$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c.cer File: bcef91a5-9f6b-4911-9826-8aaa385bb35c.cer (raw, json) Hash identifier: VUHNIxncAlIEUoNc+vFf6xni+ns6vQ5B6T1H8eHUvk8= Subject key identifier: 2F:16:EB:E9:C7:84:72:20:5B:44:D7:FD:68:CD:0F:4B:AB:C5:EA:31 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CD29A573FC50B39C53E346D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/bcef91a5-9f6b-4911-9826-8aaa385bb35c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Feb 2026 01:45:22 +0000 Certificate not after: Tue 16 May 2028 00:45:22 +0000 Subordinate resources: AS: 401384 IP: 142.249.153.0/24 IP: 2602:f7e0::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d2:9a:57:3f:c5:0b:39:c5:3e:34:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 11 01:45:22 2026 GMT Not After : May 16 00:45:22 2028 GMT Subject: CN=bcef91a5-9f6b-4911-9826-8aaa385bb35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:09:01:44:0e:61:cf:c6:13:4e:81:e3:ed: 21:c2:40:a8:fa:5d:c5:77:a7:f3:3c:a2:09:35:60: eb:5c:0b:88:92:f0:e7:57:ab:9e:4b:e6:b5:3b:dc: 8a:12:f4:5b:27:63:bb:a3:2b:90:47:76:0e:35:a7: a8:47:3f:c1:5e:28:0e:f6:d6:42:93:de:d8:28:2a: 76:1f:81:a6:c1:a8:5c:ac:dc:80:cc:05:8e:53:c4: 1d:e8:0c:e3:50:ed:bd:6e:3e:42:79:40:ab:57:97: 9a:97:21:c7:fd:25:44:87:c7:d0:fa:95:0d:18:1d: ea:6b:f3:36:6e:66:49:39:05:44:93:7a:50:4b:c8: 7e:df:3f:bd:cc:3e:c4:64:f1:03:8c:d0:c5:21:f7: 31:bf:c4:3d:42:62:c9:d8:44:30:cd:5c:c6:2c:13: 97:26:0e:b4:a5:be:ba:29:58:e4:7e:bc:95:32:24: d8:80:75:de:67:cd:48:ed:20:cf:e6:b7:c5:4f:ad: 51:8d:1d:82:f7:50:da:de:f1:ff:91:4e:8a:c6:8f: c6:38:3a:24:f3:81:87:4d:99:0c:81:07:78:eb:95: b8:bc:7b:7f:01:ae:86:ac:77:75:d4:55:77:3f:4e: ee:fe:6b:24:1f:2b:6c:09:cf:99:53:55:90:9d:f8: 6f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:16:EB:E9:C7:84:72:20:5B:44:D7:FD:68:CD:0F:4B:AB:C5:EA:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/bcef91a5-9f6b-4911-9826-8aaa385bb35c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 142.249.153.0/24 IPv6: 2602:f7e0::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401384 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:40:17:76:a9:d8:f3:c4:ea:5a:ad:ec:a7:ea:33:6f:ee:f7: e5:d3:2d:39:69:d4:57:e5:bd:70:a6:ac:1b:84:f7:57:10:ba: 12:1a:39:56:bf:75:d0:87:96:5b:f6:b4:57:10:12:40:3e:86: 81:c8:89:db:b4:2c:80:fc:f8:a8:02:90:8f:eb:3d:07:99:31: d3:fe:08:48:07:64:8e:06:d6:83:fe:56:a5:de:e1:9c:39:b1: 90:64:c2:03:00:3b:41:c9:17:33:81:11:b7:c8:c4:14:4e:b6: 1f:eb:2b:ff:95:9c:fa:07:e9:06:a0:cf:7e:40:ea:87:d1:27: 83:db:7f:a8:5d:41:75:b0:78:09:f9:44:7b:68:da:ef:91:f0: a4:ae:e8:32:37:f1:d4:6a:f3:32:17:12:f4:82:25:e6:6b:e1: 75:e7:e1:81:fe:a9:ff:0d:a2:95:59:64:c0:a3:db:14:3d:0d: 6f:02:24:6f:36:bb:bd:fc:79:74:ec:13:b6:7f:7a:90:41:bc: 4d:21:70:93:54:6d:de:d9:53:c6:02:a5:69:6b:b2:cd:0a:0e: 5e:15:e9:06:b0:ce:c8:4c:bb:77:97:5b:33:15:10:93:1c:ba: 8b:07:3a:f3:df:da:4d:25:71:18:4e:76:83:ad:03:99:9c:e8: 96:bc:bc:22 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEzSmlc/xQs5xT40bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIxMTAxNDUyMloXDTI4MDUxNjAwNDUyMlowLzEtMCsGA1UEAxMk YmNlZjkxYTUtOWY2Yi00OTExLTk4MjYtOGFhYTM4NWJiMzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAgJAUQOYc/GE06B4+0hwkCo+l3Fd6fzPKIJ NWDrXAuIkvDnV6ueS+a1O9yKEvRbJ2O7oyuQR3YONaeoRz/BXigO9tZCk97YKCp2 H4GmwahcrNyAzAWOU8Qd6AzjUO29bj5CeUCrV5ealyHH/SVEh8fQ+pUNGB3qa/M2 bmZJOQVEk3pQS8h+3z+9zD7EZPEDjNDFIfcxv8Q9QmLJ2EQwzVzGLBOXJg60pb66 KVjkfryVMiTYgHXeZ81I7SDP5rfFT61RjR2C91Da3vH/kU6Kxo/GODok84GHTZkM gQd465W4vHt/Aa6GrHd11FV3P07u/mskHytsCc+ZU1WQnfhvxQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFC8W6+nHhHIgW0TX/WjND0urxeoxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9i Y2VmOTFhNS05ZjZiLTQ5MTEtOTgyNi04YWFhMzg1YmIzNWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2JjZWY5MWE1LTlmNmItNDkxMS05 ODI2LThhYWEzODViYjM1Yy9iY2VmOTFhNS05ZjZiLTQ5MTEtOTgyNi04YWFhMzg1 YmIzNWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACO+ZkwDgQCAAIwCAMGBCYC9+AAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYf6DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbQBd2qdjzxOpareyn6jNv7vfl 0y05adRX5b1wpqwbhPdXELoSGjlWv3XQh5Zb9rRXEBJAPoaByInbtCyA/PioApCP 6z0HmTHT/ghIB2SOBtaD/lal3uGcObGQZMIDADtByRczgRG3yMQUTrYf6yv/lZz6 B+kGoM9+QOqH0SeD23+oXUF1sHgJ+UR7aNrvkfCkrugyN/HUavMyFxL0giXma+F1 5+GB/qn/DaKVWWTAo9sUPQ1vAiRvNru9/Hl07BO2f3qQQbxNIXCTVG3e2VPGAqVp a7LNCg5eFekGsM7ITLt3l1szFRCTHLqLBzrz39pNJXEYTnaDrQOZnOiWvLwi -----END CERTIFICATE-----Generated at Sun Mar 1 20:29:47 2026 by rpki-client