$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf.cer File: 3d1722df-da75-4049-b3bd-b515bf0447bf.cer (raw, json) Hash identifier: WHJkX6LsSdpQQqbhKhRlFOgwfjRxu107TaZ8LU2YCQk= Subject key identifier: 38:89:30:A5:55:2E:2B:42:93:25:2D:63:D8:BA:EA:0B:25:44:5F:17 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CB97A300BF359B1DFF8792B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf/3d1722df-da75-4049-b3bd-b515bf0447bf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Feb 2026 01:45:22 +0000 Certificate not after: Sun 07 May 2028 00:45:22 +0000 Subordinate resources: AS: 25671 IP: 208.79.104.0/21 IP: 2605:6c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:7a:30:0b:f3:59:b1:df:f8:79:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 2 01:45:22 2026 GMT Not After : May 7 00:45:22 2028 GMT Subject: CN=3d1722df-da75-4049-b3bd-b515bf0447bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:8e:18:01:07:69:9d:00:f7:45:50:55:72: dc:25:bc:45:76:c3:90:46:3d:29:96:bf:a5:30:de: 38:b2:da:10:09:e3:90:2b:28:c3:e9:11:c6:a7:5e: c2:95:f6:f7:70:c5:ef:e7:90:4b:d0:71:ac:39:d8: 37:bb:29:5e:af:63:23:c7:a6:c6:ac:0c:aa:b3:e0: b3:3c:37:59:91:9f:87:ad:3c:f9:bb:d9:1f:6e:d3: 9b:76:b0:b5:8f:00:6d:59:a9:48:23:81:d6:32:82: fc:3a:d4:02:9f:63:6c:a1:d3:e1:4c:b8:01:a9:f7: 4f:e8:52:b1:63:db:6e:7a:7b:6d:40:49:88:f0:6f: 5b:bd:08:e2:5e:8a:a5:df:08:e8:7f:dd:3a:e6:5c: 1d:11:7c:47:82:15:80:c2:e0:6c:71:30:61:c5:78: 79:63:0b:73:32:8d:9b:bf:5a:b7:20:3c:e1:0a:60: 64:39:0e:79:a0:dd:29:95:2b:f7:37:01:62:70:9a: a3:b3:0e:c2:0b:a9:bc:e8:94:2a:f2:90:59:6a:90: 31:3c:3e:68:62:a7:3d:e2:fe:57:2b:9d:e3:65:8f: e8:e5:43:21:9e:f7:0a:f1:e5:db:98:04:e8:13:87: 7a:cc:ee:b1:5b:70:cf:3f:f1:56:e2:4d:e1:47:53: e4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:89:30:A5:55:2E:2B:42:93:25:2D:63:D8:BA:EA:0B:25:44:5F:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1722df-da75-4049-b3bd-b515bf0447bf/3d1722df-da75-4049-b3bd-b515bf0447bf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 208.79.104.0/21 IPv6: 2605:6c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25671 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d8:08:2b:ae:d9:db:5f:eb:fb:64:be:3b:12:3f:d6:1b:a6: 75:15:9b:fa:0f:a0:4a:c4:45:17:59:8b:15:c8:bc:f3:a7:ba: 6e:00:3e:70:02:d3:d6:92:fc:d8:2e:c6:57:83:46:bd:d8:76: 3c:0d:47:b4:70:53:0a:eb:ee:4c:e9:9b:d0:c2:5e:78:d7:71: a0:7a:24:b1:99:a8:54:75:53:34:6f:1b:b7:32:c0:32:1b:83: b9:d6:e6:d3:97:b5:ba:1a:9e:d2:4d:21:98:f6:76:d8:29:a0: c5:43:e3:07:06:e4:23:aa:7b:52:75:62:86:51:7c:63:e2:90: e9:4a:59:97:4b:3a:b3:43:43:65:e5:e6:13:ed:98:5d:61:1e: 7a:7e:ee:cd:2b:83:17:50:20:b3:c1:54:24:5f:a7:e9:24:09: 07:fe:9b:24:7b:47:47:cc:e8:a3:c6:6d:0b:89:78:dd:2a:d4: 68:04:56:be:6c:34:55:53:46:0f:28:9e:68:09:e1:e2:6e:d5: bc:53:1d:3f:7e:28:9e:ce:aa:8a:e1:2e:2b:5c:de:92:b3:ab: 15:3b:9c:4d:81:d7:da:2f:2a:59:96:72:ed:be:f1:48:f1:57: df:20:31:62:95:ee:02:cf:c1:ee:ad:6e:ce:69:78:c4:a8:15: b2:16:ec:bd -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEy5ejAL81mx3/h5KwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIwMjAxNDUyMloXDTI4MDUwNzAwNDUyMlowLzEtMCsGA1UEAxMk M2QxNzIyZGYtZGE3NS00MDQ5LWIzYmQtYjUxNWJmMDQ0N2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCiOGAEHaZ0A90VQVXLcJbxFdsOQRj0plr+l MN44stoQCeOQKyjD6RHGp17Clfb3cMXv55BL0HGsOdg3uyler2Mjx6bGrAyqs+Cz PDdZkZ+HrTz5u9kfbtObdrC1jwBtWalII4HWMoL8OtQCn2NsodPhTLgBqfdP6FKx Y9tuenttQEmI8G9bvQjiXoql3wjof9065lwdEXxHghWAwuBscTBhxXh5YwtzMo2b v1q3IDzhCmBkOQ55oN0plSv3NwFicJqjsw7CC6m86JQq8pBZapAxPD5oYqc94v5X K53jZY/o5UMhnvcK8eXbmAToE4d6zO6xW3DPP/FW4k3hR1Pk/wIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFDiJMKVVLitCkyUtY9i66gslRF8XMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z ZDE3MjJkZi1kYTc1LTQwNDktYjNiZC1iNTE1YmYwNDQ3YmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNkMTcyMmRmLWRhNzUtNDA0OS1i M2JkLWI1MTViZjA0NDdiZi8zZDE3MjJkZi1kYTc1LTQwNDktYjNiZC1iNTE1YmYw NDQ3YmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPQT2gwDQQCAAIwBwMFACYFBsAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZEcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAl9gIK67Z21/r+2S+OxI/1humdRWb +g+gSsRFF1mLFci886e6bgA+cALT1pL82C7GV4NGvdh2PA1HtHBTCuvuTOmb0MJe eNdxoHoksZmoVHVTNG8btzLAMhuDudbm05e1uhqe0k0hmPZ22CmgxUPjBwbkI6p7 UnVihlF8Y+KQ6UpZl0s6s0NDZeXmE+2YXWEeen7uzSuDF1Ags8FUJF+n6SQJB/6b JHtHR8zoo8ZtC4l43SrUaARWvmw0VVNGDyieaAnh4m7VvFMdP34ons6qiuEuK1ze krOrFTucTYHX2i8qWZZy7b7xSPFX3yAxYpXuAs/B7q1uzml4xKgVshbsvQ== -----END CERTIFICATE-----Generated at Sun Feb 22 16:35:34 2026 by rpki-client