
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/13851068-d118-4539-a91d-abef1474cfc0.cer
File: 13851068-d118-4539-a91d-abef1474cfc0.cer (raw, json)
Hash identifier: en0e9icioKf1nB1TkhDF0H7EyZrwcHLejmGAS5r7DSI=
Subject key identifier: F5:7A:6F:49:2C:C3:B7:5B:C4:30:02:9E:4E:7D:FA:95:72:F2:96:93
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F393840FCAB8B7A6DEC9ABD00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/13851068-d118-4539-a91d-abef1474cfc0/13851068-d118-4539-a91d-abef1474cfc0.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/13851068-d118-4539-a91d-abef1474cfc0/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 19 Sep 2026 05:29:52 +0000
Certificate not after: Fri 22 Dec 2028 06:29:52 +0000
Subordinate resources: AS: 394519
IP: 67.158.96.0/19
IP: 2602:f565::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:39:38:40:fc:ab:8b:7a:6d:ec:9a:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Sep 19 05:29:52 2026 GMT
Not After : Dec 22 06:29:52 2028 GMT
Subject: CN=13851068-d118-4539-a91d-abef1474cfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:67:40:52:ad:42:b7:9e:35:ac:5c:f3:c1:
1e:19:4e:87:95:54:54:60:3c:95:23:e7:6d:ce:d5:
43:a9:48:3e:d9:9c:3f:ca:84:26:4b:4b:91:9f:62:
55:32:dc:7b:d6:7b:cd:b9:22:be:6b:8d:89:80:d3:
45:b0:37:b5:25:05:f8:39:97:9d:d0:c1:59:14:49:
1c:31:77:f5:dc:9a:76:3a:b7:8c:60:03:e4:fc:c3:
c4:2e:be:c2:68:f4:b0:a3:01:0c:22:9f:68:c1:fc:
ec:63:09:74:3d:d5:17:4b:6e:9c:c7:bb:b1:18:d2:
6f:6c:cc:ec:56:16:49:48:23:d8:dc:90:c0:2d:b2:
30:cd:a5:03:07:ff:16:80:94:1a:be:50:ad:75:3e:
dc:03:0d:18:85:51:eb:15:db:59:86:cb:ad:1d:6e:
46:88:ce:50:5a:16:57:7a:c8:89:c6:d2:de:66:b7:
e6:4f:7a:e9:00:21:16:e8:3a:70:22:2d:58:9d:a3:
89:bd:5e:16:e7:41:db:0d:4f:f0:f7:f0:a0:b9:18:
c8:db:ac:f7:30:92:7c:56:10:f1:2d:9a:6e:4d:ff:
7b:da:a4:8b:b9:48:fc:76:f7:88:78:b4:f2:2d:f7:
28:eb:85:92:79:60:9d:17:2b:80:c1:8d:9d:10:5f:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7A:6F:49:2C:C3:B7:5B:C4:30:02:9E:4E:7D:FA:95:72:F2:96:93
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/13851068-d118-4539-a91d-abef1474cfc0/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/13851068-d118-4539-a91d-abef1474cfc0/13851068-d118-4539-a91d-abef1474cfc0.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
67.158.96.0/19
IPv6:
2602:f565::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394519
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:e9:94:41:f9:45:ef:db:94:bd:33:bf:1d:cc:c4:90:97:66:
36:39:0c:72:da:21:e5:3e:1f:50:e8:d2:40:b8:bd:1c:d6:7a:
47:12:c3:ca:39:b6:54:4c:8d:ea:50:7a:15:3c:0b:cb:d7:06:
44:e9:10:d1:b1:07:01:de:48:a2:84:2a:7f:e9:cb:a9:58:f2:
ff:bb:c1:b8:c2:d2:a2:f9:8a:d8:6c:e0:76:1d:bb:48:f6:35:
19:d3:74:91:f1:6d:93:c2:54:23:a2:3c:6f:49:e9:94:ff:11:
f5:ad:8b:aa:c4:5d:24:42:d6:1e:be:0e:68:6f:5a:85:a0:95:
72:64:b5:84:7f:d1:15:0c:f7:33:65:17:dc:14:1a:66:8f:4e:
8e:82:9e:d1:8e:5e:cb:eb:e5:18:de:7f:26:03:23:ea:ec:d9:
53:f7:46:81:b1:de:ac:93:51:25:e1:05:7f:00:85:da:d8:8b:
8f:81:7a:0b:22:52:22:0e:df:11:39:41:57:67:b1:54:5f:98:
74:2d:7f:b0:b1:6b:22:23:4a:d5:09:df:07:b2:33:10:c3:1c:
69:f1:17:c6:4f:1d:6b:17:45:6a:56:5a:a5:ff:a0:6e:d9:34:
a7:18:17:8b:03:48:88:78:0e:a0:e9:a6:d0:e5:30:93:45:1d:
56:e7:17:fb
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE85OED8q4t6beyavQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk
OTE5MB4XDTI2MDkxOTA1Mjk1MloXDTI4MTIyMjA2Mjk1MlowLzEtMCsGA1UEAxMk
MTM4NTEwNjgtZDExOC00NTM5LWE5MWQtYWJlZjE0NzRjZmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxhnQFKtQreeNaxc88EeGU6HlVRUYDyVI+dt
ztVDqUg+2Zw/yoQmS0uRn2JVMtx71nvNuSK+a42JgNNFsDe1JQX4OZed0MFZFEkc
MXf13Jp2OreMYAPk/MPELr7CaPSwowEMIp9owfzsYwl0PdUXS26cx7uxGNJvbMzs
VhZJSCPY3JDALbIwzaUDB/8WgJQavlCtdT7cAw0YhVHrFdtZhsutHW5GiM5QWhZX
esiJxtLeZrfmT3rpACEW6DpwIi1YnaOJvV4W50HbDU/w9/CguRjI26z3MJJ8VhDx
LZpuTf972qSLuUj8dveIeLTyLfco64WSeWCdFyuAwY2dEF/9DQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFPV6b0ksw7dbxDACnk59+pVy8paTMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8x
Mzg1MTA2OC1kMTE4LTQ1MzktYTkxZC1hYmVmMTQ3NGNmYzAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt
ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzEzODUxMDY4LWQxMTgtNDUzOS1h
OTFkLWFiZWYxNDc0Y2ZjMC8xMzg1MTA2OC1kMTE4LTQ1MzktYTkxZC1hYmVmMTQ3
NGNmYzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1
OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2
MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn
WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk
ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAVDnmAwDgQCAAIwCAMGBCYC9WUAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYFFzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJ6ZRB+UXv25S9M78dzMSQl2Y2
OQxy2iHlPh9Q6NJAuL0c1npHEsPKObZUTI3qUHoVPAvL1wZE6RDRsQcB3kiihCp/
6cupWPL/u8G4wtKi+YrYbOB2HbtI9jUZ03SR8W2TwlQjojxvSemU/xH1rYuqxF0k
QtYevg5ob1qFoJVyZLWEf9EVDPczZRfcFBpmj06Ogp7Rjl7L6+UY3n8mAyPq7NlT
90aBsd6sk1El4QV/AIXa2IuPgXoLIlIiDt8ROUFXZ7FUX5h0LX+wsWsiI0rVCd8H
sjMQwxxp8RfGTx1rF0VqVlql/6Bu2TSnGBeLA0iIeA6g6abQ5TCTRR1W5xf7
-----END CERTIFICATE-----
Generated at Sat Sep 19 20:56:10 2026 by rpki-client