$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer File: 51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer (raw, json) Hash identifier: nXrkBF+Xo3twoyoMiN+PkvbdViLnvo01nBlqYR8MdlY= Subject key identifier: 71:C6:08:8A:D9:5A:BF:79:3E:F4:E2:C5:71:EB:C5:6B:28:D2:77:22 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584D0938CF38889F867A044D7800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Mar 2026 15:18:19 +0000 Certificate not after: Tue 02 May 2028 00:45:19 +0000 Subordinate resources: IP: 23.191.40.0/24 IP: 130.12.93.0/24 IP: 2602:f7de::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:38:cf:38:88:9f:86:7a:04:4d:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Mar 2 15:18:19 2026 GMT Not After : May 2 00:45:19 2028 GMT Subject: CN=51cd99f7-2f42-4dec-b2c6-09bafaa3780e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2f:1e:e2:26:21:a2:d8:ed:91:4b:95:e4:c3: 98:64:bf:b9:e7:45:d6:e7:f6:b0:bb:56:23:50:05: 64:f4:04:2f:c8:a1:cc:a2:4d:72:73:6a:07:f8:c8: 4c:d3:4f:8b:5a:fd:b7:21:e4:ee:3e:60:4e:a0:8f: 1c:4c:58:b9:03:65:f0:4f:a6:45:4f:1c:4c:d8:2d: 96:59:68:fd:d6:e5:84:48:d6:f7:d9:5d:99:47:bf: 9f:97:92:fd:a1:0d:db:03:cc:67:43:72:76:99:36: f4:56:57:ee:d0:14:ff:2c:4f:4a:a5:72:9b:00:a6: cb:7f:42:3f:8b:55:64:72:3d:04:3f:45:60:1c:14: 83:60:dc:2c:11:cd:dd:92:3e:82:3b:ba:5a:30:80: 8d:dc:b6:2b:89:45:52:9b:b7:a9:cb:54:dc:86:de: 35:16:ba:66:50:b1:81:6c:dc:0b:b0:bf:6c:d8:74: 3d:df:fa:c8:c4:52:3e:96:27:c5:ac:81:d3:ef:05: 98:cf:b7:d8:86:0e:d7:95:36:9b:d0:8c:af:4f:fa: dc:86:70:b7:7d:59:d0:b6:50:f8:47:f1:eb:d4:4e: 6a:17:45:38:5b:07:d4:a9:e6:4f:a6:de:77:a6:9b: da:0e:c6:be:d4:bb:2a:65:1c:0f:7d:28:3b:75:87: a4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C6:08:8A:D9:5A:BF:79:3E:F4:E2:C5:71:EB:C5:6B:28:D2:77:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.191.40.0/24 130.12.93.0/24 IPv6: 2602:f7de::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:67:e2:14:2e:54:41:7f:0a:e7:c5:1d:fe:f0:d8:97:c5:dd: a3:de:55:b2:0a:4c:8c:91:d8:44:12:2f:a0:a4:23:cc:1a:81: 01:92:60:1a:f3:83:69:66:73:95:b6:7d:d0:87:e5:53:94:77: ef:d1:97:af:20:69:e2:5f:3f:17:73:c5:3b:ca:b2:d4:e3:14: 7a:05:54:b1:53:f7:49:84:95:86:0f:c0:e7:57:7b:da:09:aa: 58:20:bd:fe:ea:df:42:3d:13:c6:f9:64:19:86:8c:ad:16:68: 04:c6:64:79:96:4e:8f:f9:2c:cb:b0:7e:52:d4:29:e7:d1:04: 73:9b:70:68:dd:d1:f5:36:d0:de:3f:d7:3a:00:b6:0e:a8:ca: 8f:86:92:dc:26:ee:99:e1:a2:65:2e:0a:c4:8b:67:c4:b8:ae: a3:80:1c:24:de:b3:e1:3d:40:5f:80:54:0a:60:ff:35:e0:74: ca:a8:ad:62:18:7f:fd:b7:43:92:14:85:4b:c0:91:de:db:c6: d3:93:c4:cf:91:32:ab:ab:c1:c2:6a:ff:33:0e:da:94:96:cf: ac:54:64:ff:6d:63:b8:70:a9:fd:98:6a:37:be:b3:75:ff:10: 12:02:f4:9d:c4:90:36:ca:d3:0c:dc:1b:58:35:bc:06:7d:bd: 6f:4c:20:6b -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWE0JOM84iJ+GegRNeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDMwMjE1MTgxOVoXDTI4MDUwMjAwNDUxOVowLzEtMCsGA1UEAxMk NTFjZDk5ZjctMmY0Mi00ZGVjLWIyYzYtMDliYWZhYTM3ODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC8e4iYhotjtkUuV5MOYZL+550XW5/awu1Yj UAVk9AQvyKHMok1yc2oH+MhM00+LWv23IeTuPmBOoI8cTFi5A2XwT6ZFTxxM2C2W WWj91uWESNb32V2ZR7+fl5L9oQ3bA8xnQ3J2mTb0Vlfu0BT/LE9KpXKbAKbLf0I/ i1Vkcj0EP0VgHBSDYNwsEc3dkj6CO7paMICN3LYriUVSm7epy1Tcht41FrpmULGB bNwLsL9s2HQ93/rIxFI+lifFrIHT7wWYz7fYhg7XlTab0IyvT/rchnC3fVnQtlD4 R/Hr1E5qF0U4WwfUqeZPpt53ppvaDsa+1LsqZRwPfSg7dYekRQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFHHGCIrZWr95PvTixXHrxWso0nciMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81 MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0wOWJhZmFhMzc4MGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzUxY2Q5OWY3LTJmNDItNGRlYy1i MmM2LTA5YmFmYWEzNzgwZS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0wOWJhZmFh Mzc4MGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXvygDBACCDF0wDgQCAAIwCAMGACYC994AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVn4hQuVEF/CufFHf7w2JfF3aPeVbIKTIyR2EQSL6CkI8wagQGSYBrz g2lmc5W2fdCH5VOUd+/Rl68gaeJfPxdzxTvKstTjFHoFVLFT90mElYYPwOdXe9oJ qlggvf7q30I9E8b5ZBmGjK0WaATGZHmWTo/5LMuwflLUKefRBHObcGjd0fU20N4/ 1zoAtg6oyo+Gktwm7pnhomUuCsSLZ8S4rqOAHCTes+E9QF+AVApg/zXgdMqorWIY f/23Q5IUhUvAkd7bxtOTxM+RMqurwcJq/zMO2pSWz6xUZP9tY7hwqf2Yaje+s3X/ EBIC9J3EkDbK0wzcG1g1vAZ9vW9MIGs= -----END CERTIFICATE-----Generated at Wed Mar 25 12:50:33 2026 by rpki-client