$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer File: 8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer (raw, json) Hash identifier: 8rFZGHSDtgKCFCuWmBE4BA1kdPxvv3WJ0iJo8tqirVc= Subject key identifier: 1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CF6E53E989D4DFF1B85FC5A20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Feb 2026 01:45:23 +0000 Certificate not after: Mon 29 May 2028 00:45:23 +0000 Subordinate resources: IP: 132.209.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:e5:3e:98:9d:4d:ff:1b:85:fc:5a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 24 01:45:23 2026 GMT Not After : May 29 00:45:23 2028 GMT Subject: CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:70:85:85:0c:44:5d:d7:87:93:5c:b2:81: b1:9c:32:c7:70:58:62:2f:41:d9:d4:9d:5f:e9:ea: ec:5b:8b:98:e2:e8:8c:76:05:9d:19:f2:53:30:39: c9:dc:f0:90:45:3d:87:0b:77:e3:cd:9b:ea:a4:d2: b8:57:b0:21:3a:64:67:95:7e:d9:0b:8e:61:05:7f: 28:47:5c:c1:23:26:5e:c2:62:c9:9f:03:3f:2a:4c: 94:b7:88:b5:a8:c7:cd:be:b3:2e:64:77:e3:c0:ec: 1f:1f:de:a0:6f:f2:95:99:d1:95:2f:46:8c:82:40: 68:2c:d2:55:9a:bb:89:0b:4b:de:75:2d:56:d1:b9: 5b:06:dd:32:16:22:51:a6:8b:9c:c3:75:af:55:77: 0b:8d:73:eb:3f:d5:31:f6:9a:94:fc:7d:8b:27:4f: dc:86:75:47:08:c5:f4:12:5c:5a:88:cb:e8:b2:15: f7:c1:68:4c:45:1e:4a:0a:29:dc:b8:13:e5:2d:a7: 3e:cd:34:43:1f:11:96:3d:38:0d:a4:b5:fc:b2:d0: 66:1a:8d:6d:36:dc:52:e3:fb:ef:04:30:af:26:a6: bb:72:f4:1c:85:32:50:f9:ff:ec:6c:ca:53:1e:1f: 6a:8a:f0:94:3b:f6:1f:2d:47:67:e7:ca:25:bb:4e: 39:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 132.209.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:23:7d:7a:ca:4f:e2:43:39:80:04:8d:61:ba:43:17:f9:14: 94:a0:48:38:13:9a:b1:48:ac:25:69:bc:40:10:35:ed:dd:a8: a3:c0:17:75:e9:5a:96:94:b5:fd:41:d7:6c:38:49:33:55:99: c9:98:8f:00:13:cb:96:28:c2:8b:4d:cf:42:55:99:48:6d:15: 52:d5:29:62:83:1a:c8:7e:23:63:bf:53:a3:54:af:4a:45:2d: 50:a3:ce:36:63:93:49:5e:0a:a3:45:cf:e6:72:4a:d7:83:38: 49:e1:22:c0:ce:73:ba:a3:93:c1:31:4d:03:3d:69:55:cd:86: 77:e3:06:62:79:d1:b3:cb:93:93:89:bf:51:7f:a2:60:f5:f3: 17:36:b5:56:eb:0f:43:ac:de:7d:97:2f:68:37:41:60:eb:04: 8f:da:47:96:3c:98:ef:c5:82:67:1b:c4:d4:41:a0:1c:7d:e5: 27:93:a7:94:c7:63:10:ea:0f:38:3b:a0:f0:2e:f1:e4:b8:eb: ac:26:59:38:b0:d7:56:08:ac:27:97:85:77:3d:69:b5:8c:ea: 14:b2:35:01:1c:64:50:1e:14:b2:66:0a:c0:59:a0:8a:ec:fb: 54:28:fe:f2:54:59:78:e3:95:c6:50:39:69:c1:f0:43:16:dd: fc:75:7b:24 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEz25T6YnU3/G4X8WiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIyNDAxNDUyM1oXDTI4MDUyOTAwNDUyM1owLzEtMCsGA1UEAxMk OGZmZTdmNGUtZTFiZC00MjdhLTgxOTQtNGVhNDM5NmU1NDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptZwhYUMRF3Xh5NcsoGxnDLHcFhiL0HZ1J1f 6ersW4uY4uiMdgWdGfJTMDnJ3PCQRT2HC3fjzZvqpNK4V7AhOmRnlX7ZC45hBX8o R1zBIyZewmLJnwM/KkyUt4i1qMfNvrMuZHfjwOwfH96gb/KVmdGVL0aMgkBoLNJV mruJC0vedS1W0blbBt0yFiJRpoucw3WvVXcLjXPrP9Ux9pqU/H2LJ0/chnVHCMX0 ElxaiMvoshX3wWhMRR5KCincuBPlLac+zTRDHxGWPTgNpLX8stBmGo1tNtxS4/vv BDCvJqa7cvQchTJQ+f/sbMpTHh9qivCUO/YfLUdn58olu045mwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFBrmjAAo34u6kMVkW2AQPyAskq+aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84 ZmZlN2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0Mzk2ZTU0OGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzhmZmU3ZjRlLWUxYmQtNDI3YS04 MTk0LTRlYTQzOTZlNTQ4Zi84ZmZlN2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0Mzk2 ZTU0OGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCE0TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANI316yk/iQzmABI1hukMX +RSUoEg4E5qxSKwlabxAEDXt3aijwBd16VqWlLX9QddsOEkzVZnJmI8AE8uWKMKL Tc9CVZlIbRVS1SligxrIfiNjv1OjVK9KRS1Qo842Y5NJXgqjRc/mckrXgzhJ4SLA znO6o5PBMU0DPWlVzYZ34wZiedGzy5OTib9Rf6Jg9fMXNrVW6w9DrN59ly9oN0Fg 6wSP2keWPJjvxYJnG8TUQaAcfeUnk6eUx2MQ6g84O6DwLvHkuOusJlk4sNdWCKwn l4V3PWm1jOoUsjUBHGRQHhSyZgrAWaCK7PtUKP7yVFl445XGUDlpwfBDFt38dXsk -----END CERTIFICATE-----Generated at Sun Mar 1 20:22:08 2026 by rpki-client