$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer File: 39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer (raw, json) Hash identifier: OzxlCLX9UBtzmw59jGKAaWh/BNkJGlorGrSeOcSG3jQ= Subject key identifier: 8D:1A:CB:CB:3C:93:76:93:9D:F1:49:93:22:36:91:24:54:AB:60:8D Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CD56507459E714CD62EEBDE4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Feb 2026 01:45:22 +0000 Certificate not after: Wed 17 May 2028 00:45:22 +0000 Subordinate resources: IP: 192.75.204.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d5:65:07:45:9e:71:4c:d6:2e:eb:de:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 12 01:45:22 2026 GMT Not After : May 17 00:45:22 2028 GMT Subject: CN=39b7a1af-10b3-4d25-bd3d-063971b6afbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:60:79:1b:fe:00:12:8c:67:95:33:39:02:5a: d8:bf:fb:a2:a1:f6:af:54:33:af:0c:58:79:45:37: 3a:d1:8c:70:77:50:c4:bb:9a:ff:54:31:f8:9b:30: 8c:f1:64:2a:ce:6a:9a:5f:d4:f0:a2:f8:da:93:1c: 6f:1e:87:e7:c1:13:8c:2e:83:3f:0b:82:a1:40:44: 1e:c7:ee:0f:f4:70:91:d8:9f:6c:57:4f:80:32:55: 05:49:f8:06:72:ea:9f:e0:3f:da:4b:0c:26:5a:c9: fd:a8:7c:0d:25:bd:11:26:2f:81:cf:8f:2e:64:08: 55:02:99:99:ae:48:1b:d7:ff:71:59:6e:00:1e:87: 6c:40:af:f1:40:48:c6:2e:1b:3c:cb:81:45:f4:94: 06:f9:5e:0b:97:d0:03:75:b3:4c:21:dc:af:8b:20: 7a:b2:9d:79:3e:a4:c7:08:9c:42:ce:1d:97:37:86: 4c:c3:61:37:17:07:b7:5b:9b:36:4a:5d:d9:59:12: 70:13:b6:27:68:b4:2a:66:d9:bd:c0:c7:24:41:28: 52:a7:1f:18:97:09:0f:af:56:1f:e2:47:85:9b:3b: b3:78:95:c7:b9:d2:9b:cd:ba:6c:69:53:83:f4:7d: 84:3c:d2:c5:85:4f:81:c2:a7:69:03:29:00:d8:f7: 33:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1A:CB:CB:3C:93:76:93:9D:F1:49:93:22:36:91:24:54:AB:60:8D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 192.75.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f8:7c:57:94:a0:04:3e:1d:f2:bc:ba:df:8a:d6:1e:93:a6: f3:a6:78:27:48:68:b4:96:cb:01:29:1b:1b:da:58:e0:53:bc: 0d:7c:36:3b:73:66:d8:e2:48:ca:a9:03:b5:5c:73:3a:74:4c: 9a:76:3f:c7:6e:9c:62:03:10:6b:ba:34:01:53:7c:6c:33:ad: a9:8b:a6:91:de:f2:62:0b:4d:37:fc:82:f8:e3:75:82:15:fd: f2:fd:06:a5:42:50:ed:1f:3a:27:96:1e:4b:bc:0f:3c:f7:dc: d7:5f:12:a6:f1:ec:da:4a:d3:e0:bb:01:ad:17:05:3b:63:5b: c3:b5:2b:e0:63:87:0e:9e:aa:48:95:68:db:98:70:14:9d:d8: 79:57:80:60:5c:4f:06:75:01:1e:e2:cd:c1:5c:92:c6:92:2a: 47:a7:75:b9:d0:46:a6:86:b2:25:5e:18:ef:f2:52:65:c2:7b: 0f:a1:dd:eb:f4:59:8e:99:01:74:00:91:86:85:d1:c7:93:e9: 12:bf:ed:25:1d:15:67:cd:ec:5a:c2:7d:44:28:88:17:7d:86: 7f:b6:2e:c1:1d:a3:cc:16:d3:33:11:1c:f1:a6:97:e9:4a:37: 43:c1:57:9c:65:73:b6:d3:6d:32:ad:fc:dc:e1:71:d6:96:1b: 19:b5:32:dd -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEzVZQdFnnFM1i7r3kwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIxMjAxNDUyMloXDTI4MDUxNzAwNDUyMlowLzEtMCsGA1UEAxMk MzliN2ExYWYtMTBiMy00ZDI1LWJkM2QtMDYzOTcxYjZhZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2B5G/4AEoxnlTM5AlrYv/uiofavVDOvDFh5 RTc60Yxwd1DEu5r/VDH4mzCM8WQqzmqaX9TwovjakxxvHofnwROMLoM/C4KhQEQe x+4P9HCR2J9sV0+AMlUFSfgGcuqf4D/aSwwmWsn9qHwNJb0RJi+Bz48uZAhVApmZ rkgb1/9xWW4AHodsQK/xQEjGLhs8y4FF9JQG+V4Ll9ADdbNMIdyviyB6sp15PqTH CJxCzh2XN4ZMw2E3Fwe3W5s2Sl3ZWRJwE7YnaLQqZtm9wMckQShSpx8YlwkPr1Yf 4keFmzuzeJXHudKbzbpsaVOD9H2EPNLFhU+BwqdpAykA2PczWQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFI0ay8s8k3aTnfFJkyI2kSRUq2CNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z OWI3YTFhZi0xMGIzLTRkMjUtYmQzZC0wNjM5NzFiNmFmYmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzM5YjdhMWFmLTEwYjMtNGQyNS1i ZDNkLTA2Mzk3MWI2YWZiYy8zOWI3YTFhZi0xMGIzLTRkMjUtYmQzZC0wNjM5NzFi NmFmYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHAS8wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMfh8V5SgBD4d8ry634rW HpOm86Z4J0hotJbLASkbG9pY4FO8DXw2O3Nm2OJIyqkDtVxzOnRMmnY/x26cYgMQ a7o0AVN8bDOtqYumkd7yYgtNN/yC+ON1ghX98v0GpUJQ7R86J5YeS7wPPPfc118S pvHs2krT4LsBrRcFO2Nbw7Ur4GOHDp6qSJVo25hwFJ3YeVeAYFxPBnUBHuLNwVyS xpIqR6d1udBGpoayJV4Y7/JSZcJ7D6Hd6/RZjpkBdACRhoXRx5PpEr/tJR0VZ83s WsJ9RCiIF32Gf7YuwR2jzBbTMxEc8aaX6Uo3Q8FXnGVzttNtMq383OFx1pYbGbUy 3Q== -----END CERTIFICATE-----Generated at Mon Mar 2 00:17:06 2026 by rpki-client