$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5d37ee7a-d0ad-4cc2-b30b-e8e79d1fe4c6.cer File: 5d37ee7a-d0ad-4cc2-b30b-e8e79d1fe4c6.cer (raw, json) Hash identifier: efIYYlsw9RNl3ZFvnGYg26e6U3FHA0xwXc0urKoUDBQ= Subject key identifier: 5D:1D:6B:2F:38:41:B0:B1:3C:F6:8F:09:7B:E2:F5:70:62:A3:CE:67 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CD2CA938ED28E0F887C01C212 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5d37ee7a-d0ad-4cc2-b30b-e8e79d1fe4c6/5d37ee7a-d0ad-4cc2-b30b-e8e79d1fe4c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5d37ee7a-d0ad-4cc2-b30b-e8e79d1fe4c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Feb 2026 03:22:33 +0000 Certificate not after: Tue 16 May 2028 02:22:33 +0000 Subordinate resources: IP: 2602:fc3b:f000::/36 IP: 2620:10:6000::/48 IP: 2620:63:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d2:ca:93:8e:d2:8e:0f:88:7c:01:c2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 11 03:22:33 2026 GMT Not After : May 16 02:22:33 2028 GMT Subject: CN=5d37ee7a-d0ad-4cc2-b30b-e8e79d1fe4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7b:54:67:45:fc:d1:af:c7:22:15:80:00:96: 43:f1:93:b7:41:2a:6d:9b:e6:95:89:ed:17:8c:1b: 9f:d0:e6:f5:df:e1:4a:a6:9c:ef:dc:79:f1:fa:70: 99:43:df:23:71:0a:ea:c2:59:a0:eb:eb:f8:39:40: f6:8a:2c:4c:50:6d:ee:c0:38:ed:7a:00:d6:e0:df: a9:17:58:2d:5f:be:de:09:87:ba:55:b0:39:fd:50: 70:1e:41:03:ed:2e:74:4f:f8:c6:c8:0f:58:f0:1c: 36:f3:d5:42:16:0b:21:1d:a1:93:af:b3:8c:b6:ab: ff:a2:fc:95:d9:ce:8b:3d:59:c9:03:db:80:53:b4: db:07:41:33:4f:6f:89:07:96:58:2e:27:d7:73:e8: 57:cc:16:5d:0b:71:17:96:29:ac:4c:c9:a5:1c:f5: 63:cc:8f:d1:e4:3d:8c:d4:6d:87:aa:f6:28:5d:aa: 19:02:15:16:68:de:ed:87:61:50:02:9c:d8:0d:78: 13:69:8c:b9:de:7c:da:8d:3d:c3:3e:b6:10:b2:7f: 11:52:ab:e8:af:b1:46:a2:96:24:fb:83:fb:84:b8: d1:c3:ad:4c:5f:25:f6:f1:f9:fa:b6:ff:1c:f1:f3: 83:92:b6:02:a0:1c:f5:55:9f:cc:26:46:e1:ae:3b: f4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1D:6B:2F:38:41:B0:B1:3C:F6:8F:09:7B:E2:F5:70:62:A3:CE:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5d37ee7a-d0ad-4cc2-b30b-e8e79d1fe4c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5d37ee7a-d0ad-4cc2-b30b-e8e79d1fe4c6/5d37ee7a-d0ad-4cc2-b30b-e8e79d1fe4c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:f000::/36 2620:10:6000::/48 