$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer File: 932105b1-ce56-44a7-9670-6f4e56578ef8.cer (raw, json) Hash identifier: rYfB7ZnIEujY4/+eQr935uH16zP2Sjk200V4AlAQa+8= Subject key identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584E5B7F9FFEF86804894D7E7900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 19:24:13 +0000 Certificate not after: Mon 10 Apr 2028 00:45:23 +0000 Subordinate resources: AS: 53724 IP: 104.156.154.0/24 IP: 169.128.190.0/23 IP: 2602:f7f8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:7f:9f:fe:f8:68:04:89:4d:7e:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jul 1 19:24:13 2026 GMT Not After : Apr 10 00:45:23 2028 GMT Subject: CN=932105b1-ce56-44a7-9670-6f4e56578ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9f:b8:bf:27:16:38:20:6b:35:cc:f4:78:f2: f9:9e:d6:26:23:6d:c3:90:16:ae:42:9a:cf:34:f2: 41:c2:03:20:64:bf:a4:dc:78:c5:6a:6a:ad:c0:c1: a4:47:6f:0f:4d:0e:1b:86:8f:84:1f:c3:42:82:49: 41:33:67:e7:57:03:ba:f5:01:5d:2b:da:15:11:11: c5:65:85:69:aa:95:c1:5d:ca:b9:90:9e:a5:9e:1c: 49:46:28:4b:af:09:78:c9:b4:bd:9f:a3:79:47:fd: 1f:db:c2:d3:6d:90:91:77:b9:02:4d:97:7f:81:98: f2:ff:c5:b6:55:7a:9c:15:d8:50:8d:b0:62:01:dc: 9e:b7:1a:9d:7a:f0:09:9b:b5:73:7e:48:2d:fb:c3: cb:cc:fe:41:ed:b3:e7:4b:8c:62:77:1a:bc:0c:15: db:88:91:4a:c1:ee:cf:ba:2c:37:4f:c9:27:21:e1: f0:d6:75:7f:ff:65:75:2b:9b:db:fa:c3:ca:9b:27: 37:40:c0:9e:77:41:e7:b0:86:c4:c0:34:2c:5a:a7: cd:04:4f:bc:87:3d:87:0a:b5:0e:90:40:d2:98:73: 3d:f8:03:f2:e3:5e:bc:26:2a:64:60:b8:f6:fb:11: 7a:b4:9c:23:39:27:39:2f:7a:97:a0:44:26:c5:bf: 00:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 104.156.154.0/24 169.128.190.0/23 IPv6: 2602:f7f8::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53724 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bc:63:2e:7c:f5:6d:d0:a9:77:89:78:42:50:2d:26:27:b4: be:5d:7e:0f:bd:61:4b:f7:6c:22:3b:f6:e6:76:fa:9c:ef:9a: dc:1c:f3:10:eb:99:f5:54:e0:01:b6:5a:8f:ae:c6:24:fe:ed: a3:d6:1c:a0:ec:29:cc:c9:61:95:b4:e1:74:12:b2:82:31:45: cc:c5:3a:da:68:5a:71:56:64:02:98:c4:12:92:a2:11:b8:97: ab:56:63:f6:5d:ad:33:1e:a3:49:44:ec:dd:2d:e9:82:d4:0d: 0d:78:cd:91:3d:ee:38:a0:c8:b9:2d:e5:70:d5:df:6d:ba:97: af:9e:0a:06:16:ce:b9:bb:30:07:06:62:26:27:3c:64:dd:05: 90:82:7f:67:a9:67:7c:db:ec:59:c6:a8:a6:9e:90:26:3a:60: 7f:16:78:62:bd:4c:df:4c:16:33:95:c5:0e:31:3e:a4:b5:af: 8d:9a:73:1d:5e:51:e5:5f:f7:f1:79:ff:e4:6f:5c:ba:cb:11: bc:7a:07:61:8b:56:23:f6:0f:89:74:1f:e6:89:7c:da:a2:12: 78:50:a2:1a:56:4a:48:6f:bd:63:ba:fb:de:1d:6f:c5:8a:29: 2c:90:09:a7:22:a1:71:fa:b7:1d:50:a2:74:55:b8:82:f0:f4: 40:8e:77:d6 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE5bf5/++GgEiU1+eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDcwMTE5MjQxM1oXDTI4MDQxMDAwNDUyM1owLzEtMCsGA1UEAxMk OTMyMTA1YjEtY2U1Ni00NGE3LTk2NzAtNmY0ZTU2NTc4ZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ+4vycWOCBrNcz0ePL5ntYmI23DkBauQprP NPJBwgMgZL+k3HjFamqtwMGkR28PTQ4bho+EH8NCgklBM2fnVwO69QFdK9oVERHF ZYVpqpXBXcq5kJ6lnhxJRihLrwl4ybS9n6N5R/0f28LTbZCRd7kCTZd/gZjy/8W2 VXqcFdhQjbBiAdyetxqdevAJm7Vzfkgt+8PLzP5B7bPnS4xidxq8DBXbiJFKwe7P uiw3T8knIeHw1nV//2V1K5vb+sPKmyc3QMCed0HnsIbEwDQsWqfNBE+8hz2HCrUO kEDSmHM9+APy4168JipkYLj2+xF6tJwjOSc5L3qXoEQmxb8ANwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFNqF14cwT7UPw3oSxG4ygu4mvULmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85 MzIxMDViMS1jZTU2LTQ0YTctOTY3MC02ZjRlNTY1NzhlZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzkzMjEwNWIxLWNlNTYtNDRhNy05 NjcwLTZmNGU1NjU3OGVmOC85MzIxMDViMS1jZTU2LTQ0YTctOTY3MC02ZjRlNTY1 NzhlZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBABonJoDBAGpgL4wDgQCAAIwCAMGACYC9/gAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDR3DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkvGMufPVt0Kl3iXhC UC0mJ7S+XX4PvWFL92wiO/bmdvqc75rcHPMQ65n1VOABtlqPrsYk/u2j1hyg7CnM yWGVtOF0ErKCMUXMxTraaFpxVmQCmMQSkqIRuJerVmP2Xa0zHqNJROzdLemC1A0N eM2RPe44oMi5LeVw1d9tupevngoGFs65uzAHBmImJzxk3QWQgn9nqWd82+xZxqim npAmOmB/FnhivUzfTBYzlcUOMT6kta+NmnMdXlHlX/fxef/kb1y6yxG8egdhi1Yj 9g+JdB/miXzaohJ4UKIaVkpIb71juvveHW/FiikskAmnIqFx+rcdUKJ0VbiC8PRA jnfW -----END CERTIFICATE-----Generated at Tue Jul 21 18:17:38 2026 by rpki-client