$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer File: dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer (raw, json) Hash identifier: wVyADIzZq7T/pWGCxVIbK5yNnJT1IdexN3z5d1lB/rs= Subject key identifier: 6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CAA1F69C3D6B125765FE84A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 Jan 2026 13:45:21 +0000 Certificate not after: Mon 01 May 2028 12:45:21 +0000 Subordinate resources: AS: 20417 IP: 23.128.28.0/24 IP: 2602:f7d1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:1f:69:c3:d6:b1:25:76:5f:e8:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 27 13:45:21 2026 GMT Not After : May 1 12:45:21 2028 GMT Subject: CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6c:92:bb:4c:94:22:1b:05:98:1f:cf:9c:3d: 68:ac:bb:0f:d7:66:c7:02:07:49:6d:aa:f6:81:a3: 50:3f:0d:54:20:51:3f:05:17:27:5b:09:cc:31:b2: d8:1f:bc:a3:b1:12:62:0f:9c:b0:49:84:6c:87:b8: 44:a2:d7:31:ed:27:f3:90:fe:46:50:23:c2:5c:38: b4:0f:97:6c:d9:98:17:cd:a9:0a:66:1c:22:d5:f1: 92:35:5f:ca:60:17:57:79:e1:50:b5:9c:f2:64:12: 30:2c:86:54:0e:fb:56:05:dc:db:1e:0c:ae:34:af: c9:cf:7f:0b:2d:02:3d:57:d6:ca:da:bf:01:f5:c8: 8a:bf:27:e3:f6:be:ee:d7:c0:dc:b8:98:cc:3d:6f: e8:f7:50:36:ae:6e:20:4e:20:c9:43:82:56:6c:1e: ee:e3:da:82:ef:60:7e:2f:52:a6:06:02:d3:91:6f: 9e:2d:47:54:f4:09:37:2b:8d:93:2c:3f:36:f9:19: ba:36:5b:3b:03:47:81:1a:ee:e0:95:17:61:11:b7: 43:18:08:18:fe:5e:9f:32:7b:50:56:68:8c:60:65: 62:20:6c:f7:5b:92:6f:61:3a:13:3a:02:00:19:20: 56:67:a5:7e:4b:c8:a6:64:97:90:96:5f:33:03:40: c0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.128.28.0/24 IPv6: 2602:f7d1::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20417 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:6b:ff:29:af:c3:e2:fa:6c:8f:c0:2f:46:4f:18:62:c2:3f: 4b:4d:2b:29:5c:97:fe:97:29:ad:a8:e8:e8:9f:7e:1a:db:a4: ca:af:d2:16:d3:ec:cc:f5:ff:b1:3e:cb:bd:9d:09:f3:74:e2: 53:cd:c1:73:3f:b7:dc:c8:00:e5:2b:b4:e7:0b:83:74:f9:2b: d7:41:87:67:be:60:68:e4:e1:cd:a4:cd:75:ac:c9:89:56:d7: ad:c3:04:46:5e:b1:2c:a3:aa:15:0a:c1:8c:3d:4e:d7:23:60: 6b:9f:76:dc:7f:39:d4:0c:2e:c6:da:dd:bd:d1:bb:a6:0a:ab: f2:bc:94:17:39:32:95:06:9d:42:74:94:60:0b:bd:36:ac:b6: 61:33:fd:da:d9:2d:63:5a:b1:e7:7e:54:05:b8:db:c9:17:1b: d9:1a:19:38:5b:29:3a:1a:7d:79:86:5f:14:de:cb:60:65:bc: 15:1c:f6:31:c7:83:83:e7:df:d6:8a:6d:c7:01:af:a5:52:b7: 07:4c:31:7e:86:96:f4:12:61:71:60:71:d5:8f:ee:2b:f4:56: f3:e2:cb:83:96:ae:c0:d1:06:e9:8f:ed:03:f7:10:c9:1b:ca: 46:6a:b0:f4:2b:51:ae:73:4a:57:8f:12:be:00:23:86:ae:7a: af:ba:d1:cb -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEyqH2nD1rEldl/oSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDEyNzEzNDUyMVoXDTI4MDUwMTEyNDUyMVowLzEtMCsGA1UEAxMk ZGZiZmUwMGEtM2ZkNy00MGM3LWIzYmUtMTBmOWI2OTY4ODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWySu0yUIhsFmB/PnD1orLsP12bHAgdJbar2 gaNQPw1UIFE/BRcnWwnMMbLYH7yjsRJiD5ywSYRsh7hEotcx7SfzkP5GUCPCXDi0 D5ds2ZgXzakKZhwi1fGSNV/KYBdXeeFQtZzyZBIwLIZUDvtWBdzbHgyuNK/Jz38L LQI9V9bK2r8B9ciKvyfj9r7u18DcuJjMPW/o91A2rm4gTiDJQ4JWbB7u49qC72B+ L1KmBgLTkW+eLUdU9Ak3K42TLD82+Rm6Nls7A0eBGu7glRdhEbdDGAgY/l6fMntQ VmiMYGViIGz3W5JvYToTOgIAGSBWZ6V+S8imZJeQll8zA0DAhwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFGr0gPoLWCjIxi1eCaWwTS++wFBtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9k ZmJmZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5YjY5Njg4MzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2RmYmZlMDBhLTNmZDctNDBjNy1i M2JlLTEwZjliNjk2ODgzNi9kZmJmZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5YjY5 Njg4MzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgBwwDgQCAAIwCAMGACYC99EAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAk/BMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABxr/ymvw+L6bI/AL0ZPGGLCP0tN Kylcl/6XKa2o6OiffhrbpMqv0hbT7Mz1/7E+y72dCfN04lPNwXM/t9zIAOUrtOcL g3T5K9dBh2e+YGjk4c2kzXWsyYlW163DBEZesSyjqhUKwYw9TtcjYGufdtx/OdQM Lsba3b3Ru6YKq/K8lBc5MpUGnUJ0lGALvTastmEz/drZLWNased+VAW428kXG9ka GThbKToafXmGXxTey2BlvBUc9jHHg4Pn39aKbccBr6VStwdMMX6GlvQSYXFgcdWP 7iv0VvPiy4OWrsDRBumP7QP3EMkbykZqsPQrUa5zSlePEr4AI4aueq+60cs= -----END CERTIFICATE-----Generated at Sun Mar 1 20:21:38 2026 by rpki-client