$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer File: a32aa006-ef22-4905-8c82-2651c19859b9.cer (raw, json) Hash identifier: /E/1wd4RIDtiBIAMrwXzGB9lnG/PQ/glPqxexKgm+yM= Subject key identifier: 1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CA5EF643AB8928FF318BF9800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Jan 2026 01:45:21 +0000 Certificate not after: Sun 30 Apr 2028 00:45:21 +0000 Subordinate resources: IP: 199.212.26.0/23 IP: 199.212.30.0/24 IP: 199.212.37.0 -- 199.212.39.255 IP: 199.212.60.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:ef:64:3a:b8:92:8f:f3:18:bf:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 26 01:45:21 2026 GMT Not After : Apr 30 00:45:21 2028 GMT Subject: CN=a32aa006-ef22-4905-8c82-2651c19859b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:18:fd:51:21:58:f1:28:ad:bb:a1:f2:17:a2: 9a:00:eb:a6:8b:90:19:15:1e:50:f4:1d:1a:25:c5: 6b:26:b8:b3:5e:f1:60:0f:ad:78:3a:c0:10:9e:b3: 5f:09:3f:14:45:57:49:f8:03:cf:b5:50:d8:ce:81: e3:69:6e:88:f1:bf:88:4a:76:5c:32:e1:39:ef:c5: ce:53:80:a2:ba:0e:33:36:5a:0d:d6:1d:86:2d:d7: 9a:8e:64:0c:7d:08:0b:35:e1:33:71:6a:b6:d9:a3: 0e:3c:bd:df:4a:c2:b9:90:e1:47:47:80:f2:d1:6e: d9:2b:13:7f:6b:6e:d4:62:7d:87:a7:46:63:25:46: 27:47:bc:e6:51:67:aa:cb:22:a7:8a:fe:0c:b9:13: f0:32:16:4c:49:db:f2:3b:69:ef:df:6a:c0:be:ee: 3a:cd:6b:ad:cd:af:57:91:7c:69:09:81:9e:ae:90: 34:2c:43:56:a8:42:0c:7d:8e:f4:c2:2d:19:03:9a: 7c:de:9f:e1:3e:6f:e3:6c:ba:f4:47:8d:05:6a:38: 5a:1c:3a:df:0a:4e:86:07:b7:aa:59:d7:6d:4d:0b: 23:86:bc:a9:31:38:7d:0d:ab:ba:dc:f4:da:4e:d0: 41:20:72:6d:46:bb:25:c7:da:a6:d9:45:7d:05:f9: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 199.212.26.0/23 199.212.30.0/24 199.212.37.0-199.212.39.255 199.212.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8d:86:c7:42:00:03:5e:51:09:d6:21:44:9c:9d:9a:5b:60: fe:29:8d:a6:55:22:ac:ae:72:ff:35:07:0d:4b:e5:f6:0f:21: 76:39:10:d5:6e:f7:be:70:9b:49:d2:44:85:f3:4a:73:39:dc: da:a8:fa:64:3f:f7:05:02:05:6c:02:9b:1f:5e:6e:e4:a5:89: ee:74:e3:c4:51:a1:9c:87:d9:b7:68:22:59:f1:22:d5:6b:f4: 57:f5:d3:c9:43:57:a3:13:56:a0:52:e9:00:32:3b:59:2a:9b: 5f:56:6f:03:31:cc:27:2c:23:51:52:c2:1a:11:18:d3:44:1e: 7a:69:50:7a:8f:cf:68:64:79:c7:c0:9b:99:63:1f:c0:f2:73: 39:c3:ad:a1:2a:d1:f0:29:71:70:fb:c0:dd:03:15:33:00:31: e8:bb:3a:5f:37:d6:88:fb:1a:76:f9:a7:9a:27:83:2b:96:36: d5:f8:53:3e:9c:fa:52:93:8b:ed:dc:03:f4:80:24:34:a0:bf: 4c:ff:e8:08:53:11:19:2a:41:b2:cf:7e:53:59:29:b9:a6:f1: f4:1c:9b:d4:3b:6b:07:61:85:24:46:2a:14:76:53:1d:4b:63: ed:3c:26:f7:b6:13:49:0c:7f:f0:f0:2d:f1:15:22:97:68:02: 31:bd:bb:0b -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEyl72Q6uJKP8xi/mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDEyNjAxNDUyMVoXDTI4MDQzMDAwNDUyMVowLzEtMCsGA1UEAxMk YTMyYWEwMDYtZWYyMi00OTA1LThjODItMjY1MWMxOTg1OWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxj9USFY8Situ6HyF6KaAOumi5AZFR5Q9B0a JcVrJrizXvFgD614OsAQnrNfCT8URVdJ+APPtVDYzoHjaW6I8b+ISnZcMuE578XO U4Ciug4zNloN1h2GLdeajmQMfQgLNeEzcWq22aMOPL3fSsK5kOFHR4Dy0W7ZKxN/ a27UYn2Hp0ZjJUYnR7zmUWeqyyKniv4MuRPwMhZMSdvyO2nv32rAvu46zWutza9X kXxpCYGerpA0LENWqEIMfY70wi0ZA5p83p/hPm/jbLr0R40FajhaHDrfCk6GB7eq WddtTQsjhrypMTh9Dau63PTaTtBBIHJtRrslx9qm2UV9BfmZMwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFBqxRtaJyJMTGHLljNahqJmsup5PMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h MzJhYTAwNi1lZjIyLTQ5MDUtOGM4Mi0yNjUxYzE5ODU5YjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2EzMmFhMDA2LWVmMjItNDkwNS04 YzgyLTI2NTFjMTk4NTliOS9hMzJhYTAwNi1lZjIyLTQ5MDUtOGM4Mi0yNjUxYzE5 ODU5YjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMCYEAgABMCADBAHH1BoDBADH1B4wDAMEAMfUJQMEA8fUIAMEAcfU PDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQA4jYbHQgADXlEJ1iFEnJ2aW2D+KY2mVSKsrnL/NQcNS+X2DyF2 ORDVbve+cJtJ0kSF80pzOdzaqPpkP/cFAgVsApsfXm7kpYnudOPEUaGch9m3aCJZ 8SLVa/RX9dPJQ1ejE1agUukAMjtZKptfVm8DMcwnLCNRUsIaERjTRB56aVB6j89o ZHnHwJuZYx/A8nM5w62hKtHwKXFw+8DdAxUzADHouzpfN9aI+xp2+aeaJ4MrljbV +FM+nPpSk4vt3AP0gCQ0oL9M/+gIUxEZKkGyz35TWSm5pvH0HJvUO2sHYYUkRioU dlMdS2PtPCb3thNJDH/w8C3xFSKXaAIxvbsL -----END CERTIFICATE-----Generated at Sun Mar 1 23:17:11 2026 by rpki-client