$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6.cer File: bc2692a2-b3ea-41af-a460-31fa3c3e23b6.cer (raw, json) Hash identifier: qc+fzcwHwj6C924YZlYL0DVzUseM9G9nqVQBpFGKLns= Subject key identifier: CC:4D:B4:D3:EB:C4:67:4A:86:00:0B:AC:FD:16:89:29:BA:60:51:2D Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D420359E327AC232C05CF25C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6/bc2692a2-b3ea-41af-a460-31fa3c3e23b6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Mar 2026 23:31:41 +0000 Certificate not after: Sat 24 Jun 2028 23:31:41 +0000 Subordinate resources: AS: 33203 IP: 2602:f911::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:03:59:e3:27:ac:23:2c:05:cf:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 22 23:31:41 2026 GMT Not After : Jun 24 23:31:41 2028 GMT Subject: CN=bc2692a2-b3ea-41af-a460-31fa3c3e23b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:68:ad:13:e1:75:94:09:f3:84:f8:4c:54:77: 70:14:40:84:c3:b0:09:81:c2:c1:18:69:c3:96:d9: c9:9e:1f:ce:b2:d0:b7:e3:04:c4:9a:dc:6b:d2:22: ce:72:13:e0:34:e5:5f:87:ea:cb:57:13:9e:7c:e3: a2:19:65:cd:48:62:10:6a:b0:66:9a:27:cb:f6:15: cd:53:12:65:03:3b:0a:8f:bc:64:2e:56:ce:77:98: a3:41:e8:ae:81:b3:98:b2:78:76:78:8b:3e:41:66: f4:d1:7d:c9:30:15:d6:e0:c9:32:03:ed:da:8b:5f: be:bd:ac:8e:9c:d8:01:70:98:24:28:5f:a0:03:65: 59:39:81:a0:c4:af:5e:44:b9:70:fb:95:c4:a9:2e: a7:70:ea:1a:60:af:9b:7f:ce:b9:77:4d:3b:06:e0: 7e:4d:16:27:75:12:1b:d7:e5:1a:f0:ba:e3:0f:1c: c8:a3:b4:95:f1:90:c2:20:7e:d0:07:f5:2b:8a:1b: ca:a9:59:24:ca:12:e6:eb:27:96:61:79:cf:e9:30: 23:3a:0a:2e:ba:06:4b:08:1a:47:ce:57:18:89:32: d5:b4:cf:68:8a:f6:7c:29:d4:33:50:7d:1a:92:78: 84:1b:e9:0d:8b:49:a2:ef:14:ed:b4:e2:db:00:36: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4D:B4:D3:EB:C4:67:4A:86:00:0B:AC:FD:16:89:29:BA:60:51:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bc2692a2-b3ea-41af-a460-31fa3c3e23b6/bc2692a2-b3ea-41af-a460-31fa3c3e23b6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2602:f911::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33203 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:0b:21:b8:f0:0f:d8:12:26:4e:22:92:d7:63:01:8a:3c:3d: 68:f7:0a:93:23:7a:bd:af:3f:79:1f:48:a3:b0:4e:a1:32:fd: 7b:ed:8b:c3:9e:d0:d6:05:66:c7:8b:93:b3:95:47:0a:a5:4b: f2:f8:04:9b:e7:1b:38:2f:74:8e:46:a7:74:56:45:a9:ef:83: a2:ac:ca:ec:5e:58:5b:7a:48:6f:c1:24:86:8a:64:ef:57:e5: 66:18:3c:62:cb:fb:ed:51:88:72:23:55:64:e9:51:4d:e8:6a: 29:31:60:1a:38:34:70:f8:6b:b1:4e:09:bc:27:c2:de:80:bc: a2:d2:46:d2:2d:70:66:69:f2:be:a6:fd:f5:cb:8c:99:5d:83: 17:1e:11:03:18:c9:cc:b6:37:d4:4b:39:99:24:0a:d5:86:e2: b6:b8:61:01:54:09:1b:e2:98:af:43:a8:be:6f:55:90:30:36: c7:ae:9c:24:9b:38:fc:8a:33:60:03:75:69:46:a6:79:14:39: 2b:52:81:ba:58:ca:ff:a3:08:6f:4f:ab:07:7f:7b:7e:c0:43: f1:74:9c:b9:8c:4a:9d:eb:c5:19:e0:71:8f:14:72:ce:12:3d: d3:1b:77:4a:0e:64:4d:cb:1c:0f:38:c1:67:9a:57:16:b1:ed: 59:3b:3a:e1 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE1CA1njJ6wjLAXPJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyMjIzMzE0MVoXDTI4MDYyNDIzMzE0MVowLzEtMCsGA1UEAxMk YmMyNjkyYTItYjNlYS00MWFmLWE0NjAtMzFmYTNjM2UyM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWitE+F1lAnzhPhMVHdwFECEw7AJgcLBGGnD ltnJnh/OstC34wTEmtxr0iLOchPgNOVfh+rLVxOefOOiGWXNSGIQarBmmifL9hXN UxJlAzsKj7xkLlbOd5ijQeiugbOYsnh2eIs+QWb00X3JMBXW4MkyA+3ai1++vayO nNgBcJgkKF+gA2VZOYGgxK9eRLlw+5XEqS6ncOoaYK+bf865d007BuB+TRYndRIb 1+Ua8LrjDxzIo7SV8ZDCIH7QB/UrihvKqVkkyhLm6yeWYXnP6TAjOgouugZLCBpH zlcYiTLVtM9oivZ8KdQzUH0akniEG+kNi0mi7xTttOLbADZkHwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFMxNtNPrxGdKhgALrP0WiSm6YFEtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i YzI2OTJhMi1iM2VhLTQxYWYtYTQ2MC0zMWZhM2MzZTIzYjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2JjMjY5MmEyLWIzZWEtNDFhZi1h NDYwLTMxZmEzYzNlMjNiNi9iYzI2OTJhMi1iM2VhLTQxYWYtYTQ2MC0zMWZhM2Mz ZTIzYjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvkRADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAgbMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAhwshuPAP2BImTiKS12MBijw9aPcKkyN6va8/eR9Io7BO oTL9e+2Lw57Q1gVmx4uTs5VHCqVL8vgEm+cbOC90jkandFZFqe+DoqzK7F5YW3pI b8Ekhopk71flZhg8Ysv77VGIciNVZOlRTehqKTFgGjg0cPhrsU4JvCfC3oC8otJG 0i1wZmnyvqb99cuMmV2DFx4RAxjJzLY31Es5mSQK1YbitrhhAVQJG+KYr0Oovm9V kDA2x66cJJs4/IozYAN1aUameRQ5K1KBuljK/6MIb0+rB397fsBD8XScuYxKnevF GeBxjxRyzhI90xt3Sg5kTcscDzjBZ5pXFrHtWTs64Q== -----END CERTIFICATE-----Generated at Wed Mar 25 22:53:45 2026 by rpki-client