$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d5309bb-20c8-43de-bd87-329498ebf18d.cer File: 3d5309bb-20c8-43de-bd87-329498ebf18d.cer (raw, json) Hash identifier: BCXya+XRWjqPAm5ccRd4Zu1LXybBxIa3DxqmgKEgn2k= Subject key identifier: D5:8A:B8:57:58:E4:E3:62:48:56:42:D6:69:BA:1E:53:49:2C:C1:14 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CE625211CAF2298D74E73A900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d5309bb-20c8-43de-bd87-329498ebf18d/3d5309bb-20c8-43de-bd87-329498ebf18d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d5309bb-20c8-43de-bd87-329498ebf18d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Feb 2026 01:45:22 +0000 Certificate not after: Tue 23 May 2028 00:45:22 +0000 Subordinate resources: IP: 192.146.1.0 -- 192.146.100.255 IP: 192.160.53.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e6:25:21:1c:af:22:98:d7:4e:73:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 18 01:45:22 2026 GMT Not After : May 23 00:45:22 2028 GMT Subject: CN=3d5309bb-20c8-43de-bd87-329498ebf18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e3:9c:d1:27:91:98:b4:02:34:d5:53:77:c2: fd:a2:c5:61:8b:63:d5:93:59:3f:63:3b:50:60:00: ba:15:dc:40:e9:4a:a7:be:bc:e7:b4:55:0b:fd:fe: 6d:2f:ce:b8:ff:2d:45:d2:92:50:7a:0c:bc:5d:bb: b5:0c:d5:27:ec:0e:1a:10:68:77:f1:43:e7:be:fc: 88:9b:79:38:09:70:24:bd:90:b4:c1:b7:ab:da:90: a5:f6:94:0a:d5:ce:2f:b4:53:b1:b7:82:56:74:b8: bc:c0:d8:8f:c6:a0:82:cd:50:b1:d2:01:c2:a7:37: 98:b0:aa:e4:57:f2:13:98:00:0a:50:16:79:b0:ca: 22:82:94:0d:43:4f:5f:2a:e3:84:9a:18:ba:2d:ea: 44:17:9b:43:ad:c8:5f:41:25:cb:dd:f0:33:9e:8e: c7:67:a5:7b:03:f1:ee:34:a8:a9:59:21:95:0c:da: ae:4b:17:69:ff:f1:84:21:a1:38:a6:13:f3:e2:33: 05:95:5d:15:c9:c7:57:b6:7d:7a:d1:f6:a6:c1:22: 2d:30:b2:76:90:d5:6d:a9:00:0c:a3:75:e4:0d:b3: 0c:3c:74:b8:ee:62:1f:aa:4b:24:d3:57:c3:e3:13: 13:ed:26:22:77:9c:72:57:fc:a4:e8:73:71:ee:47: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8A:B8:57:58:E4:E3:62:48:56:42:D6:69:BA:1E:53:49:2C:C1:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d5309bb-20c8-43de-bd87-329498ebf18d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d5309bb-20c8-43de-bd87-329498ebf18d/3d5309bb-20c8-43de-bd87-329498ebf18d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 192.146.1.0-192.146.100.255 192.160.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0e:d9:cf:dc:c6:2a:f4:fb:d0:33:ba:d5:5b:86:a8:0e:a1: c9:0d:59:9d:64:65:d5:b3:03:81:33:6e:2f:45:c4:1b:c2:71: cb:00:39:ae:24:0f:35:e9:ec:02:19:8f:17:3b:23:fe:7b:90: 3e:48:92:17:c1:41:8b:d8:36:6d:42:56:50:07:4b:75:9e:ce: 21:a7:35:00:f2:98:e5:0f:c5:5d:26:5a:dd:30:58:4b:c2:c8: 82:34:5f:d2:28:a6:ae:6f:0e:35:1d:f1:ab:6c:7f:e6:af:85: 29:85:13:99:8c:04:7c:bb:4c:0c:da:87:e8:73:5b:38:f8:70: 9c:ce:f1:69:ad:d4:21:81:02:eb:3c:b7:53:a8:b6:07:d8:86: 60:bd:6f:8c:ba:0e:18:6e:05:44:9c:95:c9:82:51:a0:8c:0d: a0:83:10:cd:52:e0:93:6e:33:4f:1a:4b:c6:82:18:be:7e:1b: 1c:f2:62:5c:91:31:b4:a5:1f:f9:8e:49:d4:5f:4b:df:d2:fb: dd:7d:6b:3b:e2:c8:d1:f6:36:e9:16:59:9e:1a:16:78:e8:dc: 31:49:76:2a:f3:e6:93:68:b6:cb:3a:33:30:31:b1:b9:d2:85: b3:01:17:ae:f9:a3:78:ec:36:15:ee:17:cf:2c:db:86:2d:91: 00:cf:94:17 -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEzmJSEcryKY105zqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIxODAxNDUyMloXDTI4MDUyMzAwNDUyMlowLzEtMCsGA1UEAxMk M2Q1MzA5YmItMjBjOC00M2RlLWJkODctMzI5NDk4ZWJmMThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOOc0SeRmLQCNNVTd8L9osVhi2PVk1k/YztQ YAC6FdxA6UqnvrzntFUL/f5tL864/y1F0pJQegy8Xbu1DNUn7A4aEGh38UPnvvyI m3k4CXAkvZC0wber2pCl9pQK1c4vtFOxt4JWdLi8wNiPxqCCzVCx0gHCpzeYsKrk V/ITmAAKUBZ5sMoigpQNQ09fKuOEmhi6LepEF5tDrchfQSXL3fAzno7HZ6V7A/Hu NKipWSGVDNquSxdp//GEIaE4phPz4jMFlV0VycdXtn160famwSItMLJ2kNVtqQAM o3XkDbMMPHS47mIfqksk01fD4xMT7SYid5xyV/yk6HNx7kcTRQIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFNWKuFdY5ONiSFZC1mm6HlNJLMEUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z ZDUzMDliYi0yMGM4LTQzZGUtYmQ4Ny0zMjk0OThlYmYxOGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNkNTMwOWJiLTIwYzgtNDNkZS1i ZDg3LTMyOTQ5OGViZjE4ZC8zZDUzMDliYi0yMGM4LTQzZGUtYmQ4Ny0zMjk0OThl YmYxOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEAMCSAQMEAMCSZAMEAMCgNTBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3 DtnP3MYq9PvQM7rVW4aoDqHJDVmdZGXVswOBM24vRcQbwnHLADmuJA816ewCGY8X OyP+e5A+SJIXwUGL2DZtQlZQB0t1ns4hpzUA8pjlD8VdJlrdMFhLwsiCNF/SKKau bw41HfGrbH/mr4UphROZjAR8u0wM2ofoc1s4+HCczvFprdQhgQLrPLdTqLYH2IZg vW+Mug4YbgVEnJXJglGgjA2ggxDNUuCTbjNPGkvGghi+fhsc8mJckTG0pR/5jknU X0vf0vvdfWs74sjR9jbpFlmeGhZ46NwxSXYq8+aTaLbLOjMwMbG50oWzAReu+aN4 7DYV7hfPLNuGLZEAz5QX -----END CERTIFICATE-----Generated at Sun Feb 22 16:35:34 2026 by rpki-client