$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e2fd386-ebc6-4098-8f9f-76834f46d933.cer File: 9e2fd386-ebc6-4098-8f9f-76834f46d933.cer (raw, json) Hash identifier: FZbm1Ap5RLlLmpQ7Ri7iSmIebV9DkMKgeB11+u3V4SM= Subject key identifier: 5D:07:84:DC:09:C5:28:F4:1C:EB:05:69:41:C0:15:6D:88:69:80:E2 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D3B0F6D27AA9C7C392D77FFE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e2fd386-ebc6-4098-8f9f-76834f46d933/9e2fd386-ebc6-4098-8f9f-76834f46d933.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e2fd386-ebc6-4098-8f9f-76834f46d933/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Mar 2026 11:45:21 +0000 Certificate not after: Wed 21 Jun 2028 13:23:34 +0000 Subordinate resources: AS: 40643 IP: 2605:71c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:0f:6d:27:aa:9c:7c:39:2d:77:ff:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 20 11:45:21 2026 GMT Not After : Jun 21 13:23:34 2028 GMT Subject: CN=9e2fd386-ebc6-4098-8f9f-76834f46d933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:cf:f7:28:49:0b:93:d7:c3:6a:f0:b0:f1: 30:bc:c6:72:a7:2e:1c:78:4d:78:99:18:ab:36:e5: b8:e8:b3:72:91:08:b1:4d:e0:b6:05:b7:0e:8e:43: dc:82:f1:75:a5:f4:3b:c7:b9:96:ef:52:f8:93:f1: ee:00:b2:94:df:8a:d9:75:6c:68:9a:0b:04:6e:92: 69:8a:13:e9:46:12:9e:61:ed:3f:47:6b:f1:a3:a4: 6f:cb:57:a3:fd:90:be:88:56:52:7d:6f:5c:2e:90: 29:8c:83:54:be:e8:8c:0e:3c:0a:87:d3:2b:ad:9e: b1:bb:51:33:ce:4c:3a:6c:2a:8c:ee:54:75:92:88: 48:42:70:8b:83:37:7a:ea:b7:1e:b3:8f:cd:da:89: 2c:72:bc:19:50:10:e3:fa:19:8f:03:69:f8:e7:88: 26:87:0e:d9:df:1a:80:6e:02:13:33:32:88:71:bf: 4b:f1:7b:c9:79:7b:e5:65:82:34:87:73:47:61:79: dc:f5:be:99:d4:26:fc:bc:c6:4d:1a:d0:d2:dd:4d: bb:04:9b:02:8a:f8:40:1c:1a:dd:16:89:1e:36:d8: 35:c4:7c:e6:93:9d:07:a1:08:34:bf:a5:3f:0a:2a: 65:02:4d:fc:91:5e:98:5c:52:83:ea:ef:9b:99:31: f0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:07:84:DC:09:C5:28:F4:1C:EB:05:69:41:C0:15:6D:88:69:80:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e2fd386-ebc6-4098-8f9f-76834f46d933/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e2fd386-ebc6-4098-8f9f-76834f46d933/9e2fd386-ebc6-4098-8f9f-76834f46d933.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2605:71c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40643 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:41:60:df:e3:96:26:3e:11:ad:e8:03:a8:d5:be:a1:1f:a8: 82:24:fd:83:be:e4:46:36:f5:97:2c:d8:7d:70:e5:20:4d:da: ec:ac:2a:3c:58:c3:60:d5:cc:df:e1:9a:d7:e0:71:05:b2:d9: 1c:08:66:5b:03:13:c7:10:b1:62:c5:78:2f:d1:b7:ab:18:0c: 4a:df:ae:b3:c7:12:b4:d8:1e:fa:56:7a:aa:ab:c6:16:ee:2c: 10:9b:15:90:51:26:56:e4:16:2b:85:30:2c:44:2f:7c:f2:05: 6b:e2:db:9b:4f:8e:27:19:9d:72:50:03:4f:6b:12:db:00:d1: 13:07:24:47:bd:35:83:28:39:5c:d8:e8:06:9b:f0:82:d2:e0: 3c:72:e7:94:f5:32:68:56:e0:f1:fb:14:a7:10:c7:d9:a1:38: 6d:ca:b2:20:99:a8:ed:e5:54:a1:8b:31:3c:83:d4:52:7e:6a: 21:d5:2d:a4:11:bb:b3:f8:dd:19:ac:e3:6e:95:2e:35:a2:c3: ca:46:28:d0:99:69:eb:b0:1a:8e:fe:97:73:4d:df:04:6a:a1: d0:40:c9:52:a5:15:f2:59:4f:0d:f9:c0:3a:ef:dd:ad:1e:50: d6:1a:8a:b1:e0:d0:7a:7e:fe:c7:62:e8:98:ff:6b:ad:93:da: 2d:1a:3e:37 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE07D20nqpx8OS13/+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyMDExNDUyMVoXDTI4MDYyMTEzMjMzNFowLzEtMCsGA1UEAxMk OWUyZmQzODYtZWJjNi00MDk4LThmOWYtNzY4MzRmNDZkOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kXP9yhJC5PXw2rwsPEwvMZypy4ceE14mRir NuW46LNykQixTeC2BbcOjkPcgvF1pfQ7x7mW71L4k/HuALKU34rZdWxomgsEbpJp ihPpRhKeYe0/R2vxo6Rvy1ej/ZC+iFZSfW9cLpApjINUvuiMDjwKh9MrrZ6xu1Ez zkw6bCqM7lR1kohIQnCLgzd66rces4/N2okscrwZUBDj+hmPA2n454gmhw7Z3xqA bgITMzKIcb9L8XvJeXvlZYI0h3NHYXnc9b6Z1Cb8vMZNGtDS3U27BJsCivhAHBrd FokeNtg1xHzmk50HoQg0v6U/CiplAk38kV6YXFKD6u+bmTHw4QIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFF0HhNwJxSj0HOsFaUHAFW2IaYDiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85 ZTJmZDM4Ni1lYmM2LTQwOTgtOGY5Zi03NjgzNGY0NmQ5MzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzllMmZkMzg2LWViYzYtNDA5OC04 ZjlmLTc2ODM0ZjQ2ZDkzMy85ZTJmZDM4Ni1lYmM2LTQwOTgtOGY5Zi03NjgzNGY0 NmQ5MzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBXHAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCewzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA3QWDf45YmPhGt6AOo1b6hH6iCJP2DvuRGNvWXLNh9cOUg TdrsrCo8WMNg1czf4ZrX4HEFstkcCGZbAxPHELFixXgv0berGAxK366zxxK02B76 Vnqqq8YW7iwQmxWQUSZW5BYrhTAsRC988gVr4tubT44nGZ1yUANPaxLbANETByRH vTWDKDlc2OgGm/CC0uA8cueU9TJoVuDx+xSnEMfZoThtyrIgmajt5VShizE8g9RS fmoh1S2kEbuz+N0ZrONulS41osPKRijQmWnrsBqO/pdzTd8EaqHQQMlSpRXyWU8N +cA6792tHlDWGoqx4NB6fv7HYuiY/2utk9otGj43 -----END CERTIFICATE-----Generated at Wed Mar 25 21:26:17 2026 by rpki-client