$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer File: 628d865a-2d19-4af1-984a-6c443304d9f0.cer (raw, json) Hash identifier: Tal0PLknzvJq0S0C1GhWzVlt6OsCQEX4VjfT2xyGEMM= Subject key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CF9AFEBF5A1AAEA723E484400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Feb 2026 01:45:22 +0000 Certificate not after: Tue 30 May 2028 00:45:22 +0000 Subordinate resources: IP: 152.30.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:af:eb:f5:a1:aa:ea:72:3e:48:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 25 01:45:22 2026 GMT Not After : May 30 00:45:22 2028 GMT Subject: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:34:60:6c:4a:cd:2f:0e:63:c7:63:e7:37:d5: c5:22:53:d0:d7:58:5c:4f:2d:0d:fa:9f:e1:e7:ad: 40:9d:68:b7:17:a5:21:f6:96:30:4b:99:87:8d:d3: 71:51:73:42:14:72:41:65:d1:61:28:65:72:5c:bb: e8:2d:b1:56:8a:5a:28:2b:c4:02:d4:df:8d:e9:de: 1e:f3:70:b2:5c:cd:9e:bc:ce:6b:89:72:04:ac:40: 04:23:a3:17:60:bb:3c:d3:c8:36:60:91:7f:e4:35: da:55:83:d7:ef:7b:79:c6:62:e9:89:93:6d:3c:b2: 56:1c:d9:67:4e:98:53:ad:4e:84:ef:f5:5f:cb:b7: a6:2f:31:35:c7:75:75:19:5c:8e:9b:c4:2d:95:31: 35:a5:91:d0:b5:c8:c3:92:cb:35:86:36:ea:c5:4d: b2:f7:0b:8f:de:2e:0f:b3:d1:e2:f5:30:71:5b:f4: 94:63:46:f4:48:bc:9e:38:a8:56:1a:4c:cd:0c:60: 24:b9:a0:c8:08:50:50:9a:58:af:18:1c:ad:30:32: e3:a8:72:ff:d4:64:d0:41:fa:2e:83:0c:6a:00:8a: 2d:52:dc:bb:df:a7:0b:df:c5:a0:d8:8e:5d:bb:50: 3d:8e:b7:92:f9:4a:50:20:96:dc:8d:99:96:34:63: af:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 152.30.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:35:fb:3f:96:84:e6:de:d3:88:ea:ca:58:72:ae:00:e2:e4: 78:45:8b:02:f1:a3:c2:1a:ae:22:c7:d6:b0:7a:41:d8:72:17: 59:0c:95:f4:c2:36:6c:41:8d:44:4e:40:a7:89:6b:a9:eb:21: a3:2b:c2:0d:8d:44:c5:36:ac:4d:2c:0e:53:b0:31:22:2d:11: 54:f6:a8:3e:a2:1a:4c:aa:c5:de:dd:cd:72:41:f0:2d:f1:db: 91:ac:33:98:7e:d7:4c:17:b6:52:15:88:ab:34:3d:c6:8b:c1: 7d:e8:d2:f4:86:98:6c:a8:91:67:2c:5a:51:72:59:d1:68:59: e3:e1:51:76:bf:1c:97:5f:6e:1f:00:0a:1b:83:6d:03:63:15: 16:32:16:b4:ad:98:85:53:76:99:7a:ac:19:c6:fe:2a:fa:f1: 4b:2a:4f:1c:8e:4e:ce:fb:ea:a6:3d:d9:c9:5c:1e:3b:a0:c6: 84:72:3e:88:00:ff:b2:f4:75:f4:b6:e8:36:44:c0:22:ff:75: 12:92:1d:6b:c8:9f:64:e8:fe:e1:3d:77:5e:f6:cb:3f:0d:59: 5b:24:70:a5:bd:71:fa:6d:74:d1:60:86:c6:97:1e:ac:73:72: fa:7f:2a:a7:3d:b5:d2:bc:82:3a:bd:b3:8f:ae:98:84:9d:e4: 42:01:15:33 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEz5r+v1oarqcj5IRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIyNTAxNDUyMloXDTI4MDUzMDAwNDUyMlowLzEtMCsGA1UEAxMk NjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRkOWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzRgbErNLw5jx2PnN9XFIlPQ11hcTy0N+p/h 561AnWi3F6Uh9pYwS5mHjdNxUXNCFHJBZdFhKGVyXLvoLbFWilooK8QC1N+N6d4e 83CyXM2evM5riXIErEAEI6MXYLs808g2YJF/5DXaVYPX73t5xmLpiZNtPLJWHNln TphTrU6E7/Vfy7emLzE1x3V1GVyOm8QtlTE1pZHQtcjDkss1hjbqxU2y9wuP3i4P s9Hi9TBxW/SUY0b0SLyeOKhWGkzNDGAkuaDICFBQmlivGBytMDLjqHL/1GTQQfou gwxqAIotUty736cL38Wg2I5du1A9jreS+UpQIJbcjZmWNGOvowIDAQABo4ID/jCC A/owHQYDVR0OBBYEFCWLvPzM+FY2nmuN7pXT0Q9JmAgkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82 MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzYyOGQ4NjVhLTJkMTktNGFmMS05 ODRhLTZjNDQzMzA0ZDlmMC82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMw NGQ5ZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCYHjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuNfs/loTm3tOI6spYcq4A 4uR4RYsC8aPCGq4ix9awekHYchdZDJX0wjZsQY1ETkCniWup6yGjK8INjUTFNqxN LA5TsDEiLRFU9qg+ohpMqsXe3c1yQfAt8duRrDOYftdMF7ZSFYirND3Gi8F96NL0 hphsqJFnLFpRclnRaFnj4VF2vxyXX24fAAobg20DYxUWMha0rZiFU3aZeqwZxv4q +vFLKk8cjk7O++qmPdnJXB47oMaEcj6IAP+y9HX0tug2RMAi/3USkh1ryJ9k6P7h PXde9ss/DVlbJHClvXH6bXTRYIbGlx6sc3L6fyqnPbXSvII6vbOPrpiEneRCARUz -----END CERTIFICATE-----Generated at Sun Mar 1 22:51:48 2026 by rpki-client