$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer File: af4b288d-bc7b-443a-b3f4-52662b22717a.cer (raw, json) Hash identifier: GjjxVBbtqh4eLigSBqP6tnU+XkK/PUlkWqrdXJ2CML0= Subject key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CACEA1ACD5A7404E6927BC420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Jan 2026 13:45:22 +0000 Certificate not after: Tue 02 May 2028 12:45:22 +0000 Subordinate resources: AS: 401431 IP: 2602:f7c5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:ea:1a:cd:5a:74:04:e6:92:7b:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 28 13:45:22 2026 GMT Not After : May 2 12:45:22 2028 GMT Subject: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9d:22:a6:9e:f0:cf:35:11:8e:33:22:34:30: c7:f2:ce:64:11:d4:f4:b8:e4:85:d9:06:a0:57:bb: 36:c5:f8:d3:4e:d8:3d:b3:31:b5:33:8b:77:f5:e3: 8f:80:e5:c7:e6:aa:fb:46:e5:81:fa:30:a6:bd:33: e3:49:8e:66:50:78:59:e6:41:d4:55:1f:74:93:ba: b6:f5:89:3a:53:01:ce:ea:c3:f2:0c:70:d1:cb:b8: d3:03:f2:f4:c0:1b:0f:13:5e:48:e2:c4:f3:f0:1a: 4a:66:a9:39:5c:a6:66:a5:7c:0f:59:fe:6f:8b:b9: 17:20:f6:ad:2a:b0:11:87:ba:4b:1e:4a:7e:ee:97: 0d:8b:be:51:9b:f6:a7:1e:7e:13:25:00:5e:b6:9b: 0f:ae:1a:f1:4d:d1:3b:63:c8:77:3e:e1:18:1c:17: c2:49:85:7e:7e:e2:56:70:c9:57:aa:cf:91:d6:ae: 9e:0f:35:3f:9b:34:99:7f:02:a8:21:11:5e:4d:cd: d6:ac:ed:cd:c7:97:22:33:d3:82:28:79:9b:9d:1c: 68:29:40:99:0a:94:92:31:bd:1c:ea:f0:81:21:c8: ca:9d:87:b0:66:1d:fe:79:bb:06:d6:f7:58:f7:c5: 3e:87:7c:de:fc:d7:90:0c:af:a7:3f:ec:de:41:fa: f0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7c5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401431 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:fc:9f:b7:ab:2e:44:f7:27:46:07:d9:34:9c:ed:70:68:17: da:df:4e:db:16:6b:00:16:a0:db:9b:b7:21:7d:fe:a6:b4:f0: 5b:e7:96:ce:2c:27:27:f9:ad:85:ad:93:80:11:96:b7:49:6c: 2d:ab:6f:c6:d3:dd:ca:b4:60:10:4b:b9:04:d3:c0:2c:10:9c: 61:ae:a0:af:c1:b1:5c:ab:62:0f:08:17:5d:ff:b1:86:e4:35: 34:9d:ca:95:59:b6:56:49:51:6c:a0:5b:ce:f3:2b:c1:14:bc: f7:80:4b:78:63:7a:15:75:c7:bc:90:86:77:8c:aa:41:43:a7: ed:ad:77:76:6d:3e:fc:58:05:75:99:84:b9:71:2e:fa:cd:62: 52:56:d2:c1:0f:bb:56:48:e1:f5:d2:06:89:d8:5d:c0:ab:2c: 85:6a:5c:5a:8e:8b:2a:59:91:46:39:33:e4:b7:98:c1:ab:f0: 54:8b:17:cd:5f:d0:67:76:7d:7e:b0:93:e5:84:47:ec:cf:3d: 54:9d:39:1a:7e:c7:23:04:73:b6:72:d4:22:de:09:91:1a:1a: 36:b5:ae:94:e1:1d:81:c6:0a:f2:88:56:14:c7:25:25:94:da: a1:26:2d:02:0b:fb:ca:97:cb:09:41:37:b0:74:dc:60:a8:75: b1:21:36:8a -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEys6hrNWnQE5pJ7xCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDEyODEzNDUyMloXDTI4MDUwMjEyNDUyMlowLzEtMCsGA1UEAxMk YWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3MTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p0ipp7wzzURjjMiNDDH8s5kEdT0uOSF2Qag V7s2xfjTTtg9szG1M4t39eOPgOXH5qr7RuWB+jCmvTPjSY5mUHhZ5kHUVR90k7q2 9Yk6UwHO6sPyDHDRy7jTA/L0wBsPE15I4sTz8BpKZqk5XKZmpXwPWf5vi7kXIPat KrARh7pLHkp+7pcNi75Rm/anHn4TJQBetpsPrhrxTdE7Y8h3PuEYHBfCSYV+fuJW cMlXqs+R1q6eDzU/mzSZfwKoIRFeTc3WrO3Nx5ciM9OCKHmbnRxoKUCZCpSSMb0c 6vCBIcjKnYewZh3+ebsG1vdY98U+h3ze/NeQDK+nP+zeQfrw4wIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFDMABm4PkET9xSC2usdS833J4qTMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h ZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2FmNGIyODhkLWJjN2ItNDQzYS1i M2Y0LTUyNjYyYjIyNzE3YS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIy MjcxN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvfFADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGIBcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAFfyft6suRPcnRgfZNJztcGgX2t9O2xZrABag25u3IX3+ prTwW+eWziwnJ/mtha2TgBGWt0lsLatvxtPdyrRgEEu5BNPALBCcYa6gr8GxXKti DwgXXf+xhuQ1NJ3KlVm2VklRbKBbzvMrwRS894BLeGN6FXXHvJCGd4yqQUOn7a13 dm0+/FgFdZmEuXEu+s1iUlbSwQ+7Vkjh9dIGidhdwKsshWpcWo6LKlmRRjkz5LeY wavwVIsXzV/QZ3Z9frCT5YRH7M89VJ05Gn7HIwRztnLUIt4JkRoaNrWulOEdgcYK 8ohWFMclJZTaoSYtAgv7ypfLCUE3sHTcYKh1sSE2ig== -----END CERTIFICATE-----Generated at Sun Feb 22 16:37:26 2026 by rpki-client