$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a.cer File: 70197168-13e1-4a38-9046-75d751ec520a.cer (raw, json) Hash identifier: h91GGfV2m1CFFvMTKmAfnBwswwkmHbMZeePB7PXbbA8= Subject key identifier: 3F:68:73:EF:E5:F7:D6:45:2B:C0:79:7F:FA:77:B4:DD:0D:F9:03:31 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CD29A56A914BB14C48616E180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/70197168-13e1-4a38-9046-75d751ec520a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Feb 2026 01:45:22 +0000 Certificate not after: Tue 16 May 2028 00:45:22 +0000 Subordinate resources: IP: 104.194.0.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d2:9a:56:a9:14:bb:14:c4:86:16:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 11 01:45:22 2026 GMT Not After : May 16 00:45:22 2028 GMT Subject: CN=70197168-13e1-4a38-9046-75d751ec520a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:01:26:34:ed:cc:07:5d:59:0e:18:1a:a9:cf: f8:19:6c:e4:16:be:c9:70:71:00:39:93:29:8f:d3: 83:de:00:83:d0:08:f6:ea:f3:6b:bc:33:d1:4a:ea: 93:05:56:20:5e:67:4b:19:dc:aa:be:08:ad:c9:f9: 72:b3:e9:5e:35:e3:48:86:64:31:65:b2:99:93:50: 4d:c5:e6:17:96:08:79:27:28:eb:9f:d1:d7:2c:ef: c9:b8:de:47:1a:ff:50:54:0a:b6:4b:23:6e:ab:6d: ca:32:cc:46:d5:5a:68:50:fa:59:d0:fb:6b:5c:63: a7:7b:29:c9:0a:6d:cf:da:5d:5a:50:19:82:a8:de: ea:6c:dd:f4:86:5d:0f:67:cc:4c:bf:ae:c4:fa:14: bb:a0:ca:2e:c8:39:66:9a:48:81:56:61:65:bd:15: ef:dd:5f:cd:d1:f1:cc:9f:c6:3d:90:56:74:79:39: 5f:4c:02:c8:66:f0:d9:17:0a:7f:41:af:f4:e6:42: 62:28:e2:1c:73:b1:fd:55:a8:78:74:c5:b0:bb:7f: b6:b5:62:7e:98:27:2d:f8:78:b0:27:b7:c0:7e:fc: af:90:09:9f:dd:bf:1c:59:e9:a6:bf:89:cc:58:af: 0b:0e:1d:de:cc:43:a8:ac:eb:9c:c5:06:7e:cd:ae: 4b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:68:73:EF:E5:F7:D6:45:2B:C0:79:7F:FA:77:B4:DD:0D:F9:03:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/70197168-13e1-4a38-9046-75d751ec520a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 104.194.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9f:a1:81:6d:53:33:5f:39:bb:0f:db:c9:04:84:b8:3a:76: dd:7d:a6:a0:a2:68:5c:d1:f5:5b:22:52:4c:8d:a6:24:f3:ea: 53:46:77:38:e8:67:9e:e6:90:6a:e9:0b:4a:5d:46:8b:b5:ce: 23:96:ac:0f:aa:8f:8d:8c:92:32:e5:00:37:43:3d:cf:4e:9b: 6e:8b:fc:88:fa:9f:5d:ec:d1:27:96:aa:b2:da:8d:b8:8a:03: e9:4c:4d:6a:94:db:ab:23:cf:ba:5b:84:c4:72:ac:9e:6b:4c: d1:dc:4a:6b:46:c3:7b:77:10:6c:c1:bb:1f:79:c1:0f:4f:95: a5:66:1e:7b:1d:09:5c:49:f6:c5:1a:0b:4e:28:0a:5d:bd:ec: 25:42:ad:77:ba:b6:27:06:8e:f6:02:00:d4:74:70:ae:7c:47: 44:06:dc:af:14:38:cb:84:5e:3a:4e:9c:67:9c:9d:04:6e:b4: eb:b0:76:b8:8d:fa:0d:1e:e5:28:92:f5:ad:66:f7:32:df:9e: 57:4c:7f:33:07:ea:cb:86:20:2a:26:0f:12:5f:a2:8f:54:40: 9c:2c:b4:30:9d:e6:56:ab:1c:88:c2:81:a8:4d:5b:1d:eb:22: 1e:c6:d7:85:48:ee:32:04:05:24:07:53:d9:46:0a:f7:d7:9a: 5d:4f:d2:3d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEzSmlapFLsUxIYW4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIxMTAxNDUyMloXDTI4MDUxNjAwNDUyMlowLzEtMCsGA1UEAxMk NzAxOTcxNjgtMTNlMS00YTM4LTkwNDYtNzVkNzUxZWM1MjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwEmNO3MB11ZDhgaqc/4GWzkFr7JcHEAOZMp j9OD3gCD0Aj26vNrvDPRSuqTBVYgXmdLGdyqvgityflys+leNeNIhmQxZbKZk1BN xeYXlgh5Jyjrn9HXLO/JuN5HGv9QVAq2SyNuq23KMsxG1VpoUPpZ0PtrXGOneynJ Cm3P2l1aUBmCqN7qbN30hl0PZ8xMv67E+hS7oMouyDlmmkiBVmFlvRXv3V/N0fHM n8Y9kFZ0eTlfTALIZvDZFwp/Qa/05kJiKOIcc7H9Vah4dMWwu3+2tWJ+mCct+Hiw J7fAfvyvkAmf3b8cWemmv4nMWK8LDh3ezEOorOucxQZ+za5LLQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFD9oc+/l99ZFK8B5f/p3tN0N+QMxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83 MDE5NzE2OC0xM2UxLTRhMzgtOTA0Ni03NWQ3NTFlYzUyMGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzcwMTk3MTY4LTEzZTEtNGEzOC05 MDQ2LTc1ZDc1MWVjNTIwYS83MDE5NzE2OC0xM2UxLTRhMzgtOTA0Ni03NWQ3NTFl YzUyMGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJowgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgJ+hgW1TM185uw/byQSE uDp23X2moKJoXNH1WyJSTI2mJPPqU0Z3OOhnnuaQaukLSl1Gi7XOI5asD6qPjYyS MuUAN0M9z06bbov8iPqfXezRJ5aqstqNuIoD6UxNapTbqyPPuluExHKsnmtM0dxK a0bDe3cQbMG7H3nBD0+VpWYeex0JXEn2xRoLTigKXb3sJUKtd7q2JwaO9gIA1HRw rnxHRAbcrxQ4y4ReOk6cZ5ydBG6067B2uI36DR7lKJL1rWb3Mt+eV0x/Mwfqy4Yg KiYPEl+ij1RAnCy0MJ3mVqsciMKBqE1bHesiHsbXhUjuMgQFJAdT2UYK99eaXU/S PQ== -----END CERTIFICATE-----Generated at Mon Mar 2 02:52:51 2026 by rpki-client