$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer File: 4021c43f-b78a-496f-a8cc-814abc11a7e9.cer (raw, json) Hash identifier: nczPM475k4NLQw8LRgXhBuWe9r6/TlyIVJv6FXJNbuM= Subject key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CD56507696E1FD5351C4FAF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Feb 2026 01:45:22 +0000 Certificate not after: Wed 17 May 2028 00:45:22 +0000 Subordinate resources: IP: 2610:20:6000::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d5:65:07:69:6e:1f:d5:35:1c:4f:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 12 01:45:22 2026 GMT Not After : May 17 00:45:22 2028 GMT Subject: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ff:b9:91:00:71:62:92:b4:56:89:70:7d:63: 8c:b9:db:fa:23:57:14:6e:cd:fa:ab:fb:cc:74:2d: d7:81:3f:36:5c:ad:de:1a:e5:59:39:3b:27:b9:9a: 7c:70:35:68:8c:b4:7e:64:1c:39:59:5e:c3:f6:d7: e2:2a:8f:17:72:e8:01:11:83:4d:92:83:be:45:aa: 3f:36:e3:13:9b:02:ce:e2:8f:32:de:8e:93:f7:a5: 1b:e5:69:77:13:ad:11:e3:dd:47:45:6a:e0:c2:13: fc:45:88:10:dc:16:a3:a0:60:b2:29:c7:39:ae:d4: 38:a4:fc:f6:ce:af:37:da:b0:f7:a2:1d:2a:5d:b8: e2:ef:d8:6a:12:18:83:d1:da:78:89:b0:1c:4c:a0: 6d:09:ee:36:12:8a:90:71:11:03:58:30:c7:cb:ef: 7d:41:b7:a5:8f:4f:80:27:87:bc:87:84:1e:ce:bc: 80:50:db:41:ca:c2:c4:43:f3:69:39:1d:c5:8d:10: 1f:da:0a:a7:73:55:c8:13:e6:b8:01:5f:f4:db:d4: 36:f0:81:49:4d:a3:ea:09:55:7c:1b:b8:78:9a:63: 5c:fd:b3:8d:0d:76:ec:5c:37:0c:8b:9c:a0:3a:44: 0c:6c:df:87:c0:4a:6e:1f:1a:be:0d:4d:a6:da:e0: a8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:6000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:90:82:6f:f2:fc:06:c3:55:05:04:6a:f2:8c:d6:b1:1d:5a: d1:80:34:84:b2:40:2c:e9:64:6d:7b:f7:73:28:db:21:04:a1: 73:6f:e6:08:58:ef:7b:c6:ad:7e:4d:41:17:1c:b4:4c:76:0f: c5:14:18:ad:bf:e9:cf:58:1a:eb:f3:cf:e3:0d:b9:60:f2:c3: ae:02:11:14:46:fa:20:11:d7:4b:25:b7:50:3c:63:db:59:c7: bc:ad:d0:53:44:9e:10:b9:d5:1f:40:ce:75:8c:4b:94:8c:01: 67:7b:3a:9a:89:6f:f5:bc:4c:a6:26:27:c9:0e:16:aa:99:65: 68:b7:dd:40:40:60:2f:28:34:c6:49:2b:78:dc:e7:7e:1c:29: 9c:23:4c:10:39:20:2e:f4:21:22:6e:1f:7a:ee:87:9e:0f:d1: 9f:08:87:bf:ce:a0:88:5e:4b:b8:01:49:9d:5a:c6:66:d0:1d: 64:64:32:ba:06:11:78:c8:c4:da:6f:a1:d6:85:6c:e8:49:95: 8f:0d:f0:2e:bc:21:5c:1c:38:2d:11:04:0c:28:6d:9a:a7:36: ff:87:e5:66:f0:e2:e1:9e:fb:f6:77:29:84:36:cb:c4:86:d6: 86:ac:a6:e1:44:32:7c:a5:e3:88:aa:38:5e:54:bc:fe:53:38: 5a:6c:e4:66 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEzVZQdpbh/VNRxPrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDIxMjAxNDUyMloXDTI4MDUxNzAwNDUyMlowLzEtMCsGA1UEAxMk NDAyMWM0M2YtYjc4YS00OTZmLWE4Y2MtODE0YWJjMTFhN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf+5kQBxYpK0VolwfWOMudv6I1cUbs36q/vM dC3XgT82XK3eGuVZOTsnuZp8cDVojLR+ZBw5WV7D9tfiKo8XcugBEYNNkoO+Rao/ NuMTmwLO4o8y3o6T96Ub5Wl3E60R491HRWrgwhP8RYgQ3BajoGCyKcc5rtQ4pPz2 zq832rD3oh0qXbji79hqEhiD0dp4ibAcTKBtCe42EoqQcREDWDDHy+99Qbelj0+A J4e8h4QezryAUNtBysLEQ/NpOR3FjRAf2gqnc1XIE+a4AV/029Q28IFJTaPqCVV8 G7h4mmNc/bONDXbsXDcMi5ygOkQMbN+HwEpuHxq+DU2m2uCoAQIDAQABo4IEATCC A/0wHQYDVR0OBBYEFBnNTFtsWzerNeUGAKPjF64vg1NcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80 MDIxYzQzZi1iNzhhLTQ5NmYtYThjYy04MTRhYmMxMWE3ZTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzQwMjFjNDNmLWI3OGEtNDk2Zi1h OGNjLTgxNGFiYzExYTdlOS80MDIxYzQzZi1iNzhhLTQ5NmYtYThjYy04MTRhYmMx MWE3ZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmEAAgYDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSkIJv8vwGw1UFBGry jNaxHVrRgDSEskAs6WRte/dzKNshBKFzb+YIWO97xq1+TUEXHLRMdg/FFBitv+nP WBrr88/jDblg8sOuAhEURvogEddLJbdQPGPbWce8rdBTRJ4QudUfQM51jEuUjAFn ezqaiW/1vEymJifJDhaqmWVot91AQGAvKDTGSSt43Od+HCmcI0wQOSAu9CEibh96 7oeeD9GfCIe/zqCIXku4AUmdWsZm0B1kZDK6BhF4yMTab6HWhWzoSZWPDfAuvCFc HDgtEQQMKG2apzb/h+Vm8OLhnvv2dymENsvEhtaGrKbhRDJ8peOIqjheVLz+Uzha bORm -----END CERTIFICATE-----Generated at Sun Mar 1 20:31:58 2026 by rpki-client