$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer File: 69dba5e3-26fb-440c-884d-525d04a32b0f.cer (raw, json) Hash identifier: 9iTPxToumMTmai8MgSfj+0Gm4KfmG+r31N7Bb6+GEac= Subject key identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D39C7DECF41609B22A47954A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Mar 2026 00:45:22 +0000 Certificate not after: Thu 22 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 17034 IP: 103.229.152.0/22 IP: 2602:f5e8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:c7:de:cf:41:60:9b:22:a4:79:54:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 20 00:45:22 2026 GMT Not After : Jun 22 00:45:22 2028 GMT Subject: CN=69dba5e3-26fb-440c-884d-525d04a32b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:b6:a5:0f:59:b8:b5:8e:f7:7d:7b:2d:5c: cd:94:4c:e0:73:29:17:c6:ea:47:19:ad:bb:37:31: fc:39:94:60:11:bf:e5:41:ce:33:43:dd:11:2f:22: 44:06:c0:c8:0b:19:8a:ed:78:1d:27:1a:40:ea:08: 0b:89:bd:c8:44:4e:fa:40:07:fd:a6:df:99:26:d9: 20:de:a5:85:18:e5:79:6c:e8:ad:72:b7:b2:8d:65: 77:1f:1c:4c:0c:62:1d:03:de:85:f5:c8:d1:af:a2: 7b:86:35:02:a0:2c:67:c9:7b:32:de:5c:8a:e4:32: 6b:0b:31:44:d7:fc:1c:b3:b4:3b:4a:1f:94:66:6a: 2d:31:1b:7e:36:9d:9d:32:ba:64:a7:83:c5:ba:cd: 18:84:11:09:e2:4a:d1:ee:d1:b7:61:92:3f:9e:2b: 09:b7:c8:e9:98:3f:8e:51:63:e7:41:1c:18:bf:b7: 9f:f9:ff:9b:b7:0a:05:d0:33:88:ce:64:d2:e5:e3: c2:3f:ad:fc:88:db:bf:0e:10:ed:36:d4:0b:6b:f2: c6:33:f4:6b:85:b7:76:b5:4d:ce:ad:e4:08:e2:65: 22:f6:28:ae:74:64:c7:b8:48:29:9b:ce:ec:eb:77: 09:7d:52:4e:0f:29:07:d3:ef:1a:cc:6c:f9:fe:43: 87:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 103.229.152.0/22 IPv6: 2602:f5e8::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17034 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d0:7e:8b:f4:57:36:9e:87:bd:76:d1:67:a4:92:51:c4:13: ac:0e:50:62:77:f8:b5:a1:46:b8:bc:95:8b:7f:48:35:91:d0: 48:7a:29:da:d0:92:98:1c:b9:35:be:42:88:1c:da:66:04:cf: 03:2f:e9:78:cb:aa:9e:16:86:72:a6:a1:6d:4e:6e:f2:f3:d2: e8:99:bf:ce:41:01:2c:3a:d9:47:7e:7e:45:c8:68:38:ac:50: eb:71:01:78:37:20:a9:b1:99:1d:c9:f4:05:dd:a3:ef:89:ed: ab:5e:ea:31:a3:e0:07:5a:24:fc:ea:05:13:b4:cc:d5:51:52: 47:a6:77:4d:c0:7a:a8:e8:fc:0c:89:36:42:45:cd:3d:4a:4c: df:a0:8e:e0:ae:1b:c0:5f:4d:52:80:9a:1f:98:cc:6d:1c:26: 94:1b:db:2b:05:41:fc:be:b2:48:bc:84:ee:4a:ea:09:66:36: f0:6e:3c:e8:a4:44:b5:3f:99:ae:94:9c:d2:12:9b:56:ec:0a: 8d:b6:a4:5f:8d:e2:b5:fc:e7:97:d9:97:a4:c7:4b:70:9e:9b: 59:27:72:9b:f2:64:42:c4:fa:93:ea:0e:b7:92:f9:f1:b2:65: 6d:18:d0:f4:83:b0:ce:c0:bc:9d:17:53:73:83:11:55:dc:2e: b9:ef:c2:bf -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE05x97PQWCbIqR5VKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyMDAwNDUyMloXDTI4MDYyMjAwNDUyMlowLzEtMCsGA1UEAxMk NjlkYmE1ZTMtMjZmYi00NDBjLTg4NGQtNTI1ZDA0YTMyYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yS2pQ9ZuLWO9317LVzNlEzgcykXxupHGa27 NzH8OZRgEb/lQc4zQ90RLyJEBsDICxmK7XgdJxpA6ggLib3IRE76QAf9pt+ZJtkg 3qWFGOV5bOitcreyjWV3HxxMDGIdA96F9cjRr6J7hjUCoCxnyXsy3lyK5DJrCzFE 1/wcs7Q7Sh+UZmotMRt+Np2dMrpkp4PFus0YhBEJ4krR7tG3YZI/nisJt8jpmD+O UWPnQRwYv7ef+f+btwoF0DOIzmTS5ePCP638iNu/DhDtNtQLa/LGM/Rrhbd2tU3O reQI4mUi9iiudGTHuEgpm87s63cJfVJODykH0+8azGz5/kOHqwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFNRAe2+nFlpPA+FOfFkJ80blC46mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 OWRiYTVlMy0yNmZiLTQ0MGMtODg0ZC01MjVkMDRhMzJiMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzY5ZGJhNWUzLTI2ZmItNDQwYy04 ODRkLTUyNWQwNGEzMmIwZi82OWRiYTVlMy0yNmZiLTQ0MGMtODg0ZC01MjVkMDRh MzJiMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAJn5ZgwDgQCAAIwCAMGBCYC9egAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkKKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG7Qfov0Vzaeh7120WekklHEE6wO UGJ3+LWhRri8lYt/SDWR0Eh6KdrQkpgcuTW+Qogc2mYEzwMv6XjLqp4WhnKmoW1O bvLz0uiZv85BASw62Ud+fkXIaDisUOtxAXg3IKmxmR3J9AXdo++J7ate6jGj4Ada JPzqBRO0zNVRUkemd03Aeqjo/AyJNkJFzT1KTN+gjuCuG8BfTVKAmh+YzG0cJpQb 2ysFQfy+ski8hO5K6glmNvBuPOikRLU/ma6UnNISm1bsCo22pF+N4rX855fZl6TH S3Cem1kncpvyZELE+pPqDreS+fGyZW0Y0PSDsM7AvJ0XU3ODEVXcLrnvwr8= -----END CERTIFICATE-----Generated at Wed Mar 25 23:12:53 2026 by rpki-client