$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd.cer File: 43d1739b-8a68-4059-a0c2-32d1528366cd.cer (raw, json) Hash identifier: jRYXSiMj1+LWZjJSnR0lp3MijO3sT2JF2AbgvPoZrQ4= Subject key identifier: A7:4C:92:BE:DA:69:24:93:C5:88:47:49:88:B0:1A:0F:20:AF:E9:53 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CEBF0450364B11239778BE400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd/43d1739b-8a68-4059-a0c2-32d1528366cd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Feb 2026 03:33:43 +0000 Certificate not after: Thu 25 May 2028 02:33:43 +0000 Subordinate resources: AS: 395765 IP: 2602:f452::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:f0:45:03:64:b1:12:39:77:8b:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 20 03:33:43 2026 GMT Not After : May 25 02:33:43 2028 GMT Subject: CN=43d1739b-8a68-4059-a0c2-32d1528366cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ec:a2:94:ae:b3:53:8d:14:9d:84:d1:5f:b4: 07:3a:04:43:52:80:d0:bb:df:26:cb:c7:d2:f7:e3: 26:f9:23:4b:6d:04:9c:bf:e6:a1:be:1f:6a:8e:3b: 84:97:bd:7e:37:1a:bd:7c:50:48:43:9b:af:1c:83: 5b:d4:ff:c4:3b:79:ec:6a:38:51:d3:45:79:2d:69: 13:15:70:53:22:9e:81:36:8d:04:01:4e:18:a9:ee: 3f:1b:e9:54:8b:40:0e:6d:49:b4:29:a1:b6:28:e5: f3:62:3e:03:35:57:bb:10:99:37:61:56:48:cc:14: 2c:71:4b:9d:63:b4:83:70:b2:9e:2e:66:63:65:73: 4e:1f:13:13:0d:3b:1d:f0:e6:fc:aa:8d:50:1b:66: 1e:9b:f3:c1:b3:eb:f2:de:21:cd:42:16:5a:a1:c8: 76:ac:94:6c:7d:3b:29:e3:da:a4:ce:75:63:d3:3c: a5:d5:38:74:e9:d6:5b:49:c8:86:08:0e:74:bd:a2: 68:69:09:a6:ba:8b:a4:c8:48:21:85:4a:9e:79:b3: 09:a6:16:ec:df:90:fe:ff:2f:63:98:8b:72:d0:35: 98:e8:61:52:a4:fa:68:10:6e:0e:ce:d4:51:bc:84: 19:7e:3d:c4:34:89:5f:71:30:4d:1b:12:df:c3:e4: ba:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4C:92:BE:DA:69:24:93:C5:88:47:49:88:B0:1A:0F:20:AF:E9:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/43d1739b-8a68-4059-a0c2-32d1528366cd/43d1739b-8a68-4059-a0c2-32d1528366cd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2602:f452::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395765 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:56:99:40:62:4e:74:4a:46:31:db:75:6f:00:f2:e2:5a:04: c3:96:10:a8:dd:78:04:98:16:07:4b:e1:dd:53:5f:6b:66:42: e4:2e:66:4b:d4:5f:ca:0c:8e:64:8e:4c:08:b4:c7:cc:34:e4: c4:c8:a9:3c:d3:ed:96:77:b8:1a:9b:83:ae:cc:7e:e2:95:47: dc:59:e3:ec:04:98:05:84:65:aa:40:45:c6:cf:97:be:91:c4: 0b:c2:85:d2:15:b1:3a:7e:8e:9c:37:48:0e:d0:07:66:87:42: c5:01:76:ac:b0:a4:73:ff:8e:3e:82:6d:be:29:fd:b9:47:34: 53:c7:d4:6f:75:ab:20:12:97:ad:e3:0d:c7:25:bb:d2:d8:5b: d8:13:dd:72:46:04:38:5e:f0:d0:51:9d:52:99:81:4c:4d:f7: 63:11:05:0a:2d:92:92:6b:59:8b:b2:21:27:4b:be:d5:6b:f7: 9a:43:16:cc:39:50:4b:8f:65:32:ca:41:e3:31:0f:ac:c2:83: 3e:e4:7d:35:51:2a:f1:fc:fe:22:7f:89:b3:ba:a7:51:d0:85: e5:38:6f:0f:47:fc:51:fc:4c:22:6f:4c:ec:5d:3e:68:09:d7: d1:a7:07:49:60:06:60:f8:bb:1c:70:5c:37:bb:af:e7:37:25: 0d:29:07:4e -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEzr8EUDZLESOXeL5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyMDAzMzM0M1oXDTI4MDUyNTAyMzM0M1owLzEtMCsGA1UEAxMk NDNkMTczOWItOGE2OC00MDU5LWEwYzItMzJkMTUyODM2NmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OyilK6zU40UnYTRX7QHOgRDUoDQu98my8fS 9+Mm+SNLbQScv+ahvh9qjjuEl71+Nxq9fFBIQ5uvHINb1P/EO3nsajhR00V5LWkT FXBTIp6BNo0EAU4Yqe4/G+lUi0AObUm0KaG2KOXzYj4DNVe7EJk3YVZIzBQscUud Y7SDcLKeLmZjZXNOHxMTDTsd8Ob8qo1QG2Yem/PBs+vy3iHNQhZaoch2rJRsfTsp 49qkznVj0zyl1Th06dZbSciGCA50vaJoaQmmuoukyEghhUqeebMJphbs35D+/y9j mIty0DWY6GFSpPpoEG4OztRRvIQZfj3ENIlfcTBNGxLfw+S6owIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFKdMkr7aaSSTxYhHSYiwGg8gr+lTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80 M2QxNzM5Yi04YTY4LTQwNTktYTBjMi0zMmQxNTI4MzY2Y2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzQzZDE3MzliLThhNjgtNDA1OS1h MGMyLTMyZDE1MjgzNjZjZC80M2QxNzM5Yi04YTY4LTQwNTktYTBjMi0zMmQxNTI4 MzY2Y2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvRSADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGCfUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAJ1aZQGJOdEpGMdt1bwDy4loEw5YQqN14BJgWB0vh3VNf a2ZC5C5mS9RfygyOZI5MCLTHzDTkxMipPNPtlne4GpuDrsx+4pVH3Fnj7ASYBYRl qkBFxs+XvpHEC8KF0hWxOn6OnDdIDtAHZodCxQF2rLCkc/+OPoJtvin9uUc0U8fU b3WrIBKXreMNxyW70thb2BPdckYEOF7w0FGdUpmBTE33YxEFCi2SkmtZi7IhJ0u+ 1Wv3mkMWzDlQS49lMspB4zEPrMKDPuR9NVEq8fz+In+Js7qnUdCF5ThvD0f8UfxM Im9M7F0+aAnX0acHSWAGYPi7HHBcN7uv5zclDSkHTg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:06:35 2026 by rpki-client