$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b2fd45ce-fbf3-42d7-989d-0106ddbf657e.cer File: b2fd45ce-fbf3-42d7-989d-0106ddbf657e.cer (raw, json) Hash identifier: dQ2NzFN3lPxBOuxdJ6DLd3KzeSzR32vPoAnFsggTAuw= Subject key identifier: 28:7E:E5:A1:BE:A1:68:02:F6:8C:81:E4:47:11:EB:96:66:F6:98:A9 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D39512C51681BFE08C1752480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b2fd45ce-fbf3-42d7-989d-0106ddbf657e/b2fd45ce-fbf3-42d7-989d-0106ddbf657e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b2fd45ce-fbf3-42d7-989d-0106ddbf657e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Mar 2026 20:46:12 +0000 Certificate not after: Wed 21 Jun 2028 20:46:12 +0000 Subordinate resources: IP: 2602:813:f000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:51:2c:51:68:1b:fe:08:c1:75:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 19 20:46:12 2026 GMT Not After : Jun 21 20:46:12 2028 GMT Subject: CN=b2fd45ce-fbf3-42d7-989d-0106ddbf657e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:2b:cc:be:df:39:10:a0:12:a9:3b:a1:78: 2f:aa:26:4d:b2:97:bb:c6:cf:6c:c4:76:09:be:cc: c3:5b:84:66:58:3e:53:30:ab:2d:a8:08:bb:59:27: 49:16:69:56:bf:f1:14:85:e1:46:9e:e9:18:1e:b3: ed:f9:fc:08:4c:07:2c:60:d4:7c:04:99:6a:49:36: 61:eb:23:e4:7e:ec:0a:e9:1e:d2:bf:f3:06:7e:25: f6:ba:60:dd:41:a5:58:26:0a:71:7a:2f:eb:86:b0: 66:a9:a4:6f:69:0e:9e:0f:ae:c0:3e:4c:55:80:bc: 2d:18:e9:dc:f7:0e:01:2b:a0:58:2c:e3:a7:45:10: d1:13:61:4a:c9:f6:f5:47:ae:6c:73:0f:1c:70:77: d2:5b:6f:62:71:14:a9:32:18:4b:11:b3:4d:39:3a: 30:bb:36:0f:81:c7:cf:28:99:71:8d:2d:60:de:90: 96:48:8f:c1:79:78:ce:33:dd:2a:81:0a:67:bf:02: bb:67:00:e3:7f:93:97:b7:69:09:7b:ab:0a:8d:1c: 39:65:84:40:3b:1c:4d:52:26:c4:85:51:d0:f2:9e: ec:14:da:80:6d:db:bc:c2:e0:dd:fe:67:f7:55:81: b6:15:82:01:0d:a1:d5:9d:1a:c7:c8:29:e8:65:00: 25:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7E:E5:A1:BE:A1:68:02:F6:8C:81:E4:47:11:EB:96:66:F6:98:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b2fd45ce-fbf3-42d7-989d-0106ddbf657e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b2fd45ce-fbf3-42d7-989d-0106ddbf657e/b2fd45ce-fbf3-42d7-989d-0106ddbf657e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2602:813:f000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:fc:a9:19:1d:1a:cc:49:50:13:3b:cf:6c:1e:cc:40:54:e3: 8d:a3:fb:b1:b1:2b:32:a4:9b:46:06:37:c9:5b:4e:e6:e4:da: 0d:02:20:68:41:04:2a:2f:26:c4:f4:20:c3:a9:da:b8:98:3d: eb:62:d1:13:30:d4:8a:f9:df:97:48:81:b2:58:e5:87:ea:a6: 3d:9e:0f:11:a3:52:9e:bb:bf:fa:75:73:bc:65:f1:2f:71:91: ea:a1:1a:f5:25:81:77:cf:22:37:6a:60:bb:63:33:8f:f4:8d: b6:8c:90:47:e1:9e:e2:17:77:84:1b:d4:f6:01:25:d6:c7:79: a9:b9:13:28:66:d1:20:59:9b:63:7c:06:9c:c4:b1:8a:5b:b1: c7:d5:e3:cc:41:ce:af:17:0e:b3:f5:49:b8:99:bf:9d:d7:a3: 90:93:fa:fd:13:16:a8:2e:70:d0:ae:1e:63:ef:35:1d:8e:b5: 61:ea:27:db:92:4c:61:28:28:be:28:42:5e:7b:5a:33:c4:f6: a2:8f:5c:66:1e:bc:7a:ba:7d:77:04:e9:1c:4a:45:b9:05:56: 51:7a:9a:d3:80:35:21:4d:7d:27:3b:a2:d7:3a:0c:75:6f:73: fa:82:b2:36:c2:2f:f8:45:a7:c8:f2:e7:15:f4:00:de:43:34: 92:89:5f:3c -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWE05USxRaBv+CMF1JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxOTIwNDYxMloXDTI4MDYyMTIwNDYxMlowLzEtMCsGA1UEAxMk YjJmZDQ1Y2UtZmJmMy00MmQ3LTk4OWQtMDEwNmRkYmY2NTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0MrzL7fORCgEqk7oXgvqiZNspe7xs9sxHYJ vszDW4RmWD5TMKstqAi7WSdJFmlWv/EUheFGnukYHrPt+fwITAcsYNR8BJlqSTZh 6yPkfuwK6R7Sv/MGfiX2umDdQaVYJgpxei/rhrBmqaRvaQ6eD67APkxVgLwtGOnc 9w4BK6BYLOOnRRDRE2FKyfb1R65scw8ccHfSW29icRSpMhhLEbNNOTowuzYPgcfP KJlxjS1g3pCWSI/BeXjOM90qgQpnvwK7ZwDjf5OXt2kJe6sKjRw5ZYRAOxxNUibE hVHQ8p7sFNqAbdu8wuDd/mf3VYG2FYIBDaHVnRrHyCnoZQAlHQIDAQABo4IEATCC A/0wHQYDVR0OBBYEFCh+5aG+oWgC9oyB5EcR65Zm9pipMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i MmZkNDVjZS1mYmYzLTQyZDctOTg5ZC0wMTA2ZGRiZjY1N2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2IyZmQ0NWNlLWZiZjMtNDJkNy05 ODlkLTAxMDZkZGJmNjU3ZS9iMmZkNDVjZS1mYmYzLTQyZDctOTg5ZC0wMTA2ZGRi ZjY1N2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAggT8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCb/KkZHRrMSVATO89s HsxAVOONo/uxsSsypJtGBjfJW07m5NoNAiBoQQQqLybE9CDDqdq4mD3rYtETMNSK +d+XSIGyWOWH6qY9ng8Ro1Keu7/6dXO8ZfEvcZHqoRr1JYF3zyI3amC7YzOP9I22 jJBH4Z7iF3eEG9T2ASXWx3mpuRMoZtEgWZtjfAacxLGKW7HH1ePMQc6vFw6z9Um4 mb+d16OQk/r9ExaoLnDQrh5j7zUdjrVh6ifbkkxhKCi+KEJee1ozxPaij1xmHrx6 un13BOkcSkW5BVZReprTgDUhTX0nO6LXOgx1b3P6grI2wi/4RafI8ucV9ADeQzSS iV88 -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:50 2026 by rpki-client