$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3db906fb-a8ff-49a9-969f-6368e09818c4.cer File: 3db906fb-a8ff-49a9-969f-6368e09818c4.cer (raw, json) Hash identifier: 1PweMX4wWbYqR50vnXfNSbIFwSqVbSZgQ/pCjQvaD6g= Subject key identifier: E3:93:5F:DA:BD:2B:1A:9E:EA:9B:9F:69:65:6E:A2:15:CC:22:54:54 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CA754BD8FEE27F061ABD21280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3db906fb-a8ff-49a9-969f-6368e09818c4/3db906fb-a8ff-49a9-969f-6368e09818c4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3db906fb-a8ff-49a9-969f-6368e09818c4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Jan 2026 13:45:22 +0000 Certificate not after: Sun 30 Apr 2028 12:45:22 +0000 Subordinate resources: AS: 32261 IP: 2620:12d:b000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:54:bd:8f:ee:27:f0:61:ab:d2:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 26 13:45:22 2026 GMT Not After : Apr 30 12:45:22 2028 GMT Subject: CN=3db906fb-a8ff-49a9-969f-6368e09818c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:54:ad:99:14:4c:57:30:ac:57:a5:dc:3a: d0:cf:59:0b:e8:34:fb:01:b7:53:dc:33:52:a0:74: 80:d5:b8:82:04:05:8d:15:be:59:33:45:c5:d5:4d: e7:80:27:33:34:4f:df:78:2c:5b:87:39:c0:3e:e5: 17:73:a3:80:15:2b:12:e1:0b:8a:c6:ec:45:fb:63: 16:b8:45:55:21:75:df:7a:de:38:71:b3:ed:fb:9a: 33:11:ad:20:76:33:1d:9c:0f:fa:6f:e3:cd:ac:3e: 0d:cc:12:b4:ae:f8:81:a3:db:03:dc:0e:3f:4f:50: 4f:8c:4c:16:a8:f6:f0:92:b3:29:dc:32:b1:57:7b: 5a:89:63:98:77:e7:6e:aa:e7:ae:f9:6c:49:e0:29: 4f:73:30:34:3f:cd:72:75:ad:0f:84:48:08:95:76: 98:65:df:45:eb:c5:c3:a4:16:41:c2:2f:69:42:c4: fe:b3:ae:2f:16:d8:77:2a:93:49:63:f4:eb:af:3b: 57:1c:25:92:e9:07:0c:54:99:80:63:63:f9:eb:1a: 45:36:5a:0f:90:88:26:25:fa:d1:c0:49:03:68:e6: e6:ea:a3:22:2f:e0:fe:01:16:3b:bb:f5:c4:9b:0f: ce:4b:f9:ee:5d:c5:1a:e5:d7:bf:bd:91:d7:e0:34: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:93:5F:DA:BD:2B:1A:9E:EA:9B:9F:69:65:6E:A2:15:CC:22:54:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3db906fb-a8ff-49a9-969f-6368e09818c4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3db906fb-a8ff-49a9-969f-6368e09818c4/3db906fb-a8ff-49a9-969f-6368e09818c4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv6: 2620:12d:b000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32261 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:78:79:c1:46:e2:fc:60:34:38:71:d2:ba:7f:6c:f3:03:f8: d0:5d:e8:d4:3e:99:af:5c:d3:97:3a:e7:29:79:a4:c8:b2:fe: 1a:25:a9:07:84:c0:32:c8:2e:fa:c2:ee:23:72:4f:c6:60:e8: f4:28:05:c6:84:86:74:07:66:2d:cf:d9:b2:94:c0:6e:c2:2f: 2b:81:48:35:83:1e:d9:39:ce:18:b5:e4:ab:e8:c9:59:f7:e8: 8b:3f:62:5c:e0:22:11:7a:c0:ab:e8:f9:d0:e9:6d:08:98:2c: d2:19:b7:a1:bd:c6:3e:96:43:0e:d1:cc:95:e0:3c:54:cc:33: 13:c1:2b:46:c4:d8:41:17:b7:18:3c:59:cb:78:0a:92:ce:c5: 77:e1:02:a8:18:21:8f:08:9d:b7:19:d9:e4:61:39:d8:98:c4: bc:e8:a5:8f:3d:1c:e7:0c:e8:1e:31:9e:2c:c7:a6:af:a8:16: d0:6b:62:97:7b:e5:70:84:f7:f3:44:a1:fc:d6:14:34:44:dd: 24:03:9b:6e:64:91:21:40:7b:6a:87:eb:d2:e4:0e:29:73:ce: 55:4b:11:27:01:59:78:38:c2:dd:c0:9f:32:92:c6:2b:0e:71: 50:c6:10:46:00:df:75:8b:54:67:10:16:69:b3:f7:eb:74:b8: 76:e8:f6:2f -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEynVL2P7ifwYavSEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDEyNjEzNDUyMloXDTI4MDQzMDEyNDUyMlowLzEtMCsGA1UEAxMk M2RiOTA2ZmItYThmZi00OWE5LTk2OWYtNjM2OGUwOTgxOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNFUrZkUTFcwrFel3DrQz1kL6DT7AbdT3DNS oHSA1biCBAWNFb5ZM0XF1U3ngCczNE/feCxbhznAPuUXc6OAFSsS4QuKxuxF+2MW uEVVIXXfet44cbPt+5ozEa0gdjMdnA/6b+PNrD4NzBK0rviBo9sD3A4/T1BPjEwW qPbwkrMp3DKxV3taiWOYd+duqueu+WxJ4ClPczA0P81yda0PhEgIlXaYZd9F68XD pBZBwi9pQsT+s64vFth3KpNJY/TrrztXHCWS6QcMVJmAY2P56xpFNloPkIgmJfrR wEkDaObm6qMiL+D+ARY7u/XEmw/OS/nuXcUa5de/vZHX4DSEcwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFOOTX9q9Kxqe6pufaWVuohXMIlRUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z ZGI5MDZmYi1hOGZmLTQ5YTktOTY5Zi02MzY4ZTA5ODE4YzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNkYjkwNmZiLWE4ZmYtNDlhOS05 NjlmLTYzNjhlMDk4MThjNC8zZGI5MDZmYi1hOGZmLTQ5YTktOTY5Zi02MzY4ZTA5 ODE4YzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIAEtsAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICfgUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAGnh5wUbi/GA0OHHSun9s8wP40F3o1D6Zr1zTlzrnKXmk yLL+GiWpB4TAMsgu+sLuI3JPxmDo9CgFxoSGdAdmLc/ZspTAbsIvK4FINYMe2TnO GLXkq+jJWffoiz9iXOAiEXrAq+j50OltCJgs0hm3ob3GPpZDDtHMleA8VMwzE8Er RsTYQRe3GDxZy3gKks7Fd+ECqBghjwidtxnZ5GE52JjEvOiljz0c5wzoHjGeLMem r6gW0Gtil3vlcIT380Sh/NYUNETdJAObbmSRIUB7aofr0uQOKXPOVUsRJwFZeDjC 3cCfMpLGKw5xUMYQRgDfdYtUZxAWabP363S4duj2Lw== -----END CERTIFICATE-----Generated at Mon Mar 2 00:48:24 2026 by rpki-client