$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer File: db9c5868-bb9c-4fd1-9aca-05762a850994.cer (raw, json) Hash identifier: mFpizvB5IbNEQbHVqtI4Q7eyBF09sj11SN4KfTlh+5M= Subject key identifier: C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CCD04FAD6498559D758CAFB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Feb 2026 01:45:22 +0000 Certificate not after: Sun 14 May 2028 00:45:22 +0000 Subordinate resources: IP: 128.230.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:04:fa:d6:49:85:59:d7:58:ca:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 9 01:45:22 2026 GMT Not After : May 14 00:45:22 2028 GMT Subject: CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9f:7b:10:99:81:7a:27:60:2b:99:83:a7:ea: 25:af:20:b0:a6:8f:6b:9a:93:2d:1f:14:b1:02:d5: 1e:db:74:37:14:c3:8c:1d:c6:5e:55:36:e8:9c:ac: 09:c8:fc:8f:0d:5b:f2:45:90:ba:fd:16:8c:58:c1: f4:ed:9e:16:c1:09:16:76:49:e3:28:cf:38:99:b8: 9c:3d:b0:c9:7f:5a:85:ca:4a:56:6d:a4:0d:69:35: 9a:f1:59:a8:15:d1:97:40:f2:8a:c2:8b:a7:2b:2c: cb:a3:65:cb:80:f1:8b:32:87:1e:14:2b:e0:c7:22: 80:92:16:83:be:3a:11:70:95:a8:bd:70:1e:7e:08: a1:16:bf:8c:e6:50:e3:99:f5:e9:a1:9b:5a:c2:86: cc:a4:6c:8e:66:90:82:52:ed:60:85:8c:fa:1f:f9: 22:5b:ea:1d:2f:0e:83:7f:34:61:70:5d:fd:fe:be: 55:c4:cc:0e:41:7c:74:f5:3b:bc:1b:35:2c:fe:79: c5:b6:fc:d8:96:3b:ef:b0:e8:c9:19:6f:27:a0:fe: a8:a0:10:40:b7:a3:84:6f:81:b1:6d:ed:f2:83:c8: 1c:47:cb:95:56:28:21:66:38:e5:46:d2:3c:32:5a: 9d:9d:1f:7e:ce:c3:2b:7f:06:0a:53:56:64:22:dc: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 128.230.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:97:2a:f1:43:1e:cb:93:b3:33:63:7d:fa:f0:9b:cd:63:86: 64:52:44:ed:39:6d:33:ab:8a:db:87:1f:e1:91:6b:d0:13:a2: 29:cf:be:30:21:33:a6:b1:ba:23:7f:58:27:b8:37:3c:2c:f9: f5:22:94:9a:79:a1:14:05:83:42:e3:c2:3c:57:05:0f:48:f0: e2:62:c8:3b:ff:56:c1:82:12:1f:90:7b:74:03:60:4d:8b:2a: bb:9a:82:bd:b2:9e:d2:e2:40:f0:20:a5:79:45:e4:7a:a1:3d: 8d:97:75:07:33:5f:93:cf:b3:e9:5d:f2:a7:0c:86:b3:c6:c1: 42:f5:dd:38:55:66:0a:97:95:e0:d1:35:26:e0:26:02:01:cb: 4a:8e:4f:d7:96:78:4a:34:e9:3d:f0:20:2a:4a:a7:05:19:dd: 9b:0e:94:05:04:46:1a:97:68:a4:be:8e:61:c9:c0:1c:4a:24: 56:b2:3c:c3:5c:33:80:fe:52:a3:b2:93:62:6f:fe:0b:6b:71: fc:bd:e0:3d:a6:a5:e5:fe:88:df:76:bc:9f:41:79:40:c7:1d: 69:a6:f1:f7:f6:38:b4:2f:c1:31:28:ff:28:7c:c3:fc:72:c5: 09:e7:7d:e5:2a:5b:f1:8b:0e:d4:27:ab:ce:1f:46:1d:46:ad: 55:18:0b:a2 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEzNBPrWSYVZ11jK+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIwOTAxNDUyMloXDTI4MDUxNDAwNDUyMlowLzEtMCsGA1UEAxMk ZGI5YzU4NjgtYmI5Yy00ZmQxLTlhY2EtMDU3NjJhODUwOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg597EJmBeidgK5mDp+olryCwpo9rmpMtHxSx AtUe23Q3FMOMHcZeVTbonKwJyPyPDVvyRZC6/RaMWMH07Z4WwQkWdknjKM84mbic PbDJf1qFykpWbaQNaTWa8VmoFdGXQPKKwounKyzLo2XLgPGLMoceFCvgxyKAkhaD vjoRcJWovXAefgihFr+M5lDjmfXpoZtawobMpGyOZpCCUu1ghYz6H/kiW+odLw6D fzRhcF39/r5VxMwOQXx09Tu8GzUs/nnFtvzYljvvsOjJGW8noP6ooBBAt6OEb4Gx be3yg8gcR8uVVighZjjlRtI8MlqdnR9+zsMrfwYKU1ZkItwVSwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFMLin0kp98p72R0THd8cnvM5uz8ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9k YjljNTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2MmE4NTA5OTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2RiOWM1ODY4LWJiOWMtNGZkMS05 YWNhLTA1NzYyYTg1MDk5NC9kYjljNTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2MmE4 NTA5OTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCA5jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1lyrxQx7Lk7MzY3368JvN Y4ZkUkTtOW0zq4rbhx/hkWvQE6Ipz74wITOmsbojf1gnuDc8LPn1IpSaeaEUBYNC 48I8VwUPSPDiYsg7/1bBghIfkHt0A2BNiyq7moK9sp7S4kDwIKV5ReR6oT2Nl3UH M1+Tz7PpXfKnDIazxsFC9d04VWYKl5Xg0TUm4CYCActKjk/XlnhKNOk98CAqSqcF Gd2bDpQFBEYal2ikvo5hycAcSiRWsjzDXDOA/lKjspNib/4La3H8veA9pqXl/ojf dryfQXlAxx1ppvH39ji0L8ExKP8ofMP8csUJ533lKlvxiw7UJ6vOH0YdRq1VGAui -----END CERTIFICATE-----Generated at Sun Feb 22 16:39:06 2026 by rpki-client