$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer File: dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer (raw, json) Hash identifier: NqveHf8z2zQK+HDD4Ap9siBAWJ2UAS97sFEm+sibqiY= Subject key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584CDC5FBB34D8C0F499AD267C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 14 Feb 2026 13:45:22 +0000 Certificate not after: Fri 19 May 2028 12:45:22 +0000 Subordinate resources: AS: 46832 IP: 2610:e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:5f:bb:34:d8:c0:f4:99:ad:26:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 14 13:45:22 2026 GMT Not After : May 19 12:45:22 2028 GMT Subject: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:b7:56:ce:0f:dc:80:8b:16:a7:2f:28:37: 8c:d0:1a:ad:ea:1a:71:3f:e4:43:2a:85:e5:94:17: 27:3e:ec:ba:9d:10:62:d9:db:0c:e2:1e:5e:6e:16: a8:d3:35:e7:f3:9e:33:83:61:87:66:85:07:a5:25: ec:24:b3:55:92:20:68:42:2c:8a:7c:ba:31:08:9b: b5:27:68:3f:58:31:92:d1:d3:1e:37:ab:e4:9f:ea: ea:84:e4:ab:ca:1b:f4:9f:0b:8c:68:6c:c4:13:ee: a2:5e:11:56:b0:be:52:9f:6f:0c:98:e8:b9:c6:af: 96:5f:25:e8:4f:27:dd:d8:84:24:52:3c:d3:44:86: 4d:25:6c:da:22:cf:f5:cb:92:a9:bd:69:c7:55:c8: 5b:b7:94:09:9a:c4:0f:38:67:69:7c:11:7a:2a:52: 59:ec:a1:2c:f2:f7:32:0e:9b:af:b5:67:f9:a4:2b: 53:3c:98:0f:d9:a8:43:98:1e:c1:fb:ca:cf:d8:c8: 92:eb:9c:f7:f4:c5:2f:5c:4d:7e:c4:e6:6f:e8:8e: 0f:8e:9d:05:1d:87:8c:ca:ad:47:dc:2b:c6:08:d0: 88:5f:d5:49:d7:73:ec:a6:5d:85:7d:d2:ac:04:03: 80:88:df:d6:ad:2e:2b:b9:35:c0:5f:37:2b:c3:a3: a9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv6: 2610:e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46832 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a4:42:d2:4b:7f:f7:10:ab:15:aa:aa:8d:2e:84:b5:9a:e1: 0f:48:6e:fd:f3:21:df:87:bf:3b:8f:19:99:ca:8d:7d:55:9e: 40:43:75:a1:c0:16:b1:07:d7:1a:40:cf:9a:e8:b9:dc:7f:10: e4:ef:ac:b5:dc:97:19:fe:9c:f9:2b:2d:20:1d:1d:1a:f5:15: 07:96:83:c2:d0:c9:cf:3e:06:ed:19:ee:30:c6:9a:a0:d9:f4: b8:c6:a3:72:df:17:7a:f5:10:e4:58:7d:ed:d6:0b:df:15:56: 61:03:0c:8a:42:28:bd:f4:34:e8:dc:24:3f:84:40:05:28:65: 42:2d:54:66:55:d3:7f:54:bc:17:8a:81:53:f6:54:dc:a0:c6: 40:4a:17:f5:f0:57:a5:7c:52:8e:61:20:ad:1b:a6:07:96:bf: 01:f2:c6:f8:e6:d1:b1:58:df:20:2b:91:7c:c1:d5:cf:23:5a: f1:45:7b:18:68:dd:14:87:13:dd:cd:7b:f3:fc:b3:df:df:2d: 8a:9c:c8:c6:be:6f:52:cd:98:95:b2:90:80:25:0e:c2:4a:65: 08:eb:fa:d5:49:e7:e7:d0:56:5c:c8:e5:c0:2c:cb:ad:c1:62: ba:ac:5b:e1:e3:4d:49:40:7d:e8:fa:d1:57:b6:1a:4f:69:21: c6:6d:ea:9a -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEzcX7s02MD0ma0mfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDIxNDEzNDUyMloXDTI4MDUxOTEyNDUyMlowLzEtMCsGA1UEAxMk ZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVjN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH23Vs4P3ICLFqcvKDeM0Bqt6hpxP+RDKoXl lBcnPuy6nRBi2dsM4h5ebhao0zXn854zg2GHZoUHpSXsJLNVkiBoQiyKfLoxCJu1 J2g/WDGS0dMeN6vkn+rqhOSryhv0nwuMaGzEE+6iXhFWsL5Sn28MmOi5xq+WXyXo Tyfd2IQkUjzTRIZNJWzaIs/1y5KpvWnHVchbt5QJmsQPOGdpfBF6KlJZ7KEs8vcy DpuvtWf5pCtTPJgP2ahDmB7B+8rP2MiS65z39MUvXE1+xOZv6I4Pjp0FHYeMyq1H 3CvGCNCIX9VJ13Pspl2FfdKsBAOAiN/WrS4ruTXAXzcrw6Op2QIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFNQIFEpathrvAGKJSELBZvAE0868MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k ZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2RkNjhjYjhiLTBkOTEtNGEwZS05 ZjA0LWEzYzc4ZTU1YzdiZS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1 NWM3YmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmEADgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC28DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB5pELSS3/3EKsVqqqNLoS1muEPSG798yHfh787jxmZyo19 VZ5AQ3WhwBaxB9caQM+a6LncfxDk76y13JcZ/pz5Ky0gHR0a9RUHloPC0MnPPgbt Ge4wxpqg2fS4xqNy3xd69RDkWH3t1gvfFVZhAwyKQii99DTo3CQ/hEAFKGVCLVRm VdN/VLwXioFT9lTcoMZAShf18FelfFKOYSCtG6YHlr8B8sb45tGxWN8gK5F8wdXP I1rxRXsYaN0UhxPdzXvz/LPf3y2KnMjGvm9SzZiVspCAJQ7CSmUI6/rVSefn0FZc yOXALMutwWK6rFvh401JQH3o+tFXthpPaSHGbeqa -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:21 2026 by rpki-client