$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer File: 425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer (raw, json) Hash identifier: 6ISXzBhzHNl3F+exdT1yCiRZWO7UNFl5zALZVl63Ri0= Subject key identifier: CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584F5F31A35331033B4920A25180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 19:57:15 +0000 Certificate not after: Fri 05 May 2028 12:45:22 +0000 Subordinate resources: AS: 397700 IP: 23.188.24.0/24 IP: 192.35.249.0/24 IP: 2602:f826::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:31:a3:53:31:03:3b:49:20:a2:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 2 19:57:15 2026 GMT Not After : May 5 12:45:22 2028 GMT Subject: CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c2:bd:82:8a:ba:a3:fd:af:0c:eb:6c:81:28: 0b:8c:25:0b:f5:bd:63:aa:90:b5:57:9d:90:9b:ce: e3:6b:3b:f9:96:f5:96:05:ea:2a:03:5a:a0:f1:a9: 9c:ec:9e:44:c1:11:5e:bc:0f:08:9e:fa:b0:82:3d: d8:89:3b:b3:0e:f3:16:ce:cc:f8:da:62:52:20:ac: 02:22:63:a2:a6:73:9a:f9:56:69:ac:5e:13:de:5a: 03:59:7d:98:3c:0c:4c:f7:29:f7:cc:ab:c6:fc:f3: d1:c6:7f:f4:bc:9b:8b:31:e5:c1:50:31:24:b3:49: 37:7c:28:a0:49:b4:77:75:83:87:7b:21:09:01:5e: 15:4d:0d:31:a3:8c:14:fe:4c:fb:09:88:b0:39:e2: a7:54:df:d6:36:c9:ce:c6:4d:90:08:e8:21:01:6c: 3c:db:e0:ca:8a:72:fb:f6:46:4d:a3:9a:97:89:cf: 9f:2f:34:4e:07:2b:00:c7:3e:15:63:72:2d:72:99: ca:b9:56:35:8b:95:00:bc:20:25:eb:a9:da:14:7d: 86:e7:ec:a8:09:e2:04:a3:d0:4f:76:47:26:96:2f: 57:7b:a1:27:f8:33:c3:55:e6:d6:0d:ed:1c:ae:bc: 59:3b:5b:1a:fb:d2:f8:04:df:06:ca:d2:bd:af:ab: dc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.188.24.0/24 192.35.249.0/24 IPv6: 2602:f826::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397700 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e0:0e:ba:49:6a:3b:de:84:79:c9:ab:44:b9:5c:9a:98:b4: 4e:d2:9b:26:7b:22:7c:32:07:0f:32:c3:15:b1:9e:1e:84:41: f0:7a:5f:a6:56:21:fb:b6:61:18:93:f7:77:45:39:53:72:26: 2b:68:f4:95:fd:38:ca:a0:9b:12:76:a4:02:9a:0e:06:94:36: 61:57:1a:18:6c:80:39:81:a9:2c:cc:d1:f4:d2:3a:3e:bf:44: a4:68:a1:4c:d3:1b:8b:6c:7d:c5:f1:c4:ac:72:19:e0:63:a7: 5a:cc:ac:21:96:89:84:30:6b:72:e2:88:bd:c3:60:ad:bd:be: 3b:da:6e:60:71:5c:69:86:40:1f:a1:49:06:76:c3:51:ac:41: cf:17:4f:68:2f:8d:a2:9e:49:3e:e6:e5:43:86:68:5c:68:b8: 37:6f:58:a1:8b:51:f5:10:f8:dd:6e:92:43:8f:c6:9f:87:61: 75:da:1e:d1:00:f6:96:84:0b:96:59:fa:ff:54:4a:1f:6a:44: df:c9:4d:89:b0:86:2b:bf:78:59:30:55:ef:fc:e1:ee:b6:f6: 60:d9:85:ab:c5:b2:7f:8b:4d:7d:48:42:0f:72:f5:c0:3f:dc: 1c:88:80:2c:af:0c:be:21:c6:1c:7b:53:1b:15:60:5d:d8:b7: d6:ea:32:86 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE9fMaNTMQM7SSCiUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MTAwMjE5NTcxNVoXDTI4MDUwNTEyNDUyMlowLzEtMCsGA1UEAxMk NDI1ZjczYmItNjNmYy00YWVjLThmNzgtMTRhNThmOTJiZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8K9goq6o/2vDOtsgSgLjCUL9b1jqpC1V52Q m87jazv5lvWWBeoqA1qg8amc7J5EwRFevA8Invqwgj3YiTuzDvMWzsz42mJSIKwC ImOipnOa+VZprF4T3loDWX2YPAxM9yn3zKvG/PPRxn/0vJuLMeXBUDEks0k3fCig SbR3dYOHeyEJAV4VTQ0xo4wU/kz7CYiwOeKnVN/WNsnOxk2QCOghAWw82+DKinL7 9kZNo5qXic+fLzROBysAxz4VY3ItcpnKuVY1i5UAvCAl66naFH2G5+yoCeIEo9BP dkcmli9Xe6En+DPDVebWDe0crrxZO1sa+9L4BN8GytK9r6vchwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFM8mCIxe/PpIxkWIxuYN1in3k1uoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80 MjVmNzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1OGY5MmJmMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzQyNWY3M2JiLTYzZmMtNGFlYy04 Zjc4LTE0YTU4ZjkyYmYyZS80MjVmNzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1OGY5 MmJmMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXvBgDBADAI/kwDgQCAAIwCAMGBCYC+CYAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYRhDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCL4A66SWo73oR5yatE uVyamLRO0psmeyJ8MgcPMsMVsZ4ehEHwel+mViH7tmEYk/d3RTlTciYraPSV/TjK oJsSdqQCmg4GlDZhVxoYbIA5gakszNH00jo+v0SkaKFM0xuLbH3F8cSschngY6da zKwhlomEMGty4oi9w2Ctvb472m5gcVxphkAfoUkGdsNRrEHPF09oL42inkk+5uVD hmhcaLg3b1ihi1H1EPjdbpJDj8afh2F12h7RAPaWhAuWWfr/VEofakTfyU2JsIYr v3hZMFXv/OHutvZg2YWrxbJ/i019SEIPcvXAP9wciIAsrwy+IcYce1MbFWBd2LfW 6jKG -----END CERTIFICATE-----Generated at Sun Nov 15 21:57:02 2026 by rpki-client