$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac.cer File: 0271d5a3-10cc-4189-b655-bb69b930abac.cer (raw, json) Hash identifier: +WAQBS/woDJGEFEcEuOIokv7tIyma+Ra87hWEPi6xjk= Subject key identifier: 6E:1D:88:4C:97:6E:86:F0:8F:FF:E1:54:46:CB:DB:D6:63:97:BA:19 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DE148DE6EB741BD80C41B2620 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/0271d5a3-10cc-4189-b655-bb69b930abac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 May 2026 00:45:16 +0000 Certificate not after: Mon 21 Aug 2028 00:45:16 +0000 Subordinate resources: AS: 32638 IP: 209.42.96.0/19 IP: 2620:2f::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:48:de:6e:b7:41:bd:80:c4:1b:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 19 00:45:16 2026 GMT Not After : Aug 21 00:45:16 2028 GMT Subject: CN=0271d5a3-10cc-4189-b655-bb69b930abac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1b:e3:9d:cf:fc:d2:11:38:ff:a5:58:e6:b0: 63:25:50:25:9d:e5:3c:24:3d:cd:08:9a:b1:ac:15: e4:53:ba:d2:73:36:9f:20:ab:74:a4:81:c6:61:1d: e5:27:dc:8e:8b:bf:6f:9e:d9:41:16:7e:d5:8c:09: 20:c9:b2:de:82:d5:dd:1d:23:cc:3d:0a:50:7b:b6: 78:05:3d:06:eb:71:e1:9e:52:67:fa:17:29:1d:db: 28:1e:3d:9b:9a:b0:bc:f8:4c:71:6f:21:0d:fb:c0: ff:13:ff:2e:d7:63:73:a8:88:88:d9:1a:39:77:e2: f1:a6:15:30:3d:ac:ce:2d:57:d3:c2:e5:1b:05:54: 0e:ca:ec:8d:f0:c0:af:22:51:c9:70:01:b6:eb:fe: 88:a1:15:73:95:65:3b:71:fd:ba:e8:0a:73:61:35: 50:e4:e2:6d:73:b7:98:76:1d:71:59:5e:84:cd:d0: 1f:5f:b0:66:2a:98:85:39:3f:c8:38:fb:d9:16:80: c9:63:45:cc:f8:41:06:53:5b:82:8a:c5:c9:b0:29: c3:ae:ea:f4:9f:0f:a9:18:fa:3d:36:d1:31:91:5e: 11:ba:f6:23:99:8a:0a:9f:79:9d:c5:e8:00:ec:89: 84:9f:fb:51:31:52:55:2f:ab:80:03:84:49:af:65: ee:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1D:88:4C:97:6E:86:F0:8F:FF:E1:54:46:CB:DB:D6:63:97:BA:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/0271d5a3-10cc-4189-b655-bb69b930abac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 209.42.96.0/19 IPv6: 2620:2f::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32638 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:10:22:4f:b7:3b:21:24:93:18:8d:b4:19:46:18:32:03:a3: 86:5b:ee:83:cc:49:93:62:df:99:c9:4f:89:30:cf:52:4a:72: cf:da:1f:d4:45:30:2a:89:b7:05:f9:d6:10:8f:b0:56:fe:ec: 57:ee:f5:2f:e8:12:4e:a0:c9:d0:89:f6:51:0b:12:98:92:fe: 6a:71:a9:cb:38:8f:eb:a2:ee:ca:33:7e:9a:07:b4:a9:56:64: dc:90:7a:65:79:60:69:c5:11:aa:e3:8e:20:9a:53:29:aa:aa: d3:99:25:4c:55:a6:73:3f:1b:f9:83:96:14:75:21:5b:8c:8c: 99:f6:be:5c:90:19:45:c5:78:43:e2:7b:d9:48:0f:62:45:25: 0d:a3:5b:ae:3c:cd:a2:0b:19:db:5d:31:3a:c9:f0:ef:6a:76: 4f:8e:20:b6:01:b7:e3:26:ad:cc:02:74:d7:dd:01:1b:5e:8f: f8:be:ce:b7:ad:2b:b0:82:c3:76:a8:60:70:47:e5:85:7e:ba: ea:2a:8c:37:a3:bd:f2:1d:8e:cf:8b:79:ee:46:c8:23:bb:5b: 3b:61:c3:e0:d2:7d:b4:fe:21:c5:2e:63:ae:8c:e0:e8:e3:58: 50:00:a1:1d:d0:56:30:de:93:ed:b6:f6:b0:d5:ce:51:51:e8: 85:92:1b:a4 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3hSN5ut0G9gMQbJiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUxOTAwNDUxNloXDTI4MDgyMTAwNDUxNlowLzEtMCsGA1UEAxMk MDI3MWQ1YTMtMTBjYy00MTg5LWI2NTUtYmI2OWI5MzBhYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xvjnc/80hE4/6VY5rBjJVAlneU8JD3NCJqx rBXkU7rSczafIKt0pIHGYR3lJ9yOi79vntlBFn7VjAkgybLegtXdHSPMPQpQe7Z4 BT0G63HhnlJn+hcpHdsoHj2bmrC8+ExxbyEN+8D/E/8u12NzqIiI2Ro5d+LxphUw PazOLVfTwuUbBVQOyuyN8MCvIlHJcAG26/6IoRVzlWU7cf266ApzYTVQ5OJtc7eY dh1xWV6EzdAfX7BmKpiFOT/IOPvZFoDJY0XM+EEGU1uCisXJsCnDrur0nw+pGPo9 NtExkV4RuvYjmYoKn3mdxegA7ImEn/tRMVJVL6uAA4RJr2XucwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFG4diEyXbobwj//hVEbL29Zjl7oZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w MjcxZDVhMy0xMGNjLTQxODktYjY1NS1iYjY5YjkzMGFiYWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzAyNzFkNWEzLTEwY2MtNDE4OS1i NjU1LWJiNjliOTMwYWJhYy8wMjcxZDVhMy0xMGNjLTQxODktYjY1NS1iYjY5Yjkz MGFiYWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAXRKmAwDwQCAAIwCQMHBCYgAC8AADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJ/fjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPECJPtzshJJMYjbQZRhgyA6OG W+6DzEmTYt+ZyU+JMM9SSnLP2h/URTAqibcF+dYQj7BW/uxX7vUv6BJOoMnQifZR CxKYkv5qcanLOI/rou7KM36aB7SpVmTckHpleWBpxRGq444gmlMpqqrTmSVMVaZz Pxv5g5YUdSFbjIyZ9r5ckBlFxXhD4nvZSA9iRSUNo1uuPM2iCxnbXTE6yfDvanZP jiC2AbfjJq3MAnTX3QEbXo/4vs63rSuwgsN2qGBwR+WFfrrqKow3o73yHY7Pi3nu Rsgju1s7YcPg0n20/iHFLmOujODo41hQAKEd0FYw3pPttvaw1c5RUeiFkhuk -----END CERTIFICATE-----Generated at Fri May 22 16:53:53 2026 by rpki-client