$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/24a33ac4-e36e-454e-825e-c73f2d3602a2.cer File: 24a33ac4-e36e-454e-825e-c73f2d3602a2.cer (raw, json) Hash identifier: CEQpzzm4hfS/SofAMZzgoAkpTkZFCPLxu7zNEHYiel8= Subject key identifier: 87:B4:8A:6E:A4:6B:8A:23:4B:83:9D:B2:6A:F5:EC:8C:F9:3C:CC:22 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D4C8BDCFED35491BE0C2815C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/24a33ac4-e36e-454e-825e-c73f2d3602a2/24a33ac4-e36e-454e-825e-c73f2d3602a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/24a33ac4-e36e-454e-825e-c73f2d3602a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Mar 2026 18:04:49 +0000 Certificate not after: Wed 28 Jun 2028 18:04:49 +0000 Subordinate resources: AS: 27619 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:8b:dc:fe:d3:54:91:be:0c:28:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 26 18:04:49 2026 GMT Not After : Jun 28 18:04:49 2028 GMT Subject: CN=24a33ac4-e36e-454e-825e-c73f2d3602a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:12:fd:f2:3a:46:e7:3b:bf:fb:63:2d:e1:cf: d2:7f:cb:2b:ab:b1:2f:8b:9e:d0:fb:0f:f5:6a:b5: 2d:51:f0:90:95:90:80:2d:d5:63:ae:a7:82:e1:7f: 6a:1b:35:89:ad:46:50:5f:a9:65:cb:8d:7c:8f:53: 82:f7:dd:fd:d5:13:a6:2b:26:b1:00:7e:ac:d1:c4: c0:f5:ab:10:67:91:35:4d:b1:aa:de:5e:93:e4:92: 4d:08:4f:8d:c3:fc:6b:6f:ee:3f:46:6a:81:45:d4: a2:a0:d0:ed:0e:91:00:53:5f:90:2a:ec:92:61:4d: ab:e4:41:53:d6:76:66:bd:99:0e:7a:fa:72:f1:56: 92:24:9c:64:b3:77:15:7c:7b:7d:54:9f:26:ba:f1: d1:b4:bf:e1:fb:3f:30:99:a6:ef:62:47:6f:56:79: 1c:4d:c8:e4:33:51:74:23:74:cb:20:fa:8a:c0:eb: 3e:0f:68:f0:0f:74:17:7b:66:c6:2e:b1:c7:66:4e: 68:40:e1:3d:e8:3d:18:1c:4b:c9:3f:43:42:3a:a6: bf:f1:2e:49:c0:83:f4:b5:76:a2:ca:df:45:f7:ac: 02:1e:16:ed:eb:74:b5:45:1a:a9:f9:8d:1c:65:79: e1:36:28:ef:07:ad:f0:aa:8c:7d:be:e2:33:7a:44: 8b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B4:8A:6E:A4:6B:8A:23:4B:83:9D:B2:6A:F5:EC:8C:F9:3C:CC:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/24a33ac4-e36e-454e-825e-c73f2d3602a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/24a33ac4-e36e-454e-825e-c73f2d3602a2/24a33ac4-e36e-454e-825e-c73f2d3602a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 27619 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:7f:2a:af:15:38:af:0e:e3:7c:71:98:18:f4:24:ff:0a:f2: ce:5b:73:90:a1:f1:cb:ed:15:72:ae:b1:bf:fd:e1:ed:11:18: a6:b1:a1:2a:11:ba:eb:94:ef:4b:55:49:da:c6:72:f4:2b:07: 69:7c:16:34:d5:e1:8b:0c:4e:8f:95:a3:2d:0c:fb:28:7f:41: 33:2e:5d:df:66:76:b3:db:ff:aa:f2:47:37:52:1b:94:5d:f9: 2a:40:32:a3:58:c8:a3:83:4f:61:d8:16:e4:ce:d2:5b:39:8a: 2f:aa:4d:a2:94:15:ce:de:d6:1b:4b:b8:4a:68:b4:59:ba:5c: e6:47:3f:fe:5d:cf:be:16:2a:82:e8:c9:31:15:2e:7a:31:a6: 3c:4e:5a:5b:eb:34:bb:0b:fa:ee:ce:19:00:ca:96:62:0e:e4: fc:0b:34:51:01:00:36:d0:0a:06:22:a3:94:a8:c6:b0:6b:f7: e6:7e:01:35:48:a7:5a:b9:57:4e:81:d6:76:8a:54:8f:f5:e4: 65:2a:e1:ed:62:e0:74:ef:b6:e1:01:6e:51:39:d2:b3:40:89: d0:4b:b7:d7:f0:79:e1:39:44:e7:d9:c2:77:be:b7:24:bd:99: ad:dc:46:51:67:e8:a5:04:b9:1e:46:8d:06:04:5c:43:9a:54: 2b:bd:83:4e -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE1Mi9z+01SRvgwoFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyNjE4MDQ0OVoXDTI4MDYyODE4MDQ0OVowLzEtMCsGA1UEAxMk MjRhMzNhYzQtZTM2ZS00NTRlLTgyNWUtYzczZjJkMzYwMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxL98jpG5zu/+2Mt4c/Sf8srq7Evi57Q+w/1 arUtUfCQlZCALdVjrqeC4X9qGzWJrUZQX6lly418j1OC99391ROmKyaxAH6s0cTA 9asQZ5E1TbGq3l6T5JJNCE+Nw/xrb+4/RmqBRdSioNDtDpEAU1+QKuySYU2r5EFT 1nZmvZkOevpy8VaSJJxks3cVfHt9VJ8muvHRtL/h+z8wmabvYkdvVnkcTcjkM1F0 I3TLIPqKwOs+D2jwD3QXe2bGLrHHZk5oQOE96D0YHEvJP0NCOqa/8S5JwIP0tXai yt9F96wCHhbt63S1RRqp+Y0cZXnhNijvB63wqox9vuIzekSLawIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFIe0im6ka4ojS4Odsmr17Iz5PMwiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8y NGEzM2FjNC1lMzZlLTQ1NGUtODI1ZS1jNzNmMmQzNjAyYTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzI0YTMzYWM0LWUzNmUtNDU0ZS04 MjVlLWM3M2YyZDM2MDJhMi8yNGEzM2FjNC1lMzZlLTQ1NGUtODI1ZS1jNzNmMmQz NjAyYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICa+MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMH8qrxU4rw7jfHGYGPQk/wryzltz kKHxy+0Vcq6xv/3h7REYprGhKhG665TvS1VJ2sZy9CsHaXwWNNXhiwxOj5WjLQz7 KH9BMy5d32Z2s9v/qvJHN1IblF35KkAyo1jIo4NPYdgW5M7SWzmKL6pNopQVzt7W G0u4Smi0Wbpc5kc//l3PvhYqgujJMRUuejGmPE5aW+s0uwv67s4ZAMqWYg7k/As0 UQEANtAKBiKjlKjGsGv35n4BNUinWrlXToHWdopUj/XkZSrh7WLgdO+24QFuUTnS s0CJ0Eu31/B54TlE59nCd763JL2ZrdxGUWfopQS5HkaNBgRcQ5pUK72DTg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:26:08 2026 by rpki-client