$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1.cer File: 655fb139-547c-4d10-b4e3-9ca47b909ae1.cer (raw, json) Hash identifier: PGrX8zgqRRf9IZofxrxRBdUhPgiNvoffoEeiJqkACYc= Subject key identifier: D2:D9:2E:AD:0E:44:76:E7:13:56:5D:87:8E:BD:93:4C:26:5A:C7:A8 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CAB84BE9771394C24103DB240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/655fb139-547c-4d10-b4e3-9ca47b909ae1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Jan 2026 01:45:19 +0000 Certificate not after: Tue 02 May 2028 00:45:19 +0000 Subordinate resources: IP: 198.163.3.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:84:be:97:71:39:4c:24:10:3d:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 28 01:45:19 2026 GMT Not After : May 2 00:45:19 2028 GMT Subject: CN=655fb139-547c-4d10-b4e3-9ca47b909ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:02:31:60:99:04:39:6b:45:68:32:f2:1d: 7b:56:41:a6:a0:6c:ee:d6:78:f9:b6:0f:91:1f:b7: 7b:5b:d1:21:52:19:36:a8:cd:d5:7d:8b:d8:0b:e2: 92:5e:4c:0d:75:bc:c6:08:33:9b:12:c7:d8:05:f4: 07:1e:bd:44:67:5d:41:e7:54:81:a9:2d:b0:48:c9: ad:e4:e4:97:02:55:3e:99:2b:02:0f:f3:79:b3:01: 33:1e:6f:e7:14:fa:87:73:44:b0:bf:8c:aa:b0:59: 56:d4:b6:07:96:cc:1e:b2:e2:1d:92:11:1c:10:0e: 7a:1c:3d:f1:65:b3:b7:fc:17:33:74:27:17:f3:90: d8:e1:c4:04:ad:7e:33:27:12:d2:1b:34:85:7f:c6: f8:7d:d2:cd:8c:9f:2a:5b:d3:13:2b:ca:39:da:bf: ae:44:00:7b:1a:0e:4e:fd:7f:e7:7a:f8:eb:00:78: c1:5f:bc:8b:56:1e:55:43:35:97:0e:a6:c8:da:c4: f1:aa:37:c6:ff:e8:ad:cc:9a:8e:db:b0:3f:07:d7: 8a:5a:4e:83:af:1e:a1:75:ec:a4:94:f6:e2:71:1a: 71:a1:0a:66:b2:66:27:a6:29:df:fb:71:30:89:ba: bb:18:b9:7a:a6:83:d9:b4:79:7b:af:bb:3c:0d:bf: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D9:2E:AD:0E:44:76:E7:13:56:5D:87:8E:BD:93:4C:26:5A:C7:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/655fb139-547c-4d10-b4e3-9ca47b909ae1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 198.163.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a3:ec:21:52:2a:dd:95:85:1e:f1:19:20:8d:fa:9d:b0:80: 46:16:07:1c:10:15:5f:5f:c8:7a:73:a2:a0:b3:26:b8:85:8f: db:12:ce:7f:7a:d5:a2:69:94:63:33:df:fb:e7:f8:f2:8a:74: 42:1e:d0:47:be:ba:6c:2d:86:69:87:3f:c0:de:6b:22:58:fd: 05:56:dd:5a:d2:bf:86:cd:7b:68:52:2b:f0:b5:b6:cf:b7:c3: c7:51:d1:4c:5f:56:1d:26:66:82:ed:a1:c1:7a:aa:ca:28:54: fd:a9:dc:a6:73:cf:8a:91:35:be:a5:f7:20:b5:df:d5:e9:b2: 69:f8:ca:ff:5e:6a:56:e4:f9:bb:3f:7c:14:2a:2c:57:ff:74: ca:10:ed:03:c0:c8:d0:c0:32:11:34:7a:49:65:1e:4b:dd:9f: 5b:23:76:5d:42:d7:6b:67:83:8e:3c:d3:5d:e3:93:35:0f:b4: 86:1c:6e:10:85:ef:a1:b8:dd:64:81:d7:ac:12:6a:7d:34:da: 8d:2a:96:6d:c8:18:e9:3d:cd:c8:00:4d:af:e8:f2:15:d2:41: ad:17:69:8c:ec:10:8e:74:44:82:45:65:7a:ed:8f:d9:f4:32: 4f:21:34:27:00:da:9c:30:a6:13:20:52:a5:f4:cd:0f:b6:cc: 21:85:07:f8 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEyrhL6XcTlMJBA9skAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDEyODAxNDUxOVoXDTI4MDUwMjAwNDUxOVowLzEtMCsGA1UEAxMk NjU1ZmIxMzktNTQ3Yy00ZDEwLWI0ZTMtOWNhNDdiOTA5YWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0sCMWCZBDlrRWgy8h17VkGmoGzu1nj5tg+R H7d7W9EhUhk2qM3VfYvYC+KSXkwNdbzGCDObEsfYBfQHHr1EZ11B51SBqS2wSMmt 5OSXAlU+mSsCD/N5swEzHm/nFPqHc0Swv4yqsFlW1LYHlswesuIdkhEcEA56HD3x ZbO3/BczdCcX85DY4cQErX4zJxLSGzSFf8b4fdLNjJ8qW9MTK8o52r+uRAB7Gg5O /X/nevjrAHjBX7yLVh5VQzWXDqbI2sTxqjfG/+itzJqO27A/B9eKWk6Drx6hdeyk lPbicRpxoQpmsmYnpinf+3Ewibq7GLl6poPZtHl7r7s8Db9g0wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNLZLq0ORHbnE1Zdh469k0wmWseoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82 NTVmYjEzOS01NDdjLTRkMTAtYjRlMy05Y2E0N2I5MDlhZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzY1NWZiMTM5LTU0N2MtNGQxMC1i NGUzLTljYTQ3YjkwOWFlMS82NTVmYjEzOS01NDdjLTRkMTAtYjRlMy05Y2E0N2I5 MDlhZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGowMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKKPsIVIq3ZWFHvEZII36 nbCARhYHHBAVX1/IenOioLMmuIWP2xLOf3rVommUYzPf++f48op0Qh7QR766bC2G aYc/wN5rIlj9BVbdWtK/hs17aFIr8LW2z7fDx1HRTF9WHSZmgu2hwXqqyihU/anc pnPPipE1vqX3ILXf1emyafjK/15qVuT5uz98FCosV/90yhDtA8DI0MAyETR6SWUe S92fWyN2XULXa2eDjjzTXeOTNQ+0hhxuEIXvobjdZIHXrBJqfTTajSqWbcgY6T3N yABNr+jyFdJBrRdpjOwQjnREgkVleu2P2fQyTyE0JwDanDCmEyBSpfTND7bMIYUH +A== -----END CERTIFICATE-----Generated at Sun Feb 22 16:37:14 2026 by rpki-client