$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094.cer File: 208166f4-ac19-4a7b-b285-04c22bdca094.cer (raw, json) Hash identifier: gWyqA5XcweYGMBiP4s42uljSbWxYe9qKaKmX2/gNpbo= Subject key identifier: A7:D0:54:15:3F:94:EC:36:D1:BD:74:2D:73:C4:E6:57:E4:7A:0C:2F Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D0CE6AB4FFF459DFAA6B748C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094/208166f4-ac19-4a7b-b285-04c22bdca094.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Mar 2026 22:56:03 +0000 Certificate not after: Mon 05 Jun 2028 21:56:03 +0000 Subordinate resources: AS: 401711 IP: 2602:f64e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:e6:ab:4f:ff:45:9d:fa:a6:b7:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 3 22:56:03 2026 GMT Not After : Jun 5 21:56:03 2028 GMT Subject: CN=208166f4-ac19-4a7b-b285-04c22bdca094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f3:3c:fa:15:75:6d:d6:44:73:de:f2:6e:a1: e3:98:4c:1b:3c:28:90:61:c7:75:28:1c:69:9d:40: 63:9b:6a:00:d9:c0:78:7c:51:a4:c1:74:20:e5:5c: 04:73:6c:00:64:73:a7:d6:1b:06:2e:10:c9:c5:11: 34:7d:5d:8d:0a:4d:c4:fc:bd:b8:bd:d1:e3:7d:d9: 0e:ac:fe:38:1d:f7:04:17:7e:26:70:f6:65:d5:5c: 92:1a:72:83:93:94:25:3a:35:8a:19:29:57:79:8d: 7a:20:db:71:7d:30:1b:5e:2a:b7:a7:0c:dc:87:9a: 58:ff:ce:57:56:b3:42:0d:c9:4e:18:d7:fa:c6:fa: 54:b7:4a:5e:10:2e:c5:02:63:87:b3:2b:da:8f:98: 46:1c:08:49:f3:bb:19:54:b1:f5:05:f9:a1:ee:8c: dc:08:ea:55:bc:e1:14:9d:48:5f:50:a5:a6:41:4c: 84:dd:bc:9d:56:bf:24:41:0d:4e:63:3c:08:cc:dc: 3e:20:02:fc:ea:8a:6c:bf:31:ac:99:5a:75:85:fd: d4:8f:04:c1:38:97:3d:95:14:1b:53:4c:3e:8f:24: 77:a5:7d:f7:34:49:b8:cb:a6:2d:0f:ee:2a:76:3e: 27:52:05:19:c2:82:e7:3f:7d:ff:79:14:36:f3:f5: ea:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D0:54:15:3F:94:EC:36:D1:BD:74:2D:73:C4:E6:57:E4:7A:0C:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094/208166f4-ac19-4a7b-b285-04c22bdca094.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2602:f64e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401711 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:5e:88:d0:a1:90:a5:cb:c1:f1:47:2c:09:4f:72:16:93:11: 7b:a1:99:39:04:be:58:27:f9:0b:7a:a3:4c:40:24:ca:ac:d2: fd:ec:1b:84:e0:7a:01:ed:a5:ea:f3:73:fd:e9:16:0d:87:b4: 86:06:49:7c:2c:6b:41:85:46:a7:6c:3c:8e:d8:75:78:bf:cf: 97:a7:ff:59:dd:72:18:a4:fb:9d:53:55:fa:60:f7:8f:d8:92: 9b:e6:28:14:73:49:a0:cd:f9:a1:61:0d:7a:bb:fb:19:6f:b3: 93:43:75:1f:6e:cb:69:f3:52:5d:73:58:ef:c3:d0:44:f4:28: 17:38:c4:3e:36:30:e4:0e:e4:1d:e7:a1:52:63:87:28:0f:bd: b8:fa:37:2e:cd:57:b9:3a:81:37:df:d2:4f:e2:85:20:bf:22: 07:22:54:1e:a3:e0:07:f8:0c:8d:f1:d8:8c:6b:89:9f:6e:11: ab:82:96:73:73:bf:e4:e2:44:14:39:d9:22:ec:62:2b:66:4e: 42:de:93:db:7c:19:3f:4a:ed:76:78:fb:5b:88:d3:16:a1:3e: 0b:f4:65:89:1a:df:fd:ab:4d:ff:41:5b:db:27:b1:92:36:2d: 16:99:af:3a:b6:68:f9:42:f8:53:88:29:72:bd:05:b5:f3:a8: de:5b:14:76 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE0M5qtP/0Wd+qa3SMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwMzIyNTYwM1oXDTI4MDYwNTIxNTYwM1owLzEtMCsGA1UEAxMk MjA4MTY2ZjQtYWMxOS00YTdiLWIyODUtMDRjMjJiZGNhMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfM8+hV1bdZEc97ybqHjmEwbPCiQYcd1KBxp nUBjm2oA2cB4fFGkwXQg5VwEc2wAZHOn1hsGLhDJxRE0fV2NCk3E/L24vdHjfdkO rP44HfcEF34mcPZl1VySGnKDk5QlOjWKGSlXeY16INtxfTAbXiq3pwzch5pY/85X VrNCDclOGNf6xvpUt0peEC7FAmOHsyvaj5hGHAhJ87sZVLH1Bfmh7ozcCOpVvOEU nUhfUKWmQUyE3bydVr8kQQ1OYzwIzNw+IAL86opsvzGsmVp1hf3UjwTBOJc9lRQb U0w+jyR3pX33NEm4y6YtD+4qdj4nUgUZwoLnP33/eRQ28/XqcwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFKfQVBU/lOw20b10LXPE5lfkegwvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8y MDgxNjZmNC1hYzE5LTRhN2ItYjI4NS0wNGMyMmJkY2EwOTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzIwODE2NmY0LWFjMTktNGE3Yi1i Mjg1LTA0YzIyYmRjYTA5NC8yMDgxNjZmNC1hYzE5LTRhN2ItYjI4NS0wNGMyMmJk Y2EwOTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvZOADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGIS8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAm16I0KGQpcvB8UcsCU9yFpMRe6GZOQS+WCf5C3qjTEAk yqzS/ewbhOB6Ae2l6vNz/ekWDYe0hgZJfCxrQYVGp2w8jth1eL/Pl6f/Wd1yGKT7 nVNV+mD3j9iSm+YoFHNJoM35oWENerv7GW+zk0N1H27LafNSXXNY78PQRPQoFzjE PjYw5A7kHeehUmOHKA+9uPo3Ls1XuTqBN9/ST+KFIL8iByJUHqPgB/gMjfHYjGuJ n24Rq4KWc3O/5OJEFDnZIuxiK2ZOQt6T23wZP0rtdnj7W4jTFqE+C/RliRrf/atN /0Fb2yexkjYtFpmvOrZo+UL4U4gpcr0FtfOo3lsUdg== -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:46 2026 by rpki-client