$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer File: 3a975a5d-2307-4688-a186-4a355ff45581.cer (raw, json) Hash identifier: QKuNSlXLYduwQYcLB/rHqnPbefvQT2ceOnk4cuj7Aas= Subject key identifier: 0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CAB84BEB541FD3E1FA8FEC900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Jan 2026 01:45:19 +0000 Certificate not after: Tue 02 May 2028 00:45:19 +0000 Subordinate resources: AS: 32473 IP: 64.52.21.0/24 IP: 67.158.61.0/24 IP: 69.72.30.0/24 IP: 137.83.90.0/24 IP: 141.193.149.0/24 IP: 172.86.159.0/24 IP: 2605:6740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:84:be:b5:41:fd:3e:1f:a8:fe:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 28 01:45:19 2026 GMT Not After : May 2 00:45:19 2028 GMT Subject: CN=3a975a5d-2307-4688-a186-4a355ff45581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3e:99:f4:bc:ab:e8:e3:c6:6d:ed:28:77:18: 5d:b6:77:df:df:e0:93:43:6a:b3:31:4f:c5:62:e0: 08:84:57:d9:16:bf:cf:7b:0c:35:fc:82:54:f6:ec: 3a:76:b0:aa:f5:16:4e:62:4c:a0:a7:85:e2:a1:38: 7e:2b:2d:f8:63:ac:e5:99:8b:de:14:8d:b8:da:84: 20:60:8f:f7:0f:d1:5e:3a:9f:63:aa:47:b2:2c:2e: be:20:28:17:90:cd:43:0b:58:38:07:a6:7d:ef:64: 07:74:19:b4:cd:4f:a1:81:8f:4f:fc:a2:16:34:0f: 7b:b3:61:c2:8c:3c:01:8d:1b:49:e9:e4:5c:2d:68: 28:c1:b0:8b:59:79:7f:b0:3d:69:50:87:e3:40:fa: 40:f0:71:6e:91:bb:a3:d1:de:f3:f8:30:aa:12:a0: 0d:bf:e9:b4:93:1e:9c:e0:0d:f6:4c:53:a3:3c:86: 54:2c:c4:b9:4d:72:fd:dc:b7:15:98:c3:b7:45:48: 18:ad:b9:b4:eb:28:ac:32:a2:b4:d4:c8:fb:29:30: 2e:38:23:b4:79:7f:50:ef:dd:8b:d5:29:29:e8:29: 84:1d:90:5d:31:f2:d4:a9:da:99:72:ba:3c:64:13: 16:f8:f7:a0:53:02:23:86:bd:a7:9c:b3:73:2b:d2: 9a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 64.52.21.0/24 67.158.61.0/24 69.72.30.0/24 137.83.90.0/24 141.193.149.0/24 172.86.159.0/24 IPv6: 2605:6740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32473 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7d:e6:46:a9:31:48:89:fc:5a:01:65:ac:f6:61:31:60:aa: 69:fb:f0:64:68:96:d0:86:48:23:a5:49:a3:06:51:20:11:f7: 51:fb:5d:2b:39:c4:4f:f1:e1:ba:f0:7f:e5:cb:d8:8b:f4:18: d8:f8:80:f6:2f:29:96:41:02:29:66:ff:2d:d2:17:63:61:cb: 0a:38:0a:6e:d3:07:8b:06:aa:ca:3b:f1:b0:82:a9:d1:f2:32: 6c:3f:41:b2:63:65:2e:86:5d:f6:5d:e5:07:7e:6f:97:f8:66: dd:2d:35:3d:6e:bf:8c:7c:4d:df:ef:51:06:f4:30:d0:c2:da: 13:11:47:fd:d1:54:63:41:9d:5a:70:00:0a:db:26:bd:54:c3: d0:ab:26:06:26:cd:1f:dd:43:31:98:f6:c1:e6:0d:55:c2:4a: 52:f7:37:fe:24:4d:6f:9a:c5:ce:0c:6a:67:e9:6c:84:54:79: 4d:df:0b:9a:a2:67:a4:39:64:35:9c:42:85:d4:2e:45:10:17: 59:72:46:ab:cb:69:2a:45:c3:72:3f:35:7b:c4:90:49:a6:fd: ac:4d:a2:3f:d5:b2:0a:04:db:a7:45:44:c9:fb:fa:82:36:0e: c8:5f:cd:1b:d5:dd:da:32:7d:35:6b:69:ce:5d:12:7c:ea:90: aa:47:54:2b -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEyrhL61Qf0+H6j+yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDEyODAxNDUxOVoXDTI4MDUwMjAwNDUxOVowLzEtMCsGA1UEAxMk M2E5NzVhNWQtMjMwNy00Njg4LWExODYtNGEzNTVmZjQ1NTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj6Z9Lyr6OPGbe0odxhdtnff3+CTQ2qzMU/F YuAIhFfZFr/Peww1/IJU9uw6drCq9RZOYkygp4XioTh+Ky34Y6zlmYveFI242oQg YI/3D9FeOp9jqkeyLC6+ICgXkM1DC1g4B6Z972QHdBm0zU+hgY9P/KIWNA97s2HC jDwBjRtJ6eRcLWgowbCLWXl/sD1pUIfjQPpA8HFukbuj0d7z+DCqEqANv+m0kx6c 4A32TFOjPIZULMS5TXL93LcVmMO3RUgYrbm06yisMqK01Mj7KTAuOCO0eX9Q792L 1Skp6CmEHZBdMfLUqdqZcro8ZBMW+PegUwIjhr2nnLNzK9KaTwIDAQABo4IERzCC BEMwHQYDVR0OBBYEFAwtgcz3RvQWcx5sabZdlSuCbFFMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z YTk3NWE1ZC0yMzA3LTQ2ODgtYTE4Ni00YTM1NWZmNDU1ODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNhOTc1YTVkLTIzMDctNDY4OC1h MTg2LTRhMzU1ZmY0NTU4MS8zYTk3NWE1ZC0yMzA3LTQ2ODgtYTE4Ni00YTM1NWZm NDU1ODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBABANBUDBABDnj0DBABFSB4DBACJU1oDBACNwZUD BACsVp8wDQQCAAIwBwMFACYFZ0AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICftkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARX3mRqkxSIn8WgFlrPZhMWCqafvwZGiW0IZII6VJowZRIBH3Uftd KznET/HhuvB/5cvYi/QY2PiA9i8plkECKWb/LdIXY2HLCjgKbtMHiwaqyjvxsIKp 0fIybD9BsmNlLoZd9l3lB35vl/hm3S01PW6/jHxN3+9RBvQw0MLaExFH/dFUY0Gd WnAACtsmvVTD0KsmBibNH91DMZj2weYNVcJKUvc3/iRNb5rFzgxqZ+lshFR5Td8L mqJnpDlkNZxChdQuRRAXWXJGq8tpKkXDcj81e8SQSab9rE2iP9WyCgTbp0VEyfv6 gjYOyF/NG9Xd2jJ9NWtpzl0SfOqQqkdUKw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:35:50 2026 by rpki-client