4f:87:cb:c0:8d: 33:89:a3:b4:ef:12:3c:5d:0a:6c:bd:8f:8d:28:76: fb:45:ae:db:a9:8c:0c:48:7a:92:67:62:4a:16:2b: d1:83:28:48:98:53:fa:11:3f:92:ba:41:84:00:15: ad:e5:8f:ab:88:9c:83:35:c3:ed:20:28:6d:94:3f: 63:44:c6:2d:f7:ed:dd:df:50:02:4c:19:d1:c0:ce: bd:a5:9a:2a:b3:59:b4:2c:c8:31:04:cc:f5:dc:07: 5b:96:29:a9:ba:f7:54:d1:fd:ca:8d:5a:05:f5:e9: 56:da:d8:c7:b5:c2:6d:5f:80:46:bf:ea:cd:84:36: be:3d:0f:e0:ad:b1:24:a0:0c:bc:51:85:a3:0e:57: 49:cd:f9:1e:3d:5d:8e:83:22:25:95:ef:58:aa:9f: ee:bd:38:30:96:af:3e:b2:b4:46:64:f6:65:46:f6: 15:bc:e1:d9:9a:78:da:55:76:0f:2a:50:02:83:bf: 4d:da:9d:1e:09:40:40:9f:81:a0:a4:5c:ac:4b:7f: 4a:20:dd:14:6b:07:4b:6d:21:5b:a5:10:ba:fe:78: 35:e5:3c:9d:92:c9:fb:de:ca:24:bb:5a:87:68:da: df:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 198.200.242.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401438 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:19:66:d9:53:75:b3:30:b3:67:ba:72:ab:6e:f9:14:ae:2e: 3c:99:62:97:28:87:d6:1a:be:a4:a9:a2:a5:df:09:14:60:1e: 2a:95:ed:61:6a:3d:6d:4b:41:93:17:2b:2e:24:50:fd:ae:aa: 6e:f0:75:10:4d:5f:aa:95:18:f9:bb:00:1d:71:bd:6a:13:65: 35:47:dd:2b:21:9d:79:96:a5:f3:b7:54:93:db:71:fc:3f:31: bf:5f:59:46:68:ae:05:a3:bf:e2:96:81:2c:e1:97:14:24:ba: 63:84:2c:33:55:f0:c8:16:ce:0b:e2:ea:0e:90:e9:30:18:b3: 9b:8c:12:69:32:7f:d5:84:cd:a7:2a:6c:70:f1:54:04:cf:e0: 0e:46:90:55:53:38:10:74:97:af:fb:d0:f5:49:c4:b2:41:04: 66:2d:a2:47:b2:4a:80:28:f2:c4:b1:f3:12:1c:5e:6a:52:22: c1:83:f7:c1:87:f8:cf:2e:c0:ee:fc:1f:ff:e8:f7:58:80:e6: 76:d3:ae:d2:4f:01:62:87:4e:b4:ef:3d:19:0e:be:d6:0f:0b: c5:2f:99:4c:c9:b4:7b:2e:d4:d7:81:0f:34:0e:d3:69:65:c3: 1b:86:b3:cb:f6:8b:f1:ba:e2:20:33:e3:69:1e:63:68:08:d2: b1:e4:99:2a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEyrhL4gNcHrZlCAEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDEyODAxNDUxOVoXDTI4MDUwMjAwNDUxOVowLzEtMCsGA1UEAxMk MzIyOGNhYTUtZDAxNC00MDRiLTllM2QtNjFjZGVhMWZmNDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4qj73o02XE0RvfrjWIOPQ2WJBdVACLgT4fL wI0ziaO07xI8XQpsvY+NKHb7Ra7bqYwMSHqSZ2JKFivRgyhImFP6ET+SukGEABWt 5Y+riJyDNcPtIChtlD9jRMYt9+3d31ACTBnRwM69pZoqs1m0LMgxBMz13Adblimp uvdU0f3KjVoF9elW2tjHtcJtX4BGv+rNhDa+PQ/grbEkoAy8UYWjDldJzfkePV2O gyIlle9Yqp/uvTgwlq8+srRGZPZlRvYVvOHZmnjaVXYPKlACg79N2p0eCUBAn4Gg pFysS39KIN0UawdLbSFbpRC6/ng15Tydksn73soku1qHaNrfmQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFGF7qNoXQJ9QBCvQ3nnT/3sp0n1eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z MjI4Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNkZWExZmY0OTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzMyMjhjYWE1LWQwMTQtNDA0Yi05 ZTNkLTYxY2RlYTFmZjQ5My8zMjI4Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNkZWEx ZmY0OTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGyPIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiAeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACgZZtlTdbMws2e6cqtu+RSuLjyZYpcoh9YavqSpoqXfCRRg HiqV7WFqPW1LQZMXKy4kUP2uqm7wdRBNX6qVGPm7AB1xvWoTZTVH3SshnXmWpfO3 VJPbcfw/Mb9fWUZorgWjv+KWgSzhlxQkumOELDNV8MgWzgvi6g6Q6TAYs5uMEmky f9WEzacqbHDxVATP4A5GkFVTOBB0l6/70PVJxLJBBGYtokeySoAo8sSx8xIcXmpS IsGD98GH+M8uwO78H//o91iA5nbTrtJPAWKHTrTvPRkOvtYPC8UvmUzJtHsu1NeB DzQO02llwxuGs8v2i/G64iAz42keY2gI0rHkmSo= -----END CERTIFICATE-----Generated at Sun Feb 22 16:36:30 2026 by rpki-client