$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer File: 67e403a1-9185-4f5a-9910-5089c51f9fc3.cer (raw, json) Hash identifier: dssPHSyhqxFbCrAxyiJlLoOFCjo//ZRkxBHDJu3aEgY= Subject key identifier: 1A:58:4E:A2:10:EC:DB:67:03:28:75:03:0B:C7:60:12:A3:83:80:CE Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D304BD384C7681A10FA7147C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Mar 2026 15:13:09 +0000 Certificate not after: Sun 18 Jun 2028 15:13:09 +0000 Subordinate resources: IP: 2602:f64d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:4b:d3:84:c7:68:1a:10:fa:71:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 16 15:13:09 2026 GMT Not After : Jun 18 15:13:09 2028 GMT Subject: CN=67e403a1-9185-4f5a-9910-5089c51f9fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c4:6a:91:4a:97:10:16:a2:45:84:7e:5c:4c: 7e:4d:a6:14:52:d5:3c:29:01:ae:b5:44:00:a9:35: ab:84:13:dc:26:e8:fa:93:36:a8:80:fd:55:e3:22: 83:47:96:c1:81:01:7d:3d:40:57:3d:06:9e:1b:7f: f3:70:8b:63:4d:5b:49:8d:c7:62:76:72:df:e1:7e: 56:70:3b:3f:0d:29:5b:02:90:be:a0:e0:02:7a:c1: 5e:54:86:e5:07:9d:a4:93:a1:1d:4a:8b:76:76:a7: f0:38:76:07:c1:a2:d8:e0:80:3f:f0:49:98:61:67: ad:99:db:11:33:1f:00:e1:ea:ac:d6:a7:f6:e3:22: 2b:92:87:3b:a6:f6:40:8d:85:00:27:0a:51:16:72: 71:a9:62:d4:0b:ff:d2:b2:92:41:50:b7:33:fe:9d: d9:1b:b0:eb:ce:60:6c:59:2a:37:49:71:44:f1:59: 30:2a:48:98:20:d8:5f:71:91:4d:60:89:88:92:9f: 3c:33:41:35:c0:fc:30:06:28:98:e3:29:22:c5:b8: ed:ef:4b:05:34:9d:c3:a4:4d:6e:5b:a7:1d:9a:c3: c6:a7:d2:d8:7f:c1:c3:9f:80:b0:ea:7e:57:0c:ea: d7:06:49:82:ae:3c:92:59:41:b6:1e:a8:0a:e3:58: e7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:58:4E:A2:10:EC:DB:67:03:28:75:03:0B:C7:60:12:A3:83:80:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2602:f64d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:3d:24:f8:7b:73:2e:67:48:f9:89:ad:b8:b6:22:b9:49:d4: ee:75:c1:14:18:b2:d2:0d:1a:af:59:0a:55:05:f1:34:8b:ee: 9b:c4:ad:55:f1:df:aa:c3:09:7f:cd:85:5c:df:80:62:a1:59: 5c:6b:81:b4:20:9b:47:cf:f2:26:08:fb:93:a5:09:73:34:9b: c0:a1:e1:bb:b7:8b:0f:a2:0d:53:f9:b3:a8:71:a9:3d:19:9c: 11:58:4b:3d:2d:e0:71:0d:61:37:c8:ee:64:f2:ee:97:d6:41: 3d:1f:17:73:cf:17:14:e0:1f:fd:f6:09:01:54:23:75:86:d2: 73:55:db:86:55:01:04:cc:53:45:e0:5c:02:fe:19:7f:db:e7: 7d:37:2e:bf:51:cc:a0:23:7e:db:8c:76:ec:56:5c:59:8e:7b: b4:0c:8b:f8:f4:de:c4:73:96:67:16:04:d6:9c:57:c3:af:42: 51:fa:92:16:b6:1a:c3:6e:bc:ea:de:0a:ab:66:89:fa:86:91: f1:6c:f0:25:94:a9:6e:ad:c6:f2:70:fc:8a:88:62:fd:75:02: 55:91:f8:5a:bb:d4:13:21:81:f1:87:b3:47:94:87:29:d2:ee: 82:c1:e5:5c:13:6d:57:aa:4c:aa:e2:89:c2:cb:87:4f:79:a5: 57:d5:cf:18 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWE0wS9OEx2gaEPpxR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxNjE1MTMwOVoXDTI4MDYxODE1MTMwOVowLzEtMCsGA1UEAxMk NjdlNDAzYTEtOTE4NS00ZjVhLTk5MTAtNTA4OWM1MWY5ZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisRqkUqXEBaiRYR+XEx+TaYUUtU8KQGutUQA qTWrhBPcJuj6kzaogP1V4yKDR5bBgQF9PUBXPQaeG3/zcItjTVtJjcdidnLf4X5W cDs/DSlbApC+oOACesFeVIblB52kk6EdSot2dqfwOHYHwaLY4IA/8EmYYWetmdsR Mx8A4eqs1qf24yIrkoc7pvZAjYUAJwpRFnJxqWLUC//SspJBULcz/p3ZG7DrzmBs WSo3SXFE8VkwKkiYINhfcZFNYImIkp88M0E1wPwwBiiY4ykixbjt70sFNJ3DpE1u W6cdmsPGp9LYf8HDn4Cw6n5XDOrXBkmCrjySWUG2HqgK41jn9QIDAQABo4IEATCC A/0wHQYDVR0OBBYEFBpYTqIQ7NtnAyh1AwvHYBKjg4DOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82 N2U0MDNhMS05MTg1LTRmNWEtOTkxMC01MDg5YzUxZjlmYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzY3ZTQwM2ExLTkxODUtNGY1YS05 OTEwLTUwODljNTFmOWZjMy82N2U0MDNhMS05MTg1LTRmNWEtOTkxMC01MDg5YzUx ZjlmYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvZNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUPST4e3MuZ0j5ia24 tiK5SdTudcEUGLLSDRqvWQpVBfE0i+6bxK1V8d+qwwl/zYVc34BioVlca4G0IJtH z/ImCPuTpQlzNJvAoeG7t4sPog1T+bOocak9GZwRWEs9LeBxDWE3yO5k8u6X1kE9 HxdzzxcU4B/99gkBVCN1htJzVduGVQEEzFNF4FwC/hl/2+d9Ny6/UcygI37bjHbs VlxZjnu0DIv49N7Ec5ZnFgTWnFfDr0JR+pIWthrDbrzq3gqrZon6hpHxbPAllKlu rcbycPyKiGL9dQJVkfhau9QTIYHxh7NHlIcp0u6CweVcE21Xqkyq4onCy4dPeaVX 1c8Y -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:54 2026 by rpki-client