$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a.cer File: 27b41e1f-1561-4820-9e8b-d00057b5083a.cer (raw, json) Hash identifier: +bXRwkk3S3/GM4g/BSbxmSXNygOOZQxtVATzXtjUtHk= Subject key identifier: DD:D8:F6:1A:C3:0D:42:C9:66:D7:E7:D2:76:3F:DF:8D:83:5F:59:D8 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D4922A27C16DD07544CB27080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/27b41e1f-1561-4820-9e8b-d00057b5083a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 12:45:22 +0000 Certificate not after: Tue 27 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 23.141.252.0/24 IP: 45.59.150.0/24 IP: 207.174.59.0/24 IP: 2602:f5e5::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:22:a2:7c:16:dd:07:54:4c:b2:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 25 12:45:22 2026 GMT Not After : Jun 27 12:45:22 2028 GMT Subject: CN=27b41e1f-1561-4820-9e8b-d00057b5083a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:bc:d5:10:3f:20:99:f2:20:5a:e9:f0:e1: 13:c5:be:cc:96:a8:ad:38:87:65:ac:03:0e:07:f9: 00:4c:f1:e0:c2:36:8d:1e:29:ca:ea:94:8e:82:9d: 16:ea:81:55:f1:81:25:76:d6:21:f6:ba:28:d8:a4: 98:c1:d3:04:bd:ca:e0:7a:e7:be:3d:18:dc:68:73: 96:b4:c5:4d:c3:b3:5c:c2:44:07:12:cf:d1:da:82: cc:41:75:55:37:56:45:0f:48:fa:73:81:76:da:1f: ce:3f:99:56:7c:ef:5b:6a:96:85:df:cf:0c:3e:87: 88:9f:79:6b:9f:a4:56:49:a3:6b:64:28:d5:0f:4a: d2:d6:46:e7:8c:fc:5d:ff:48:e5:9f:30:43:82:d1: 30:d5:69:6d:fd:f9:ac:ec:3e:4d:b8:1b:d0:66:2b: f1:36:79:5e:ab:f9:cd:1a:8b:71:01:2f:d4:7f:25: 7a:02:99:79:74:05:c7:e2:9b:c0:26:bb:98:2a:47: ac:e9:5c:7a:9b:15:82:2d:2a:bb:5a:65:04:0e:66: 2d:e6:85:1a:fe:b4:31:a6:24:fb:2c:cd:a8:25:21: 16:71:7d:3d:e1:da:7e:ee:85:61:ad:f2:c8:6e:4c: 3d:50:9d:6f:fa:f1:f9:76:b8:41:05:64:16:12:60: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D8:F6:1A:C3:0D:42:C9:66:D7:E7:D2:76:3F:DF:8D:83:5F:59:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/27b41e1f-1561-4820-9e8b-d00057b5083a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.141.252.0/24 45.59.150.0/24 207.174.59.0/24 IPv6: 2602:f5e5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ad:34:40:7a:28:84:04:a5:48:65:44:c7:d6:f3:4f:f2:13: 9b:b5:9e:9f:5d:22:8d:25:0f:ba:41:01:68:39:f4:29:1e:f0: 85:9c:c5:6e:13:e1:f1:6f:57:c7:e5:73:bd:47:1a:79:d6:28: d0:3f:0e:36:30:42:46:75:c9:01:be:31:bb:e7:d9:0c:0a:11: 34:54:c4:ae:1d:ed:6e:e7:77:ac:b4:d5:39:8e:a8:11:25:05: 03:18:c1:65:01:4e:fa:d2:16:3c:ed:b9:13:c2:cb:46:e8:4e: 5c:a6:c8:4d:ea:4a:68:4a:f1:01:2b:8b:13:b6:13:05:94:92: 5a:81:1e:cd:59:f4:04:ae:59:ab:69:73:14:12:3e:b4:ee:02: 25:92:61:08:46:63:ca:0d:2a:a5:b3:a6:10:7e:36:19:1e:09: df:88:84:e7:02:1d:a5:b8:d7:0c:d8:f6:67:6a:cd:1f:e2:30: 4f:c7:da:8c:53:b8:27:65:f8:19:2b:e5:9f:7b:54:93:fb:51: 64:69:2f:88:51:61:51:6a:2f:4c:12:6f:25:f8:4b:b2:98:8e: 35:52:c0:e7:98:44:6b:51:cf:a0:8b:e8:99:5c:16:e4:48:a4: 2f:c2:93:6c:de:af:17:f1:0e:85:b8:ff:b7:d6:6d:6b:ef:49: 7c:c2:42:fc -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE1JIqJ8Ft0HVEyycIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyNTEyNDUyMloXDTI4MDYyNzEyNDUyMlowLzEtMCsGA1UEAxMk MjdiNDFlMWYtMTU2MS00ODIwLTllOGItZDAwMDU3YjUwODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUy81RA/IJnyIFrp8OETxb7MlqitOIdlrAMO B/kATPHgwjaNHinK6pSOgp0W6oFV8YEldtYh9roo2KSYwdMEvcrgeue+PRjcaHOW tMVNw7NcwkQHEs/R2oLMQXVVN1ZFD0j6c4F22h/OP5lWfO9bapaF388MPoeIn3lr n6RWSaNrZCjVD0rS1kbnjPxd/0jlnzBDgtEw1Wlt/fms7D5NuBvQZivxNnleq/nN GotxAS/UfyV6Apl5dAXH4pvAJruYKkes6Vx6mxWCLSq7WmUEDmYt5oUa/rQxpiT7 LM2oJSEWcX094dp+7oVhrfLIbkw9UJ1v+vH5drhBBWQWEmBeqQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFN3Y9hrDDULJZtfn0nY/342DX1nYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y N2I0MWUxZi0xNTYxLTQ4MjAtOWU4Yi1kMDAwNTdiNTA4M2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzI3YjQxZTFmLTE1NjEtNDgyMC05 ZThiLWQwMDA1N2I1MDgzYS8yN2I0MWUxZi0xNTYxLTQ4MjAtOWU4Yi1kMDAwNTdi NTA4M2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXjfwDBAAtO5YDBADPrjswDgQCAAIwCAMGBCYC 9eUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG6tNEB6KIQEpUhlRMfW80/yE5u1np9dIo0lD7pBAWg59Cke 8IWcxW4T4fFvV8flc71HGnnWKNA/DjYwQkZ1yQG+Mbvn2QwKETRUxK4d7W7nd6y0 1TmOqBElBQMYwWUBTvrSFjztuRPCy0boTlymyE3qSmhK8QErixO2EwWUklqBHs1Z 9ASuWatpcxQSPrTuAiWSYQhGY8oNKqWzphB+NhkeCd+IhOcCHaW41wzY9mdqzR/i ME/H2oxTuCdl+Bkr5Z97VJP7UWRpL4hRYVFqL0wSbyX4S7KYjjVSwOeYRGtRz6CL 6JlcFuRIpC/Ck2zerxfxDoW4/7fWbWvvSXzCQvw= -----END CERTIFICATE-----Generated at Sat Mar 28 10:39:02 2026 by rpki-client