$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9c700413-43a5-46c8-b416-62138aa7fd1d.cer File: 9c700413-43a5-46c8-b416-62138aa7fd1d.cer (raw, json) Hash identifier: 9ZbfjH3ufBvs5AyUeEQ6t3Tx2hyEXrVn85oU+mTy6W8= Subject key identifier: B4:D7:1B:86:84:22:38:19:07:9E:DB:B6:0D:E1:9B:6A:63:16:EC:15 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D4490F62215A6BAA5679915C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9c700413-43a5-46c8-b416-62138aa7fd1d/9c700413-43a5-46c8-b416-62138aa7fd1d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9c700413-43a5-46c8-b416-62138aa7fd1d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 21:28:37 +0000 Certificate not after: Sun 25 Jun 2028 21:28:37 +0000 Subordinate resources: AS: 14714 IP: 2620:2:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:90:f6:22:15:a6:ba:a5:67:99:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 23 21:28:37 2026 GMT Not After : Jun 25 21:28:37 2028 GMT Subject: CN=9c700413-43a5-46c8-b416-62138aa7fd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:bf:3e:e7:2e:74:32:ab:00:a1:3c:55:70: 5e:a4:3c:f9:06:ea:64:b4:60:73:8b:1a:b3:c7:cf: 4b:55:88:eb:6b:46:6d:56:b4:d4:f4:7d:6f:60:61: 62:9e:24:b6:66:01:f7:d2:8f:5f:36:f2:f3:5b:7b: 51:93:b1:c7:a6:7d:0b:69:ba:b3:a1:d4:65:e4:98: e3:bd:dc:ff:55:9e:b3:19:28:4a:fc:43:ca:a8:b7: 48:e9:d9:87:15:e6:6a:d8:a1:03:db:bb:a5:fe:04: 09:80:82:d8:24:9a:68:0b:a4:84:af:3b:6b:c4:9b: b1:b7:63:dd:54:73:a6:12:92:14:b1:20:29:40:9f: 40:10:50:63:ba:c6:5c:6b:e1:6c:58:2b:29:67:e2: bb:37:d4:8a:67:57:c7:e4:68:cf:b3:a7:1b:00:d5: 7c:28:66:1c:f3:1e:aa:14:c5:a9:0e:e1:ef:68:04: 7e:03:fa:bc:4c:1e:88:84:44:5c:66:90:e7:f2:41: 6d:d0:4b:5e:28:d3:21:a5:99:42:bb:54:35:ba:05: 40:47:9f:22:2b:60:6f:c4:bf:be:9f:1d:34:06:00: 1a:31:66:78:da:af:5c:92:ac:63:de:6f:88:bb:c5: 62:d3:c0:31:fb:d8:47:20:d9:ee:0b:0c:31:aa:26: 56:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D7:1B:86:84:22:38:19:07:9E:DB:B6:0D:E1:9B:6A:63:16:EC:15 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9c700413-43a5-46c8-b416-62138aa7fd1d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9c700413-43a5-46c8-b416-62138aa7fd1d/9c700413-43a5-46c8-b416-62138aa7fd1d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2620:2:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14714 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c3:5d:b9:0f:45:d5:27:35:3a:fe:de:7b:31:4a:3a:de:bb: bc:03:33:d5:4c:30:81:9f:50:d2:a5:2a:f8:97:e5:32:92:1d: d9:d8:03:22:4b:78:56:e3:cd:fc:48:c8:65:e6:a7:e6:d9:d2: b8:16:57:d2:13:84:6c:34:eb:fc:68:e6:a8:2d:36:b8:99:66: b3:4d:64:da:7c:9d:98:36:b8:60:bd:a4:a2:11:5f:d3:b8:2b: 6f:35:31:40:cd:09:78:f6:a3:c8:14:29:f9:50:5b:2a:7b:10: 1a:f9:b0:29:66:8c:99:da:88:11:4e:98:18:a6:84:58:b8:1d: 38:33:30:20:ff:f4:ae:d1:0d:0f:87:86:33:df:7d:16:f1:0f: c5:af:e7:bc:0b:50:eb:1d:22:b5:fa:7d:03:19:42:15:5b:f1: 60:94:cb:7c:42:17:d9:1a:9d:7d:a7:60:1b:1d:d5:a3:ca:9d: 7c:19:63:b0:a3:9e:20:a4:b9:8a:03:08:aa:4f:7b:c7:e9:44: 46:32:26:fb:84:59:ae:5a:4b:12:c5:47:fd:8b:02:4e:e7:58: da:d2:16:f0:d2:66:75:e4:b7:83:97:9d:cc:54:d5:58:3b:1a: ce:f7:ba:0a:3f:a5:2e:64:11:ad:93:bd:c5:d4:9d:ff:f9:37: 74:cd:23:01 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE1EkPYiFaa6pWeZFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyMzIxMjgzN1oXDTI4MDYyNTIxMjgzN1owLzEtMCsGA1UEAxMk OWM3MDA0MTMtNDNhNS00NmM4LWI0MTYtNjIxMzhhYTdmZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCm/PucudDKrAKE8VXBepDz5BupktGBzixqz x89LVYjra0ZtVrTU9H1vYGFiniS2ZgH30o9fNvLzW3tRk7HHpn0LabqzodRl5Jjj vdz/VZ6zGShK/EPKqLdI6dmHFeZq2KED27ul/gQJgILYJJpoC6SErztrxJuxt2Pd VHOmEpIUsSApQJ9AEFBjusZca+FsWCspZ+K7N9SKZ1fH5GjPs6cbANV8KGYc8x6q FMWpDuHvaAR+A/q8TB6IhERcZpDn8kFt0EteKNMhpZlCu1Q1ugVAR58iK2BvxL++ nx00BgAaMWZ42q9ckqxj3m+Iu8Vi08Ax+9hHINnuCwwxqiZWPQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFLTXG4aEIjgZB57btg3hm2pjFuwVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85 YzcwMDQxMy00M2E1LTQ2YzgtYjQxNi02MjEzOGFhN2ZkMWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzljNzAwNDEzLTQzYTUtNDZjOC1i NDE2LTYyMTM4YWE3ZmQxZC85YzcwMDQxMy00M2E1LTQ2YzgtYjQxNi02MjEzOGFh N2ZkMWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAAC4AAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICOXowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEACcNduQ9F1Sc1Ov7eezFKOt67vAMz1UwwgZ9Q0qUq+Jfl MpId2dgDIkt4VuPN/EjIZean5tnSuBZX0hOEbDTr/GjmqC02uJlms01k2nydmDa4 YL2kohFf07grbzUxQM0JePajyBQp+VBbKnsQGvmwKWaMmdqIEU6YGKaEWLgdODMw IP/0rtEND4eGM999FvEPxa/nvAtQ6x0itfp9AxlCFVvxYJTLfEIX2RqdfadgGx3V o8qdfBljsKOeIKS5igMIqk97x+lERjIm+4RZrlpLEsVH/YsCTudY2tIW8NJmdeS3 g5edzFTVWDsazve6Cj+lLmQRrZO9xdSd//k3dM0jAQ== -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:45 2026 by rpki-client