$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250.cer File: 27d1b91f-cb2b-459a-b28c-445a2959f250.cer (raw, json) Hash identifier: kCXvM3jk2uUYS29G2fzxoVlExfadOkkyVJ1mfIEIBJQ= Subject key identifier: 1A:EA:2B:68:5C:44:A6:1A:3C:AF:46:FD:AC:03:21:30:4D:9B:DC:D8 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D40C296603323D4CB1114D500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250/27d1b91f-cb2b-459a-b28c-445a2959f250.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Mar 2026 12:45:22 +0000 Certificate not after: Sat 24 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 395918 IP: 23.147.216.0/24 IP: 2602:faa4::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:c2:96:60:33:23:d4:cb:11:14:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 22 12:45:22 2026 GMT Not After : Jun 24 12:45:22 2028 GMT Subject: CN=27d1b91f-cb2b-459a-b28c-445a2959f250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0d:53:f0:29:2d:94:a4:af:fb:d4:31:db:4b: 2a:85:be:56:fc:b9:d5:17:fd:09:03:60:a0:2f:c3: 45:e5:26:cd:41:e6:1a:15:59:ca:a6:36:37:1a:a5: fe:10:03:1f:45:b1:5a:10:00:04:ea:e3:32:aa:9f: 2d:ee:5b:b1:d6:f9:ec:8a:7e:08:87:b1:9f:f1:fa: 51:4c:d2:9c:42:e4:8a:5a:83:c7:ba:2b:4a:23:82: 4c:56:44:35:5f:56:11:ec:81:34:47:f3:e6:5c:b5: d2:c0:4b:df:c7:40:4f:5b:70:25:91:5c:8c:7d:34: b1:a0:13:b7:5b:85:cf:62:a1:d9:e7:69:ea:40:e1: 9a:14:23:41:e6:28:c3:75:80:e4:5e:ab:6c:b3:e6: f3:2d:69:4d:aa:f2:23:cd:58:54:68:0b:28:73:d7: 9c:90:7d:42:20:b2:00:71:cc:3c:be:e8:ef:b2:13: 43:42:c9:d0:ea:de:97:01:e7:7a:29:c1:43:9f:3c: c7:3a:d6:55:9a:f0:d4:e7:99:28:27:07:5d:e0:e1: cb:87:e0:3e:26:47:d3:12:e2:16:b7:9d:7e:74:dd: 4d:04:46:55:a9:81:ba:51:0f:79:7a:38:34:e9:bc: 6e:24:70:27:6a:75:9d:b7:5f:cf:f0:3c:00:b7:78: 38:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EA:2B:68:5C:44:A6:1A:3C:AF:46:FD:AC:03:21:30:4D:9B:DC:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250/27d1b91f-cb2b-459a-b28c-445a2959f250.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.147.216.0/24 IPv6: 2602:faa4::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395918 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:25:22:0f:b3:56:6f:d3:07:24:76:3b:39:4e:32:bb:b7:92: 9d:0f:e7:71:86:91:c4:bb:a8:85:07:05:db:db:42:88:87:f9: 85:74:c9:57:f0:1b:f0:02:74:38:83:df:d9:d3:ea:c4:01:49: e0:ee:ed:b6:fb:ff:e9:34:76:2a:7a:b3:7b:49:f2:80:70:8f: ef:ad:eb:64:40:f2:bf:cc:df:08:30:c9:8a:fc:a7:e5:c0:91: 9a:a0:13:4c:1b:8a:54:f9:66:7e:b3:ba:32:a4:a6:e8:ab:91: ba:47:f9:a8:37:ef:f4:bf:25:91:18:58:84:df:a0:b1:ec:bd: 59:ea:00:df:bb:4b:47:4a:7b:39:41:c4:b8:d5:f4:72:6e:42: 2e:00:63:ed:3e:2d:78:99:bb:df:0a:7e:28:1e:1b:a5:4e:da: 2f:29:ba:e3:a0:c0:0e:1a:79:e3:d2:51:be:5e:d5:f9:69:1a: a6:ed:01:64:07:65:90:b7:11:46:71:cc:e5:c3:1b:01:52:c3: 6c:11:34:df:89:7e:94:df:dc:de:99:bf:d5:c8:43:8e:d9:db: 65:50:f5:8a:fa:ad:ff:f8:4e:be:f2:e3:9b:79:85:43:67:db: 84:65:10:d0:fd:84:07:8e:c6:78:d8:75:26:d5:04:0b:bb:d6: e2:35:f0:e2 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE1AwpZgMyPUyxEU1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDMyMjEyNDUyMloXDTI4MDYyNDEyNDUyMlowLzEtMCsGA1UEAxMk MjdkMWI5MWYtY2IyYi00NTlhLWIyOGMtNDQ1YTI5NTlmMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw1T8CktlKSv+9Qx20sqhb5W/LnVF/0JA2Cg L8NF5SbNQeYaFVnKpjY3GqX+EAMfRbFaEAAE6uMyqp8t7lux1vnsin4Ih7Gf8fpR TNKcQuSKWoPHuitKI4JMVkQ1X1YR7IE0R/PmXLXSwEvfx0BPW3AlkVyMfTSxoBO3 W4XPYqHZ52nqQOGaFCNB5ijDdYDkXqtss+bzLWlNqvIjzVhUaAsoc9eckH1CILIA ccw8vujvshNDQsnQ6t6XAed6KcFDnzzHOtZVmvDU55koJwdd4OHLh+A+JkfTEuIW t51+dN1NBEZVqYG6UQ95ejg06bxuJHAnanWdt1/P8DwAt3g4lQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBrqK2hcRKYaPK9G/awDITBNm9zYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y N2QxYjkxZi1jYjJiLTQ1OWEtYjI4Yy00NDVhMjk1OWYyNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzI3ZDFiOTFmLWNiMmItNDU5YS1i MjhjLTQ0NWEyOTU5ZjI1MC8yN2QxYjkxZi1jYjJiLTQ1OWEtYjI4Yy00NDVhMjk1 OWYyNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXk9gwDgQCAAIwCAMGBCYC+qQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYKjjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABJSIPs1Zv0wckdjs5TjK7t5Kd D+dxhpHEu6iFBwXb20KIh/mFdMlX8BvwAnQ4g9/Z0+rEAUng7u22+//pNHYqerN7 SfKAcI/vretkQPK/zN8IMMmK/KflwJGaoBNMG4pU+WZ+s7oypKboq5G6R/moN+/0 vyWRGFiE36Cx7L1Z6gDfu0tHSns5QcS41fRybkIuAGPtPi14mbvfCn4oHhulTtov KbrjoMAOGnnj0lG+XtX5aRqm7QFkB2WQtxFGcczlwxsBUsNsETTfiX6U39zemb/V yEOO2dtlUPWK+q3/+E6+8uObeYVDZ9uEZRDQ/YQHjsZ42HUm1QQLu9biNfDi -----END CERTIFICATE-----Generated at Wed Mar 25 23:19:19 2026 by rpki-client