$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer File: 33d3c304-619d-4e6d-aed5-9e25165cbc73.cer (raw, json) Hash identifier: y+OjdoDggPRLylOQXlf3aztVC6VV9hKRED0uIW3KIK8= Subject key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CA48A0DC6C58F42BD45B60300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 25 Jan 2026 13:45:21 +0000 Certificate not after: Sat 29 Apr 2028 12:45:21 +0000 Subordinate resources: AS: 401416 IP: 74.123.8.0/22 IP: 162.212.228.0/22 IP: 2607:dd40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:8a:0d:c6:c5:8f:42:bd:45:b6:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 25 13:45:21 2026 GMT Not After : Apr 29 12:45:21 2028 GMT Subject: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d3:32:14:44:15:ed:a6:3b:1d:1f:a7:e2:7c: a5:e0:61:22:84:e8:3d:52:77:36:2b:3e:d4:91:16: 69:a6:ca:9d:8f:f0:6d:98:9b:64:ce:d5:29:ea:e7: 3b:99:24:fd:70:c3:4d:57:b5:bf:4e:eb:b3:76:a3: 04:b8:2c:e7:0c:00:26:1e:69:81:ec:96:36:11:46: 41:d5:f1:1d:88:c5:7f:f2:b6:5c:27:77:8e:e9:ea: 4c:4a:f8:84:b5:2e:b6:4a:b3:56:7c:ff:4c:25:6e: 62:35:ed:2c:f3:c3:64:7c:77:63:e9:b0:2c:27:f7: b0:90:19:96:36:f2:74:ea:47:71:02:01:a1:33:77: 16:a8:76:40:5f:a2:ae:86:73:59:66:df:22:7e:7a: f8:70:38:e7:56:d6:72:db:4b:03:c3:53:a7:3b:47: 71:c6:47:ff:58:5d:f9:b4:2b:14:9f:f8:53:6d:0f: b8:e1:15:70:10:9f:9d:5d:97:9a:69:84:35:16:2c: 78:a5:cc:2e:cb:8b:9c:27:7f:0a:fc:2e:34:23:ab: af:a0:fe:cd:cf:af:99:89:7b:7a:9c:26:bd:8b:f6: 55:34:38:3c:71:89:f8:5e:c4:dc:71:7a:66:59:7d: 82:5c:49:e6:18:d6:f6:60:62:f6:92:3e:e6:3e:90: bc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 74.123.8.0/22 162.212.228.0/22 IPv6: 2607:dd40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401416 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:0b:8a:e0:ff:83:e2:b7:a8:2b:85:4d:1f:52:57:6a:7d:10: 9b:77:0f:ca:c6:53:9c:23:50:08:90:c8:69:3b:e5:47:03:67: a0:c2:db:94:7a:74:19:f7:6e:1e:54:da:71:2b:6e:7f:95:8b: 4b:db:65:e2:d0:02:5a:0a:c9:e1:84:34:27:b3:74:8a:d3:72: 49:7e:63:49:a4:9c:44:70:02:ba:dd:5c:22:68:40:53:3b:20: 09:1a:32:71:21:78:31:f1:e8:a5:d1:70:86:d7:00:85:65:ef: 55:80:aa:f4:e4:f9:b8:bb:ea:3a:45:24:4b:3b:8d:81:47:99: 8f:4b:10:44:9e:e0:02:4e:f6:de:b9:aa:42:a7:d3:47:36:4b: d8:dc:f3:60:ae:48:e7:27:26:e5:c6:a7:ea:3f:ed:7c:f4:f9: 2e:ff:53:9d:11:bf:17:16:49:65:e4:41:28:28:1c:9b:c0:29: ef:da:f4:38:b4:ab:90:c7:db:1b:33:c5:ea:3c:9e:fd:a5:ce: ae:51:62:62:bb:ef:61:e7:b5:72:43:c0:3c:ca:55:fa:86:2c: 16:06:f6:c5:07:5a:90:7b:e2:15:10:24:ff:3d:c1:f9:82:ba: bc:05:54:4e:71:bc:04:99:b7:4d:1d:09:36:6d:97:8a:e1:9c: 29:fb:78:6c -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEykig3GxY9CvUW2AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDEyNTEzNDUyMVoXDTI4MDQyOTEyNDUyMVowLzEtMCsGA1UEAxMk MzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNiYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29MyFEQV7aY7HR+n4nyl4GEihOg9Unc2Kz7U kRZppsqdj/BtmJtkztUp6uc7mST9cMNNV7W/TuuzdqMEuCznDAAmHmmB7JY2EUZB 1fEdiMV/8rZcJ3eO6epMSviEtS62SrNWfP9MJW5iNe0s88NkfHdj6bAsJ/ewkBmW NvJ06kdxAgGhM3cWqHZAX6KuhnNZZt8ifnr4cDjnVtZy20sDw1OnO0dxxkf/WF35 tCsUn/hTbQ+44RVwEJ+dXZeaaYQ1Fix4pcwuy4ucJ38K/C40I6uvoP7Nz6+ZiXt6 nCa9i/ZVNDg8cYn4XsTccXpmWX2CXEnmGNb2YGL2kj7mPpC8xwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFI5KDbTH6TNHCzS9ADhkHkp47OJqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z M2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzMzZDNjMzA0LTYxOWQtNGU2ZC1h ZWQ1LTllMjUxNjVjYmM3My8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1 Y2JjNzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJKewgDBAKi1OQwDQQCAAIwBwMFACYH3UAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBiAIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJELiuD/g+K3qCuFTR9S V2p9EJt3D8rGU5wjUAiQyGk75UcDZ6DC25R6dBn3bh5U2nErbn+Vi0vbZeLQAloK yeGENCezdIrTckl+Y0mknERwArrdXCJoQFM7IAkaMnEheDHx6KXRcIbXAIVl71WA qvTk+bi76jpFJEs7jYFHmY9LEESe4AJO9t65qkKn00c2S9jc82CuSOcnJuXGp+o/ 7Xz0+S7/U50RvxcWSWXkQSgoHJvAKe/a9Di0q5DH2xszxeo8nv2lzq5RYmK772Hn tXJDwDzKVfqGLBYG9sUHWpB74hUQJP89wfmCurwFVE5xvASZt00dCTZtl4rhnCn7 eGw= -----END CERTIFICATE-----Generated at Sun Feb 22 16:35:18 2026 by rpki-client