$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7.cer File: a7e97c27-2ab3-427f-8e53-bccc0725a7e7.cer (raw, json) Hash identifier: IPUSvdbf31BpQxSaL0elW+w7mkY2UQjLYuqlTl8ngu8= Subject key identifier: 75:F4:51:09:3B:8C:07:31:1B:F6:62:A9:27:58:F7:61:6B:05:D3:3A Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DFA174A3204BEF6DBE637E580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7/a7e97c27-2ab3-427f-8e53-bccc0725a7e7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 May 2026 22:00:35 +0000 Certificate not after: Tue 29 Aug 2028 22:00:35 +0000 Subordinate resources: AS: 27327 IP: 209.87.128.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:17:4a:32:04:be:f6:db:e6:37:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 27 22:00:35 2026 GMT Not After : Aug 29 22:00:35 2028 GMT Subject: CN=a7e97c27-2ab3-427f-8e53-bccc0725a7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:26:68:3a:4e:df:47:b5:43:46:f5:27:24:80: f6:1c:e2:34:86:b2:81:42:91:30:be:57:68:1d:b8: d7:aa:3d:bb:e2:b6:01:07:35:7f:2a:05:e1:d3:be: c9:e2:11:f5:25:4c:c5:d6:a8:f5:c1:6b:d9:90:8f: 96:42:14:f1:07:da:b6:d7:2f:a5:ea:53:82:73:7b: e8:07:65:fd:4b:88:79:3d:fe:96:f7:89:70:c0:10: 03:d9:9a:2e:9e:b9:5e:2a:1f:69:bf:7b:0a:64:4c: db:69:49:7c:3e:05:e0:79:43:f2:ec:17:dc:0a:82: b8:3a:fc:62:a7:a9:3e:bb:69:51:4c:b6:06:1f:2e: 87:c1:c9:1d:ee:93:7e:db:5a:b8:82:58:e3:ae:8c: 6b:e5:5a:aa:f7:3e:fd:80:14:db:dc:bd:fe:d9:23: 9a:ea:51:b3:9c:77:b4:66:73:81:d9:cd:db:fe:58: 4e:f4:f6:77:f3:5e:5c:cb:e9:8d:4d:a6:d9:aa:63: 65:32:f0:82:21:33:d3:0d:2d:c4:7c:57:b1:36:7f: 0e:6a:c8:d2:92:f8:4a:d6:7f:d2:18:aa:ac:83:13: 20:96:80:59:d0:46:1d:b3:1e:3f:c7:fa:d3:b8:36: c1:dd:fa:99:ec:f1:28:de:a2:fb:2a:ac:7e:f6:86: 26:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F4:51:09:3B:8C:07:31:1B:F6:62:A9:27:58:F7:61:6B:05:D3:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7/a7e97c27-2ab3-427f-8e53-bccc0725a7e7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 209.87.128.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27327 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:1a:ec:33:b1:be:d0:a7:ae:fd:4e:8b:1b:76:48:ce:98:ee: 4f:1e:ba:b2:11:99:ee:54:86:c0:99:0d:b4:41:bb:66:3e:55: f3:12:c2:b3:50:36:cd:37:b8:c7:47:17:26:da:8a:8d:8e:f3: 78:b9:91:50:5f:10:68:a5:6e:b8:dd:a2:a6:9d:bd:68:56:1a: e5:2b:a7:8a:7c:b7:24:a9:35:c0:1e:2f:f9:4e:ab:68:10:be: 14:b2:b0:ab:e0:a9:c4:76:4d:49:b8:a2:12:3b:6c:aa:b3:1a: c1:b1:54:3e:60:bf:20:03:77:15:15:ef:8f:14:46:d8:a0:e8: b6:d0:5a:f5:d0:e6:c8:d3:12:c8:56:21:0f:d0:db:c1:80:ed: af:a1:a2:4a:cb:c6:a8:02:d9:52:77:b4:0f:db:22:6b:29:0e: 42:c9:bf:4b:ce:9a:3b:f7:b5:64:e3:a4:99:dd:64:5f:6b:ab: 1e:ac:97:b0:c0:e4:ea:8e:79:b2:3c:f1:74:63:88:81:8a:b7: 77:89:29:b2:cd:8f:61:61:52:a3:e9:99:76:48:ca:d3:ef:2e: 19:58:27:55:bf:2a:82:fd:ae:5f:b2:4b:e1:d3:06:01:31:29: 4e:b1:e1:6f:e9:ef:3d:87:41:65:1b:a7:c1:f4:93:c3:fd:88: d5:ec:c4:3e -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE36F0oyBL722+Y35YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyNzIyMDAzNVoXDTI4MDgyOTIyMDAzNVowLzEtMCsGA1UEAxMk YTdlOTdjMjctMmFiMy00MjdmLThlNTMtYmNjYzA3MjVhN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SZoOk7fR7VDRvUnJID2HOI0hrKBQpEwvldo HbjXqj274rYBBzV/KgXh077J4hH1JUzF1qj1wWvZkI+WQhTxB9q21y+l6lOCc3vo B2X9S4h5Pf6W94lwwBAD2ZounrleKh9pv3sKZEzbaUl8PgXgeUPy7BfcCoK4Ovxi p6k+u2lRTLYGHy6Hwckd7pN+21q4gljjroxr5Vqq9z79gBTb3L3+2SOa6lGznHe0 ZnOB2c3b/lhO9PZ3815cy+mNTabZqmNlMvCCITPTDS3EfFexNn8OasjSkvhK1n/S GKqsgxMgloBZ0EYdsx4/x/rTuDbB3fqZ7PEo3qL7Kqx+9oYmTwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFHX0UQk7jAcxG/ZiqSdY92FrBdM6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h N2U5N2MyNy0yYWIzLTQyN2YtOGU1My1iY2NjMDcyNWE3ZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2E3ZTk3YzI3LTJhYjMtNDI3Zi04 ZTUzLWJjY2MwNzI1YTdlNy9hN2U5N2MyNy0yYWIzLTQyN2YtOGU1My1iY2NjMDcy NWE3ZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATRV4AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC ar8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAAxrsM7G+0Keu/U6LG3ZIzpjuTx66shGZ7lSGwJkNtEG7Zj5V 8xLCs1A2zTe4x0cXJtqKjY7zeLmRUF8QaKVuuN2ipp29aFYa5Suniny3JKk1wB4v +U6raBC+FLKwq+CpxHZNSbiiEjtsqrMawbFUPmC/IAN3FRXvjxRG2KDottBa9dDm yNMSyFYhD9DbwYDtr6GiSsvGqALZUne0D9siaykOQsm/S86aO/e1ZOOkmd1kX2ur HqyXsMDk6o55sjzxdGOIgYq3d4kpss2PYWFSo+mZdkjK0+8uGVgnVb8qgv2uX7JL 4dMGATEpTrHhb+nvPYdBZRunwfSTw/2I1ezEPg== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:39 2026 by rpki-client