2620:63:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:44:6e:54:54:fb:ae:57:ee:84:69:46:1c:32:41:4f:2e:68: e0:ff:df:b6:a8:62:8b:67:22:03:a6:55:2e:a4:4a:c4:a4:1c: 78:72:a1:35:81:97:00:59:8c:59:8f:78:2e:ca:85:4f:85:c0: 33:ba:50:c3:bd:30:5a:a1:47:98:c2:48:a7:e0:99:24:b9:84: ca:33:69:1b:2f:d9:9a:64:59:9f:21:bc:00:16:0f:e2:11:c5: 1e:f5:e4:09:09:a7:70:58:97:f0:a1:22:aa:cb:b0:f0:92:95: f0:c3:2a:30:dd:d0:89:1c:87:2d:de:56:e1:a8:d3:e6:cb:5f: 4b:3d:db:72:f1:1b:38:46:eb:93:5c:8f:0a:d5:b5:f0:4c:d2: ba:05:0e:ed:59:7e:b4:a7:26:83:92:86:97:1b:9a:4d:24:9d: d8:e1:73:12:4c:86:c8:84:54:69:75:bb:d5:05:bd:18:06:c0: 18:d0:d6:3e:51:85:7a:38:cb:f9:be:00:e9:b7:e3:8c:65:49: c7:9d:fb:e2:de:32:64:69:9b:fe:0f:6f:95:7a:3c:8f:dc:07: 38:a0:85:d1:ef:1f:4d:7c:5b:d0:fd:e9:9f:d6:74:7d:93:03: de:95:01:7e:42:5d:d3:04:37:46:79:e3:34:ce:97:78:30:45: 77:22:09:52 -----BEGIN CERTIFICATE----- MIIHATCCBemgAwIBAgIUAQ0Mn0MoWEzSypOO0o4PiHwBwhIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxMTAzMjIzM1oXDTI4MDUxNjAyMjIzM1owLzEtMCsGA1UEAxMk NWQzN2VlN2EtZDBhZC00Y2MyLWIzMGItZThlNzlkMWZlNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXtUZ0X80a/HIhWAAJZD8ZO3QSptm+aVie0X jBuf0Ob13+FKppzv3Hnx+nCZQ98jcQrqwlmg6+v4OUD2iixMUG3uwDjtegDW4N+p F1gtX77eCYe6VbA5/VBwHkED7S50T/jGyA9Y8Bw289VCFgshHaGTr7OMtqv/ovyV 2c6LPVnJA9uAU7TbB0EzT2+JB5ZYLifXc+hXzBZdC3EXlimsTMmlHPVjzI/R5D2M 1G2HqvYoXaoZAhUWaN7th2FQApzYDXgTaYy53nzajT3DPrYQsn8RUqvor7FGopYk +4P7hLjRw61MXyX28fn6tv8c8fODkrYCoBz1VZ/MJkbhrjv0MQIDAQABo4IEEzCC BA8wHQYDVR0OBBYEFF0day84QbCxPPaPCXvi9XBio85nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81 ZDM3ZWU3YS1kMGFkLTRjYzItYjMwYi1lOGU3OWQxZmU0YzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzVkMzdlZTdhLWQwYWQtNGNjMi1i MzBiLWU4ZTc5ZDFmZTRjNi81ZDM3ZWU3YS1kMGFkLTRjYzItYjMwYi1lOGU3OWQx ZmU0YzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgACMBoDBgQmAvw78AMHACYgABBgAAMHACYgAGOgADBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBoRG5UVPuuV+6EaUYcMkFPLmjg/9+2qGKLZyIDplUupErEpBx4cqE1gZcA WYxZj3guyoVPhcAzulDDvTBaoUeYwkin4JkkuYTKM2kbL9maZFmfIbwAFg/iEcUe 9eQJCadwWJfwoSKqy7DwkpXwwyow3dCJHIct3lbhqNPmy19LPdty8Rs4RuuTXI8K 1bXwTNK6BQ7tWX60pyaDkoaXG5pNJJ3Y4XMSTIbIhFRpdbvVBb0YBsAY0NY+UYV6 OMv5vgDpt+OMZUnHnfvi3jJkaZv+D2+VejyP3Ac4oIXR7x9NfFvQ/emf1nR9kwPe lQF+Ql3TBDdGeeM0zpd4MEV3IglS -----END CERTIFICATE-----Generated at Sun Mar 1 16:21:26 2026 by rpki-client