$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.cer File: 60d79450-5cfd-43d5-b1eb-e5cb0158ee69.cer (raw, json) Hash identifier: GQf/Zld+HT8lKC9IT69EkSQ0ZRyG0+mdXTftsX8DZJA= Subject key identifier: 56:E8:EC:33:1C:94:46:26:2A:D8:B5:F7:11:E0:A3:17:08:06:44:26 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D23997707A09BECE24832E840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Mar 2026 02:04:05 +0000 Certificate not after: Wed 14 Jun 2028 02:04:05 +0000 Subordinate resources: AS: 402145 IP: 2602:ff46::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:99:77:07:a0:9b:ec:e2:48:32:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 12 02:04:05 2026 GMT Not After : Jun 14 02:04:05 2028 GMT Subject: CN=60d79450-5cfd-43d5-b1eb-e5cb0158ee69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:63:38:63:1f:7d:a3:09:02:37:bc:f4:1d:06: dd:61:57:54:e1:bd:60:36:b9:4e:61:7c:1d:cd:5c: 7e:a3:25:63:4e:c2:fa:19:3e:9c:5b:5b:97:99:24: 2e:e3:c5:4c:20:b5:8e:e3:f3:02:ed:24:dd:2d:da: 5d:97:7c:78:fd:c6:29:95:07:a7:01:8e:0d:88:b1: 7e:ad:e5:10:c6:1d:54:bf:32:c3:a2:38:ea:d8:79: 71:d2:14:eb:c4:0c:06:39:ed:8b:98:43:8b:3d:9a: ab:0a:32:3f:79:5c:c3:a2:50:06:5d:26:c5:10:8a: 6c:bd:50:20:a5:c7:b5:c0:dc:dd:91:3e:4b:d1:13: 86:e0:fd:2f:f0:25:a3:6e:fa:6d:eb:47:10:1d:86: 96:ad:21:97:fc:f2:dd:30:b8:09:37:55:c3:89:a0: c3:dc:bc:bc:c5:5f:33:9f:34:be:ea:0a:ea:cb:00: 65:10:f5:f0:78:da:1e:e8:c2:eb:bb:31:b9:12:d4: 2f:0e:80:38:ef:96:fd:58:53:f4:d9:a8:06:da:b8: 82:9c:bf:0b:89:41:58:11:b5:db:8b:1b:a7:c3:f5: b3:0a:75:af:e2:93:93:06:aa:af:4e:6c:5d:f5:09: 0e:74:73:5d:56:d5:3e:81:3e:1b:1b:78:45:3b:fc: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E8:EC:33:1C:94:46:26:2A:D8:B5:F7:11:E0:A3:17:08:06:44:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2602:ff46::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402145 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:3d:d0:0d:11:70:6d:04:56:9b:6a:4c:39:f1:11:80:aa:59: a9:61:0f:f0:44:35:b1:85:33:38:0c:14:38:5b:e3:ea:18:90: 63:e4:ed:1c:0c:84:68:d9:38:bb:e1:be:d3:5b:7a:c4:d1:8b: e8:d7:d5:b8:f8:da:51:b2:70:9d:61:54:19:46:66:32:13:94: 77:07:26:6a:6f:3b:4e:32:90:64:58:80:3f:d2:aa:73:6f:5d: 06:32:6c:cd:cc:43:41:15:f1:24:c5:5e:53:6a:49:7e:d8:3b: cd:ef:f0:8d:58:de:7e:5c:cf:a5:50:2f:1f:be:63:f8:37:5b: d0:b8:c9:a6:15:4b:17:41:0d:5a:a3:94:0d:9d:26:25:b0:3f: 66:d2:9a:83:18:e9:bf:e0:e7:9a:8e:12:5e:68:cf:43:b0:e6: cb:62:59:84:93:fa:cb:c4:e3:d7:99:90:1d:b8:8f:f1:9a:4a: 18:91:f2:08:4a:5a:e2:74:ca:cf:cd:7d:2a:c4:9f:98:c9:6c: 8d:0e:11:ee:23:f6:24:8b:1e:25:27:82:a7:94:f2:da:7f:77: b6:89:f8:47:08:63:38:84:be:02:0e:b2:cd:f2:30:9b:2c:a0: 8e:51:0b:0c:32:f6:24:d7:5e:72:ed:53:97:3c:f4:43:54:53: d4:9b:0c:2f -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE0jmXcHoJvs4kgy6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxMjAyMDQwNVoXDTI4MDYxNDAyMDQwNVowLzEtMCsGA1UEAxMk NjBkNzk0NTAtNWNmZC00M2Q1LWIxZWItZTVjYjAxNThlZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2M4Yx99owkCN7z0HQbdYVdU4b1gNrlOYXwd zVx+oyVjTsL6GT6cW1uXmSQu48VMILWO4/MC7STdLdpdl3x4/cYplQenAY4NiLF+ reUQxh1UvzLDojjq2Hlx0hTrxAwGOe2LmEOLPZqrCjI/eVzDolAGXSbFEIpsvVAg pce1wNzdkT5L0ROG4P0v8CWjbvpt60cQHYaWrSGX/PLdMLgJN1XDiaDD3Ly8xV8z nzS+6grqywBlEPXweNoe6MLruzG5EtQvDoA475b9WFP02agG2riCnL8LiUFYEbXb ixunw/WzCnWv4pOTBqqvTmxd9QkOdHNdVtU+gT4bG3hFO/x4DwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFFbo7DMclEYmKti19xHgoxcIBkQmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82 MGQ3OTQ1MC01Y2ZkLTQzZDUtYjFlYi1lNWNiMDE1OGVlNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzYwZDc5NDUwLTVjZmQtNDNkNS1i MWViLWU1Y2IwMTU4ZWU2OS82MGQ3OTQ1MC01Y2ZkLTQzZDUtYjFlYi1lNWNiMDE1 OGVlNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAv9GADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGIuEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAeT3QDRFwbQRWm2pMOfERgKpZqWEP8EQ1sYUzOAwUOFvj 6hiQY+TtHAyEaNk4u+G+01t6xNGL6NfVuPjaUbJwnWFUGUZmMhOUdwcmam87TjKQ ZFiAP9Kqc29dBjJszcxDQRXxJMVeU2pJftg7ze/wjVjeflzPpVAvH75j+Ddb0LjJ phVLF0ENWqOUDZ0mJbA/ZtKagxjpv+Dnmo4SXmjPQ7Dmy2JZhJP6y8Tj15mQHbiP 8ZpKGJHyCEpa4nTKz819KsSfmMlsjQ4R7iP2JIseJSeCp5Ty2n93ton4RwhjOIS+ Ag6yzfIwmyygjlELDDL2JNdecu1Tlzz0Q1RT1JsMLw== -----END CERTIFICATE-----Generated at Wed Mar 25 22:48:36 2026 by rpki-client