$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400.cer File: 44f68f8f-fb3d-449e-a030-4b56b7a51400.cer (raw, json) Hash identifier: /8mBy9LgdX25tESdNw6Hz1zIENy54q9Y7HxsfovEHJg= Subject key identifier: B4:14:A9:7D:AC:0F:47:A8:85:80:19:DD:CE:38:85:75:EA:66:65:16 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D28E74E122D438CDEA1D2A700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/44f68f8f-fb3d-449e-a030-4b56b7a51400.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Mar 2026 23:39:58 +0000 Certificate not after: Thu 15 Jun 2028 23:39:58 +0000 Subordinate resources: AS: 402274 IP: 2602:f427::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:28:e7:4e:12:2d:43:8c:de:a1:d2:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 13 23:39:58 2026 GMT Not After : Jun 15 23:39:58 2028 GMT Subject: CN=44f68f8f-fb3d-449e-a030-4b56b7a51400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a5:69:ee:ab:c5:7c:ad:a6:bc:4b:2d:a9:f0: 2a:b6:be:35:93:cf:b0:5c:20:b4:79:6e:61:b4:17: 99:56:c1:4d:4f:ea:51:ef:02:d8:55:75:0e:a7:8e: dd:ce:97:5f:13:0e:ac:d9:03:06:fa:3d:81:6c:37: b8:37:c7:b8:4f:cc:bc:57:02:74:2b:f2:5c:9b:2f: b5:c8:38:73:8d:4a:98:0d:ca:c9:18:4e:bb:eb:70: 89:b7:ee:2e:74:d2:ad:c1:23:f1:6b:83:30:58:57: 24:d6:aa:f5:ef:be:b9:75:6a:a8:c3:34:ee:de:6b: db:14:60:80:79:d4:5b:d8:b8:f5:62:27:d8:d4:65: 7a:4d:e2:f5:36:8f:ee:aa:15:0d:22:4d:b2:2b:be: 56:ff:7e:fa:59:d6:63:b0:e5:be:16:39:2f:56:a1: 83:ef:bf:c9:9f:6b:df:9a:79:b6:59:e4:96:12:85: 04:fc:6e:8b:01:b2:d9:ed:4f:64:d4:10:b3:f8:2c: 9f:74:d4:d3:1f:17:e4:8a:68:33:e9:24:ce:9d:50: 70:1e:ff:e0:f8:93:42:19:58:9d:2a:7d:70:8c:6d: 45:41:52:34:63:48:61:ac:38:e5:c2:a6:85:30:24: f3:61:44:35:35:08:bf:1c:28:c0:02:4b:ad:f8:54: ca:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:14:A9:7D:AC:0F:47:A8:85:80:19:DD:CE:38:85:75:EA:66:65:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/44f68f8f-fb3d-449e-a030-4b56b7a51400.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2602:f427::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402274 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ff:73:1a:93:50:36:1e:2d:59:fa:79:95:7b:5e:51:f8:21: df:4f:e4:ab:fc:f5:13:97:ba:61:f2:37:80:74:31:4b:3d:8c: 88:fc:11:05:89:1a:16:f6:b9:6f:b7:70:27:c5:f6:f2:7f:eb: 1e:e6:c3:66:6e:7d:41:d6:5f:0c:67:f5:72:ae:5e:95:f9:da: 28:fd:3c:92:84:31:dc:16:1f:8a:8a:d9:30:ab:53:1d:d4:38: a1:08:7b:ba:68:43:8d:f8:71:73:ba:85:69:2d:de:43:3e:9f: ab:84:8f:2f:63:8d:81:d3:7f:aa:7d:d8:09:01:e3:ac:79:4e: b8:31:36:1a:81:5f:47:41:b5:61:6c:0e:02:8c:8b:13:5a:82: 1c:be:09:d5:70:be:4b:b3:83:f0:aa:ef:b5:33:3a:53:d2:d3: 91:67:28:9e:0a:89:c0:28:87:32:4a:62:27:59:1d:e6:fd:06: 9a:eb:5d:17:a9:cf:1d:23:71:93:68:2f:e3:bd:89:59:4d:75: 3f:da:37:55:ac:99:e1:17:4f:c7:3c:8e:4e:3b:1d:9f:f1:cf: 54:0a:20:36:c6:4c:a9:ee:30:90:63:2a:b2:08:04:69:e4:fb: 5d:d3:42:5d:3f:b9:ef:e7:d2:70:fb:9f:22:d9:d4:e7:0f:66: 65:57:1c:71 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE0o504SLUOM3qHSpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxMzIzMzk1OFoXDTI4MDYxNTIzMzk1OFowLzEtMCsGA1UEAxMk NDRmNjhmOGYtZmIzZC00NDllLWEwMzAtNGI1NmI3YTUxNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KVp7qvFfK2mvEstqfAqtr41k8+wXCC0eW5h tBeZVsFNT+pR7wLYVXUOp47dzpdfEw6s2QMG+j2BbDe4N8e4T8y8VwJ0K/Jcmy+1 yDhzjUqYDcrJGE6763CJt+4udNKtwSPxa4MwWFck1qr17765dWqowzTu3mvbFGCA edRb2Lj1YifY1GV6TeL1No/uqhUNIk2yK75W/376WdZjsOW+FjkvVqGD77/Jn2vf mnm2WeSWEoUE/G6LAbLZ7U9k1BCz+CyfdNTTHxfkimgz6STOnVBwHv/g+JNCGVid Kn1wjG1FQVI0Y0hhrDjlwqaFMCTzYUQ1NQi/HCjAAkut+FTKrwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFLQUqX2sD0eohYAZ3c44hXXqZmUWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80 NGY2OGY4Zi1mYjNkLTQ0OWUtYTAzMC00YjU2YjdhNTE0MDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzQ0ZjY4ZjhmLWZiM2QtNDQ5ZS1h MDMwLTRiNTZiN2E1MTQwMC80NGY2OGY4Zi1mYjNkLTQ0OWUtYTAzMC00YjU2Yjdh NTE0MDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvQnADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGI2IwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAoP9zGpNQNh4tWfp5lXteUfgh30/kq/z1E5e6YfI3gHQx Sz2MiPwRBYkaFva5b7dwJ8X28n/rHubDZm59QdZfDGf1cq5elfnaKP08koQx3BYf iorZMKtTHdQ4oQh7umhDjfhxc7qFaS3eQz6fq4SPL2ONgdN/qn3YCQHjrHlOuDE2 GoFfR0G1YWwOAoyLE1qCHL4J1XC+S7OD8KrvtTM6U9LTkWcongqJwCiHMkpiJ1kd 5v0GmutdF6nPHSNxk2gv472JWU11P9o3VayZ4RdPxzyOTjsdn/HPVAogNsZMqe4w kGMqsggEaeT7XdNCXT+57+fScPufItnU5w9mZVcccQ== -----END CERTIFICATE-----Generated at Mon Mar 16 08:16:48 2026 by rpki-client