$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer File: 27a0a206-0e8b-48c1-9191-51dfb13bd365.cer (raw, json) Hash identifier: TaGxG4hAY1an1MyarVB47xmN3ol47U8h5TESFnpGymY= Subject key identifier: 5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DF63903E4E2B63D41CC30D280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 May 2026 12:45:18 +0000 Certificate not after: Mon 28 Aug 2028 12:45:18 +0000 Subordinate resources: IP: 167.251.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:39:03:e4:e2:b6:3d:41:cc:30:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 26 12:45:18 2026 GMT Not After : Aug 28 12:45:18 2028 GMT Subject: CN=27a0a206-0e8b-48c1-9191-51dfb13bd365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:ea:f7:9d:3c:45:19:10:f1:10:a1:4b:74: 8f:e1:2b:49:6d:a5:02:07:68:b9:87:6c:5f:9c:11: dc:d1:2f:61:c2:00:7f:41:54:56:17:01:42:68:ec: f2:1a:ed:9d:13:6d:52:0f:36:f6:ea:88:bf:cf:37: 40:98:47:bd:6a:c4:62:69:7c:f5:51:56:8f:8d:d7: f3:04:4f:70:59:63:7a:3c:b4:6b:d1:0a:17:ac:eb: 27:a6:32:09:7b:7b:9d:6f:e1:da:c5:61:6f:a1:2f: d5:34:e7:be:d2:17:7f:3a:98:fc:59:72:11:1d:e4: 87:a1:80:b9:e3:b7:04:b2:c2:46:2c:43:07:92:f7: 92:f7:10:58:c1:06:3c:57:10:ea:26:76:ad:b1:bf: ff:2c:ee:07:20:9c:e9:cb:f4:0e:a1:d4:53:00:10: 4a:9c:1d:ac:45:2f:0d:9f:bf:f3:14:4e:d3:ea:94: f0:45:80:5b:79:b3:e7:a9:9f:18:6e:c7:c9:26:aa: 95:80:9c:49:0d:95:46:e8:37:46:b3:8e:62:e7:2c: 97:81:e2:fc:3d:6c:57:c9:e3:ad:2a:a0:39:e2:62: 01:ab:d4:18:7e:77:98:b2:1c:79:c7:80:b1:ac:19: 41:f8:5d:dc:74:20:57:5c:3b:d3:8f:22:1e:53:bf: 6a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 167.251.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:eb:99:65:73:b8:b4:aa:01:bf:2b:37:9d:7b:42:db:09:b7: b5:3c:fd:c2:0e:5d:42:31:3b:40:dc:ec:a6:6c:59:10:ac:fe: 80:80:c2:4c:66:e7:32:b7:38:60:43:ef:d6:5a:27:6a:39:94: 23:3f:a1:fd:89:5e:97:5b:06:3f:3d:ae:e5:6e:a8:b3:ff:65: b4:02:70:f7:c4:a6:f0:85:3d:b5:90:95:50:86:73:fa:0c:ea: f0:0c:56:0d:05:b8:b2:48:33:6d:37:bf:7e:e4:18:41:17:ab: be:9a:3e:5a:61:4c:fd:73:01:31:46:1e:72:dd:27:44:e6:bc: c9:e5:2d:82:b9:59:30:42:27:08:98:17:2a:67:56:83:49:b1: 5f:1b:da:67:df:4e:95:66:ac:8b:45:72:bf:59:88:8f:bf:d7: a0:65:a2:bd:77:2e:dd:f3:b9:a0:8e:24:27:86:1b:90:4c:9f: 16:aa:cd:44:59:c8:36:2b:6a:73:9f:a7:c2:8c:95:00:dc:84: 3a:75:da:85:97:f9:b5:3f:99:a8:80:81:d0:c3:68:12:fe:20: 7d:ee:c6:24:d5:29:b2:58:c1:f5:6a:52:b7:b8:dd:67:08:a2: 9e:c6:17:e3:58:6c:bc:0a:91:21:fd:9c:23:78:1e:65:88:57: 1d:6f:fc:59 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE32OQPk4rY9Qcww0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUyNjEyNDUxOFoXDTI4MDgyODEyNDUxOFowLzEtMCsGA1UEAxMk MjdhMGEyMDYtMGU4Yi00OGMxLTkxOTEtNTFkZmIxM2JkMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyzq9508RRkQ8RChS3SP4StJbaUCB2i5h2xf nBHc0S9hwgB/QVRWFwFCaOzyGu2dE21SDzb26oi/zzdAmEe9asRiaXz1UVaPjdfz BE9wWWN6PLRr0QoXrOsnpjIJe3udb+HaxWFvoS/VNOe+0hd/Opj8WXIRHeSHoYC5 47cEssJGLEMHkveS9xBYwQY8VxDqJnatsb//LO4HIJzpy/QOodRTABBKnB2sRS8N n7/zFE7T6pTwRYBbebPnqZ8YbsfJJqqVgJxJDZVG6DdGs45i5yyXgeL8PWxXyeOt KqA54mIBq9QYfneYshx5x4CxrBlB+F3cdCBXXDvTjyIeU79qhwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFFqVjLMtTjEVZ2DbOWX7cOgRuTXEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y N2EwYTIwNi0wZThiLTQ4YzEtOTE5MS01MWRmYjEzYmQzNjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzI3YTBhMjA2LTBlOGItNDhjMS05 MTkxLTUxZGZiMTNiZDM2NS8yN2EwYTIwNi0wZThiLTQ4YzEtOTE5MS01MWRmYjEz YmQzNjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCn+zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAv65llc7i0qgG/Kzede0Lb Cbe1PP3CDl1CMTtA3OymbFkQrP6AgMJMZucytzhgQ+/WWidqOZQjP6H9iV6XWwY/ Pa7lbqiz/2W0AnD3xKbwhT21kJVQhnP6DOrwDFYNBbiySDNtN79+5BhBF6u+mj5a YUz9cwExRh5y3SdE5rzJ5S2CuVkwQicImBcqZ1aDSbFfG9pn306VZqyLRXK/WYiP v9egZaK9dy7d87mgjiQnhhuQTJ8Wqs1EWcg2K2pzn6fCjJUA3IQ6ddqFl/m1P5mo gIHQw2gS/iB97sYk1SmyWMH1alK3uN1nCKKexhfjWGy8CpEh/ZwjeB5liFcdb/xZ -----END CERTIFICATE-----Generated at Sat Jun 13 07:25:10 2026 by rpki-client