$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer File: 0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer (raw, json) Hash identifier: YBSPfbl3/SPEyJfxBLzBKzCEM/e0pLMFXq6Z0ljFeUg= Subject key identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584DA553871B49A15568ABDAA080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Apr 2026 13:18:15 +0000 Certificate not after: Mon 08 May 2028 00:45:22 +0000 Subordinate resources: AS: 10702 AS: 14702 IP: 134.20.0.0/16 IP: 141.221.0.0/16 IP: 2602:81d:9000::/40 IP: 2620:0:2b80::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:53:87:1b:49:a1:55:68:ab:da:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Apr 27 13:18:15 2026 GMT Not After : May 8 00:45:22 2028 GMT Subject: CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d1:f1:f5:d9:cf:a7:a1:a9:66:e9:77:cb:1f: 80:c1:ba:c0:54:00:dd:6f:96:d0:5c:02:2f:38:df: 02:24:31:10:a4:10:eb:76:76:88:99:6d:15:cb:c6: cd:37:85:a7:76:0b:83:f6:91:63:14:e0:7c:6f:85: 2f:af:34:44:9a:57:e6:aa:cb:97:19:33:c0:c7:28: e1:89:7d:75:97:0d:de:c6:90:fb:b4:b2:9a:05:38: e4:44:42:bd:85:0b:9b:0a:66:6e:75:71:94:74:bc: 22:e2:92:6b:90:b1:ae:f0:de:77:53:52:5a:34:8c: d3:18:12:c7:e3:af:9e:8c:5d:6c:93:84:af:36:54: 4a:b8:7b:62:03:a1:d2:79:d9:93:f9:3f:9e:c5:14: 37:58:e4:6f:17:66:f0:ce:2f:89:55:b5:21:0b:5b: 0e:fe:97:4c:66:ca:78:ef:bd:1a:3a:f3:5b:0e:22: a2:d9:34:b9:92:bb:c4:2a:9b:5f:15:d6:67:d3:31: b1:1b:c9:85:2d:69:3d:b2:52:3b:49:e0:f1:e5:4d: d6:2c:a8:76:43:74:90:f1:05:30:da:db:75:77:e5: d6:ce:82:20:c5:2d:5f:ba:fe:d7:03:a2:ef:a2:7d: 9f:48:7d:15:a9:36:57:fe:ac:71:e8:27:1c:44:9a: fc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 134.20.0.0/16 141.221.0.0/16 IPv6: 2602:81d:9000::/40 2620:0:2b80::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10702 14702 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d1:b6:b9:24:e4:5b:32:4e:3b:e3:e9:c1:a6:ab:2a:71:83: 51:56:54:03:1e:db:f4:2d:e2:19:60:49:cd:f9:62:7a:e9:f6: ac:0d:93:1a:83:f3:77:50:a3:c4:58:c4:ff:9e:65:bf:7e:02: ac:b1:1c:62:66:57:75:40:c8:fa:11:59:2d:cf:80:3e:f0:c5: f2:8b:5d:98:1e:1a:5e:db:50:9b:e3:9c:c4:ff:74:e2:46:de: 79:7a:05:e5:f5:dd:14:4c:a1:5d:58:14:1e:1f:67:cc:cd:f6: f9:47:b7:c0:fe:77:00:73:d4:6f:b1:95:e3:f7:7c:5c:37:ac: f6:a0:f9:43:47:fe:40:88:bc:7a:17:4a:a2:e9:f2:c7:11:f5: a8:e8:7f:9b:c5:1e:da:b0:2a:4a:22:a7:44:0c:67:9f:97:e5: 7e:74:d4:0e:40:bd:b0:83:09:e2:fe:d1:b2:0f:08:87:ca:fe: 9e:eb:0f:a1:ac:02:8a:d9:31:25:3b:38:e4:b8:b4:e3:08:bc: 77:2f:6c:d9:ba:3d:70:42:88:75:7b:5b:9a:16:b5:ab:ca:56: 59:7d:98:59:ae:b3:52:86:a3:aa:3b:d9:46:3c:d5:2c:e0:bc: 99:cf:bc:bf:16:b9:2a:c3:39:7d:35:d6:cb:44:35:44:62:79: dc:8b:ce:21 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWE2lU4cbSaFVaKvaoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDQyNzEzMTgxNVoXDTI4MDUwODAwNDUyMlowLzEtMCsGA1UEAxMk MGI4YjIwY2EtMmExZS00NzQyLWI2M2MtNGIzYjFkMTUxZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNHx9dnPp6GpZul3yx+AwbrAVADdb5bQXAIv ON8CJDEQpBDrdnaImW0Vy8bNN4WndguD9pFjFOB8b4UvrzREmlfmqsuXGTPAxyjh iX11lw3expD7tLKaBTjkREK9hQubCmZudXGUdLwi4pJrkLGu8N53U1JaNIzTGBLH 46+ejF1sk4SvNlRKuHtiA6HSedmT+T+exRQ3WORvF2bwzi+JVbUhC1sO/pdMZsp4 770aOvNbDiKi2TS5krvEKptfFdZn0zGxG8mFLWk9slI7SeDx5U3WLKh2Q3SQ8QUw 2tt1d+XWzoIgxS1fuv7XA6Lvon2fSH0VqTZX/qxx6CccRJr8SwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFPP/WKpAAV4d0F0Qt3io+GXSnUIMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8w YjhiMjBjYS0yYTFlLTQ3NDItYjYzYy00YjNiMWQxNTFmMTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzBiOGIyMGNhLTJhMWUtNDc0Mi1i NjNjLTRiM2IxZDE1MWYxNS8wYjhiMjBjYS0yYTFlLTQ3NDItYjYzYy00YjNiMWQx NTFmMTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBAEAgABMAoDAwCGFAMDAI3dMBcEAgACMBEDBgAmAggdkAMHBCYg AAArgDAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIpzgICOW4wVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABNG2 uSTkWzJOO+PpwaarKnGDUVZUAx7b9C3iGWBJzflieun2rA2TGoPzd1CjxFjE/55l v34CrLEcYmZXdUDI+hFZLc+APvDF8otdmB4aXttQm+OcxP904kbeeXoF5fXdFEyh XVgUHh9nzM32+Ue3wP53AHPUb7GV4/d8XDes9qD5Q0f+QIi8ehdKounyxxH1qOh/ m8Ue2rAqSiKnRAxnn5flfnTUDkC9sIMJ4v7Rsg8Ih8r+nusPoawCitkxJTs45Li0 4wi8dy9s2bo9cEKIdXtbmha1q8pWWX2YWa6zUoajqjvZRjzVLOC8mc+8vxa5KsM5 fTXWy0Q1RGJ53IvOIQ== -----END CERTIFICATE-----Generated at Wed May 13 02:56:22 2026 by rpki-client