$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer File: f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer (raw, json) Hash identifier: JqQgHSVoFehBYHCyPg09UPAyh3sWZnv3dXpBqeqgxgY= Subject key identifier: 7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CF9AFEC6F9F3285E8F5804800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Feb 2026 01:45:22 +0000 Certificate not after: Tue 30 May 2028 00:45:22 +0000 Subordinate resources: AS: 22121 IP: 172.99.224.0/22 IP: 199.21.136.0/21 IP: 2604:14c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:af:ec:6f:9f:32:85:e8:f5:80:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 25 01:45:22 2026 GMT Not After : May 30 00:45:22 2028 GMT Subject: CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:54:b6:dc:30:57:cd:42:08:98:88:d4:bf:d6: b1:50:63:74:b7:2e:89:a8:a0:66:fe:df:93:0f:9b: 08:a7:c0:2b:06:fe:1e:d9:1a:33:b8:13:7f:ca:16: 3d:05:16:f3:72:5b:67:a7:4e:65:12:64:26:ca:b2: 3b:96:f3:5e:5e:e0:8f:4c:8d:bf:60:71:3f:60:3c: 14:4c:9a:34:df:a5:c4:f1:4f:34:f5:83:31:62:41: 89:a5:3d:a0:7d:df:e0:ca:cf:0e:25:9c:a1:24:c3: 23:9c:a5:3d:76:be:ff:fe:e1:d2:20:f7:4f:9c:97: 65:20:08:f7:21:c8:32:ef:f9:fb:94:e8:f8:66:f7: 0a:46:27:96:fb:e4:44:6d:2e:1b:a4:32:9c:62:b6: 9b:bb:47:d6:40:39:b6:66:f4:19:01:90:12:b4:89: 65:f2:d7:dd:58:ec:5c:76:1d:93:b0:a6:09:c3:fa: 35:f4:94:0d:ef:01:04:b7:fb:8d:c5:17:8f:f2:7e: 82:70:04:bd:f8:7e:d9:e8:7a:4a:5c:80:23:66:4d: 8d:f1:d2:f6:e2:ec:3a:16:b5:85:92:52:bb:b7:c0: 89:f9:d1:15:0e:a7:b3:62:ff:20:ef:9a:90:0e:ce: b9:b0:96:c6:5c:17:f3:a9:77:b3:53:9f:69:f9:63: d4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 172.99.224.0/22 199.21.136.0/21 IPv6: 2604:14c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22121 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d1:ba:32:b3:86:d5:34:1f:87:c2:5a:69:4a:c0:21:db:ae: 72:62:f9:fa:3b:73:1f:85:cc:71:6c:26:99:78:63:90:e2:04: 07:20:b6:9c:bb:64:45:d3:9d:ff:8d:ba:6c:55:18:15:d4:d8: 10:b2:c9:f7:a3:6f:bb:68:82:03:9c:29:a5:6a:80:01:73:27: 4e:97:76:47:17:e7:05:7b:b4:7b:53:2d:fc:f9:42:3d:a1:9c: b1:be:8b:34:21:9f:69:ca:bc:01:52:bc:4e:b5:fa:28:4b:b9: a9:0d:54:0e:37:08:d3:e3:e5:dd:23:de:7c:de:68:c1:69:b5: 4a:b0:de:e1:90:65:31:e4:fe:ad:68:8c:b1:9d:05:5f:9c:e1: 19:42:06:5b:a5:14:41:9e:e9:ec:08:8d:5c:a7:04:ff:a4:8e: e3:8b:82:a3:90:86:fc:a0:01:54:11:ca:9f:39:23:d9:39:48: 0a:56:22:46:69:bc:4a:78:cf:14:61:65:fd:4c:ae:a8:d0:17: 84:19:f1:85:d9:8a:5f:ed:eb:6a:86:94:7c:c9:f0:b5:52:b5: 79:3e:e8:56:60:f2:3c:ed:44:42:2d:7f:04:23:37:2c:ca:52: 8b:11:f4:48:31:e7:e9:34:0b:02:69:6f:bf:17:6e:5a:19:a6: 68:96:c7:b0 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEz5r+xvnzKF6PWASAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIyNTAxNDUyMloXDTI4MDUzMDAwNDUyMlowLzEtMCsGA1UEAxMk ZjY1YmUyZTAtNmE0MC00Y2YxLTgyMzQtNmViNGY0MGM3ODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31S23DBXzUIImIjUv9axUGN0ty6JqKBm/t+T D5sIp8ArBv4e2RozuBN/yhY9BRbzcltnp05lEmQmyrI7lvNeXuCPTI2/YHE/YDwU TJo036XE8U809YMxYkGJpT2gfd/gys8OJZyhJMMjnKU9dr7//uHSIPdPnJdlIAj3 Icgy7/n7lOj4ZvcKRieW++REbS4bpDKcYrabu0fWQDm2ZvQZAZAStIll8tfdWOxc dh2TsKYJw/o19JQN7wEEt/uNxReP8n6CcAS9+H7Z6HpKXIAjZk2N8dL24uw6FrWF klK7t8CJ+dEVDqezYv8g75qQDs65sJbGXBfzqXezU59p+WPUgQIDAQABo4IELzCC BCswHQYDVR0OBBYEFHzKIPorHY/UdJYKjEmIt1RgoMb6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9m NjViZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0ZjQwYzc4OGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2Y2NWJlMmUwLTZhNDAtNGNmMS04 MjM0LTZlYjRmNDBjNzg4YS9mNjViZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0ZjQw Yzc4OGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKsY+ADBAPHFYgwDQQCAAIwBwMFACYEFMAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICVmkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbdG6MrOG1TQfh8JaaUrA IduucmL5+jtzH4XMcWwmmXhjkOIEByC2nLtkRdOd/426bFUYFdTYELLJ96Nvu2iC A5wppWqAAXMnTpd2RxfnBXu0e1Mt/PlCPaGcsb6LNCGfacq8AVK8TrX6KEu5qQ1U DjcI0+Pl3SPefN5owWm1SrDe4ZBlMeT+rWiMsZ0FX5zhGUIGW6UUQZ7p7AiNXKcE /6SO44uCo5CG/KABVBHKnzkj2TlIClYiRmm8SnjPFGFl/UyuqNAXhBnxhdmKX+3r aoaUfMnwtVK1eT7oVmDyPO1EQi1/BCM3LMpSixH0SDHn6TQLAmlvvxduWhmmaJbH sA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:28:56 2026 by rpki-client