$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c927ed9b-d39e-4f5a-b455-9f4e2ba0f221.cer File: c927ed9b-d39e-4f5a-b455-9f4e2ba0f221.cer (raw, json) Hash identifier: EwEJYrf/gbV7BtbTvI+msFpOWhoR7TpJTyEJ9ihyoIc= Subject key identifier: 6A:4C:F4:D8:A1:F3:10:66:97:24:8D:3A:B8:34:10:09:10:1E:2E:B2 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C9EF4AE7DA30C42648DC4E680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c927ed9b-d39e-4f5a-b455-9f4e2ba0f221/c927ed9b-d39e-4f5a-b455-9f4e2ba0f221.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c927ed9b-d39e-4f5a-b455-9f4e2ba0f221/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 Jan 2026 13:45:21 +0000 Certificate not after: Thu 27 Apr 2028 12:45:21 +0000 Subordinate resources: AS: 27275 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:f4:ae:7d:a3:0c:42:64:8d:c4:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 23 13:45:21 2026 GMT Not After : Apr 27 12:45:21 2028 GMT Subject: CN=c927ed9b-d39e-4f5a-b455-9f4e2ba0f221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b9:54:67:e2:1a:af:15:78:90:f5:7c:04:ce: 88:cf:f8:bd:28:4a:b5:0e:db:a2:b9:74:73:b6:b9: 93:4a:81:02:8a:d3:d5:82:85:41:ca:ec:c1:49:50: e2:f7:df:49:93:3a:f1:4b:e3:ee:c7:82:11:5a:c9: 2c:bb:e5:06:4b:7c:db:01:eb:07:7c:b6:37:a3:20: 5e:02:af:36:06:fc:be:19:7e:61:26:c9:a9:57:dc: 65:9d:ee:57:12:ea:8b:1b:2e:31:c2:80:6f:32:3d: 32:f2:41:54:b2:e5:2f:ba:41:49:0e:31:4d:48:18: f6:dc:1d:f5:04:8b:b0:9e:47:18:9c:37:f1:31:9f: 30:ad:ca:e0:cb:9c:00:5a:0a:45:94:57:34:48:d4: 99:d1:15:4c:fd:ae:c7:17:66:44:f1:e2:28:1f:9a: 44:e6:90:af:1c:75:11:7c:1c:6f:dc:33:3a:01:a6: 1b:b1:95:f8:34:9d:bf:e0:3d:14:2d:38:7f:21:d2: 7b:6c:3d:d1:bd:4e:31:b1:b3:e2:2c:01:ca:fa:8b: eb:2a:66:d8:bb:65:bf:0b:15:b9:c5:9f:0c:94:8a: 3b:01:f2:d4:25:d9:1c:ee:16:61:32:06:52:03:da: b2:f9:4b:2d:ca:61:3e:d6:be:e9:0f:6e:c4:a7:99: 7e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4C:F4:D8:A1:F3:10:66:97:24:8D:3A:B8:34:10:09:10:1E:2E:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c927ed9b-d39e-4f5a-b455-9f4e2ba0f221/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c927ed9b-d39e-4f5a-b455-9f4e2ba0f221/c927ed9b-d39e-4f5a-b455-9f4e2ba0f221.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 27275 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:5c:d4:15:c3:cb:3e:04:5e:78:ca:40:77:03:1d:57:c1:0e: c8:72:2c:8a:c7:5f:3c:b8:e3:70:bb:72:84:35:c7:df:92:eb: 93:e7:0c:93:ce:ae:a4:78:3e:7f:f4:76:f6:d9:ac:5c:26:9f: 28:af:e4:42:9c:84:65:61:5a:27:19:2d:e9:8e:e2:12:cd:b4: 88:82:25:3f:e4:40:52:95:f3:62:27:9e:25:58:6f:a7:52:ea: cc:96:bd:24:8a:c7:04:ab:1b:9c:55:15:18:e0:22:08:44:30: fa:2f:c9:1c:b5:ee:6c:c6:89:64:fd:b0:36:93:39:29:be:71: 1d:9b:c4:55:f8:b8:92:40:1e:19:ec:3c:16:4a:a4:cf:f0:38: 2e:db:61:a0:f8:9e:82:52:f2:0c:9a:c2:be:50:e9:61:76:8c: 93:eb:e4:86:3b:30:3b:31:44:33:c7:c9:bf:df:e5:2e:d7:fb: ba:99:6b:24:39:5d:4f:41:ce:79:bb:2d:37:af:3a:f3:91:3e: 86:59:b8:58:08:e2:cc:5f:2e:5c:d1:b8:56:a6:30:5e:ca:a4: 3e:76:76:46:02:38:fa:22:ed:ce:82:af:4b:9b:c4:29:af:74: c5:f9:d7:f8:d7:cf:7d:31:ea:b4:29:8f:71:3f:6c:e8:40:f7: 51:85:66:25 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEye9K59owxCZI3E5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEyMzEzNDUyMVoXDTI4MDQyNzEyNDUyMVowLzEtMCsGA1UEAxMk YzkyN2VkOWItZDM5ZS00ZjVhLWI0NTUtOWY0ZTJiYTBmMjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7lUZ+IarxV4kPV8BM6Iz/i9KEq1DtuiuXRz trmTSoECitPVgoVByuzBSVDi999JkzrxS+Pux4IRWsksu+UGS3zbAesHfLY3oyBe Aq82Bvy+GX5hJsmpV9xlne5XEuqLGy4xwoBvMj0y8kFUsuUvukFJDjFNSBj23B31 BIuwnkcYnDfxMZ8wrcrgy5wAWgpFlFc0SNSZ0RVM/a7HF2ZE8eIoH5pE5pCvHHUR fBxv3DM6AaYbsZX4NJ2/4D0ULTh/IdJ7bD3RvU4xsbPiLAHK+ovrKmbYu2W/CxW5 xZ8MlIo7AfLUJdkc7hZhMgZSA9qy+UstymE+1r7pD27Ep5l+3wIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFGpM9Nih8xBmlySNOrg0EAkQHi6yMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j OTI3ZWQ5Yi1kMzllLTRmNWEtYjQ1NS05ZjRlMmJhMGYyMjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2M5MjdlZDliLWQzOWUtNGY1YS1i NDU1LTlmNGUyYmEwZjIyMS9jOTI3ZWQ5Yi1kMzllLTRmNWEtYjQ1NS05ZjRlMmJh MGYyMjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICaoswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaVzUFcPLPgReeMpAdwMdV8EOyHIs isdfPLjjcLtyhDXH35Lrk+cMk86upHg+f/R29tmsXCafKK/kQpyEZWFaJxkt6Y7i Es20iIIlP+RAUpXzYieeJVhvp1LqzJa9JIrHBKsbnFUVGOAiCEQw+i/JHLXubMaJ ZP2wNpM5Kb5xHZvEVfi4kkAeGew8Fkqkz/A4LtthoPieglLyDJrCvlDpYXaMk+vk hjswOzFEM8fJv9/lLtf7uplrJDldT0HOebstN68685E+hlm4WAjizF8uXNG4VqYw XsqkPnZ2RgI4+iLtzoKvS5vEKa90xfnX+NfPfTHqtCmPcT9s6ED3UYVmJQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:10:16 2026 by rpki-client