$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer File: a1d568c5-f4e7-4018-a050-a2f04280e225.cer (raw, json) Hash identifier: MLnnAkOfyPMdUf9ixf4ek67e5yGdA7SO7zZMTXGWHR8= Subject key identifier: 60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CE08FC502DA88B4C37D3171C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Feb 2026 01:45:22 +0000 Certificate not after: Sun 21 May 2028 00:45:22 +0000 Subordinate resources: IP: 198.162.67.0/24 IP: 198.168.7.0/24 IP: 198.235.155.0/24 IP: 199.202.92.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:8f:c5:02:da:88:b4:c3:7d:31:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 16 01:45:22 2026 GMT Not After : May 21 00:45:22 2028 GMT Subject: CN=a1d568c5-f4e7-4018-a050-a2f04280e225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d2:f6:08:36:db:f5:f3:03:77:03:33:3f:00: ef:7b:c1:cf:07:69:e9:cb:ce:89:5f:f5:4c:bd:ab: 76:c7:8a:6c:ca:aa:38:fc:cf:24:60:aa:53:b1:3d: 65:02:b8:95:9c:0c:d2:25:87:71:76:33:21:83:3b: 3c:47:ff:4d:04:27:10:fb:48:47:76:f3:d1:51:30: 71:cc:21:6d:3e:32:2b:80:71:9d:61:df:6b:7f:9d: a3:98:58:60:38:c9:32:e9:aa:41:25:32:29:73:e9: 6c:30:87:b1:6d:c5:a2:9b:02:ae:f2:1d:3e:fa:19: f3:e3:0e:15:e9:54:5b:d8:aa:2d:43:bb:a7:b5:30: 68:f1:3d:b9:12:f8:da:f5:f0:d0:e8:1b:d4:c3:ec: a2:48:64:dd:6b:38:d6:4d:4b:3f:3c:8e:ae:64:bd: 44:8e:d8:26:28:29:83:11:64:df:23:ec:0e:ac:24: d4:4d:b4:e2:44:1a:8f:b9:92:a9:96:4a:57:79:3a: b0:73:01:e8:9a:ef:8d:df:4e:6a:5b:64:fc:4c:f9: 22:e7:0b:28:03:f2:fb:1d:6d:54:c3:a8:9a:40:30: cb:5f:07:a5:a3:6f:42:d4:0b:34:62:4c:c3:64:80: a4:7a:5a:b7:40:6b:77:b7:ac:98:12:ce:93:10:b2: 78:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 198.162.67.0/24 198.168.7.0/24 198.235.155.0/24 199.202.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:8a:e0:49:cb:46:cd:da:9d:12:5c:48:64:ad:25:83:2f:0a: 09:be:af:12:56:21:ff:32:80:b1:71:6e:d0:79:64:68:e6:d9: 04:df:5e:7a:5a:5c:b7:81:8f:d7:dc:be:4f:bf:d3:73:dc:2a: 60:ac:c8:fb:e0:74:1b:ee:2d:c0:1e:a3:7d:11:39:1d:e3:88: 5c:1a:31:47:ab:c3:36:37:b2:3b:48:61:72:a4:f7:3e:d0:da: 04:08:87:03:ec:d7:77:6d:3d:bc:6e:f1:fa:9c:98:01:1e:11: c1:29:ff:75:93:fc:b5:14:4e:1c:c1:b7:b7:30:63:c7:ef:9d: 64:ee:39:4b:75:a9:49:05:4a:82:5d:6a:d2:43:ce:65:f1:30: 19:5a:95:7f:b3:85:04:e4:d2:a2:84:f0:fa:49:80:51:a2:bb: 18:eb:70:47:90:b4:cd:e8:cd:62:6c:0e:4d:a3:aa:4e:4d:7d: f1:89:3a:c1:06:d9:a7:f0:39:fb:f1:4d:bd:84:41:45:32:39: eb:65:9d:f6:ec:39:bb:26:0d:fc:97:b3:33:9d:63:97:76:89: d4:d4:c6:b4:ba:33:d1:8c:a2:83:a2:f4:32:7a:3b:31:99:c9: 32:a3:1a:d6:9f:01:75:e1:31:21:75:04:d1:dc:cc:7c:ba:47: bf:87:32:b7 -----BEGIN CERTIFICATE----- MIIG/zCCBeegAwIBAgIUAQ0Mn0MoWEzgj8UC2oi0w30xccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIxNjAxNDUyMloXDTI4MDUyMTAwNDUyMlowLzEtMCsGA1UEAxMk YTFkNTY4YzUtZjRlNy00MDE4LWEwNTAtYTJmMDQyODBlMjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodL2CDbb9fMDdwMzPwDve8HPB2npy86JX/VM vat2x4psyqo4/M8kYKpTsT1lAriVnAzSJYdxdjMhgzs8R/9NBCcQ+0hHdvPRUTBx zCFtPjIrgHGdYd9rf52jmFhgOMky6apBJTIpc+lsMIexbcWimwKu8h0++hnz4w4V 6VRb2KotQ7untTBo8T25Evja9fDQ6BvUw+yiSGTdazjWTUs/PI6uZL1EjtgmKCmD EWTfI+wOrCTUTbTiRBqPuZKplkpXeTqwcwHomu+N305qW2T8TPki5wsoA/L7HW1U w6iaQDDLXwelo29C1As0YkzDZICkelq3QGt3t6yYEs6TELJ4FQIDAQABo4IEETCC BA0wHQYDVR0OBBYEFGCtX7XuL7ItpDQO1xm1Unt8utugMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h MWQ1NjhjNS1mNGU3LTQwMTgtYTA1MC1hMmYwNDI4MGUyMjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2ExZDU2OGM1LWY0ZTctNDAxOC1h MDUwLWEyZjA0MjgwZTIyNS9hMWQ1NjhjNS1mNGU3LTQwMTgtYTA1MC1hMmYwNDI4 MGUyMjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBADGokMDBADGqAcDBADG65sDBADHylwwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAfYrgSctGzdqdElxIZK0lgy8KCb6vElYh/zKAsXFu0HlkaObZBN9eelpct4GP 19y+T7/Tc9wqYKzI++B0G+4twB6jfRE5HeOIXBoxR6vDNjeyO0hhcqT3PtDaBAiH A+zXd209vG7x+pyYAR4RwSn/dZP8tRROHMG3tzBjx++dZO45S3WpSQVKgl1q0kPO ZfEwGVqVf7OFBOTSooTw+kmAUaK7GOtwR5C0zejNYmwOTaOqTk198Yk6wQbZp/A5 +/FNvYRBRTI562Wd9uw5uyYN/JezM51jl3aJ1NTGtLoz0Yyig6L0Mno7MZnJMqMa 1p8BdeExIXUE0dzMfLpHv4cytw== -----END CERTIFICATE-----Generated at Wed Feb 25 10:46:54 2026 by rpki-client