$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc.cer File: 9972ffd2-82f4-460a-b701-97566a69b6fc.cer (raw, json) Hash identifier: RKMp4S2mUvtOL/NdO6BmiM40GuxKEBX4hEiPMvoFs+U= Subject key identifier: 68:1A:08:2A:B7:E1:29:36:2F:46:6D:34:00:63:1C:1B:BD:83:3D:58 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584D2292521A8A541FF348610E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc/9972ffd2-82f4-460a-b701-97566a69b6fc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Mar 2026 17:13:53 +0000 Certificate not after: Tue 13 Jun 2028 17:13:53 +0000 Subordinate resources: IP: 146.86.0.0/17 IP: 146.86.192.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:22:92:52:1a:8a:54:1f:f3:48:61:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Mar 11 17:13:53 2026 GMT Not After : Jun 13 17:13:53 2028 GMT Subject: CN=9972ffd2-82f4-460a-b701-97566a69b6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:38:44:6f:69:b9:6b:2c:a7:c3:d2:78:a9:ae: a5:e7:28:7a:ac:c1:75:84:21:0b:2e:49:76:a7:17: 4b:84:4f:77:d7:a2:fb:a2:85:5f:a1:e8:69:22:2f: c8:cb:4a:38:2c:a5:59:e2:27:e7:f8:94:77:7e:40: f4:46:1c:55:9a:54:bb:d4:c5:c4:b7:76:d7:bd:87: 5d:99:0f:28:e8:22:e0:bd:bd:bd:7a:4a:4d:81:c7: 3b:e0:e3:dd:60:13:b3:6f:8a:eb:c4:54:a8:0d:bc: 14:9a:89:ae:8b:77:df:72:b5:84:34:ac:3f:4a:85: 96:cd:26:a8:df:25:e7:9e:15:96:1f:ee:9b:c0:41: ec:1b:2d:0e:c9:4e:15:ea:44:ff:d4:4f:36:f6:cd: 38:3c:bc:ff:32:0f:be:04:42:96:76:81:b1:83:37: cd:6e:86:be:32:f8:89:08:55:e2:5b:18:cc:69:bf: 0e:45:3d:3c:f1:6a:18:a2:ff:e3:99:c1:8c:cf:0f: 90:fe:94:66:71:24:60:f2:65:17:a4:95:b9:b0:ea: 38:25:64:1c:e4:6a:ba:da:0e:1e:5b:81:61:ed:e1: 97:5c:91:c1:cd:3a:a5:04:a3:ac:50:28:97:be:ab: 24:e3:c1:29:27:c8:a6:4a:81:e8:60:00:ca:70:83: 4b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1A:08:2A:B7:E1:29:36:2F:46:6D:34:00:63:1C:1B:BD:83:3D:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc/9972ffd2-82f4-460a-b701-97566a69b6fc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 146.86.0.0/17 146.86.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:21:e3:f9:d6:24:03:9f:7e:c9:45:e7:72:57:2e:fd:03:bf: bc:26:42:49:a8:1d:8f:7e:3a:96:25:aa:05:33:fb:df:fc:f4: c4:1b:7b:2a:41:d0:97:49:81:a4:4f:eb:2e:0a:ec:fa:c1:0c: 9d:15:a6:5f:56:a6:b2:5a:03:03:0a:a4:13:6d:02:ed:d2:ae: 53:a4:f4:67:5b:3e:85:fd:8a:68:b2:51:f0:9e:3d:f7:f3:c7: 5b:b0:26:85:83:7b:3c:15:5a:03:15:bd:9a:95:a1:76:4f:a0: e6:79:48:c9:9d:e5:a1:3c:c4:6e:42:61:01:03:f8:c7:9c:e6: c5:64:ac:4d:fa:8d:38:73:80:58:7e:ac:59:be:48:1f:b2:15: d5:44:86:0c:ea:cf:4c:d1:cd:54:30:d8:2c:6a:f6:94:c1:8a: d2:07:c0:45:b6:5f:b3:ae:55:1a:10:55:88:5c:b2:a9:08:55: eb:6e:52:86:e8:90:53:4b:ea:56:68:df:a5:2c:3d:54:80:6d: 2e:96:00:c1:82:ea:55:3d:e3:2c:fa:06:40:27:72:ee:83:b8: 13:72:d2:39:95:4c:aa:13:45:75:c8:1b:a9:4e:b2:3b:6e:f4: 0f:15:2e:32:71:cd:44:ca:12:ea:a8:57:90:06:46:41:b4:07: 83:7a:93:4d -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE0iklIailQf80hhDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDMxMTE3MTM1M1oXDTI4MDYxMzE3MTM1M1owLzEtMCsGA1UEAxMk OTk3MmZmZDItODJmNC00NjBhLWI3MDEtOTc1NjZhNjliNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zhEb2m5ayynw9J4qa6l5yh6rMF1hCELLkl2 pxdLhE9316L7ooVfoehpIi/Iy0o4LKVZ4ifn+JR3fkD0RhxVmlS71MXEt3bXvYdd mQ8o6CLgvb29ekpNgcc74OPdYBOzb4rrxFSoDbwUmomui3ffcrWENKw/SoWWzSao 3yXnnhWWH+6bwEHsGy0OyU4V6kT/1E829s04PLz/Mg++BEKWdoGxgzfNboa+MviJ CFXiWxjMab8ORT088WoYov/jmcGMzw+Q/pRmcSRg8mUXpJW5sOo4JWQc5Gq62g4e W4Fh7eGXXJHBzTqlBKOsUCiXvqsk48EpJ8imSoHoYADKcINLEwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFGgaCCq34Sk2L0ZtNABjHBu9gz1YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85 OTcyZmZkMi04MmY0LTQ2MGEtYjcwMS05NzU2NmE2OWI2ZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1Lzk5NzJmZmQyLTgyZjQtNDYwYS1i NzAxLTk3NTY2YTY5YjZmYy85OTcyZmZkMi04MmY0LTQ2MGEtYjcwMS05NzU2NmE2 OWI2ZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAeSVgADBAaSVsAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMSHj+dYkA59+ yUXnclcu/QO/vCZCSagdj346liWqBTP73/z0xBt7KkHQl0mBpE/rLgrs+sEMnRWm X1amsloDAwqkE20C7dKuU6T0Z1s+hf2KaLJR8J499/PHW7AmhYN7PBVaAxW9mpWh dk+g5nlIyZ3loTzEbkJhAQP4x5zmxWSsTfqNOHOAWH6sWb5IH7IV1USGDOrPTNHN VDDYLGr2lMGK0gfARbZfs65VGhBViFyyqQhV625ShuiQU0vqVmjfpSw9VIBtLpYA wYLqVT3jLPoGQCdy7oO4E3LSOZVMqhNFdcgbqU6yO270DxUuMnHNRMoS6qhXkAZG QbQHg3qTTQ== -----END CERTIFICATE-----Generated at Sun Mar 15 09:28:23 2026 by rpki-client