$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cf15bb41-68e3-430c-b1b4-02beb080bdb9.cer File: cf15bb41-68e3-430c-b1b4-02beb080bdb9.cer (raw, json) Hash identifier: ZMi/4lz/Fxz5GI3udUFW8L3yfjATDx9eFU2Ep1GJgN8= Subject key identifier: 30:6A:A8:F2:D2:40:28:1A:10:A0:7B:7D:40:2B:AB:35:B9:95:17:B9 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584E0C9ED7CE5A10C36057DCD100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cf15bb41-68e3-430c-b1b4-02beb080bdb9/cf15bb41-68e3-430c-b1b4-02beb080bdb9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cf15bb41-68e3-430c-b1b4-02beb080bdb9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Jun 2026 13:18:16 +0000 Certificate not after: Sun 11 Jun 2028 15:22:41 +0000 Subordinate resources: AS: 27283 IP: 170.12.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:9e:d7:ce:5a:10:c3:60:57:dc:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jun 3 13:18:16 2026 GMT Not After : Jun 11 15:22:41 2028 GMT Subject: CN=cf15bb41-68e3-430c-b1b4-02beb080bdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:81:bf:41:1b:e4:7d:ce:74:de:70:bb:0c:e0: b9:ce:73:18:05:d0:3d:40:2b:7f:cc:3e:e1:a1:e7: cd:9f:c6:7b:74:f8:dd:d6:9d:af:d1:d1:ec:68:d7: d8:e5:ee:30:c6:fe:33:fa:2c:36:d0:bb:d1:56:a2: ba:e3:8d:9a:d2:60:15:1a:3a:99:29:0e:e5:a5:37: f8:f9:eb:b2:ef:b9:64:16:72:01:11:f5:a1:04:a7: 27:48:c7:63:dc:29:dd:f4:6c:23:68:25:fd:0a:ea: 8c:8f:f3:47:33:4b:87:63:e8:90:d3:8e:f7:e0:ba: af:53:6a:9d:da:01:b1:43:96:13:25:6b:25:bb:ca: 91:6f:34:a4:28:70:b6:55:b2:ce:29:15:e4:88:fb: d3:1b:8c:e0:c8:7e:c4:65:20:ee:fd:7a:14:02:87: d8:da:ae:01:aa:77:3c:e4:19:c6:b3:73:d1:f8:5e: 9e:2e:92:10:73:ea:34:35:70:92:be:fe:0b:a4:b3: a2:3c:19:7d:b6:11:5f:00:83:af:8d:84:e3:9d:97: 42:1e:2c:ba:76:2b:b3:ea:d3:bf:2d:97:91:87:3c: ba:ed:65:85:f4:ec:0f:3f:13:ae:ba:ec:71:73:9c: 87:5c:3f:4a:d2:6e:ed:49:3a:9f:dc:56:81:ae:11: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6A:A8:F2:D2:40:28:1A:10:A0:7B:7D:40:2B:AB:35:B9:95:17:B9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cf15bb41-68e3-430c-b1b4-02beb080bdb9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cf15bb41-68e3-430c-b1b4-02beb080bdb9/cf15bb41-68e3-430c-b1b4-02beb080bdb9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 170.12.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27283 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:08:f9:5d:11:89:a1:fa:23:5c:bc:f4:34:b5:fc:8a:b0:e4: 02:7b:de:ce:a3:8e:35:5b:b7:82:f0:fb:6e:86:e0:49:7f:42: a9:d4:1a:df:89:0f:a1:14:b5:f4:d7:fa:81:2c:1e:31:10:c2: fe:19:72:41:58:4f:de:99:d0:a5:90:6a:d4:ef:4f:8d:05:f5: 59:41:2e:e3:8b:b8:5f:fc:06:04:83:7f:db:c7:12:83:66:3b: 89:71:af:78:2a:64:2a:06:b6:6e:e2:8d:ee:1b:cc:c6:2b:86: f6:cf:c8:9a:d7:5e:79:2e:62:e1:38:db:c7:42:fe:ab:f8:15: 59:cd:2a:ba:55:d1:0a:ba:8a:0c:ff:0c:a4:bd:9d:b6:78:8b: 18:94:bf:74:f7:38:1f:7c:bd:fb:4f:36:c9:71:5e:96:19:c3: 1d:18:c2:b9:f5:6b:91:15:4b:11:90:8f:25:8e:45:95:b1:cb: e4:7b:b6:79:4b:37:c7:8a:0e:e2:88:fe:a7:62:b8:5b:b4:fe: 64:bc:b6:52:18:cd:96:c2:12:0a:02:51:87:d0:b6:50:91:53: f2:63:e9:3e:50:e4:48:7d:55:bc:9b:ed:74:4c:f7:34:d9:b7: 4c:ee:ab:19:9d:7e:a2:33:09:ff:33:f9:32:ba:1f:6c:9c:bb: cb:67:b8:36 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWE4MntfOWhDDYFfc0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDYwMzEzMTgxNloXDTI4MDYxMTE1MjI0MVowLzEtMCsGA1UEAxMk Y2YxNWJiNDEtNjhlMy00MzBjLWIxYjQtMDJiZWIwODBiZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4G/QRvkfc503nC7DOC5znMYBdA9QCt/zD7h oefNn8Z7dPjd1p2v0dHsaNfY5e4wxv4z+iw20LvRVqK6442a0mAVGjqZKQ7lpTf4 +euy77lkFnIBEfWhBKcnSMdj3Cnd9GwjaCX9CuqMj/NHM0uHY+iQ04734LqvU2qd 2gGxQ5YTJWslu8qRbzSkKHC2VbLOKRXkiPvTG4zgyH7EZSDu/XoUAofY2q4Bqnc8 5BnGs3PR+F6eLpIQc+o0NXCSvv4LpLOiPBl9thFfAIOvjYTjnZdCHiy6diuz6tO/ LZeRhzy67WWF9OwPPxOuuuxxc5yHXD9K0m7tSTqf3FaBrhEOEwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFDBqqPLSQCgaEKB7fUArqzW5lRe5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9j ZjE1YmI0MS02OGUzLTQzMGMtYjFiNC0wMmJlYjA4MGJkYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2NmMTViYjQxLTY4ZTMtNDMwYy1i MWI0LTAyYmViMDgwYmRiOS9jZjE1YmI0MS02OGUzLTQzMGMtYjFiNC0wMmJlYjA4 MGJkYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCqDDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJq kzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBdCPldEYmh+iNcvPQ0tfyKsOQCe97Oo441W7eC8PtuhuBJf0Kp 1BrfiQ+hFLX01/qBLB4xEML+GXJBWE/emdClkGrU70+NBfVZQS7ji7hf/AYEg3/b xxKDZjuJca94KmQqBrZu4o3uG8zGK4b2z8ia1155LmLhONvHQv6r+BVZzSq6VdEK uooM/wykvZ22eIsYlL909zgffL37TzbJcV6WGcMdGMK59WuRFUsRkI8ljkWVscvk e7Z5SzfHig7iiP6nYrhbtP5kvLZSGM2WwhIKAlGH0LZQkVPyY+k+UORIfVW8m+10 TPc02bdM7qsZnX6iMwn/M/kyuh9snLvLZ7g2 -----END CERTIFICATE-----Generated at Sat Jun 13 11:05:43 2026 by rpki-client