$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa.cer File: 400f897b-cbdc-42bf-b01d-7b9b45f7fbfa.cer (raw, json) Hash identifier: 9Hrbu+9gFWNQhED2oe1BttTboEVoEmX28c8PeGlZAJI= Subject key identifier: A1:75:8C:D1:FA:E9:1C:43:FA:10:C2:75:2E:29:29:AB:42:6D:32:03 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DAC3DE1B4809401A00D960020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Apr 2026 00:45:18 +0000 Certificate not after: Wed 02 Aug 2028 00:45:18 +0000 Subordinate resources: AS: 27447 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:3d:e1:b4:80:94:01:a0:0d:96:00:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 30 00:45:18 2026 GMT Not After : Aug 2 00:45:18 2028 GMT Subject: CN=400f897b-cbdc-42bf-b01d-7b9b45f7fbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:88:70:f3:fc:3b:49:f5:21:c2:9a:ce:68:fd: 51:ae:54:1f:71:b3:35:5f:f0:49:54:09:aa:8f:e8: cd:00:7d:6a:f7:b5:ed:05:ef:6e:00:a8:4f:39:dd: dc:1d:ca:1c:31:66:97:c9:4f:ec:67:8d:8b:fb:d1: da:26:d6:a0:a7:ba:3e:ed:5f:e2:1f:b5:1f:31:c1: 8e:39:eb:63:aa:42:52:1d:63:35:fd:2d:12:84:db: d1:74:b6:8e:c2:c0:7b:a1:62:5a:af:7b:5b:08:d7: ff:46:8a:a9:8a:74:8b:ae:e4:96:c1:7a:0a:58:ed: 43:ce:d0:bd:51:86:cf:da:18:f8:21:60:71:4c:76: 9d:cd:d7:78:6e:10:2b:c8:b5:1f:19:c5:6d:33:1a: 31:92:a5:08:73:a7:7f:a3:39:e0:26:d6:d5:86:9d: 56:47:e2:3b:89:4c:91:e3:8d:ee:a0:a9:ff:ba:92: 72:f3:07:72:95:53:66:6d:99:da:da:7a:14:ab:9f: 05:35:a3:86:ab:a2:f8:50:60:04:7e:43:c3:ee:04: bd:92:12:02:ab:04:94:1d:61:2e:3a:4e:21:7e:24: 4b:c3:6d:b5:8f:d4:5b:7e:7b:72:ba:ad:43:a9:86: 35:29:5f:e3:91:41:77:17:cc:d5:79:f6:8e:c8:85: ec:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:75:8C:D1:FA:E9:1C:43:FA:10:C2:75:2E:29:29:AB:42:6D:32:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 27447 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:bd:c2:b5:62:2e:23:18:18:ec:d6:fe:2d:e0:dc:97:18:7c: ed:1c:48:ec:90:32:9a:0e:40:d9:61:d0:e8:33:43:81:09:1c: 6e:04:05:d7:d9:91:35:05:73:92:6f:ab:c7:09:b2:be:03:2a: 8c:16:ef:95:aa:eb:20:78:20:e1:82:81:5c:32:b6:c5:9e:19: 15:c2:6c:60:fa:06:e8:eb:30:e1:62:81:2a:3f:78:5d:43:20: eb:11:03:77:b4:a1:42:6f:47:38:c9:c2:33:25:25:8f:7b:03: f0:0f:ec:d7:85:51:e2:8f:03:86:43:f9:4b:57:c9:3e:9f:0c: 52:b0:c9:41:8d:15:6a:11:b4:a0:8d:94:db:9d:74:bb:1f:84: a0:19:b3:b4:c9:b5:1a:40:3a:c9:fc:00:90:71:6d:ba:47:59: f6:93:ad:fa:62:f9:bb:bb:f3:1a:17:2c:e7:41:f7:c4:0a:3a: fa:25:14:28:af:f4:17:87:31:bf:0d:dc:5c:9f:9f:1a:55:51: 19:a6:84:d8:a6:af:db:99:08:e0:21:7f:8f:b7:ab:fc:5e:37: 26:28:98:7e:e7:77:d5:a8:c8:80:bc:e7:8d:c2:56:a7:c1:5d: 61:c4:43:79:c7:34:1a:4d:9c:c6:3b:28:93:c4:38:3d:ec:10: 02:93:cc:fc -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE2sPeG0gJQBoA2WACAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQzMDAwNDUxOFoXDTI4MDgwMjAwNDUxOFowLzEtMCsGA1UEAxMk NDAwZjg5N2ItY2JkYy00MmJmLWIwMWQtN2I5YjQ1ZjdmYmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhohw8/w7SfUhwprOaP1RrlQfcbM1X/BJVAmq j+jNAH1q97XtBe9uAKhPOd3cHcocMWaXyU/sZ42L+9HaJtagp7o+7V/iH7UfMcGO OetjqkJSHWM1/S0ShNvRdLaOwsB7oWJar3tbCNf/RoqpinSLruSWwXoKWO1DztC9 UYbP2hj4IWBxTHadzdd4bhAryLUfGcVtMxoxkqUIc6d/ozngJtbVhp1WR+I7iUyR 443uoKn/upJy8wdylVNmbZna2noUq58FNaOGq6L4UGAEfkPD7gS9khICqwSUHWEu Ok4hfiRLw221j9Rbfntyuq1DqYY1KV/jkUF3F8zVefaOyIXs+wIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFKF1jNH66RxD+hDCdS4pKatCbTIDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 MDBmODk3Yi1jYmRjLTQyYmYtYjAxZC03YjliNDVmN2ZiZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzQwMGY4OTdiLWNiZGMtNDJiZi1i MDFkLTdiOWI0NWY3ZmJmYS80MDBmODk3Yi1jYmRjLTQyYmYtYjAxZC03YjliNDVm N2ZiZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICazcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUr3CtWIuIxgY7Nb+LeDclxh87RxI 7JAymg5A2WHQ6DNDgQkcbgQF19mRNQVzkm+rxwmyvgMqjBbvlarrIHgg4YKBXDK2 xZ4ZFcJsYPoG6Osw4WKBKj94XUMg6xEDd7ShQm9HOMnCMyUlj3sD8A/s14VR4o8D hkP5S1fJPp8MUrDJQY0VahG0oI2U2510ux+EoBmztMm1GkA6yfwAkHFtukdZ9pOt +mL5u7vzGhcs50H3xAo6+iUUKK/0F4cxvw3cXJ+fGlVRGaaE2Kav25kI4CF/j7er /F43JiiYfud31ajIgLznjcJWp8FdYcRDecc0Gk2cxjsok8Q4PewQApPM/A== -----END CERTIFICATE-----Generated at Wed May 13 03:03:40 2026 by rpki-client