$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e.cer File: 44449637-d770-4e08-ae28-94a492bdcd5e.cer (raw, json) Hash identifier: j7u0wV4xg/P8jMUpACNryAyNS+YPZHmCJ8dsusMXsSo= Subject key identifier: 77:B5:8A:AB:28:2E:FD:86:70:71:53:A0:CF:C9:C4:CE:3D:5E:6B:C1 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D152A3794D835D04E83C52840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e/44449637-d770-4e08-ae28-94a492bdcd5e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Mar 2026 21:58:37 +0000 Certificate not after: Thu 08 Jun 2028 20:58:37 +0000 Subordinate resources: IP: 2620:e:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:2a:37:94:d8:35:d0:4e:83:c5:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 6 21:58:37 2026 GMT Not After : Jun 8 20:58:37 2028 GMT Subject: CN=44449637-d770-4e08-ae28-94a492bdcd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:48:49:ed:e4:d0:a8:47:87:c4:d4:f7:1c: d7:5e:d0:a5:aa:42:01:7c:0a:90:17:52:7c:51:e6: aa:31:eb:3b:82:4e:f4:55:2d:02:7a:28:7d:d7:3f: d6:a0:12:da:e7:8c:fd:77:07:db:2d:d0:80:70:26: eb:1b:70:88:b9:8d:ca:81:00:ac:49:d4:06:0a:44: 91:4a:07:a8:3a:fc:9f:a5:69:65:66:96:b9:93:b3: 8f:8d:7f:59:8c:b9:90:42:9c:46:de:23:1f:00:38: 07:24:82:6c:ee:b2:fe:38:09:cb:04:38:4a:0a:71: 84:07:6e:c5:de:25:aa:bb:43:98:d3:71:bd:0c:5d: b7:cd:f0:01:9e:4f:4c:5e:07:85:40:9e:51:0e:31: 4d:2d:76:7b:f9:4d:c5:8e:43:76:e9:b6:3b:b2:54: 44:ba:43:d0:a6:23:f0:0b:75:3a:57:0e:fe:ee:88: 4d:5c:84:8d:d6:fb:28:34:58:76:59:e3:dd:e6:c1: f9:63:9f:7c:85:c4:05:94:7b:e8:0a:07:54:85:e8: ee:99:ff:4f:e9:e4:c4:55:de:86:63:ed:4b:7e:9e: 95:f1:4f:b7:a9:c0:14:f7:ef:3e:0c:9b:62:8b:46: eb:9d:ed:3f:ed:f3:47:21:70:2f:e6:46:9f:7c:0d: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B5:8A:AB:28:2E:FD:86:70:71:53:A0:CF:C9:C4:CE:3D:5E:6B:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e/44449637-d770-4e08-ae28-94a492bdcd5e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2620:e:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:50:bd:14:88:76:ec:11:8e:17:d9:f4:d8:3b:3c:04:e8:37: a4:fd:b2:39:cb:68:42:52:cf:d4:3c:3b:31:8f:f8:87:35:22: 45:3a:3d:60:79:e7:a3:d5:01:76:be:75:c4:86:b3:32:16:84: c8:00:72:7a:56:21:cc:57:b8:25:bd:bc:49:ac:13:22:74:f3: 56:03:e6:3c:7f:b4:05:de:3b:65:21:50:25:d7:25:f9:e0:85: c1:9e:bf:63:d1:b2:06:83:46:48:5f:dc:b2:ce:3f:18:dd:2b: a7:57:fd:1c:89:52:3d:38:41:25:65:b6:7b:8e:95:16:a2:c7: 1a:5d:f3:fc:9c:fe:3c:a0:bf:4a:54:a5:56:f5:f0:dd:de:d4: e7:63:10:4d:eb:23:de:e7:61:7e:99:bb:b6:71:69:92:c6:a0: 8a:42:85:b2:df:61:5e:a0:18:cd:9d:a7:32:eb:80:43:5b:cf: b1:b4:b2:91:18:6b:80:83:70:0d:07:3a:8a:81:97:74:59:30: 86:d7:50:78:f9:57:dc:b2:38:d6:f4:b9:3c:96:df:71:3f:7f: e2:33:2b:cd:b2:1a:8a:a8:3a:10:10:b8:06:82:be:62:66:32: 3c:76:0e:06:3c:19:fb:bc:a2:11:34:7f:2e:f6:8e:b6:30:f8: 26:4c:46:50 -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE0VKjeU2DXQToPFKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNjIxNTgzN1oXDTI4MDYwODIwNTgzN1owLzEtMCsGA1UEAxMk NDQ0NDk2MzctZDc3MC00ZTA4LWFlMjgtOTRhNDkyYmRjZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQlISe3k0KhHh8TU9xzXXtClqkIBfAqQF1J8 UeaqMes7gk70VS0Ceih91z/WoBLa54z9dwfbLdCAcCbrG3CIuY3KgQCsSdQGCkSR SgeoOvyfpWllZpa5k7OPjX9ZjLmQQpxG3iMfADgHJIJs7rL+OAnLBDhKCnGEB27F 3iWqu0OY03G9DF23zfABnk9MXgeFQJ5RDjFNLXZ7+U3FjkN26bY7slREukPQpiPw C3U6Vw7+7ohNXISN1vsoNFh2WePd5sH5Y598hcQFlHvoCgdUhejumf9P6eTEVd6G Y+1Lfp6V8U+3qcAU9+8+DJtii0brne0/7fNHIXAv5kaffA1SBQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFHe1iqsoLv2GcHFToM/JxM49XmvBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80 NDQ0OTYzNy1kNzcwLTRlMDgtYWUyOC05NGE0OTJiZGNkNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzQ0NDQ5NjM3LWQ3NzAtNGUwOC1h ZTI4LTk0YTQ5MmJkY2Q1ZS80NDQ0OTYzNy1kNzcwLTRlMDgtYWUyOC05NGE0OTJi ZGNkNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAAOwAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAoFC9FIh27BGOF9n0 2Ds8BOg3pP2yOctoQlLP1Dw7MY/4hzUiRTo9YHnno9UBdr51xIazMhaEyAByelYh zFe4Jb28SawTInTzVgPmPH+0Bd47ZSFQJdcl+eCFwZ6/Y9GyBoNGSF/css4/GN0r p1f9HIlSPThBJWW2e46VFqLHGl3z/Jz+PKC/SlSlVvXw3d7U52MQTesj3udhfpm7 tnFpksagikKFst9hXqAYzZ2nMuuAQ1vPsbSykRhrgINwDQc6ioGXdFkwhtdQePlX 3LI41vS5PJbfcT9/4jMrzbIaiqg6EBC4BoK+YmYyPHYOBjwZ+7yiETR/LvaOtjD4 JkxGUA== -----END CERTIFICATE-----Generated at Sun Mar 15 09:36:25 2026 by rpki-client