$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf.cer File: f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf.cer (raw, json) Hash identifier: Pzjrxa5PFXLEDgKLY76a3nDKTKUPBznUN2czKGggfYs= Subject key identifier: 08:FE:FA:C4:AB:D0:1E:3E:77:7B:32:85:21:8C:23:38:2B:C1:FA:C6 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D272449F03B26CDB72AB8B800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Mar 2026 08:31:13 +0000 Certificate not after: Thu 15 Jun 2028 08:31:13 +0000 Subordinate resources: AS: 402283 IP: 2602:81d:4000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:24:49:f0:3b:26:cd:b7:2a:b8:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 13 08:31:13 2026 GMT Not After : Jun 15 08:31:13 2028 GMT Subject: CN=f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d5:df:97:70:cb:d3:81:26:a0:1b:fb:82:14: a3:f5:69:84:8b:f4:c8:dd:86:b4:2f:b2:34:11:af: 45:c4:24:e3:44:ee:09:7b:ab:54:b4:46:82:4b:9d: fe:24:57:c8:8e:04:6a:e9:a2:e6:36:c1:60:f6:58: ea:a1:3b:30:a7:bd:ec:b5:5d:e1:5c:5f:7f:d2:8f: 69:6a:42:08:fb:a6:6a:2a:00:ad:64:15:97:d2:5b: 24:ea:64:f7:aa:ce:82:d2:37:14:50:b2:ba:74:97: 5f:e9:30:8e:a2:5f:fb:3f:a0:99:a3:ef:64:22:3b: c8:23:6b:42:98:91:ee:5a:d9:96:d5:57:ce:55:fb: a4:4a:8e:c7:05:90:7c:a8:28:1c:4a:07:b1:1a:9d: 9f:5f:a3:b3:03:18:a2:3b:18:9a:4b:69:34:da:3d: 64:ef:4c:2a:dd:68:a1:be:a7:20:5d:d4:d0:bb:90: 57:6a:36:79:9a:8b:82:55:2e:be:24:56:ea:75:cc: bd:bd:67:b3:97:d0:a0:f3:cd:a6:11:67:68:4c:21: dc:de:d5:01:f2:d1:e9:4e:47:5f:6a:59:47:8e:73: 74:fc:7f:3d:6d:e3:be:b5:af:8c:2b:1e:ed:80:55: 2b:df:a1:84:27:79:f7:7e:19:bb:a9:94:24:ab:4e: 8f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FE:FA:C4:AB:D0:1E:3E:77:7B:32:85:21:8C:23:38:2B:C1:FA:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2602:81d:4000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402283 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:09:f4:ac:c6:46:e8:e1:22:05:72:a0:3b:54:a1:1b:64:03: 3a:2a:8e:ce:60:93:b0:fc:fa:03:be:0f:9d:6a:84:51:ce:8b: 3e:fc:e5:76:47:04:6a:7f:34:d3:c1:0b:ce:0b:f1:5b:0c:d2: 6a:2e:4e:dc:d2:f7:9c:6c:89:58:70:e8:80:f5:96:7c:12:a3: 14:01:c2:ec:cb:f2:21:50:65:ae:97:ca:bb:48:5b:c0:98:12: 50:82:1f:fb:6f:05:f1:d2:7a:76:47:5a:c9:0a:61:84:8d:3e: 7b:1c:a9:cd:ae:78:1a:bf:11:cf:3e:0a:c2:08:ff:49:ad:51: b7:66:03:b9:3c:eb:d4:8d:19:d5:c1:6c:36:66:d0:b2:67:65: c9:cd:82:ce:07:8a:a1:f0:22:01:1e:a9:f3:50:22:df:98:69: c7:1e:63:d6:dd:0d:cf:3e:17:c9:5d:02:cc:09:7a:7f:4b:7f: 17:a8:06:33:c6:d6:1a:33:d7:b7:1d:dc:6b:b2:a1:5e:d4:ab: 8d:67:09:d2:14:b0:bd:fa:10:ce:e9:fe:4b:9b:cc:91:0b:56: 17:01:70:85:9d:e8:f0:9a:58:a1:f0:a9:7f:94:52:00:44:c1: 5f:5b:dd:45:ea:df:61:62:71:51:42:d3:0f:19:9d:dc:e4:33: c0:0f:b4:e9 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE0nJEnwOybNtyq4uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxMzA4MzExM1oXDTI4MDYxNTA4MzExM1owLzEtMCsGA1UEAxMk ZjRhNWIxNTctYmJlMy00ZDIyLTk0OWUtOGFhOWFhNWNkYWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNXfl3DL04EmoBv7ghSj9WmEi/TI3Ya0L7I0 Ea9FxCTjRO4Je6tUtEaCS53+JFfIjgRq6aLmNsFg9ljqoTswp73stV3hXF9/0o9p akII+6ZqKgCtZBWX0lsk6mT3qs6C0jcUULK6dJdf6TCOol/7P6CZo+9kIjvII2tC mJHuWtmW1VfOVfukSo7HBZB8qCgcSgexGp2fX6OzAxiiOxiaS2k02j1k70wq3Wih vqcgXdTQu5BXajZ5mouCVS6+JFbqdcy9vWezl9Cg882mEWdoTCHc3tUB8tHpTkdf allHjnN0/H89beO+ta+MKx7tgFUr36GEJ3n3fhm7qZQkq06PVQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFAj++sSr0B4+d3syhSGMIzgrwfrGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9m NGE1YjE1Ny1iYmUzLTRkMjItOTQ5ZS04YWE5YWE1Y2RhY2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2Y0YTViMTU3LWJiZTMtNGQyMi05 NDllLThhYTlhYTVjZGFjZi9mNGE1YjE1Ny1iYmUzLTRkMjItOTQ5ZS04YWE5YWE1 Y2RhY2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAggdQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGI2swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAXwn0rMZG6OEiBXKgO1ShG2QDOiqOzmCTsPz6A74PnWqE Uc6LPvzldkcEan8008ELzgvxWwzSai5O3NL3nGyJWHDogPWWfBKjFAHC7MvyIVBl rpfKu0hbwJgSUIIf+28F8dJ6dkdayQphhI0+exypza54Gr8Rzz4Kwgj/Sa1Rt2YD uTzr1I0Z1cFsNmbQsmdlyc2CzgeKofAiAR6p81Ai35hpxx5j1t0Nzz4XyV0CzAl6 f0t/F6gGM8bWGjPXtx3ca7KhXtSrjWcJ0hSwvfoQzun+S5vMkQtWFwFwhZ3o8JpY ofCpf5RSAETBX1vdRerfYWJxUULTDxmd3OQzwA+06Q== -----END CERTIFICATE-----Generated at Thu Mar 19 13:58:21 2026 by rpki-client