
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer
File: ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer (raw, json)
Hash identifier: 5e7S6pZvApo50HfGYftXz5jHFiIotNNOhGZ+/r7Izrw=
Subject key identifier: 93:75:D5:EC:0B:BD:A5:23:C9:99:3C:FD:9E:13:C7:43:FD:02:5A:2B
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E54AD19E33AF1FB950A5F5280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 29 Jun 2026 08:45:11 +0000
Certificate not after: Sun 01 Oct 2028 08:45:11 +0000
Subordinate resources: AS: 32716
IP: 198.202.130.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:54:ad:19:e3:3a:f1:fb:95:0a:5f:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 29 08:45:11 2026 GMT
Not After : Oct 1 08:45:11 2028 GMT
Subject: CN=ae3f9ccc-8d17-4cf1-954c-8f682120fb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8a:3f:78:31:d3:80:56:e7:b8:74:04:f8:70:
76:51:e8:72:a7:d3:5f:ee:bd:19:76:51:bf:1d:56:
e1:75:99:7f:fd:93:d6:15:e5:f6:c2:c7:63:a5:78:
ff:03:df:0e:b9:59:b8:0f:3a:ec:bc:ea:cf:41:8b:
24:09:52:42:46:f4:74:3c:8d:d4:d7:60:4d:20:4b:
34:b8:0c:22:61:80:40:1d:41:46:e8:ec:5d:bd:e4:
19:41:88:9e:35:17:77:87:28:41:14:b0:92:59:ac:
9b:6f:5f:5b:23:21:a8:42:a8:2f:52:86:cf:a5:a3:
75:3c:1e:af:14:f9:ad:e3:72:4f:f1:ca:c3:fe:41:
43:0e:f7:55:e2:8d:43:02:d8:0a:25:f8:d2:a6:7b:
0e:bc:ab:e3:41:54:6f:67:cc:22:37:df:8d:1a:34:
8f:f0:76:9f:e5:ae:45:28:fc:a8:fc:48:de:dc:97:
39:cb:77:e5:81:1a:65:c8:4c:45:c0:5e:ee:27:df:
91:5d:7d:d5:7e:a8:da:c1:ab:ae:44:69:f3:5c:15:
3c:da:9a:db:83:57:7f:e9:21:ed:14:0a:4f:f9:da:
1e:cd:74:a6:dd:44:c1:f3:b5:5c:a1:33:af:05:06:
ff:59:73:76:9f:a5:8d:bf:ac:54:5f:62:4a:dd:df:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:75:D5:EC:0B:BD:A5:23:C9:99:3C:FD:9E:13:C7:43:FD:02:5A:2B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
198.202.130.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
32716
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:05:71:ab:41:91:af:72:39:16:1f:93:8e:2c:63:e1:45:58:
ce:a4:fc:27:77:76:7a:1c:1f:6b:27:29:3c:08:6a:1a:5b:ce:
e3:d3:73:2d:0a:75:f7:74:d6:78:7e:5d:0a:94:03:ca:e4:21:
eb:43:18:3e:b0:39:3e:c7:23:a3:cc:77:9e:23:48:7d:f9:5b:
69:3b:67:9e:38:4f:01:00:2b:d7:75:da:f4:ba:52:9a:5c:03:
88:43:19:24:1e:a8:f3:b6:c4:8b:cd:6a:01:0b:68:76:09:9a:
00:1b:10:17:a4:d9:a5:96:47:8a:0d:47:bd:ec:b5:66:9a:3a:
17:3a:97:0c:8d:07:3b:17:92:00:e5:ff:ba:f0:57:c5:06:ca:
1c:92:3d:fd:a7:ae:78:24:5b:86:89:31:c8:8b:ae:08:96:f3:
07:fb:e1:94:0f:da:55:90:07:56:7a:42:1a:cd:0e:a9:fd:f9:
a0:8b:db:e7:0f:f4:f1:58:47:30:72:90:e2:01:c5:27:a9:27:
44:d0:13:cd:89:62:39:c4:d0:a5:c7:ec:30:1b:7a:62:27:e4:
8e:9e:6d:50:02:a6:b1:70:0f:4b:66:0d:9e:e6:94:c6:71:68:
aa:05:e7:c1:c5:b4:69:4c:e8:27:83:9a:3d:10:66:e4:85:11:
44:72:25:5a
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE5UrRnjOvH7lQpfUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI2MDYyOTA4NDUxMVoXDTI4MTAwMTA4NDUxMVowLzEtMCsGA1UEAxMk
YWUzZjljY2MtOGQxNy00Y2YxLTk1NGMtOGY2ODIxMjBmYjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4o/eDHTgFbnuHQE+HB2Uehyp9Nf7r0ZdlG/
HVbhdZl//ZPWFeX2wsdjpXj/A98OuVm4DzrsvOrPQYskCVJCRvR0PI3U12BNIEs0
uAwiYYBAHUFG6OxdveQZQYieNRd3hyhBFLCSWaybb19bIyGoQqgvUobPpaN1PB6v
FPmt43JP8crD/kFDDvdV4o1DAtgKJfjSpnsOvKvjQVRvZ8wiN9+NGjSP8Haf5a5F
KPyo/Eje3Jc5y3flgRplyExFwF7uJ9+RXX3VfqjawauuRGnzXBU82prbg1d/6SHt
FApP+doezXSm3UTB87VcoTOvBQb/WXN2n6WNv6xUX2JK3d9AkQIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFJN11ewLvaUjyZk8/Z4Tx0P9AlorMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h
ZTNmOWNjYy04ZDE3LTRjZjEtOTU0Yy04ZjY4MjEyMGZiNDEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2FlM2Y5Y2NjLThkMTctNGNmMS05
NTRjLThmNjgyMTIwZmI0MS9hZTNmOWNjYy04ZDE3LTRjZjEtOTU0Yy04ZjY4MjEy
MGZiNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADGyoIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
f8wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAdQVxq0GRr3I5Fh+Tjixj4UVYzqT8J3d2ehwfaycpPAhqGlvO
49NzLQp193TWeH5dCpQDyuQh60MYPrA5Pscjo8x3niNIfflbaTtnnjhPAQAr13Xa
9LpSmlwDiEMZJB6o87bEi81qAQtodgmaABsQF6TZpZZHig1Hvey1Zpo6FzqXDI0H
OxeSAOX/uvBXxQbKHJI9/aeueCRbhokxyIuuCJbzB/vhlA/aVZAHVnpCGs0Oqf35
oIvb5w/08VhHMHKQ4gHFJ6knRNATzYliOcTQpcfsMBt6Yifkjp5tUAKmsXAPS2YN
nuaUxnFoqgXnwcW0aUzoJ4OaPRBm5IURRHIlWg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:18:53 2026 by rpki-client