$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer File: 3d1c406c-fcae-4d83-9c1a-5c930e814683.cer (raw, json) Hash identifier: Ieqd3eey5ZbIrBT2xABJ82NqJ9keS/TzRXGeR6Ftttc= Subject key identifier: 9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CCE6A4FB7764B5C388BA7B580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Feb 2026 13:45:21 +0000 Certificate not after: Sun 14 May 2028 12:45:21 +0000 Subordinate resources: AS: 401473 IP: 23.128.220.0/24 IP: 2602:f7ae::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:6a:4f:b7:76:4b:5c:38:8b:a7:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 9 13:45:21 2026 GMT Not After : May 14 12:45:21 2028 GMT Subject: CN=3d1c406c-fcae-4d83-9c1a-5c930e814683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:96:c3:82:32:8e:0c:47:44:e0:33:11:8e:0e: c9:a7:bd:26:ba:10:1a:16:aa:1d:78:f2:62:bd:65: f8:d0:2c:65:ba:2b:d7:ff:66:54:b9:cb:32:d1:be: 9c:1d:ce:9e:00:cd:21:d7:bb:11:57:35:68:77:e5: 17:ad:6a:63:fc:47:fb:94:34:20:d0:7b:0f:70:47: 47:58:75:70:2b:de:f9:aa:0a:f6:97:5f:d8:a0:53: dc:2c:62:c7:8c:eb:8c:6b:52:5b:99:9c:bc:cd:5b: 3c:81:35:5a:c2:d8:d9:5b:bd:6e:a1:8a:f8:80:d3: 03:e8:75:a4:aa:d4:c4:9f:fd:ea:0f:40:87:30:06: 51:39:c0:14:83:26:50:4b:19:9b:4a:00:56:7a:7a: 34:0d:62:b1:bc:bf:e3:fa:2e:a0:5e:a6:df:7a:99: 22:dd:65:3e:bc:6a:b8:ec:bf:0b:9d:5d:b8:a8:1a: 25:eb:10:a8:8c:fc:6e:b4:f3:74:cb:21:3c:8e:00: 5d:17:d5:80:00:7b:25:3e:07:d1:a1:0a:7e:6b:75: 75:06:e3:33:15:2e:15:a3:e5:9b:4b:70:cd:dd:07: 98:bf:0d:08:36:f6:81:6d:e7:ce:9a:cf:74:70:08: cb:89:e5:0e:b4:8d:31:d9:99:e8:0b:b6:ce:fe:a5: ad:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.128.220.0/24 IPv6: 2602:f7ae::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401473 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:84:9e:b9:b7:d6:ff:ac:ea:89:25:ec:89:f9:93:d1:f9:79: ab:43:fa:5d:d6:c3:7f:d0:42:2f:d6:a5:94:b1:d2:59:81:87: a0:10:1d:ea:95:93:cf:3f:4a:a9:89:70:d6:c0:af:7c:17:76: 57:47:38:f0:57:bf:f9:ce:a0:ac:29:b3:6c:35:a8:66:1c:6d: 57:b1:43:76:87:9d:11:e5:10:36:22:37:15:f6:76:6d:58:fe: c0:a1:c8:7e:4e:f0:58:2d:95:1b:0a:d9:b0:6b:15:a7:11:cd: d3:e3:61:8b:db:34:5b:fa:7c:f2:3d:03:0f:45:58:35:81:4b: 06:bc:4c:24:6a:e2:b5:32:cf:00:13:ed:a4:91:2d:3d:3b:4f: 69:d3:15:d8:d3:31:2b:52:b2:56:09:45:78:26:40:f6:e2:1d: 91:ef:30:78:0d:f7:96:58:34:ec:c7:5c:02:c5:d8:22:d8:8d: 44:d1:e0:1e:62:ec:34:e7:f8:15:15:41:67:ed:bd:8b:3b:60: 73:f0:bc:4c:4a:1d:5a:63:40:9e:8a:b7:5a:b1:14:bb:ee:60: 8f:9e:0f:05:df:b4:04:d1:bf:f4:4f:37:a9:ef:8d:d9:03:02: 94:3e:8f:b7:18:ba:9d:97:df:df:ec:18:6b:69:b0:cb:34:21: 9a:f3:6c:40 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEzOak+3dktcOIuntYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIwOTEzNDUyMVoXDTI4MDUxNDEyNDUyMVowLzEtMCsGA1UEAxMk M2QxYzQwNmMtZmNhZS00ZDgzLTljMWEtNWM5MzBlODE0NjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZbDgjKODEdE4DMRjg7Jp70muhAaFqodePJi vWX40CxluivX/2ZUucsy0b6cHc6eAM0h17sRVzVod+UXrWpj/Ef7lDQg0HsPcEdH WHVwK975qgr2l1/YoFPcLGLHjOuMa1JbmZy8zVs8gTVawtjZW71uoYr4gNMD6HWk qtTEn/3qD0CHMAZROcAUgyZQSxmbSgBWeno0DWKxvL/j+i6gXqbfepki3WU+vGq4 7L8LnV24qBol6xCojPxutPN0yyE8jgBdF9WAAHslPgfRoQp+a3V1BuMzFS4Vo+Wb S3DN3QeYvw0INvaBbefOms90cAjLieUOtI0x2ZnoC7bO/qWtJwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFJrkFr5ijqnS7eqf10iBsrUxDaFaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z ZDFjNDA2Yy1mY2FlLTRkODMtOWMxYS01YzkzMGU4MTQ2ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNkMWM0MDZjLWZjYWUtNGQ4My05 YzFhLTVjOTMwZTgxNDY4My8zZDFjNDA2Yy1mY2FlLTRkODMtOWMxYS01YzkzMGU4 MTQ2ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgNwwDgQCAAIwCAMGACYC964AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgQTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDhJ65t9b/rOqJJeyJ+ZPR+Xmr Q/pd1sN/0EIv1qWUsdJZgYegEB3qlZPPP0qpiXDWwK98F3ZXRzjwV7/5zqCsKbNs NahmHG1XsUN2h50R5RA2IjcV9nZtWP7Aoch+TvBYLZUbCtmwaxWnEc3T42GL2zRb +nzyPQMPRVg1gUsGvEwkauK1Ms8AE+2kkS09O09p0xXY0zErUrJWCUV4JkD24h2R 7zB4DfeWWDTsx1wCxdgi2I1E0eAeYuw05/gVFUFn7b2LO2Bz8LxMSh1aY0Ceirda sRS77mCPng8F37QE0b/0Tzep743ZAwKUPo+3GLqdl9/f7BhrabDLNCGa82xA -----END CERTIFICATE-----Generated at Sun Feb 22 16:42:18 2026 by rpki-client