$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ec1d339e-c7f3-4f30-bbe9-1a891749234c.cer File: ec1d339e-c7f3-4f30-bbe9-1a891749234c.cer (raw, json) Hash identifier: Lwh8o5SV2JiVfqJDAevlSX8GSJG9/o0mAuUvOI//N5A= Subject key identifier: 40:A0:6E:E0:EC:83:04:38:7D:36:49:42:9B:DE:ED:50:EC:C5:E5:BE Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CFB84EBCF2A56B9E6C76370C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ec1d339e-c7f3-4f30-bbe9-1a891749234c/ec1d339e-c7f3-4f30-bbe9-1a891749234c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ec1d339e-c7f3-4f30-bbe9-1a891749234c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Feb 2026 17:30:21 +0000 Certificate not after: Tue 30 May 2028 16:30:21 +0000 Subordinate resources: AS: 394801 IP: 2604:2100::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:84:eb:cf:2a:56:b9:e6:c7:63:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 25 17:30:21 2026 GMT Not After : May 30 16:30:21 2028 GMT Subject: CN=ec1d339e-c7f3-4f30-bbe9-1a891749234c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:a4:f2:3f:12:52:73:59:55:17:7e:34:4d: 39:66:d0:83:0a:43:aa:a3:d4:10:13:32:7e:bc:f2: 58:d7:9d:fd:06:32:6b:1b:a5:e3:77:48:f4:49:82: 89:0e:c1:3d:c8:b2:5c:60:69:93:11:88:d6:11:dc: 82:62:2d:87:95:23:31:08:a6:3b:b4:d3:f9:92:81: 69:1d:50:22:81:e3:c9:26:67:ec:27:03:07:e6:5c: 18:dd:99:c6:f1:ac:82:14:ca:72:e4:06:82:cc:e5: 4d:22:5b:cd:fb:3f:00:e2:9f:61:64:29:54:2b:e7: 90:5d:8b:1b:b2:79:2a:c2:b7:dd:86:fe:c2:c8:27: 51:ee:73:a7:a1:ef:b1:a7:46:dc:a8:6a:bf:ed:aa: 7d:9e:a7:31:d7:de:76:5d:9c:ea:1f:26:63:e3:c0: 9a:23:9c:89:3a:3d:ee:4c:f2:65:34:95:05:58:16: 3e:c3:64:3b:c3:dd:ef:bb:90:08:b0:e0:4c:25:3a: ac:95:07:25:e4:d8:f5:ab:05:7f:f9:f0:7d:95:d7: 2a:9a:07:3f:e8:c0:3a:86:2e:ca:f3:20:24:e9:93: 54:2b:7e:62:39:ae:55:65:17:cb:83:c8:56:94:a4: b9:08:67:62:0c:48:18:6c:06:a6:31:3c:ad:d2:9f: a8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A0:6E:E0:EC:83:04:38:7D:36:49:42:9B:DE:ED:50:EC:C5:E5:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ec1d339e-c7f3-4f30-bbe9-1a891749234c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ec1d339e-c7f3-4f30-bbe9-1a891749234c/ec1d339e-c7f3-4f30-bbe9-1a891749234c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv6: 2604:2100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394801 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:41:67:99:09:65:99:4c:3b:15:c8:0c:3a:f1:43:a5:e6:90: 78:9e:fb:0d:01:39:9b:db:44:78:5d:c0:b1:85:1f:e7:b7:b1: 48:39:b4:5d:71:8a:82:70:ac:13:a9:e3:bd:3f:c9:6c:6c:6f: a2:53:ca:f8:e6:0b:6a:f2:cf:00:c8:1a:18:57:28:54:23:0a: 99:05:95:37:e6:12:57:9e:d5:a4:b3:ab:7d:61:7e:59:7e:70: 2c:02:7a:90:a2:73:b3:d6:e8:f2:16:cb:cb:3c:a1:7c:a3:4e: ff:91:a0:73:7c:42:be:b8:79:b3:1d:2c:90:d6:e5:90:56:08: 7f:d0:66:a4:c7:b3:1e:d4:e3:a3:81:83:2e:c4:e8:01:6c:46: af:f7:2c:d8:87:7f:e7:5d:c4:de:06:ad:32:77:25:0b:95:28: f2:c0:15:ea:f8:5f:66:51:77:7d:2e:06:15:7a:dc:c9:0a:62: 7e:c3:50:79:65:29:3f:88:c3:86:ab:94:f6:60:3f:25:5e:4b: 49:84:b3:8d:88:e6:13:44:63:71:81:59:1a:be:68:d5:2f:b6: 03:72:af:23:d1:71:69:ec:c2:2e:66:93:44:fb:61:3d:09:16: 26:a2:00:e2:64:5a:9c:cb:2c:67:9e:ba:1c:31:7f:4e:4e:cf: 5e:7d:35:ba -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEz7hOvPKla55sdjcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyNTE3MzAyMVoXDTI4MDUzMDE2MzAyMVowLzEtMCsGA1UEAxMk ZWMxZDMzOWUtYzdmMy00ZjMwLWJiZTktMWE4OTE3NDkyMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBqk8j8SUnNZVRd+NE05ZtCDCkOqo9QQEzJ+ vPJY1539BjJrG6Xjd0j0SYKJDsE9yLJcYGmTEYjWEdyCYi2HlSMxCKY7tNP5koFp HVAigePJJmfsJwMH5lwY3ZnG8ayCFMpy5AaCzOVNIlvN+z8A4p9hZClUK+eQXYsb snkqwrfdhv7CyCdR7nOnoe+xp0bcqGq/7ap9nqcx1952XZzqHyZj48CaI5yJOj3u TPJlNJUFWBY+w2Q7w93vu5AIsOBMJTqslQcl5Nj1qwV/+fB9ldcqmgc/6MA6hi7K 8yAk6ZNUK35iOa5VZRfLg8hWlKS5CGdiDEgYbAamMTyt0p+oiQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFECgbuDsgwQ4fTZJQpve7VDsxeW+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9l YzFkMzM5ZS1jN2YzLTRmMzAtYmJlOS0xYTg5MTc0OTIzNGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2VjMWQzMzllLWM3ZjMtNGYzMC1i YmU5LTFhODkxNzQ5MjM0Yy9lYzFkMzM5ZS1jN2YzLTRmMzAtYmJlOS0xYTg5MTc0 OTIzNGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBCEAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYGMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAhQWeZCWWZTDsVyAw68UOl5pB4nvsNATmb20R4XcCxhR/n t7FIObRdcYqCcKwTqeO9P8lsbG+iU8r45gtq8s8AyBoYVyhUIwqZBZU35hJXntWk s6t9YX5ZfnAsAnqQonOz1ujyFsvLPKF8o07/kaBzfEK+uHmzHSyQ1uWQVgh/0Gak x7Me1OOjgYMuxOgBbEav9yzYh3/nXcTeBq0ydyULlSjywBXq+F9mUXd9LgYVetzJ CmJ+w1B5ZSk/iMOGq5T2YD8lXktJhLONiOYTRGNxgVkavmjVL7YDcq8j0XFp7MIu ZpNE+2E9CRYmogDiZFqcyyxnnrocMX9OTs9efTW6 -----END CERTIFICATE-----Generated at Mon Mar 2 01:28:23 2026 by rpki-client